Siemens LOGO! 230RCE PLC Detection

Binary data 765138.prm...

Siemens LOGO! 12/24RCE PLC Detection

Binary data 765136.prm...

Siemens LOGO! 24RCE PLC Detection

Binary data 765137.prm...

Unspecified Vulnerability in CloudBees Jenkins GitLab Logo Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . GitLab Logo Plugin is used in one of the...

CVE-2015-9434

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...

CVE-2015-9434

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...

CVE-2015-9434

The CVE relates to the WordPress plugin kiwi-logo-carousel prior to version 1.7.2, where CSRF enables cross-site scripting (XSS) via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or the tab_flags_order parameter. The underlying issue is CSRF that allows an authenticated attack...

Joomla! < 3.9.12 XSS Vulnerability

Joomla! is prone to a cross-site scripting vulnerability due to inadequate escaping, which makes attacks using the logo parameter of the default templates possible. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

CVE-2019-10429

Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10429

The CVE refers to the Jenkins GitLab Logo Plugin, where credentials are stored unencrypted in the plugin’s or Jenkins master’s global configuration file. The underlying issue is that sensitive data is kept in plaintext on the Jenkins master filesystem and could be viewed by users with access to t...

PT-2019-11823 · Jenkins · Jenkins Gitlab Logo Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins GitLab Logo Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file of the Jenkins master. This allows users with access to the...

Cross site scripting

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

[20190901] - Core - XSS in logo parameter of default templates

Inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

EVABS - Extremely Vulnerable Android Labs

An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners. The effort is to introduce beginners with very limited or zero knowledge to some of the major and commonly found real-world based Android application...

CVE-2019-14521

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...

Path traversal

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...

CVE-2019-14521

The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter...

LayerBB Code Issues Vulnerabilities

LayerBB is a small set of forum software. A code issue vulnerability exists in LayerBB version 1.1.3, which stems from the program not restricting the customlogo file name suffix. An attacker can exploit this vulnerability to upload arbitrary files...

The vulnerability of the microprogrammed software of SIEMENS LOGO!8 programmable logic controllers, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of SIEMENS LOGO!8 programmable logic controllers is related to improper access control. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending specially crafted packets to port 10005/TCP...

The vulnerability of SIEMENS LOGO!8’s microprogramming software, related to improper access control, allows a perpetrator to gain access to the device.

The vulnerability of the microprogramming software of SIEMENS LOGO!8 programmable logic controllers is related to improper access control. Exploiting this vulnerability could allow an attacker, operating remotely, to use the intercepted session identifier to gain access to the device even after t...