EUVD-2006-4936

Malware in sbrugna...

EUVD-2016-9614

Malware in sbrugna...

Siemens SiPass Integrated 访问控制错误漏洞

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens, Germany. An access control error vulnerability exists in Siemens SiPass Integrated V6.4.8 and prior versions, which stems from the device exposing multiple unauthenticated MQTT URLs, which could all...

CVE-2022-36785

D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...

Authorization

D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...

CVE-2022-36785

CVE-2022-36785 affects D-Link G Integrated Access Device4. Public sources describe an information-disclosure and authorization-bypass vulnerability where the web interface does not properly validate client-side identity variables, allowing access to admin credentials via the setupWizard.asp URL a...

CVE-2022-36785: Incorrect Authorization

D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...

D-Link G integrated Access Device4 安全漏洞

The D-Link G integrated Access Device4 is an integrated device from China-based AUO D-Link. A security vulnerability exists in D-Link G integrated Access Device4. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting Vulnerability

Exploit Title: ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting XSS Exploit Author: LiquidWorm Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App:...

CVE-2016-8789

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

CVE-2016-8789: Improper Neutralization of Input During Web Page Generation

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

PT-2017-9810

Name of the Vulnerable Software and Affected Versions Huawei eSpace Integrated Access Device IAD versions V300R001C03 through V300R001C07, V300R001C20 Description The issue allows an attacker to trick a user into clicking a URL containing malicious scripts, potentially leading to the obtainment o...

Arbitrary Command Execution Vulnerability in Integration Access Controller of Zhengzhou Glacier Network Technology Co.

Zhengzhou Glacier Networks Technology Co., Ltd Glacier Networks is a provider of embedded software product development and network application layer management equipment. An arbitrary command execution vulnerability exists in the Integrated Access Controller of Zhengzhou Glacier Network Technolog...

Huawei eSpace IAD Remote Information Disclosure Vulnerability

The Huawei eSpace IAD TS0802 and TS0801 are both integrated access devices for Huawei's Voice over IP and Unified Communications solutions from Huawei, China. A remote information disclosure vulnerability exists in the Huawei eSpace IAD, which can be exploited by remote attackers to obtain...