Model Agency Media House & Model Gallery 1.0 - Multiple Vulnerabilities

Exploit Title: Model Agency Media House & Model Gallery 1.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Authentication bypass Date: 2018-05-21 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage:...

Hurdles Remain After Senate Votes To Restore Net Neutrality

The U.S. Senate this week gave the nod to restoring net neutrality regulations that would prevent ISPs from controlling access to certain websites. But roadblocks remain, even as the legislation is pushed on the fast track to a House vote: Bigwig ISPs, independent ISPs, small businesses, Democrat...

This Week in Security News: Hackers and Cyber Attackers

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, Chili’s parent company – Brinker International – announced that consumer credit and debit card information had been compromised at some...

White House Eliminates Cybersecurity Position

The White House has eliminated the cybersecurity coordinator position. This seems like a spectacularly bad idea...

olive-house.ru XSS vulnerability

Open Bug Bounty ID: OBB-611148 Description| Value ---|--- Affected Website:| olive-house.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-5001 · Antenna House · Antenna House Dmc Htmlfilter

Name of the Vulnerable Software and Affected Versions: AntennaHouse DMC HTMLFilter affected versions not specified Description: An exploitable heap corruption issue exists in the DHFSummary functionality. Recommendations: At the moment, there is no information about a newer version that contains ...

PT-2018-5000 · Antenna House · Antenna House Dmc Htmlfilter

Name of the Vulnerable Software and Affected Versions: AntennaHouse DMC HTMLFilter affected versions not specified Description: A heap corruption issue exists in the Doc GetFontTable functionality, allowing arbitrary code execution through a specially crafted doc file. This can be triggered by an...

house-design.shop XSS vulnerability

Open Bug Bounty ID: OBB-582739 Description| Value ---|--- Affected Website:| house-design.shop Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-0275

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

humanrightshouse.org XSS vulnerability

Open Bug Bounty ID: OBB-575308 Description| Value ---|--- Affected Website:| humanrightshouse.org Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

IBM Financial Transaction Manager Denial of Service Vulnerability

IBM Financial Transaction Manager FTM for ACH Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A denial of service vulnerability exists in IBM Financial Transaction Manager FTM for ACH Services...

naturalresources.house.gov XSS vulnerability

Open Bug Bounty ID: OBB-565431 Description| Value ---|--- Affected Website:| naturalresources.house.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

russianpublishinghouse.com XSS vulnerability

Open Bug Bounty ID: OBB-551408 Description| Value ---|--- Affected Website:| russianpublishinghouse.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17704

A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode...

Design/Logic Flaw

A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode...

CVE-2017-17704

The CVE-2017-17704 entry concerns Software House iStar Ultra devices (up to 6.5.2.20569) used with the IP-ACM Ethernet Door Module. The vulnerability arises from CBC-mode encryption that reuses a fixed IV and key across messages, with no strong authentication of messages. This enables replay of w...

CVE-2017-17704

A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode...

guest-house-urwegen.com XSS vulnerability

Open Bug Bounty ID: OBB-458287 Description| Value ---|--- Affected Website:| guest-house-urwegen.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Shanghai Lehigh Network Technology Co., Ltd. bug house APP has multiple vulnerabilities

Bug House App is a home service software. Shanghai Lehigh Network Technology Co., Ltd Bug House APP exists arbitrary user registration and arbitrary user password reset vulnerability. Attackers can register any account and reset any password by grabbing packets and blasting the verification code...

house-deluxe.ru XSS vulnerability

Open Bug Bounty ID: OBB-450109 Description| Value ---|--- Affected Website:| house-deluxe.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...