CVE-2020-12783

Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c...

lemongrass-spa.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1121448 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 21 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting lemongrass-spa.com website a...

nativlodge-spa.com Improper Access Control vulnerability

Security Researcher DakkarKey Helped patch 396 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting nativlodge-spa.com website and its users. Following...

alishabodyspa.in Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1084217 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting alishabodyspa.in website a...

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability in the web interface for managing Microprogramming-based IP phones of the Cisco SPA100 Series is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges using a...

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability in the web interface for managing Microprogramming software in Cisco SPA100 Series IP phones is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges using a...

Cisco SPA100 Remote Code Execution Vulnerability (CNVD-2019-36889)

The Cisco SPA100 Series is an analog phone adapter from Cisco that allows your standard analog phone to access Internet telephony services through an RJ-11 phone port. A remote code execution vulnerability exists in the Cisco SPA100 Series with firmware 1.4.1 SR4 and earlier. The vulnerability...

Cisco SPA100 Information Leakage Vulnerability

The Cisco SPA100 Series is an analog phone adapter from Cisco that allows your standard analog phone to access Internet telephony services through an RJ-11 phone port. A management credential information leakage vulnerability exists in the web-based management interface of Cisco SPA100 Series 1.4...

Cisco SPA ATA SIP Detection

Binary data ciscospasipdetection.nbin...

Cisco SPA ATA Web Interface Detection

Binary data ciscospawebdetection.nbin...

Osmedeus - Fully Automated Offensive Security Tool For Reconnaissance And Vulnerability Scanning

Osmedeus allow you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. How to use If you have no idea what are you doing just type the command below or check out the Advance Usage ./osmedeus.py -t example.com Installation git clone...

CVE-2019-1683

CVE-2019-1683 affects Cisco Small Business SPA112, SPA500, SPA525, and SPA5X5 IP Phones. The issue is in the certificate handling component where server certificates are not properly validated, allowing an unauthenticated, remote attacker to listen to or control parts of a TLS-encrypted SIP conve...

CVE-2018-20720

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...

CVE-2018-20720

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...

CVE-2018-20720

Summary (CVE-2018-20720) Affected product: ABB Relion 630 devices. Vulnerable versions: 1.1 prior to 1.1.0.C0; 1.2 prior to 1.2.0.B3; 1.3 prior to 1.3.0.A6. Root cause / nature (as stated): Remote attackers can cause a denial of service (device reboot) via a reboot command in an SPA message. Impa...

CVE-2018-20720

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...

spa-design.it XSS vulnerability

Open Bug Bounty ID: OBB-703298 Description| Value ---|--- Affected Website:| spa-design.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

spa-dich-fit.de XSS vulnerability

Open Bug Bounty ID: OBB-663410 Description| Value ---|--- Affected Website:| spa-dich-fit.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

spa-vittel.com XSS vulnerability

Open Bug Bounty ID: OBB-628127 Description| Value ---|--- Affected Website:| spa-vittel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Flexit Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aristeaspa.it XSS vulnerability

Open Bug Bounty ID: OBB-597236 Description| Value ---|--- Affected Website:| aristeaspa.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...