CVE-2014-8169

automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home...

UBUNTU-CVE-2014-8169

automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home...

UCenter Home 2.0 /shop.php SQL注入漏洞

No description provided by source...

[USN-2524-1] eCryptfs vulnerability

========================================================================== Ubuntu Security Notice USN-2524-1 March 11, 2015 ecryptfs-utils vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

Cisco ASA Smart Call Home Digital Certificate Validation Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the Smart Call Home SCH feature of Cisco ASA Software could allow an unauthenticated, remote attacker to bypass digital certificate validation if any feature that uses digital certificates is configured on the affected system. Copyright C 2015 Greenbone Networks GmbH Some text...

Loxone Smart Home Miniserver Web Server Version Detection

Binary data loxonesmarthomeminiserverdetect.nbin...

Apple iOS Security Bypass Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows physically accessible users to view the HOME screen of a target device even when the device is not active...

Loxone Smart Home HTTP Answer Splitting Vulnerability

Loxone Smart Home is a WEB-based application. Loxone Smart Home suffers from an HTTP Answer Splitting vulnerability that allows attackers to conduct HTTP Answer Splitting attacks that can lead to caching...

Loxone Smart Home HTML Injection Vulnerability

Loxone Smart Home is a WEB-based application. Loxone Smart Home suffers from an HTML injection vulnerability that could be exploited by an attacker to execute arbitrary HTML script and code in the context of the affected application...

Loxone Smart Home Multiple Cross-Site Scripting Vulnerabilities

Loxone Smart Home is a WEB-based application. Multiple cross-site scripting vulnerabilities in Loxone Smart Home could be exploited by an attacker to execute arbitrary HTML script and code within the context of the affected application...

Loxone Smart Home Denial of Service Vulnerability

Loxone Smart Home is a WEB-based application. A denial of service vulnerability exists in Loxone Smart Home, which allows attackers to bypass certain security restrictions and launch denial of service attacks...

Loxone Smart Home Cross-Site Request Forgery Vulnerability

Loxone Smart Home is a WEB-based application. Loxone Smart Home suffers from a cross-site request forgery vulnerability that allows attackers to steal cookie-based authentication credentials and perform unauthorized operations...

D-Link Working on Firmware Updates for Three Critical Bugs

D-Link has pushed out a firmware update for three serious security vulnerabilities in its DIR-820L home routers, and is expected to do the same for seven other models between tomorrow and March 10. The vulnerabilities provide an attacker with remote access to the router without the need for...

Loxone Smart Home has multiple information disclosure vulnerabilities

Loxone Smart Home is a WEB-based application. Loxone Smart Home has multiple information disclosure vulnerabilities that could be exploited by remote attackers to obtain sensitive information...

Loxone Smart Home CSRF / XSS / DoS / Credential Leakage

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Loxone Smart Home vulnerable version: Firmware: 5.49; Android-App: 3.4.1 fixed version: 6.3 impact: High homepage: http://www.loxone.com...

Dennis Fisher and Mike Mimoso Discuss the 2015 Security Analyst Summit

Dennis Fisher and Mike Mimoso discuss their takeaways from the SAS 2015 conference, including the Equation Group APT analysis, hacking car washes, indexing the dark web and hacking home appliances. Download: digitalunderground187.mp3 Music by Chris Gonsalves...

D-Link DIR-645 has multiple vulnerabilities

The D-Link DIR-645 is a wireless router device. The D-Link DIR-645 is vulnerable to a command injection and buffer overflow vulnerability, which allows malicious applications to perform buffer overflow attacks to execute arbitrary commands, in addition to injecting arbitrary commands via the HNAP...

Wordpress plugin Fancybox-for-WordPress 3.0.2 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin Fancybox-for-WordPress 3.0.2 Stored XSS Exploit Author: NULLpOint7r Date: 2015-02-11 Contact me: email protected Version: 3.0.2 Download link:...

immo-at-home.be XSS vulnerability

Open Bug Bounty ID: OBB-54307 Description| Value ---|--- Affected Website:| immo-at-home.be Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Xiaomi smart home solutions”guest user”override control vulnerability-vulnerability warning-the black bar safety net

Millet always let a person countless daydream, it's each of the goods are the people to whom surprised. Xiaomi smart home solution,using a lot of hardware interaction, etc., giving users a very good experience. ! t01e2d571016343efa1. png In provide great convenience at the same time also introduc...