PT-2018-8325

Name of the Vulnerable Software and Affected Versions Ruckus Networks Solo APs versions R110.x or before Ruckus Networks SZ managed APs versions R5.x or before Description The issue concerns an authenticated Root Command Injection in the web-GUI. This could allow authenticated valid users to...

CVE-2017-6230: Improper Neutralization of Special Elements used in an OS Command

Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems...

CVE-2017-14020

In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...

CVE-2017-14020

In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...

AutomationDirect Multiple Product DLL Hijacking Vulnerability

AutomationDirect is one of the larger PLC design and manufacturing companies in the world, with CLICK, C-More, and C-More Micro as part of the programming software, GS Drives as a configuration software, and SL-Soft SOLO as a temperature controller configuration software. Multiple product DLL...

CVE-2017-14020: Uncontrolled Search Path Element

In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...

NUUO NVRmini 2 and NVRsolo Hardcoded Certificate Vulnerability

The NUUO NVRsolo and NVRmini 2 are both network video recorders from NUUO. A hardcoded certificate vulnerability exists in NUUO NVRmini 2 and NVRsolo versions 1.0.0 through 3.0.0, which stems from a program using hardcoded certificates. The vulnerability can be exploited by an attacker to log int...

XField Paintball 1 - Solo - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application XField Paintball 1 - Solo published at the 'play' market has multiple vulnerabilities...

Bass Guitar Solo - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bass Guitar Solo published at the 'play' market has multiple vulnerabilities...

Guitar Solo HD - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Guitar Solo HD published at the 'play' market has multiple vulnerabilities...

Piano Solo HD - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Piano Solo HD published at the 'play' market has multiple vulnerabilities...

Drum Solo HD - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Drum Solo HD published at the 'play' market has multiple vulnerabilities...

Solo Weather - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Solo Weather published at the 'play' market has multiple vulnerabilities...

Cute Font font #1 - Solo Font - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Cute Font font 1 - Solo Font published at the 'play' market has multiple vulnerabilities...

Solo Locker（DIY Locker） - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Solo Locker（DIY Locker） published at the 'play' market has multiple vulnerabilities...

CVE-2014-9200

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM...

CVE-2014-9200 Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM...

CVE-2014-7228

Akeeba Restore restore.php, as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0...

PT-2014-7844

Name of the Vulnerable Software and Affected Versions Akeeba Restore versions 2.5.4 through 2.5.25 Akeeba Restore versions 3.x through 3.2.5 Akeeba Restore versions 3.3.0 through 3.3.4 Akeeba Backup for Joomla! Professional versions 3.0.0 through 4.0.2 Backup Professional for WordPress versions...

CVE-2014-7228: Undefined Security Weakness

Akeeba Restore restore.php, as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Backup Professional for WordPress 1.0.b1 through 1.1.3; Solo 1.0.b1 through 1.1.2; Admin Tools Core and Professional 2.0.0...