Hacker access critical code of British cell operator EE

By Waqas EE, a British mobile network giant owned by BT Group has This is a post from HackRead.com Read the original post: Hacker access critical code of British cell operator EE...

Oracle WebLogic HTTP Detection

Oracle formerly BEA WebLogic, a Java EE application server, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid109553; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Oracle WebLogic HTTP Detection";...

Oracle WebLogic SNMP Detection (UDP)

Oracle WebLogic, a Java EE application server, was detected on the remote host. TRUSTED...

Oracle WebLogic SNMP Detection (TCP)

Oracle WebLogic, a Java EE application server, was detected on the remote host. TRUSTED...

auto24.ee XSS vulnerability

Open Bug Bounty ID: OBB-557719 Description| Value ---|--- Affected Website:| auto24.ee Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

ladu24.ee XSS vulnerability

Open Bug Bounty ID: OBB-531397 Description| Value ---|--- Affected Website:| ladu24.ee Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tallinn.kontakt.ee XSS vulnerability

Open Bug Bounty ID: OBB-501386 Description| Value ---|--- Affected Website:| tallinn.kontakt.ee Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

wildPwn - Brute forcer and shell deployer for WildFly (JBoss AS)

WildFly, formerly known as JBoss AS, or simply JBoss, is an application server authored by JBoss, now developed by Red Hat. WildFly is written in Java, and implements the Java Platform, Enterprise Edition Java EE specification. It runs on multiple platforms. WildFly is free and open-source...

ladu24.ee XSS vulnerability

Open Bug Bounty ID: OBB-410651 Description| Value ---|--- Affected Website:| ladu24.ee Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

arvutitark.ee XSS vulnerability

Open Bug Bounty ID: OBB-357501 Description| Value ---|--- Affected Website:| arvutitark.ee Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Apache Tomcat Patches Important Remote Code Execution Flaw

The Apache Tomcat team has recently patched several security vulnerabilities in Apache Tomcat, one of which could allow an unauthorised attacker to execute malicious code on affected servers remotely. Apache Tomcat, developed by the Apache Software Foundation ASF, is an open source web server and...

lambre24.ee XSS vulnerability

Open Bug Bounty ID: OBB-296443 Description| Value ---|--- Affected Website:| lambre24.ee Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

EE 4GEE WiFi MBB Cross-Site Request Forgery Vulnerability (CNVD-2017-33216)

The EE 4GEE WiFi MBB is a mobile wireless router device from EE UK. A cross-site request forgery vulnerability exists in versions prior to EE 4GEE WiFi MBB EE600005.0031. A remote attacker can exploit this vulnerability to perform unauthorized operations by tricking a user into visiting a malicio...

EE 4GEE WiFi MBB Cross-Site Scripting Vulnerability

The EE 4GEE WiFi MBB is a mobile wireless router device from EE UK. A cross-site scripting vulnerability exists in versions prior to EE 4GEE WiFi MBB EE600005.0031, which stems from a lack of input validation or encryption in the program. A remote attacker can exploit the vulnerability to inject...

CVE-2017-14267

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-14267

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

Cross site request forgery (csrf)

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-14269

EE 4GEE WiFi MBB before EE600005.0031 devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content...

CVE-2017-14268

EE 4GEE WiFi MBB before EE600005.0031 devices have XSS in the smscontent parameter in a getSMSlist request...

CVE-2017-14269

CVE-2017-14269 affects EE 4GEE WiFi MBB devices (before EE60_00_05.00_31). The vulnerability allows remote attackers to obtain sensitive data via a JSONP endpoint, demonstrated as passwords and SMS content exposure. The root cause is an insecure JSONP/endpoint handling that leaks confidential inf...