2664 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML that is triggered when Logs.jsp is visited. The renderedmessage column is retrieved and displayed, unsanitized, on Logs.jsp. A remote...
PT-2019-14953
Name of the Vulnerable Software and Affected Versions WiKID 2FA Enterprise Server versions through 4.2.0-b2047 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple API endpoints, including "/wikid/servlet/com.wikidsystems.server.GetDomainHash" with the...
SQL injection vulnerability in s***h.php page of Shenzhen Tiandixin Network Technology Co.
Tiandixin network was founded in 2010, is a strategic research and development-oriented enterprises, many large-scale project experience, more than tens of thousands of Chinese enterprises common choice of website platform builder, the company mainly focuses on corporate website construction, Bai...
Avaya Deskphone: Decade-Old Vulnerability Found in Phone's Firmware
ARCHIVED STORY Avaya Deskphone: Decade-Old Vulnerability Found in Phone’s Firmware By Philippe Laulheret · August 08, 2019 Avaya is the second largest VOIP solution provider source with an install base covering 90% of the Fortune 100 companies source, with products targeting a wide spectrum of...
Avaya Deskphone: Decade-Old Vulnerability Found in Phone's Firmware
ARCHIVED STORY Avaya Deskphone: Decade-Old Vulnerability Found in Phone’s Firmware By Philippe Laulheret · August 08, 2019 Avaya is the second largest VOIP solution provider source with an install base covering 90% of the Fortune 100 companies source, with products targeting a wide spectrum of...
Android 7 - 9 VideoPlayer - (ihevcd_parse_pps) Out-of-Bounds Write Exploit
CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected is HVEC a.k.a H.265 and MPEG-...
Android 7 - 9 VideoPlayer - ihevcd_parse_pps Out-of-Bounds Write
Android 7 - 9 VideoPlayer - ihevcdparsepps Out-of-Bounds Write CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can...
FortiCam FCM-MB40 Code Execution / Privilege Escalation
Original posting: https://xor.cat/2019/06/19/fortinet-forticam-vulns/ Background In March of 2019 I discovered five vulnerabilities in Fortinet's FortiCam FCM-MB401 product. Part-way through disclosing this vulnerability, I discovered that the FCM-MB40 is manufactured by a company called Dynacolo...
PT-2019-9526
Name of the Vulnerable Software and Affected Versions Scriptzee Hotel Booking Engine version 1.0 Description A SQL injection issue exists, allowing potential exploitation via the h room type parameter in the hotels endpoint. Recommendations For Scriptzee Hotel Booking Engine version 1.0, avoid...
Codec H.265 not working in HDX session
H.265 not getting utilized in the HDX session with the below settings: Followed the link: https://docs.citrix.com/en-us/receiver/windows/current-release/improve/h-265-video-encoding.html Studio Policy set: 1. Graphic Status indicator - Disabled 2. Moving Image Compression - Disabled 3. Optimize...
PT-2019-11084
Name of the Vulnerable Software and Affected Versions: HPE NonStop Safeguard versions earlier than SPR T9750L01^AIC or T9750H05^AIH HPE NonStop Standard Security versions prior to T6533L01^ADU or T6533H05^ADW All versions of HPE NonStop Safeguard and HPE NonStop Standard Security on H-series when...
Toshiba TE-H-68-CB-* Solid State Starter Detection
Binary data 758001.prm...
Toshiba TE-H-400-CB-* Solid State Starter Detection
Binary data 758008.prm...
Toshiba TE-H-40-CB-* Solid State Starter Detection
Binary data 757998.prm...
Toshiba TE-H-55-CB-* Solid State Starter Detection
Binary data 758000.prm...
Mitsubishi R64MTCPU PLC Detection
Binary data 751843.prm...
Toshiba TE-H-248-CB-* Solid State Starter Detection
Binary data 758006.prm...
Toshiba TE-H-156-CB-* Solid State Starter Detection
Binary data 758004.prm...