Moxa PT-7528 and PT-7828 Series Weak Password Vulnerability

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to gain unauthorized access to the system...

Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm Vulnerability

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by attackers to obtain sensitive information...

Moxa PT-7528 and PT-7828 Series Hardcoding Vulnerabilities

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A hard-coded vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to recover confidential data...

Moxa PT-7528 and PT-7828 Series Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: PT-7528 Series and PT-7828 Series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...

PT-2019-7038 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: The issue is related to improper input validation, which could lead to a partial Denial of Service. Recommendations: At the moment, there is no information about a newer version that contai...

QIWI: [qiwi.me] Stored XSS

Stored XSS with WAF bypass in "wishlist" functionality Хранимая ХСС в функционале вишлистов с обходом встроенного WAF. https://twitter.com/ptswarm...

QIWI: IDOR редактирование любого вишлиста

The Piggybox service had the ability to edit other people's wishlists using a specially formed request. В копилке существовала возможность редактировать чужие вишлисты с помощью специально сформированного запроса. https://twitter.com/ptswarm...

PT-2019-4228

Name of the Vulnerable Software and Affected Versions Microsoft Windows AppX Deployment Server affected versions not specified Description The issue is related to insufficient access restrictions in the Windows AppX Deployment Server component, allowing an attacker to elevate their privileges. To...

vasp.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-1013613 Security Researcher Gh05tPT Helped patch 6899 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting vasp.pt website and its...

PT-2019-05: Local privilege escalation

...

PT-2019-6340 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the ParseMetaGeometry function in the MagickCore/geometry.c component of the ImageMagick console graphic editor. It is caused by an incorrect implementation of the...

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of a unstable cryptographic algorithm in the configuration files. This allows a hacker to decrypt the configuration data.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of a unstable cryptographic algorithm in the configuration files. Exploiting this vulnerability allows a remote attacker to decrypt the configuration data...

The vulnerability of the embedded web-server microprogramming software in Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 switches is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service failure using a specially crafted...

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of rigidly encoded configuration data for the device’s console. This allows attackers to exploit their privileges to gain unauthorized access.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of rigidly encoded configuration data for the device’s configuration console. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of cryptographic algorithms that contain defects, allowing attackers to decrypt the login credentials.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to decrypt the login credentials...

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of a rigidly encrypted cryptographic key for encrypting account data. This allows attackers to enhance their privileges.

The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the use of a rigidly encrypted cryptographic key, which is used for encrypting account data. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

PT-2019-3003 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Graphics Component affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows Graphics Component. This can allow an attacker to disclose protected information usi...

CVE-2019-2748

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2019-2748

CVE-2019-2748 affects Oracle PeopleSoft Products’ PeopleSoft Enterprise PT PeopleTools (Application Server) with affected versions 8.55, 8.56, and 8.57. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft PT PeopleTools, potentially enabling un...