109 matches found
CVE-2019-7361
The vulnerability CVE-2019-7361 affects Autodesk 2018 product family, including Advance Steel 2018, AutoCAD 2018, AutoCAD Architecture 2018, AutoCAD Electrical 2018, AutoCAD Map 3D 2018, AutoCAD Mechanical 2018, AutoCAD MEP 2018, AutoCAD P&ID 2018, AutoCAD Plant 3D 2018, AutoCAD LT 2018, and Civi...
CVE-2019-7360
CVE-2019-7360 describes an exploitable use-after-free in the DXF-parsing logic of Autodesk AutoCAD 2018 family (Advance Steel, AutoCAD, Civil 3D, etc.). The root cause is a memory-management flaw in the LinetypeTableRecord handling: when the file indicates a zero-length Elements field, an allocat...
CVE-2019-7361: Deserialization of Untrusted Data
An attacker may convince a victim to open a malicious action micro .actm file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018,...
steel-mate.com.hk XSS vulnerability
Open Bug Bounty ID: OBB-692615 Description| Value ---|--- Affected Website:| steel-mate.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
Hardware reverse engineering. A tale from the workbench
In line with our previous work on the Tapplock, I decided to have some fun with some electronic locks and ordered a few from a large retail company. Half of these are currently en route to me, on the slowboat from China, but one arrived early. Before I state, let me just say here that I’m not...
steel-mate.com.hk XSS vulnerability
Open Bug Bounty ID: OBB-544174 Description| Value ---|--- Affected Website:| steel-mate.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
steel-ncci.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-452329 Description| Value ---|--- Affected Website:| steel-ncci.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...
SQL Injection Vulnerability in China Steel Pipe Trade Website Construction System
China steel pipe trade network is a comprehensive industry website, focusing on services for enterprises, the site can publish steel pipe supply, steel pipe purchase, steel pipe industry, you can also view the day's industry information, steel pipe exhibition. China Steel Pipe Trade Network websi...
Friday Squid Blogging: Steel Mesh Giant Squid Used as Artificial Reef
Researchers in the British Virgin Islands have sunk a giant squid made out of steel mesh to serve as an artificial reef. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
i-spraynozzle.com XSS vulnerability
Vulnerable URL: http://www.i-spraynozzle.com/Spray-Nozzle-Search.php?q=13'"304 Stainess Steel Pipe Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8173618 VIP website status:| No...
steel-paint.ru XSS vulnerability
Open Bug Bounty ID: OBB-269324 Description| Value ---|--- Affected Website:| steel-paint.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
middleeaststeel.com XSS vulnerability
Vulnerable URL: http://www.middleeaststeel.com/project.php?id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
magmasoft.de XSS vulnerability
Vulnerable URL: http://www.magmasoft.de/en/-studies/goingbeyond.html?returnto=/en/solutions/steelcasting.html"'--!confirmOPENBUGBOUNTY...
Knife Steel Composition Chart - ContentProvider mode not defined, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Knife Steel Composition Chart published at the 'play' market has multiple vulnerabilities...
Max Steel - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Max Steel published at the 'play' market has multiple vulnerabilities...
Real Steel World Robot Boxing - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Real Steel World Robot Boxing published at the 'play' market has multiple vulnerabilities...
Classic Steel Watch - Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Classic Steel Watch published at the 'play' market has multiple vulnerabilities...
norskstaal.no XSS vulnerability
Vulnerable URL: http://norskstaal.no/no/?onlyPublic=true=200=Search=publicSearch=Articles.Article=39=39=10=relevance=%3C/script%3E%3Csvg%20onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...
tatasteelchess.com XSS vulnerability
Vulnerable URL: http://www.tatasteelchess.com/tournament/gallery/year/2016/gallery/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 81518 Google Pagerank| ...
steelwithstyle.se XSS vulnerability
Vulnerable URL: http://www.steelwithstyle.se/sv/om-steel-style/"';-- Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...