CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

CVE-2018-5266

The CVE-2018-5266 entry affects Cobham Sea Tel 121 devices (build 222701). Affected component is the login mechanism where an attacker can read the loginName lines in the js/userLogin.js URI to obtain potentially sensitive information about valid usernames. This is a remote information-disclosure...

CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

CVE-2018-5266

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with...

CVE-2018-5071

CVE-2018-5071 is a reported Persistent Cross‑Site Scripting vulnerability in the Cobham Sea Tel web server for Sea Tel 116, build 222429. The affected component is the web server; the underlying issue is persistent XSS that allows remote attackers to inject malicious JavaScript through TELNET she...

CVE-2018-5267

Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or MenuSys.html...

CVE-2018-5267

Cobham Sea Tel 121 build 222701 devices are affected by CVE-2018-5267, enabling a remote authentication bypass via direct requests to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or MenuSys.html. The vulnerability allows bypass of authentication without user...

CVE-2018-5267: Undefined Security Weakness

Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or MenuSys.html...

PT-2018-16849

Name of the Vulnerable Software and Affected Versions Cobham Sea Tel 121 build 222701 Description The issue allows remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the "js/userLogin.js" URI. Default passwords for standard usernam...

CVE-2018-5071: Improper Neutralization of Input During Web Page Generation

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

PT-2018-16850

Name of the Vulnerable Software and Affected Versions Cobham Sea Tel 121 build 222701 Description The issue allows remote attackers to bypass authentication by making a direct request to specific HTML pages, including "MenuDealerGx.html", "MenuDealer.html", "MenuEuNCGx.html", "MenuEuNC.html",...

PT-2018-16763

Name of the Vulnerable Software and Affected Versions Cobham Sea Tel 116 build 222429 Description A persistent XSS issue exists in the web server of the affected device, allowing remote attackers to inject malicious JavaScript code. This can be achieved through the device's TELNET shell using...

CVE-2018-5266: Exposure of Sensitive Information to an Unauthorized Actor

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with...

Friday Squid Blogging: Gonatus Squid Eating a Dragonfish

There's a video: Last July, Choy was on a ship off the shore of Monterey Bay, looking at the video footage transmitted by an ROV many feet below. A Gonatus squid was spotted sucking off the face of a "really huge dragonfish," she says. "It took a little while to figure out what's going on here,...

Friday Squid Blogging: Baby Sea Otters Prefer Shrimp to Squid

At least, this one does. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

SeaCMS admin/admin_ping.php file code execution vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 6.56. The vulnerability can be exploited by a remote attacker to execute arbitrary PHP code ...

IT threat evolution Q3 2017

Targeted attacks and malware campaigns Re-enter the dragon In July, we reported on the recent activities of a targeted attack group called 'Spring Dragon' also known as LotusBlossom, whose activities data back to 2012. Spring Dragon makes extensive use of spear-phishing and watering-hole attacks...

Threat Outbreak Alert RuleID30473: Email Messages Distributing Malicious Software on September 1, 2017

Medium Alert ID: 55021 First Published: 2017 September 1 16:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30473 may contain the following files: Name |...

sea-sports.de XSS vulnerability

Vulnerable URL: http://www.sea-sports.de/xanariosearch.php?productskeywords=test%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Spring Dragon – Updated Activity

Spring Dragon is a long running APT actor that operates on a massive scale. The group has been running campaigns, mostly in countries and territories around the South China Sea, since as early as 2012. The main targets of Spring Dragon attacks are high profile governmental organizations and...