Lucene search
+L

1313 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/27 12:00 a.m.•6 views

CVE-2017-5238: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS Tracker will overflow data stored in one variable to another, overwriting the data of another field...

5.3CVSS5.9AI score0.00886EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/03/27 12:00 a.m.•4 views

PT-2017-16414

Name of the Vulnerable Software and Affected Versions Eview EV-07S GPS Tracker affected versions not specified Description The issue concerns the transmission of sensitive information over the internet to a centralized monitoring service without standard encryption. This allows a man-in-the-middl...

7.5CVSS0.00489EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/03/27 12:00 a.m.•1 views

PT-2017-16413

Name of the Vulnerable Software and Affected Versions Eview EV-07S GPS Tracker affected versions not specified Description The issue is caused by a lack of bounds checking in several input configuration fields, leading to data overflow from one variable to another, resulting in the overwrite of...

5.3CVSS0.00886EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/27 12:00 a.m.•7 views

CVE-2017-5239: Inadequate Encryption Strength

Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracker discloses personally identifying information, such as GPS data and IMEI numbers, to any man-in-the-middle MitM listener...

7.5CVSS5.8AI score0.00489EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/03/27 12:00 a.m.•3 views

PT-2017-16412

Name of the Vulnerable Software and Affected Versions Eview EV-07S GPS Tracker affected versions not specified Description The issue arises from a lack of authentication, allowing an unauthenticated user who knows the device's phone number to send an SMS command, "RESET!", and revert the device t...

7.8CVSS0.02013EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/03/07 12:00 a.m.•8 views

GPS Tools Component SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the Joomla GPS Tools component. An attacker can exploit the vulnerability t...

7.9AI score
SaveExploits0References1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
•added 2017/02/26 9:59 a.m.•20 views

GPS Tools v4.0.1,4.0.1,SQL Injection

GPS Tools v4.0.1,4.0.1,SQL Injection Developer release statement to the vel team https://www.corejoomla.com/news/1163-gps-tools-v4-0-2-is-released.html...

7.1AI score
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
•added 2017/02/25 12:00 a.m.•63 views

Joomla GPS Tools 4.0.1 SQL Injection

Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/gps-tools/ Demo:...

0.1AI score
SaveExploits0
zdt
zdt
•added 2017/02/24 12:00 a.m.•44 views

Joomla GPS Tools 4.0.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/02/24 12:00 a.m.•59 views

Joomla! Component GPS Tools 4.0.1 - SQL Injection

Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/gps-tools/ Demo:...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/02/24 12:00 a.m.•53 views

Joomla! Component GPS Tools 4.0.1 - SQL Injection

Joomla! Component GPS Tools 4.0.1 - SQL Injection Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

0.2AI score
SaveExploits0
myhack58
myhack58
•added 2017/02/20 12:00 a.m.•23 views

Kaspersky analyst: hackers can utilize APP vulnerability control smart cars-vulnerability warning-the black bar safety net

According to the British "Daily Mail" 2017 2 May 20 reported that the now more and more car owners by the car manufacturers provide a mobile app for your own car operate. However, Kaspersky Lab analysts have detected a large number of APP system vulnerabilities, hackers can by these vulnerabiliti...

0.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/02/12 12:01 a.m.•12 views

gps.co.uk XSS vulnerability

Vulnerable URL: http://www.gps.co.uk/basket.asp?strPageHistory=category=0=%22%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22%3C/script%3E=catID=216ID=1885=1=1=add=695.00=0.8333333=2&V1;=2465&Q1;=3=Add+to+Basket Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:|...

6.3AI score
SaveExploits0
hackapp
hackapp
•added 2017/01/18 7:26 p.m.•23 views

Mock Locations (fake GPS path) - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mock Locations fake GPS path published at the 'play' market has multiple vulnerabilities...

7.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/01/18 10:51 a.m.•77 views

Wisepilot - GPS Navigation - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Wisepilot - GPS Navigation published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
Prion
Prion
•added 2017/01/13 9:59 a.m.•36 views

Input validation

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

4.3CVSS7.2AI score0.00928EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2017/01/13 9:59 a.m.•17 views

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

5.5CVSS5.8AI score0.00928EPSS
SaveExploits0References2
NVD
NVD
•added 2017/01/13 9:59 a.m.•34 views

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

5.5CVSS5.6AI score0.00928EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/01/13 9:00 a.m.•40 views

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

5.7AI score0.00928EPSS
SaveExploits0References2
CVE
CVE
•added 2017/01/13 9:00 a.m.•94 views

CVE-2016-10135

Technical details for CVE-2016-10135 are not publicly provided in the supplied documents; monitor for updates as connected sources do not reveal affected components or remediation.

5.5CVSS5.6AI score0.00928EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder