1269 matches found
gps.averett.edu Cross Site Scripting vulnerability OBB-2681228
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WEF - Wi-Fi Exploitation Framework
A fully offensive framework to the 802.11 networks and protocols with different types of attacks for WPA and WEP, automated hash cracking, bluetooth hacking and much more. I recommend you my alfa adapter: Alfa AWUS036ACM , which works really great with both, 2.4 and 5 Ghz Tested and supported in...
PT-2022-6727 · Qualcomm +1 · Qualcomm Embedded Platform +1
Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Qualcomm embedded platform versions affected versions not specified Description: The issue is related to a memory corruption problem in the GPS HLOS driver of Android operating systems on...
gpsuruguay.com Cross Site Scripting vulnerability OBB-2645549
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
We need to talk about sex toys and cyber security
Introduction We’ve written about the appalling security of smart sex toys over the years. Finally, an invite came to give a talk on the subject to a TEDx audience. I debated whether to give the talk with colleagues, as we’ve never wanted to be pigeon-holed in this space! But we felt that public...
Galleon NTS-6002-GPS Command Injection vulnerability (CVE-2022-27224)
TL;DR Galleon Systems’ GPS NTP time server had a command injection vulnerability in the firmware of their NTS GPS device which could allow total control of the device through the web management interface. The vulnerability - CVE-2022-27224 https://vulners.com/cve/CVE-2022-27224 Device: Galleon...
CVE-2022-27224
An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected Ping, Traceroute, and...
CVE-2022-27224
An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected Ping, Traceroute, and...
Command injection
An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected Ping, Traceroute, and...
CVE-2022-27224
CVE-2022-27224 affects Galleon NTS-6002-GPS firmware 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can execute root-level command injections via shell metacharacters in the web-management Interface’s Network Tools (ping, traceroute, DNS lookup) input fields (ping_address, trace_addre...
CVE-2022-27224
An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected Ping, Traceroute, and...
CVE-2022-27224: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected Ping, Traceroute, and...
CVE-2021-32929
All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user...
CVE-2021-32927
An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker...
Code injection
All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user...
CVE-2021-32927 Uffizio GPS Tracker Cross-site Scripting
An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker...
CVE-2021-32927 Uffizio GPS Tracker Cross-site Scripting
An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker...
CVE-2021-32927
CVE-2021-32927 affects all versions of Uffizio GPS Tracker and is described as a Cross-Site Scripting vulnerability (CWE-79) caused by improper neutralization of input during web page generation. The issue enables an attacker to inject client-side JavaScript into multiple instances, potentially e...