CVE-2018-13113: Integer Overflow or Wraparound

The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token ETT, an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party...

Sophos SafeGuard Detection (Windows SMB Login)

Detects the installed version of Sophos SafeGuard on Windows. The script logs in via smb, searches for Sophos SafeGuard in the registry and gets the version from the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

CVE-2018-12902

In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site...

Code injection

In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site...

CVE-2018-12902

In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site...

CVE-2018-12902

In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site...

CVE-2018-12902

WordPress Easy Magazine cross-site scripting vulnerability (CVE-2018-12902) affects Easy Magazine versions up to 2012-10-26. The issue is an XSS in the search bar due to insufficient input filtering in the plugin’s search functionality. CNVD describes the impact as allowing a remote attacker to e...

CVE-2018-0563

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi...

WPA3 Standard Officially Launches With New Wi-Fi Security Features

The Wi-Fi Alliance today officially launched WPA3—the next-generation Wi-Fi security standard that promises to eliminate all the known security vulnerabilities and wireless attacks that are up today including the dangerous KRACK attacks. WPA, or Wi-Fi Protected Access, is a standard designed to...

CVE-2018-0563: Untrusted Search Path

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi...

PT-2018-8921

Name of the Vulnerable Software and Affected Versions FLET'S VIRUS CLEAR Easy Setup & Application Tool versions 13.0 and earlier FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool versions 13.0 and earlier Description The issue is related to an untrusted search path vulnerability in the installe...

PT-2018-11460

Name of the Vulnerable Software and Affected Versions Easy Magazine versions prior to 2012-10-26 Description The issue is related to a problem with the search bar on the website, where there is XSS. Recommendations For versions prior to 2012-10-26, update to a version released after 2012-10-26 to...

CVE-2018-12902: Improper Neutralization of Input During Web Page Generation

In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site...

Denial of Service Vulnerability in Quick Easy FTP Server

Quick Easy FTP Server is a small FTP server. A denial of service attack vulnerability exists in Quick Easy FTP Server version V4.0.0, which can be exploited to cause the program to crash when no PASV command is entered...

CVE-2018-12335

Incorrect access control in ECOS System Management Appliance aka SMA 5.2.68 allows a user to compromise authentication keys, and access and manipulate security relevant configurations, via unrestricted database access during Easy Enrollment...

CVE-2018-12331

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance aka SMA 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."...

Design/Logic Flaw

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance aka SMA 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."...

Improper access control

Incorrect access control in ECOS System Management Appliance aka SMA 5.2.68 allows a user to compromise authentication keys, and access and manipulate security relevant configurations, via unrestricted database access during Easy Enrollment...

CVE-2018-12331

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance aka SMA 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."...

CVE-2018-12335

Incorrect access control in ECOS System Management Appliance aka SMA 5.2.68 allows a user to compromise authentication keys, and access and manipulate security relevant configurations, via unrestricted database access during Easy Enrollment...