novus.com.br Cross Site Scripting vulnerability OBB-1098307

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2013-1391: Improper Authentication

Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration...

NOVUS AUTOMATION Superview 弱口令

No description provided by source...

WS10 Data Server SCADA Exploit Overflow PoC

No description provided by source. Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC Date: 09/23/2014 Author: Pedro Sánchez Version: 1.83 English Tested on: Windows 7 embedded. Notified the vendor, vendor never responded. In the new version this PoC stops working Vendor: Novus...

NOVUS WS10 Detection

Binary data 8406.prm...

WS10 Data Server SCADA Overflow

Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC Date: 09/23/2014 Author: Pedro Sánchez Version: 1.83 English Tested on: Windows 7 embedded. Notified the vendor, vendor never responded. In the new version this PoC stops working Vendor: Novus http://www.novus.com.br NOVUS Electronics is ...

WS10 Data Server SCADA Overflow PoC Exploit

WS10 Data Server version 1.83 SCADA buffer overflow proof of concept exploit. Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC Date: 09/23/2014 Author: Pedro Sánchez Version: 1.83 English Tested on: Windows 7 embedded. Notified the vendor, vendor never responded. In the new version this...

WS10 Data Server - SCADA Overflow (PoC)

WS10 Data Server - SCADA Overflow PoC Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC Date: 09/23/2014 Author: Pedro Sánchez Version: 1.83 English Tested on: Windows 7 embedded. Notified the vendor, vendor never responded. In the new version this PoC stops working Vendor: Novus...

WS10 Data Server - SCADA Overflow (PoC)

Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC Date: 09/23/2014 Author: Pedro Sánchez Version: 1.83 English Tested on: Windows 7 embedded. Notified the vendor, vendor never responded. In the new version this PoC stops working Vendor: Novus http://www.novus.com.br NOVUS Electronics is ...

Novus 1.0 Buscar.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25828/info Novus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Hunt CCTV Credential Disclosure

Hunt CCTV and generics brands Insufficient Authentication January 17, 2013 - A. Ramos -- CVE ID: CVE-2013-1391 reserved -- Affected Vendors: Hunt CCTV http://www.huntcctv.com/ generic brands from Hunt Capture CCTV http://www.capturecctv.ca/ NoVus CCTV http://www.novuscctv.com/ Well-Vision Inc...

Cross site scripting

Cross-site scripting XSS vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5142

The CVE-2007-5142 entry describes a Cross-site Scripting (XSS) vulnerability in the buscar.asp page of Solidweb Novus 1.0. The issue allows remote attackers to inject arbitrary script/HTML by supplying a value in the p parameter. This is evidenced by multiple sources referencing the same flaw and...

CVE-2007-5142

Cross-site scripting XSS vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5142: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the notaid parameter...

CVE-2007-5123

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the notaid parameter...

CVE-2007-5123

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the notaid parameter...

CVE-2007-5123

CVE-2007-5123 describes an SQL injection vulnerability in notas.asp of Novus 1.0, exploitable via the nota_id parameter to allow remote execution of arbitrary SQL commands. Affected product details: Novus 1.0, specifically the notas.asp component; root cause is improper handling/validation of the...

novus-sql.txt

Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2- anota.fepublicacion 3- anota.seccionid 4-...