FENCE-Explorer for Windows Untrusted Search Path Vulnerability

Fujitsu FENCE-Explorer for Windows is a Windows-based tool for viewing and editing files in the FENCE Portfolio from Fujitsu Japan. An untrusted search path vulnerability exists in Fujitsu FENCE-Explorer 8.4.1 and earlier versions for Windows-based platforms. An attacker can exploit this...

secure.ts.fujitsu.com XSS vulnerability

Vulnerable URL: https://secure.ts.fujitsu.com/wcmweb/Worksheet.TTList.asp?LeftNavSelItemID=0-3"'--!=P0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

GNU glibc CVE-2015-5180 Remote Denial of Service Vulnerability

Description GNU glibc is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected process, denying service to legitimate users. Versions prior to GNU glibc 2.25 are vulnerable. Technologies Affected GNU glibc 1.2.3 GNU gli...

computers.us.fujitsu.com XSS vulnerability

Open Bug Bounty ID: OBB-243708 Description| Value ---|--- Affected Website:| computers.us.fujitsu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

computers.us.fujitsu.com XSS vulnerability

Open Bug Bounty ID: OBB-233935 Description| Value ---|--- Affected Website:| computers.us.fujitsu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

secure.ts.fujitsu.com XSS vulnerability

Vulnerable URL: https://secure.ts.fujitsu.com/wcmweb/index.asp?LeftNavSelItemID=0-1"'--!=C0= Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Researchers Disclose Intel AMT Flaw Research

On Friday, just as Intel released additional information regarding a critical flaw found earlier this week in a subset of its business-class PCs, the researchers behind the initial vulnerability discovery, Embedi, also published their research on the flaw. Intel warned Monday of a firmware...

Portrait Display SDK Service Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation due to insecure service configuration product: Portrait Display SDK Service vulnerable version: mutliple, see PoC fixed version: multiple, see soluti...

Pre-Installed Applications Developed with Portrait Displays SDK Contain Critical Vulnerability

Applications developed using the Portrait Displays software development kit SDK, versions 2.30 through 2.34, contain a critical vulnerability. A local attacker could exploit this vulnerability to take control of an affected system. The affected applications, pre-installed on some Fujitsu, HP, and...

QNAP NVR / NAS Overflows Vulnerability

QNAP NVR and NAS devices suffer from multiple overflows. Various makes and models are affected. Full exploitation details provided. STX Subject: QNAP NVR/NAS Heap / Stack / Heap Feng Shui overflow, and "Heack Combo" to pwn Researcher: bashis January 2017 Release date: February 1, 2017 Device Mode...

QNAP NVRNAS Devices - Buffer Overflow (PoC)

QNAP NVRNAS Devices - Buffer Overflow PoC Device Model: QNAP VioStor NVR, QNAP NAS, Fujitsu Celvin NAS May be additional re-branded Attack Vector: Remote Attack Models: 1. Classic Heap Overflows 2. Classic Stack Overflow 3. Heap Feng Shui Overflow 4. "Heack Combo" Heap / Stack Combination Overflo...

QNAP NVR / NAS Overflows

STX Subject: QNAP NVR/NAS Heap / Stack / Heap Feng Shui overflow, and "Heack Combo" to pwn Researcher: bashis January 2017 Release date: February 1, 2017 Device Model: QNAP VioStor NVR, QNAP NAS, Fujitsu Celvin NAS May be additional re-branded Attack Vector: Remote Attack Models: 1. Classic Heap...

PT-2016-7520

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 debian linux affected versions not specified fujitsu m10-1 firmware affected versions not specified fujitsu m10-4 firmware affected versions not specified fujitsu m10-4s firmware...

secure.ts.fujitsu.com XSS vulnerability

Vulnerable URL: https://secure.ts.fujitsu.com/wcmweb/index.asp?LeftNavSelItemID=0-1=C0=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 08.05.2017 Latest check for patch:| 08.05.2017 13:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

sali.uk.ts.fujitsu.com XSS vulnerability

Open Bug Bounty ID: OBB-187194 Description| Value ---|--- Affected Website:| sali.uk.ts.fujitsu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Wireless Keyboard Set LX901 GK900 Replay Attack

Exploit for multiple platform in category local exploits Product: Wireless Keyboard Set LX901 Manufacturer: Fujitsu Affected Versions: Model No. GK900 Tested Versions: Model No. GK900 Vulnerability Type: Cryptographic Issues CWE-310 Missing Protection against Replay Attacks Risk Level: Medium...

Design/Logic Flaw

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...

CVE-2016-1183

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...

CVE-2016-1183: Undefined Security Weakness

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...

scansnaptest.fcpa.fujitsu.com XSS vulnerability

Vulnerable URL: http://scansnaptest.fcpa.fujitsu.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 08.05.2017 Latest check for patch:| 08.05.2017 13:58 GMT Vulnerability type:| XSS Vulnerability status:|...