Design/Logic Flaw

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering...

amc-forum.de Cross Site Scripting vulnerability OBB-3405492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amc-forum.de Cross Site Scripting vulnerability OBB-3397056

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amc-parts.se Cross Site Scripting vulnerability OBB-3392459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amc-forum.de Cross Site Scripting vulnerability OBB-3192192

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-23843

The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows putting a password protection on configured devices to restrict access to the configuration of an AMC2. An attacker can circumvent this protection and make...

Bosch Amc2 访问控制错误漏洞

Bosch Amc2 is an access modular controller from Bosch, Germany. An access control error vulnerability exists in the Bosch AMC2 that stems from the Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe used to configure certain settings in the AMC2 device. The tools allow password protection...

amc-nh.org XSS vulnerability

Open Bug Bounty ID: OBB-609837 Description| Value ---|--- Affected Website:| amc-nh.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AMC Master Arbitrary File Upload

Exploit Title: Annual Maintenance Contract Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/amc-master-annual-maintenance-contract-management-system/20667703 Demo:...

CVE-2017-14841

CVE-2017-14841 affects Mojoomla AMC Management System; the profilesetting image handling has an Arbitrary File Upload vulnerability, allowing upload of arbitrary files. This is corroborated by NVD (CVE-2017-14841) and CNVD/CVEs, with Exploit-DB listing a PoC. CVSS v2 base 4.0 (MEDIUM) and CVSS v3...

AMC Master - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Annual Maintenance Contract Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link:...

AMC Security - Antivirus Boost - Customized SSL, Runtime privilege escalation, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application AMC Security - Antivirus Boost published at the 'play' market has multiple vulnerabilities...

CVE-2014-5646

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5646

The CVE-2014-5646 entry concerns the AMC Security- Antivirus, Clean (com.iobit.mobilecare) app for Android (version 4.4.1). The vulnerability is that the application does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2013-3543

The CVE-2013-3543 entry affects the AXIS Media Control ActiveX (AxisMediaControlEmb.dll) version 6.2.10.11 used in AXIS network cameras. The vulnerability allows remote attackers to write arbitrary files by supplying file paths to the StartRecord, SaveCurrentImage, or StartRecordMedia methods, le...

How easy it is to hack AMC's sites !

An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...