CVE-2016-0870

The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request...

CVE-2016-0870

The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request...

CVE-2016-0870

The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request...

CVE-2016-0870

CVE-2016-0870 affects Trane Tracer SC web server (versions 4.2.1134 and earlier). A remote attacker can read sensitive configuration files via a direct request, exposing information from specific directories. NVD assigns CVSSv3 base score 5.3 (Network, Low complexity, No privileges, Confidentiali...

PT-2016-4433

Name of the Vulnerable Software and Affected Versions Trane Tracer SC versions 4.2.1134 and earlier Description The issue allows remote attackers to read sensitive configuration files by making a direct request to the web server. Recommendations For Trane Tracer SC versions 4.2.1134 and earlier,...

Snapchat: Incoming email hijacking on sc-cdn.net

Hey guys! Really interesting find here. Summary These dangling MX records on sc-cdn.net have allowed me to purchase an email account with GoDaddy owner of these servers and send/receive email from an account on this domain. sc-cdn.net. 3599 IN MX 0 smtp.secureserver.net. sc-cdn.net. 3599 IN MX 10...

Snapchat: Administrator access to a Django Administration Panel on *.sc-corp.net via bruteforced credentials

Hey team, While doing some recon for Snapchat's domains, I came across a particular domain of interest - sc-corp.net. It seems that this domain hosts a lot of Snapchat's internal tools, web applications and staging environments such as Phabricator and other administration panels. From analyzing S...

Dailly weather report for SC - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Dailly weather report for SC published at the 'play' market has multiple vulnerabilities...

SC Paderborn 07 - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SC Paderborn 07 published at the 'play' market has multiple vulnerabilities...

Karlsruher SC - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Karlsruher SC published at the 'play' market has multiple vulnerabilities...

Windows NDProxy Privilege Escalation XP SP3 x86 and 2003 SP2 x86 (MS14-002) Exploit

NDPROXY is a system-provided driver that interfaces WAN miniport drivers, call managers, and miniport call managers to the Telephony Application Programming Interfaces TAPI services. The vulnerability is caused when the NDProxy.sys kernel component fails to properly validate input. An attacker wh...

PT-2015-4264

Name of the Vulnerable Software and Affected Versions Our Team Showcase our-team-enhanced plugin versions prior to 1.3 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct...

PT-2015-4266

Name of the Vulnerable Software and Affected Versions wp-timed-popup plugin version 1.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct cross-site scripting XSS attacks. The XSS attacks c...

PT-2015-4200

Name of the Vulnerable Software and Affected Versions Sliding Social Icons plugin version 1.61 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct cross-site scripting XSS...

THC-SmartBrute - Finds undocumented and secret commands implemented in a smartcard

This tool finds undocumented and secret commands implemented in a smartcard. An instruction is divided into Class CLA, Instruction-Number INS and the parameters or arguments P1, P2, P3. THC-SMARTBRUTE iterates through all the possible values of CLA and INS to find a valid combination. Furthermore...

CVE-2014-5036

The CVE-2014-5036 entry applies to Eucalyptus Storage Controller (SC) in versions 3.4.2–4.0.x prior to 4.0.1 when used with Dell EqualLogic SAN. The underlying issue is that CHAP user credentials are logged, enabling local users to read logs and obtain sensitive information, causing partial confi...

CVE-2013-5762

Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local users to affect confidentiality and availability via unknown vectors related to SC-OC Integration...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local users to affect confidentiality and availability via unknown vectors related to SC-OC Integration...

CVE-2013-5762

Technical details for CVE-2013-5762 are not publicly available in the provided documents. Monitor for updates; no vulnerability specifics (product, version, impact, or fix) are disclosed here.

CVE-2013-5762

Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local users to affect confidentiality and availability via unknown vectors related to SC-OC Integration...