PT-2019-8653

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in the device firmware file, specifically in the relay.sh script, which allows the device to create relay ports and connect to Vera servers. The...

PT-2019-8658

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Veralite version 1.7.481 Description An issue was discovered in the devices, allowing an attacker to run arbitrary Lua code due to the lack of authentication protection for the Lua code installation functionality...

PT-2019-8656

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in Vera devices, where a shell script called relay.sh logs parameters to a file called log.relay in the /tmp folder. These logs can be read by a use...

PT-2019-8657

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in the device firmware file, specifically in the proxy.sh script, which allows the device to proxy requests to and from another website. The url...

CVE-2017-9381: Cross-Site Request Forgery (CSRF)

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

PT-2019-8655

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered on Vera devices, where a script file called "get file.sh" allows a user to retrieve any file stored in the "cmh-ext" folder. However, the filename...

CVE-2017-9392: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "requestimage" as one of the service actions for ...

CVE-2017-9387: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a shell script called relay.sh which is used for creating new SSH relays for the device so that the device connects to Vera servers. All the parameters passed in this specific script are logged to a...

CVE-2017-9385: Undefined Security Weakness

An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to the standard web interface which allows the highest privileges a user can obtain on the device. This web interface uses root as the username and the password in the...

uae.exportersindia.com XSS vulnerability

Open Bug Bounty ID: OBB-639192 Description| Value ---|--- Affected Website:| uae.exportersindia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Secure Anti Forensic Anonymous Operating System: kodachi

Secure Anti Forensic Anonymous Operating System Linux Kodachi operating system is based on Debian 8.6 it will provide you with a secure, anti forensic, and anonymous operating system considering all features that a person who is concerned about privacy would need to have in order to be secure...

Vera Bradley Retail Chain Breached

Retailer Vera Bradley warned customers on Wednesday of a compromise of its point-of-sale system that allowed hackers to make off with an undisclosed number of credit card records. The breach impacts only retail customers who shopped at one of 159 Vera Bradley locations between July 25 and Sept. 2...

Unfixed XSS vulnerability at www.watersportholland.nl

Security researcher Invectus, has submitted on 07/09/2011 a cross-site-scripting XSS vulnerability affecting www.watersportholland.nl, which at the time of submission ranked 17913947 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. I...

Anonleaks - HBGary Email Viewer Portal ,71,800 Emails Exposed !

Anonleaks - HBGary Email Viewer Portal,71,800 Emails Exposed ! Inboxes new [email protected] - Greg Hoglund - 27,606 emails torrent [email protected] - Aaron Barr - 16,906 emails torrent [email protected] - Ted Vera - 12,134 emails torrent [email protected] - Phil Wallisch - 15,156 emails torrent...

VERA v0.3 - Visualizing Executables for Reversing and Analysis tool !

"VERA is a Visualizing Executables for Reversing and Analysis tool. It is a tool for reverse engineering Windows executables. It is used in conjunction with the Ether framework to generate visualizations to help with the RE process." This is the official change log: Added processing of trace file...

MDKA-2005:041 : freetype2

Updated freetype2 packages fix an invalid subpixel rendering for LCD screens with Bitstream Vera font problem. The Bitstream Vera font is the font used by default. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled o...