CVE-2017-5634

CVE-2017-5634 affects the Norwegian Air Shuttle airline kiosk. Affected component is the kiosk software used for bookings; root cause is an authentication bypass that lets physically proximate attackers manipulate the print dialog via the touch-screen print icon, bypassing the UI step and potenti...

CVE-2017-5634: Exposure of Resource to Wrong Sphere

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

Shuttle Tech ADSL Wireless 920 WM XSS / Directory Traversal

Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Cross Site Scripting Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 PoC : First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To Panel...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting...

allygator shuttle ridesharing - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application allygator shuttle ridesharing published at the 'play' market has multiple vulnerabilities...

Space Shuttle Simulator Free - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Space Shuttle Simulator Free published at the 'play' market has multiple vulnerabilities...

Shuttle Music Player - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Shuttle Music Player published at the 'play' market has multiple vulnerabilities...

kidderminstershuttle.co.uk XSS vulnerability

Vulnerable URL: http://www.kidderminstershuttle.co.uk//search/?search=%22+autofocus+onfocus%3D%22alert%28%27XSSPOSED%27%29 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Shuttle Tech ADSL Modem-Router 915 WM - Unauthenticated Remote DNS Change Exploit

Exploit for hardware platform in category remote exploits !/bin/bash Shuttle Tech ADSL Modem-Router 915 WM Unauthenticated Remote DNS Change Exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Description: The vulnerability exist in the web interface, which is accessible without...

Shuttle Tech ADSL Modem-Router 915 WM DNS Changer

!/bin/bash Shuttle Tech ADSL Modem-Router 915 WM Unauthenticated Remote DNS Change Exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified, systems use foreign DNS...

Authenticity and the November 2013 Security Updates

If you haven't had a chance to see the movie Gravity, I highly recommend you take the time to check it out. The plot moves a bit slowly at times, but director Alfonso Cuaron's work portrayal of zero gravity is worth the ticket price alone. Add in stellar acting and you end up with an epic movie...

NASA Compromised

And then there was NASA. Poor NASA. This was a tough year for the formerly high-flying and universally beloved U.S. space agency. Not only has their budget seen deep cuts as the US Government tries to balance its books, but they also celebrated the bitter-sweet final mission of their once marquee...

Dongfan "Greg" Chung (Boeing)

Chung, a 72 year old engineer from Orange, California was charged with eight counts of economic espionage in 2008. According to a statement by the U.S. Department of Justice, Chung, a naturalized U.S. citizen, had secret clearance for work on the U.S. Space Shuttle program that he performed as an...

Audit: NASA Fails To Properly Wipe Data From Discarded Drives

A recent internal audit at NASA, the U.S. space agency, found significant weakness in the way the agency disposes of IT equipment, including evidence that used hard drives containing sensitive NASA data may have been sold to the public on the secondhand market. The audit focused on the Johnson an...