CVE-2019-7315

Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability 4.x versions exist only...

CVE-2019-7315

CVE-2019-7315 affects Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices running 3.x. The connected Nuclei template documents a Local File Inclusion (LFI) vulnerability exposed via the web interface, enabling an attacker to read sensitive files (demonstrated with /etc/shadow). ...

PT-2019-18524

Name of the Vulnerable Software and Affected Versions Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera versions prior to 4.x Description The issue allows directory traversal via the web interface, as demonstrated by reading /etc/shadow. This product is discontinued, and its final...

CVE-2019-7315: Improper Limitation of a Pathname to a Restricted Directory

Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability 4.x versions exist only...

Hackers Hit Make-A-Wish Website With Cryptojacking Scheme

Cryptojacking officially knows no bounds...

Cryptojacking Attack Targets Make-A-Wish Foundation Website

Hackers have been stealing CPU-cycles from visitors to the Make-A-Wish Foundation’s international website in order to mine for Monero cryptocurrency. Researchers said they found the CoinIMP mining script embedded in the non-profit’s website, and that it was taking advantage of the Drupalgeddon 2...

festival-wish.com XSS vulnerability

Open Bug Bounty ID: OBB-355351 Description| Value ---|--- Affected Website:| festival-wish.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Wish Local - Buy & Sell - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wish Local - Buy & Sell published at the 'play' market has multiple vulnerabilities...

Wish - Shopping Made Fun - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wish - Shopping Made Fun published at the 'play' market has multiple vulnerabilities...

Wish List (Virutal Piggy Bank) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wish List Virutal Piggy Bank published at the 'play' market has multiple vulnerabilities...

WordPress My Wish List Plugin <= 1.4.1 - XSS

This plugin is prone to a cross site scripting vulnerability via "multiple" parameter. Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

A wish wall program word insertion vulnerability-vulnerability warning-the black bar safety net

| Just looking at a portal of time to sweep a long, long time, and finally found a wishing wall, and then dig the source code. The 0day a wish wall program word insertion vulnerability Also looking for a long time, finally found the source after download nothing can be used to. The 0day a wish wa...