Command Execution Vulnerability in Qiji Transportation and Maintenance Bastion Machine

Qiji Technology is the creator and leader of Fortress Ops Platform / Ops Audit, and is the only vendor in China that specializes in the field of Ops Management. After installing ShtermClient-2.1.1.exe, the Qiji Ops Fortress client software registers a customized protocol shterm on a personal...

fortress-brave.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-650832 Description| Value ---|--- Affected Website:| fortress-brave.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Seven security tips for staying safe on an iPhone

iPhones have a reputation for being notoriously secure. After all, they caused quite the kerfuffle between Apple and the FBI because they are, from the FBI's point of view, too secure! However, don't let that lull you into a false sense of security. Using an iPhone is not an automatic guarantee o...

VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution Vulnerability

Exploit for hardware platform in category web applications VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is...

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal Vulnerability

Exploit for hardware platform in category web applications VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is configured ...

fortressfoundationsystems.com XSS vulnerability

Open Bug Bounty ID: OBB-585480 Description| Value ---|--- Affected Website:| fortressfoundationsystems.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Arbitrary User Password Reset Vulnerability in Bunker Busters

Bunker Fortress is the industry's first software form of the Fortress, providing a centralized authentication, centralized access authorization, centralized access management, centralized operation audit and a single point of simplified operation and management required for remote operations and...

Command Execution Vulnerability in the ip Parameter of Kirin Fortress

Kirin Fortress is the open source operations and maintenance fortress. A command execution vulnerability exists in the ip parameter of the KyLinBarrier. Due to the lack of filtering of the parameter, an attacker can utilize the ip parameter to execute arbitrary commands...

Command Execution Vulnerability in Kirin Bastion ethfile Parameter

Kirin Fortress is the open source operations and maintenance fortress. A command execution vulnerability exists in the ethfile parameter of KyLin Bastion Machine, which can be exploited by attackers to execute arbitrary code...

Command execution vulnerability in the slaveip and virtual_ipaddress parameters of Kirin bastion machine

Kirin Fortress is the open source operations and maintenance fortress. A command execution vulnerability exists in the slaveip and virtualipaddress parameters of the KyLin Fortress, which can be exploited by an attacker to execute arbitrary code because the parameters are not specially filtered...

S2-045 Remote Command Execution Vulnerability in Bunker Fortress of Beijing Weifangtong Information Technology Co.

Beijing Weifangtong Information Technology Co., Ltd. bunker fortress is to provide the remote operation and maintenance management needs of the centralized identity authentication, centralized access authorization, centralized access management, centralized operation audit, as well as simplify th...

File Upload Vulnerability at Kirin Fortress Application Publishing Feature

Kirin Fortress is the open source operations and maintenance fortress. A file upload vulnerability exists at the application icon upload in the application publishing feature of KyLin Fortress. This allows attackers to upload a webshell and gain server privileges...

File Upload Vulnerability in Kirin Fortress

Kirin Fortress is the open source operations and maintenance fortress. A file upload vulnerability exists in cadminbackup.class.php in KyLin Fortress. As a result of utilizing the default administrator account admin, password 12345678 to log into the system, in system management, software upgrade...

SQL Injection Vulnerability in Jiangnan Keyou HAC Bastion Machine

Jiangnan Keyou Operation and Maintenance Security Audit System HAC is used to solve critical IT infrastructure operation and maintenance security problems. It is capable of performing secure and effective operation audits on Unix and Windows hosts, servers, as well as data access on networks and...

CTF365 Capture The Flag - The Next Generation IT Security Training Platform

For years, the Capture the Flag platform has been a common and very popular part of the hacker convention scene. Teams come from all over the world to show their skill and technique in various competitions. The CTF365 team took that interest, passion and excitement and went to a new level in thei...

The odd Smart Fortress machine V2. 1 There is a search box injection and repair-vulnerability warning-the black bar safety net

The odd Smart Fortress machine there is a search box injection by the 1%'//and//1=2//union//select//null,version,null,null,null,null,null,null— ! 1%';copy//qmsectextsshell//to//'/var/www/shterm/client/secqm. php'—write a file, written to the test file after we find the file is successfully writte...

PsychoStats v3.1 XSS

PsychoStats v3.1 XSS SOFTWARE: ========= PsychoStats v3.1 http://www.psychostats.com/ SEVERITY: ========= Normal INFO: ===== PsychoStats is open source software that creates comprehensive gaming statistics for players and clans for Half-Life and Half-Life 2 based games. This includes games like...

Unfixed XSS vulnerability at www.no-fortress-europe.eu

Security researcher xRoot, has submitted on 18/02/2007 a cross-site-scripting XSS vulnerability affecting www.no-fortress-europe.eu, which at the time of submission ranked 5793885 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/02/2007. It i...