diva-keramika.ru XSS vulnerability

Open Bug Bounty ID: OBB-433874 Description| Value ---|--- Affected Website:| diva-keramika.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Hackers leak WhatsApp chat and private photos of WWE Diva Paige

By Carolina In March this year, x-rated photos and videos of WWE This is a post from HackRead.com Read the original post: Hackers leak WhatsApp chat and private photos of WWE Diva Paige...

Fashion Diva: Dressup & Makeup - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Diva: Dressup & Makeup published at the 'play' market has multiple vulnerabilities...

CVE-2014-9575

CVE-2014-9575 affects VDG Security SENSE (formerly DIVA) before 2.3.15. A crafted encoded colon in the Authorization header allows remote attackers to bypass authentication and read/modify arbitrary plugin settings. Remediation: upgrade to 2.3.16 (or later) per available changelog. The reports co...

CVE-2014-9579

CVE-2014-9579 affects VDG Security SENSE (formerly DIVA) 2.3.13. The vulnerability is an information disclosure where administrator credentials are stored in cleartext and can be obtained by reading the plugin configuration files. The issue stems from storing sensitive credentials in an insecure ...

CVE-2014-9577

Affected product/variant: VDG Security SENSE (formerly DIVA) version 2.3.13. Vulnerability type: information disclosure via the login process. Root cause / mechanism: the system sends the user database during login, enabling an authenticated remote user to read the response over TCP port 51410. I...

CVE-2014-9578

VDG Security SENSE formerly DIVA 2.3.13 performs authentication with a password hash instead of a password, which allows remote attackers to gain login access by leveraging knowledge of a password hash...

Multiple Buffer Overflow Vulnerabilities in VDG Security SENSE

VDG Security SENSE is a video management system. Multiple buffer overflow vulnerabilities in the VDG Security SENSE DIVA web service API allow remote attackers to submit a special AuthenticateUser request to execute arbitrary code via the user or password parameters...

CVE-2014-9451

Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...

CVE-2014-9451

Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...

CVE-2014-9451

VDG Security SENSE (formerly DIVA) 2.3.13 web service API /webservice has multiple stack-based buffer overflows in the AuthenticateUser API (user/password), enabling remote code execution. CVSSv2 base score 7.5 (HIGH). Some scanners mark remediation as WillNotFix; no explicit fixes detailed in th...

Eicon Networks DIVA LAN ISDN Modem 1.0 Release 2.5/1.0/2.0 DoS

No description provided by source. source: http://www.securityfocus.com/bid/665/info A vulnerability in the Diva LAN ISDN Modem allows remote malicious users to lock up the modem requiring a hard reset. The vulnerability manifests itself when a remote users connects to the Diva HTTP port and send...

Facebook 'Like-jacking' Scams Expand

Facebook attacks that force users to unwittingly endorse scam pages keep spreading, researchers say. Attacks have now circulated that cause users to recommend pages promising naked pictures of alternative rock diva Hayley Williams or the phone number of heart-throb singer Justin Bieber. Read the...

IP Diva VPN SSL multiple security vulnerabilities

Unlimited number of passwords attempts, CSS...

CVE-1999-1533

Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service hang via a long password argument to the login.htm file in its HTTP service...

CVE-1999-1533

Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service hang via a long password argument to the login.htm file in its HTTP service...

Eicon Technology Diva LAN ISDN Modem login.htm Long password Field DoS

The remote host appears to be an Eicon Technology Diva LAN ISDN modem. Nessus crashed the modem by supplying a long password to the login page. This is likely due to a buffer overflow. A remote attacker could exploit this by repeatedly disabling the modem. C Tenable Network Security, Inc...

Eicon Networks DIVA LAN ISDN Modem 1.0 Release 2.5/1.0/2.0 - Denial of Service

source: https://www.securityfocus.com/bid/665/info A vulnerability in the Diva LAN ISDN Modem allows remote malicious users to lock up the modem requiring a hard reset. The vulnerability manifests itself when a remote users connects to the Diva HTTP port and sends a GET request of the form...

Eicon Networks DIVA LAN ISDN Modem 1.0 Release 2.51.02.0 - Denial of Service

Eicon Networks DIVA LAN ISDN Modem 1.0 Release 2.51.02.0 - Denial of Service source: https://www.securityfocus.com/bid/665/info A vulnerability in the Diva LAN ISDN Modem allows remote malicious users to lock up the modem requiring a hard reset. The vulnerability manifests itself when a remote...