VIPA Controls WinPLC7

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: VIPA Controls Equipment: WinPLC7 Vulnerability: Stack Buffer Overflow AFFECTED PRODUCTS The following versions of WinPLC7, a PLC programming software, are affected: WinPLC Versions 5.0.45.5921 and prior. IMPACT...

Elefant CMS 1.3.12-RC Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability CSRF Type: Remote Yes Exploitable:...

Geutebrück IP Cameras

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Geutebrück Equipment: IP Cameras Vulnerabilities: Authentication Bypass and Improper Neutralization of Special Elements AFFECTED PRODUCTS The following Geutebrück G-Cam IP camera version is affected: G-Cam/EFD-2250...

germany.hermes.com XSS vulnerability

Vulnerable URL:...

oks-germany.com XSS vulnerability

Vulnerable URL: https://www.oks-germany.com/ecomaXL/index.php?url=en/products/oils-detail/168/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2551582 VIP website status:| No Check...

PHOENIX CONTACT mGuard

CVSS V3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerability: Software update changes password to default AFFECTED PRODUCTS PHOENIX CONTACT reports that the vulnerability affects the following mGuard products: Only devices that hav...

wordpress plugin Germany-likes-opt-in-facebook cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin Germany-likes-opt-in-facebook suffers from an xss vulnerability due to improper filtering of user input,...

Router high-risk vulnerabilities induced the German telecommunications ultra 90 million users suffered network disruption-vulnerability warning-the black bar safety net

! Event overview Last weekend millions of German Internet users suffered a series of network outages, investigate its reason is a failure of the home routers hijacked. Deutsche Telekom's 2000 million users with 90 million users received the interrupt effect from the last Sunday continues to prese...

store.hp.com XSS vulnerability

Vulnerable URL: http://store.hp.com/GermanyStore/Merch/Product.aspx?id=D3Q16B=A81=PRN=cpr163id/de/de/ips/iito/pagewidepro/shopnow&6'/ Details: Description| Value ---|--- Patched:| Yes, at 22.05.2017 Latest check for patch:| 22.05.2017 14:55 GMT Vulnerability type:| XSS Vulnerability status:|...

On the Yahoo Breach, WhatsApp-Facebook, and Zerodium's $1.5M Bounty

Mike Mimoso and Chris Brook discuss the news of the week, including the latest on the Yahoo breach, Germany’s problem with WhatsApp-Facebook, Facebook osquery tool for Windows, and Zerodium’s $1.5M iOS bounty. Download: ThreatpostNewsWrapSeptember302016.mp3 Music by Chris Gonsalves...

Germany Bans Facebook From Collecting WhatsApp Data

Just last month, the most popular messaging app WhatsApp updated its privacy policy and T&Cs to start sharing its user data with its parent company, and now both the companies are in trouble, at least in Germany and India. Both Facebook, as well as WhatsApp, have been told to immediately stop...

ZineBasic 1.1 - Arbitrary File Disclosure Exploit

Exploit for php platform in category web applications Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

Record-breaking 1.9 Gbps Internet Speed achieved over 4G Mobile Connection

Elisa, one of the biggest Finnish Internet Service Providers ISP, claims to have achieved a new world record for 4G network with 1.9 gigabit-per-second Gbps data download speed using Huawei technology. Currently, Sweden and the United Kingdom have been crowned as the top countries across the worl...

mytzadik.biz XSS vulnerability

Open Bug Bounty ID: OBB-171676 Description| Value ---|--- Affected Website:| mytzadik.biz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Scan Reveals Hydropower Plants, Other Critical Infrastructure Exposed Online

An Internet scan of the IPv4 address space uncovered more than 100 critical facilities exposed to the public Internet, including hydropower plants in Germany and Italy, and a smart building in Israel hosting luxury apartments. The investigation, conducted by researchers at Internet Wache of Berli...

Volkswagen Service Germany - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Volkswagen Service Germany published at the 'play' market has multiple vulnerabilities...

Core Tor Developer who accuses FBI of Harassment moves to Germany

One of TOR's primary software developers, Isis Agora Lovecruft, has fled to Germany, following the threat of a federal subpoena. Lovecruft is a well-known cryptographer and lead software developer for Tor project from many years. She has worked for a variety of other security and encryption...

NVV Ticket Krauth ATM - (NaN) Devide by Zero Vulnerability

Document Title: =============== NVV Ticket Krauth ATM - NaN Devide by Zero Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1837 View Video: https://www.youtube.com/watch?v=iIT4gcboKjk Release Date: ============= 2016-04-26 Vulnerability Laboratory ID VL-ID...

NVV Ticket Krauth ATM - (NaN) Devide by Zero Vulnerability

Document Title: =============== NVV Ticket Krauth ATM - NaN Devide by Zero Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1837 View Video: https://www.youtube.com/watch?v=iIT4gcboKjk Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID...

PhotoLine Handles JPG Image Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the program's handling of the JPG format. Allowing an attacker to exploit this vulnerability to construct malformed JPG files could crash the program...