Schneider Electric TSX Premium Communications Adapter Detection

Binary data 750693.prm...

Schneider Electric Premium PLC Detection

Binary data 750661.prm...

Schneider Electric TSX Premium Communications Adapter Detection

Binary data 750689.prm...

Schneider Electric TSX Premium Communications Adapter Detection

Binary data 750685.prm...

Schneider Electric Premium PLC Detection

Binary data 750642.prm...

Schneider Electric TSX Premium Communications Adapter Detection

Binary data 750705.prm...

CarSpot Theme <= 2.1.6 - Authenticated Stored XSS

Bad input field data filtering has been discovered in the 'CarSpot – Automotive Car Dealer Wordpress Classified Theme'. Current version of this Premium Theme is 2.1.5. PoC Authorize on the demo website for tests: https://carspot.scriptsbundle.com/, login is [email protected] and passow...

InnoGames: Race condition in activating email resulting in infinite amount of diamonds received

There was a race condition, in the registration process, that might have given the attacker an advantage in the game by gaining additional premium in-game currency without paying for it. Summary: This is an interesting critical race condition that might give the attacker an advantage in the game ...

Professional Services Simplified - Check out what's new!

In today's fast-moving digital world, we know businesses need to rapidly adapt to meet user expectations and stay competitive. At Akamai, we see a world of unimagined potential, enabled through the unique power of the Akamai Edge. It's this power, backed by the support of our 2000 global experts,...

Logic Flaw Vulnerability in Cloud Premium CMS

YUNUCMS YUNUCMS is a professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS has a logic flaw vulnerability, which can be exploited by attackers to overstep their rights and add administrator accounts...

WordPress Premium WP Suite Easy Redirect Manager Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Premium WP Suite Easy Redirect Manager plugin is used in one of the redirection plugin. A cross-site scripting...

Design/Logic Flaw

The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is mishandled during log viewing at the templates/admin/redirect-log.php URI...

CVE-2019-6267

CVE-2019-6267 concerns the WordPress plugin Premium WP Suite Easy Redirect Manager (version/build: 28.07-17) where an XSS flaw exists. The vulnerability arises from a crafted GET request that is mishandled during log viewing at the URI templates/admin/redirect-log.php, allowing arbitrary script H...

Pre-Installed Android App Impacts Millions with Slew of Malicious Activity

A pre-installed Android application on Alcatel smartphones has been found surreptitiously siphoning off geolocation data, email addresses and phone identification numbers and sending the data to a server in China. Analysts with Upstream’s Secure-D platform said that the app, Weather Forecast—Worl...

WordPress JobCareer premium theme <= 2.4 - User enumeration & Password Reset vulnerabilities

User enumeration & Password Reset vulnerabilities found by Anthony MAESTRE in WordPress JobCareer premium theme versions = 2.4. Solution Update the WordPress JobCareer premium theme to the latest available version at least 2.4.1...

Information disclosure

An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether...

CVE-2018-7812

An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether...

CVE-2018-7833

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...

Input validation

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...

Design/Logic Flaw

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing...