wingate.com Cross Site Scripting vulnerability OBB-3788671

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in before-we-were-yours-by-lisa-wingate-on-iphone-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8470da6676326759a76dc9d39a1b78092763c1fe2547cf5521dd1d248479e45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-124 Malicious code in before-we-were-yours-by-lisa-wingate-on-iphone-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8470da6676326759a76dc9d39a1b78092763c1fe2547cf5521dd1d248479e45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WinGate 9.4.1.5998 - Insecure Folder Permissions

Exploit Title: WinGate 9.4.1.5998 - Insecure Folder Permissions Date: 2020-06-05 Exploit Author: hyp3rlinx Vendor Homepage: https://www.wingate.com Version: 9.4.1.5998 CVE: CVE-2020-13866 + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

CVE-2020-13866

WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

CVE-2020-13866

WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

Design/Logic Flaw

WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

CVE-2020-13866

WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

CVE-2020-13866

WinGate v9.4.1.5998 is affected by an Insecure Permissions Elevation of Privilege vulnerability: the installation directory grants full control to authenticated users, enabling local attackers to replace an executable with a Trojan horse and escalate privileges (often to SYSTEM) after a restart. ...

Qbik IP Management WinGate Elevation of Privilege Vulnerability

Qbik IP Management WinGate is an integrated multi-protocol proxy server from Qbik IP Management in New Zealand. The product also supports features such as email servers and Internet gateways. A security vulnerability exists in Qbik IP Management WinGate version 9.4.1.5998, which stems from the...

WinGate 9.4.1.5998 Insecure Permissions / Privilege Escalation Vulnerability

WinGate version 9.4.1.5998 suffers from an insecure permissions vulnerability that allows for privilege escalation. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WINGATE-INSECURE-PERMISSIONS-LOCAL-PRIVILEGE-ESCALATION.t...

WinGate 9.4.1.5998 Insecure Permissions / Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WINGATE-INSECURE-PERMISSIONS-LOCAL-PRIVILEGE-ESCALATION.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor wingate.com Product WinGate v9.4.1.5998 WinGate is a...

wingate.org.il XSS vulnerability

Vulnerable URL: https://www.wingate.org.il/ViewImage.asp?Image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 695503 Google Pagerank| ...

Qbik WinGate 3.0 Registry Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/511/info WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them. include stdafx.h include...

Qbik WinGate 3.0/Pro 4.0.1/Standard 4.0.1 - Buffer Overflow DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/509/info WinGate's Winsock redirector service is susceptible to a buffer overflow vilnerability that will crash all WinGate services. !/usr/bin/python Qbik Wingate 3.0 DoS Proof of Concept Code. Vulnerability Discovered b...

Qbik WinGate WWW Proxy Server URL Processing Overflow

No description provided by source. $Id: qbikwingatewwwproxy.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Qbik WinGate 6.2.2 LIST Command Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30606/info WinGate is prone to a remote denial-of-service vulnerability affecting the application's IMAP email server. Exploiting this issue will consume computer resources and deny access to legitimate users. WinGate 6.2...

Qbik WinGate Standard <= 3.0.5 Log Service Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/507/info The WinGate log service is configured by default to only allow connections from 127.0.0.1, but can be set to allow connections from anywhere. Either way, there is a vulnerability that will allow any file to be re...

Qbik WinGate WWW Proxy Server URL Processing Overflow

$Id: qbikwingatewwwproxy.rb 8547 2010-02-18 15:58:26Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Qbik WinGate WWW Proxy Server URL Processing Overflow

This module exploits a stack buffer overflow in Qbik WinGate version 6.1.1.1077 and earlier. By sending malformed HTTP POST URL to the HTTP proxy service on port 80, a remote attacker could overflow a buffer and execute arbitrary code. This module requires Metasploit:...