177 matches found
CVE-2020-24638
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system...
CVE-2020-24641
In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information. This can be used to perform an authentication bypass and ultimately gain administrative...
CVE-2020-24641
CVE-2020-24641 concerns Aruba AirWave Glass prior to 1.3.3, where an unauthenticated endpoint enables a Server-Side Request Forgery that can disclose sensitive information. The disclosed data can be leveraged to bypass authentication and potentially gain administrative access to the web admin int...
HPE Aruba Airwave Glass 输入验证错误漏洞
HPE Aruba Airwave Glass is a smart glasses device from Hewlett-Packard HPE. An input validation error vulnerability previously existed in HPE Aruba Airwave Glass 1.3.3, which stemmed from insufficient input validation and could be exploited by an attacker to arbitrarily execute commands upstairs ...
HPE Aruba Airwave Glass Security Breach
HPE Aruba Airwave Glass is a smart glasses device from Hewlett-Packard HPE. A security vulnerability exists in Airwave Glass before 1.3.3 that allows a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system...
HPE Aruba Airwave Glass Code Issue Vulnerability
HPE Aruba Airwave Glass is a smart glasses device from Hewlett-Packard HPE. The HPE Aruba Airwave Glass before 1.3.3 suffers from a code issue vulnerability that stems from the presence of a server-side request forgery vulnerability via an unauthenticated endpoint, which could lead to the...
HPE Aruba Airwave Glass Code Issue Vulnerability
HPE Aruba Airwave Glass is a smart glasses device from Hewlett-Packard HPE. A security vulnerability exists in Airwave Glass before 1.3.3, which is caused by insecure Java deserialization and can be exploited by an attacker to execute arbitrary commands...
Vulnerabilities fixed in Aruba Airwave Glass
Vulnerabilities have been fixed in Aruba Airwave Glass. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root privileges...
uat.guardianglass.com Cross Site Scripting vulnerability OBB-1261786
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Google Fixes Mysterious Audio Recording Blip in Smart Speakers
After Google Home users started receiving mysterious alerts when their fire alarms went off or their plates smashed in their homes, Google acknowledged that it accidentally rolled out a feature causing the smart devices to record sounds without the voice prompt. Reports of the privacy faux pas...
2×4 Security
I had someone at the house recently, talking about physical security. We have all the usual stuff like alarms and CCTV, locks on the windows and doors but the aim of the exercise was to have someone who is familiar with attacks vectors physical security in this case, but the principal applies to...
vaclav-schovanek-ags-art-glass.czech-trade.fr Cross Site Scripting vulnerability
Security Researcher Hchabik Helped patch 2351 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting vaclav-schovanek-ags-art-glass.czech-trade.fr website and i...
Rockwell Automation RightSight Glass Fiber Optic 42EF-G1LDA-F5 Photoelectric Sensor
Binary data 752428.prm...
glass-bubble.com XSS vulnerability
Open Bug Bounty ID: OBB-712288 Description| Value ---|--- Affected Website:| glass-bubble.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
ngwenyaglass.co.sz XSS vulnerability
Open Bug Bounty ID: OBB-616251 Description| Value ---|--- Affected Website:| ngwenyaglass.co.sz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
midwestglassandaluminum.com XSS vulnerability
Open Bug Bounty ID: OBB-599011 Description| Value ---|--- Affected Website:| midwestglassandaluminum.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
glassdoctor-tallahassee.com XSS vulnerability
Open Bug Bounty ID: OBB-588438 Description| Value ---|--- Affected Website:| glassdoctor-tallahassee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
guardianglass.com XSS vulnerability
Open Bug Bounty ID: OBB-585771 Description| Value ---|--- Affected Website:| guardianglass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
