scs-laboutique.com XSS vulnerability

Open Bug Bounty ID: OBB-553767 Description| Value ---|--- Affected Website:| scs-laboutique.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

scsglobalservices.com XSS vulnerability

Vulnerable URL: https://www.scsglobalservices.com/solr/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 699241 VIP website status:| No Check scsglobalservices.com SSL...

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

CVE-2013-4875

The CVE-2013-4875 entry concerns the U-Boot bootloader used on the Verizon Wireless Network Extender SCS-2U01. The vulnerability allows a physically proximate attacker to bypass the intended boot process and reach a login prompt by connecting a crafted HDMI cable and issuing a SysReq interrupt. T...

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

CVE-2013-4874

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

CVE-2013-4876

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...

CVE-2013-4877

CVE-2013-4877 affects Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01. The root issue is that these devices do not use CAVE authentication, which allows an attacker to sniff registration packets over the network and obtain ESN and MIN values from arbitrary phones, enabling cloning...

CVE-2013-4876

The CVE-2013-4876 entry applies to the Verizon Wireless Network Extender SCS-2U01, where a hardcoded password for the root account enables physically proximate attackers to obtain administrative access via the device login prompt. The description documents the root cause (hardcoded root credentia...

CVE-2013-4874

CVE-2013-4874 affects the Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4. The vulnerability allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable. Exploitation details ...

Verizon Wireless Network Extender multiple vulnerabilities

Overview iSEC Partners has reported that the Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01 made by Samsung are susceptible to a local compromise using a custom HDMI cable. Once compromised the device can be used to eavesdrop on voice, text and data communication for mobile devic...

CVE-2011-1370

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

Default configuration

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

CVE-2011-1370

The vulnerability CVE-2011-1370 affects IBM Lotus Sametime Server, specifically the Sametime configuration servlet (SCS) in versions 7.0 through 8.5.2. The root cause is lack of authentication on the configuration servlet, enabling remote readers to access configuration settings via responses. Im...

OpenSSL* vulnerability – Software Development Tools for Intel® Active Management Technology (Intel® AMT)

Summary: In response to the OpenSSL advisory CVE-2010-0740, Intel is releasing an update to the Intel® Active Management Technology Intel® AMT Software Development Kit SDKand Intel® Setup and Configuration Service Intel® SCS to mitigate this vulnerability. This issue does not affect the Intel®...

Multiple XSS in Sun Communications Express

Advisory ID Internal CORE-2009-0109 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sun-communications-express Date published: 2009-05-20 Date of last update: 2009-05-20 Vendors...

Symantec Alert Management System 2 multiple vulnerabilities

SUMMARY The version of Alert Management System 2 AMS2 used by some versions of Symantec System Center, Symantec Antivirus Server, and Symantec AntiVirus Central Quarantine Server contains four vulnerabilities. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec AntiVirus Corporate...

Core Security Technologies Advisory 2009.0114

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HTTP Response Splitting vulnerability in Sun Delegated Administrator 1. Advisory Information Title: HTTP Response Splitting vulnerability in Sun Delegated Administrat...

Sun Calendar Express Web Server - Denial of Service Cross-Site Scripting

Sun Calendar Express Web Server - Denial of Service Cross-Site Scripting Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in Sun Calendar Express Web Server 1. Advisory Information Title: Multiple vulnerabilities in Sun Calendar Express...

Symantec Reporting Server Password Disclosure

SUMMARY The administrator password for Symantec Reporting Server could be disclosed after a failed login attempt. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Affected Products Product | Affected...