Netgear Genie 2.4.32 Privilege Escalation

Exploit Title: Netgear Genie 2.4.32 Unquoted Service Path Elevation of Privilege Date: 30/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.netgear.com Software Link: https://www.netgear.com/home/discover/apps/genie.aspx?...

Dating Pro Genie 2015.7 - CSRF Vulnerabilities

No description provided by source...

Dating Pro Genie 2015.7 - Cross-Site Request Forgery

Dating Pro Genie 2015.7 - Cross-Site Request Forgery Advisory ID: HTB23294 Product: Dating Pro Vendor: DatingPro Vulnerable Versions: Genie 2015.7 and probably prior Tested Version: Genie 2015.7 Advisory Publication: February 10, 2016 without technical details Vendor Notification: February 10, 20...

Dating Pro Genie 2015.7 - Cross-Site Request Forgery

Advisory ID: HTB23294 Product: Dating Pro Vendor: DatingPro Vulnerable Versions: Genie 2015.7 and probably prior Tested Version: Genie 2015.7 Advisory Publication: February 10, 2016 without technical details Vendor Notification: February 10, 2016 Vendor Patch: February 29, 2016 Public Disclosure:...

Dating Pro Genie 2015.7 Cross Site Request Forgery

Advisory ID: HTB23294 Product: Dating Pro Vendor: DatingPro Vulnerable Versions: Genie 2015.7 and probably prior Tested Version: Genie 2015.7 Advisory Publication: February 10, 2016 without technical details Vendor Notification: February 10, 2016 Vendor Patch: February 29, 2016 Public Disclosure:...

TECO SG2 FBD Client 3.51 - '.gfb' Overwrite Buffer Overflow (SEH) (PoC)

TECO SG2 FBD Client 3.51 SEH Overwrite Buffer Overflow Vulnerability Vendor: TECO Electric and Machinery Co., Ltd. Product web page: http://www.teco-group.eu Download: http://globalsa.teco.com.tw/supportdownload.aspx?KindID=9 Affected version: 3.51 and 3.40 Summary: SG2 Client is a program that...

TECO SG2 FBD Client 3.51 - .gfb Overwrite Buffer Overflow (SEH) (PoC)

TECO SG2 FBD Client 3.51 - .gfb Overwrite Buffer Overflow SEH PoC TECO SG2 FBD Client 3.51 SEH Overwrite Buffer Overflow Vulnerability Vendor: TECO Electric and Machinery Co., Ltd. Product web page: http://www.teco-group.eu Download: http://globalsa.teco.com.tw/supportdownload.aspx?KindID=9...

TECO SG2 FBD Client 3.51 SEH Overwrite Buffer Overflow Exploit

TECO SG2 FBD Client version 3.51 suffers from a vulnerability that is caused due to a boundary error in the processing of a Genie FBD, which can be exploited to cause a buffer overflow when a user opens e.g. a specially crafted .GFB file. Successful exploitation could allow execution of arbitrary...

TECO SG2 LAD Client 3.51 SEH Overwrite Buffer Overflow Exploit

Summary SG2 Client is a program that enables to create and edit applications. The program is providing two edit modes, LADDER and FBD to rapidly and directly input the required app. The Simulation Mode allows users to virtually run and test the program before it is loaded to the controller...

TECO SG2 FBD Client 3.51 SEH Overwrite Buffer Overflow Vulnerability

Summary SG2 Client is a program that enables to create and edit applications. The program is providing two edit modes, LADDER and FBD to rapidly and directly input the required app. The Simulation Mode allows users to virtually run and test the program before it is loaded to the controller...

NetGear WNDR Authentication Bypass / Information Disclosure

NetGear WNDR Authentication Bypass / Information Disclosure Discovered by: ---- Peter Adkins [email protected] Access: ---- Local network; unauthenticated access. Remote network; unauthenticated access. Tracking and identifiers: ---- CVE - Mitre contacted; not yet allocated. Platforms...

NetGear WNDR Authentication Bypass / Information Disclosure

A number of NetGear WNDR devices contain an embedded SOAP service that is seemingly for use with the NetGear Genie application. This service allows for viewing and setting of certain router parameters. This SOAP service is prone to an authentication bypass. SPDX-FileCopyrightText: 2015 Greenbone ...

NetGear WNDR Authentication Bypass / Information Disclosure Vulnerabilities

A number of NetGear WNDR devices contain an embedded SOAP service that is seemingly for use with the NetGear Genie application. As this SOAP service is implemented by the built-in HTTP / CGI daemon, unauthenticated queries will also be answered over the internet if remote management has been...

CVE-2014-5604

The Akinator the Genie FREE aka com.digidust.elokence.akinator.freemium application 2.46 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5604

The CVE-2014-5604 issue affects the Akinator the Genie FREE Android app (package com.digidust.elokence.akinator.freemium), version 2.46. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive i...

CVE-2014-5604: Undefined Security Weakness

The Akinator the Genie FREE aka com.digidust.elokence.akinator.freemium application 2.46 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Scripts Genie Pet Rate Pro - Multiple Vulnerabilities

No description provided by source...

Scripts Genie Hot Scripts Clone (showcategory.php, cid param) - SQL Injection Vulnerability

No description provided by source. -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + Security Flaw + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + + + /\ \ | | + +/ |/ / | | | |/ / / \ | + +\ \ / | || / /\ / / | + +|/||,\ / || + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+-+ +Scripts Genie Hot Scripts...

Scripts Genie Domain Trader (catalog.php, id param) - SQL Injection Vulnerability

No description provided by source. / / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Domain Trader Script, MySQL Injection Vulnerabilities Software Page:...

Scripts Genie Gallery Personals (gallery.php, L param) - SQL Injection Vulnerability

No description provided by source. / / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Gallery Personals Script SQL Injection Vulnerabilities Software Page: http://scriptsgenie.com/ Product Page:...