deichmann.com XSS vulnerability

Vulnerable URL: http://www.deichmann.com/IT/it/shop/Home-donna/Home-donna-scarpe/Home-donna-scarpe-ballerine.cat?x" Details: Description| Value ---|--- Patched:| Yes, at 21.06.2016 Latest check for patch:| 21.06.2016 09:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

GPON Home Router FTP G-93RG1 - CSRF Command Execution Vulnerability

Exploit for hardware platform in category web applications CSRF Demo Exploit -- document.auto.submit; 0day.today 2018-03-31...

GPON Home Router FTP G-93RG1 - Cross-Site Request Forgery Command Execution

GPON Home Router FTP G-93RG1 - Cross-Site Request Forgery Command Execution CSRF Demo Exploit -- document.auto.submit;...

Security Advisory - No Authentication Vulnerability on the Serial Port of the UAP2105

The UAP2105 serves as a radio access device in the uBro solutions. As one of the AP series products developed on the basis of 3GPP R99/R4/R5/R6 FDD, the UAP2105 complies with the R8 HNB standard and provides Small Office and Home Office SOHO and home users with improved indoor coverage. With the...

GPON Home Router FTP G-93RG1 - Cross-Site Request Forgery / Command Execution

CSRF Demo Exploit -- document.auto.submit;...

Filet-o-Firewall UPnP Security Vulnerability in Home Routers

Security vulnerabilities in UPnP continue to crop up and continue to put millions of home networking devices at risk for compromise. The latest was revealed in early August, but prompted an advisory yesterday from the DHS-sponsored CERT at the Software Engineering Institute at Carnegie Mellon...

CERT Warns of Slew of Bugs in Belkin N600 Home Routers

The CERT/CC is warning users that some Belkin home routers contain a number of vulnerabilities that could allow an attacker to spoof DNS responses, intercept credentials sent in cleartext, access the web management interface, and take other actions on vulnerable routers. The vulnerabilities affec...

cart.bosch-home.com XSS vulnerability

Vulnerable URL: http://cart.bosch-home.com/cart?setlang=1=%2fus%2fsearch.html%3fq%3dxxx%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E%3Cx%20fragment=%22 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 16:41 GMT Vulnerability type:| XSS...

[SECURITY] Fedora 21 Update: pure-ftpd-1.0.36-7.fc21

Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...

global.puma.com XSS vulnerability

Vulnerable URL: http://global.puma.com/trTR/home?locale='"...

it-eu.puma.com XSS vulnerability

Vulnerable URL: http://it-eu.puma.com/home?locale='"...

How Drones Can Find and Hack Internet-of-Things Devices From the Sky

Security researchers have developed a Flying Drone with a custom-made tracking tool capable of sniffing out data from the devices connected to the Internet – better known as the Internet-of-things. Under its Internet of Things Map Project, a team of security researchers at the Texas-based firm...

priceline.com XSS vulnerability

Vulnerable URL: http://www.priceline.com/home/?refid="...

Honeywell International Tuxedo Touch Cross-Site Request Forgery Vulnerability

Honeywell International Tuxedo Touch is a set of automation touch controllers for businesses and homes from Honeywell International, which can control cameras, thermostats, lamps, smart locks, shades, and more via the Web or a related app. A cross-site request forgery vulnerability exists in...

Pair of Bugs Open Honeywell Home Controllers Up to Easy Hacks

The accumulation of automation and Internet-connected devices in many homes these days has led observers to coin the term smart homes. But as researchers take a closer look at the security of these devices, they’re finding that what these homes really are is naive. The latest batch vulnerabilitie...

CVE-2015-2848

Cross-site request forgery CSRF vulnerability in Honeywell Tuxedo Touch before 5.2.19.0VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Honeywell Tuxedo Touch before 5.2.19.0VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command...

CVE-2015-2848

CVE-2015-2848 is a CSRF vulnerability in Honeywell Tuxedo Touch Controller, affecting all versions before 5.2.19.0_VA. A remote attacker can hijack the authentication of legitimate users to issue home-automation commands (e.g., door unlock) via forged requests. The issue is documented across mult...

CVE-2015-2848

Cross-site request forgery CSRF vulnerability in Honeywell Tuxedo Touch before 5.2.19.0VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command...

PT-2015-5933

Name of the Vulnerable Software and Affected Versions Honeywell Tuxedo Touch versions prior to 5.2.19.0 VA Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands. This can be...