81 matches found
Hytec Inter HWL-2511-SS 加密问题漏洞
The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in the Hytec Inter HWL-2511-SS v1.05 and earlier, which originates from a root account that can be easily cracked via brute force attack...
PT-2022-7228
Name of the Vulnerable Software and Affected Versions Hytec Inter HWL-2511-SS version 1.05 and below Description The issue is related to a command injection vulnerability via the component /www/cgi-bin/popen.cgi. This vulnerability is associated with the lack of data sanitization at the managemen...
PT-2022-15926 · Pcf2Bdf +1 · Pcf2Bdf +1
Name of the Vulnerable Software and Affected Versions: pcf2bdf versions 1.05 and later Description: A segmentation fault during PCF file parsing allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent...
PT-2022-14902 · Elecom · Elecom Lan Routers
Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.05 and earlier Description: The issue allows an attacker on the adjacent network to execute an arbitrary OS command via unspecified vectors. Recommendations: For versions 1.05 and earlier, update the firmware to ...
Eaton UPS companion software code injection vulnerability
Eaton UPS companion software is a set of uninterruptible power supply management software from Eaton Corporation in the United States. A code injection vulnerability exists in Eaton UPS companion software v1.05 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary...
RICOH SP C250DN Buffer Error Vulnerability
The RICOH SP C250DN is a printer from the Japanese company Ricoh RICOH. A security vulnerability exists in the way the embedded device parses IPP packets in the Ricoh SP C250DN version 1.05. An attacker could exploit this vulnerability by means of specially crafted packets to cause the device to...
RICOH SP C250DN Denial of Service Vulnerability
The RICOH SP C250DN is a printer from the Japanese company Ricoh RICOH. A security vulnerability exists in the Ricoh SP C250DN version 1.05, which stems from the program failing to properly implement the LPD service. An attacker could exploit the vulnerability to cause a denial of service...
CVE-2019-17621
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network...
CVE-2018-18882
A stored cross-site scripting XSS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface...
CVE-2018-18881
A Denial of Service DOS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory rese...
Oracle Hospitality Hotel Mobile Unauthorized Modification Vulnerability
Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hotel management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction, etc...
Design/Logic Flaw
Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/iOS. The supported version that is affected is 1.05. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile...
Niushop v1. 05 beta 20170622 a SQL injection
No description provided by source...
Wordpress google-adsense-and-hotel-booking plugin denial of service vulnerability
WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language. google-adsense-and-hotel-booking is one of the ads automatically inserted and hotel booking plugin. A denial of service vulnerability exists in the...
blogVault 1.05 - admin.php blogVault Key Setting CSRF
The Backup & Staging – BlogVault Backups WordPress plugin was affected by an admin.php blogVault Key Setting CSRF security vulnerability...
[Full-disclosure] CMS Made Simple: SQL injection
1 Summary Affected software CMS Made Simple 1.05 Vendor URL http://www.cmsmadesimple.org/ Severity High 2 Vulnerability Description The affected software is vulnerable to SQL injection via the templateid parameter of the stylesheet.php page the value of this parameter is used directly in an SQL...
[SA16154] Pyrox Search "whatdoreplace" Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Broadcast client crash in Halo 1.05
Luigi Auriemma Application: Halo: Combat Evolved http://www.microsoft.com/games/pc/halo.aspx Versions: = 1.05 Platforms: Windows and MacOS Bug: crash Exploitation: remote, versus clients broadcast Date: 22 November 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
[NEWS] Demarc PureSecure Allows Users to Bypass Login Restrictions
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
Remote DoS attack in AnalogX SimpleServer WWW Version 1.05 Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in AnalogX SimpleServer WWW Version 1.05 Vulnerability USSR Advisory Code: USSR-2000045 Release Date: June 15, 2000 Systems Affected: AnalogX SimpleServer WWW Version 1.05 THE PROBLEM The Ussr Labs team has recently discovered a null...