CVE-2018-17555

CVE-2018-17555 affects ARRIS TG2492LG-NA devices. The issue is information disclosure via the web component, where remote attackers can obtain sensitive data through the /snmpGet oids parameter. Documents do not provide affected software versions, root cause details, exploit specifics, or remedia...

Memory Corruption Vulnerability in NA-VIEW

Nanda Aotuo Technology Jiangsu Co., Ltd. specializes in the research, development, production and sales of programmable logic controllers PLC, has formed a large and medium-sized PLC products as the main products, supplemented by small PLC products, remote measurement and control unit RTU, touch...

Memory Corruption Vulnerability in NAPro

Nanda Aotuo Technology Jiangsu Co., Ltd. specializes in the research, development, production and sales of programmable logic controllers PLC, has formed a large and medium-sized PLC products as the main products, supplemented by small PLC products, remote measurement and control unit RTU, touch...

rostov-na-donu.sa-ra.ru XSS vulnerability

Open Bug Bounty ID: OBB-579869 Description| Value ---|--- Affected Website:| rostov-na-donu.sa-ra.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

na-pulpit.com XSS vulnerability

Open Bug Bounty ID: OBB-561273 Description| Value ---|--- Affected Website:| na-pulpit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ebankib.ebank.na XSS vulnerability

Vulnerable URL: https://ebankib.ebank.na/Retail/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

remont-spb-na-zakaz.ru XSS vulnerability

Vulnerable URL: http://remont-spb-na-zakaz.ru/bitrix/templates/repair/js/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

tochka-na-karte.ru XSS vulnerability

Open Bug Bounty ID: OBB-132363 Description| Value ---|--- Affected Website:| tochka-na-karte.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Multiple Buffer Overflow Vulnerabilities in Android

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. Multiple buffer overflow vulnerabilities exist in Android versions prior to 5.1.1, LMY48I. Allowing a remote attacker to execute arbitrary code via an invalid NA unit size...

Microsoft Office 2007 MSO.dll Arbitrary Free Exploit

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and...

Heartland Data Breach Suit Back from the Dead

For all intents and purposes, the Heartland Payment Systems data breach saga ended more than two years ago when the embattled payment processor finalized settlements paying out millions of dollars to various banks, credit card issuers and consumers. That is until a handful of banks reportedly...

CMS Articles NA 1.4 SQL Injection

=============================================== CMS Articles NA 1.4 SQL Injection Vulnerability =============================================== +Title : CMS Articles NA 1.4 SQL Injection Vulnerability +Software : CMS Articles NA 1.4 +Vendor : NN +Download : NN +Author : josalijoe +Contact :...

DEBIAN-CVE-2007-5031

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

CVE-2006-2043

na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "" backtick characters in the appliance's command line interface CLI...

Command injection

na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "" backtick characters in the appliance's command line interface CLI...

CVE-2006-2043

CVE-2006-2043 affects IP3 Networks NetAccess NA75 with the na-img-4.0.34.bin image; backtick characters in the appliance CLI enable local users to gain Unix shell access, indicating a command-injection-style vulnerability in the CLI parsing. No remediation details are provided in the supplied doc...

CVE-2006-2044

The CVE-2006-2044 entry concerns na-img-4.0.34.bin used by the IP3 Networks NetAccess NA75, which ships with a default username and password of admin/admin. The vulnerability is network‑accessible (AV:N, attack vector NETWORK) with no authentication required (Au:N) and yields partial impact to co...