1942 matches found
dresden.ihk.de XSS vulnerability
Vulnerable URL: http://www.dresden.ihk.de/servlet/suche?refknotenid=30779=%22%3Eblub%3CsvG%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=suchen=gewichtung=jaitem=1=20color=darkbluepfadkuerzen=20=nein=ja=ja=ja=nein=ja=ja=ja=ja=ja=neinhub=jafile=jatext=ja=true=300=jaduvas=3 Details: Description| Val...
Baby Panda Safety At Home - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Baby Panda Safety At Home published at the 'play' market has multiple vulnerabilities...
Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution Exploit
Exploit for windows platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1081 Windows: ManagementObject Arbitrary .NET Serialization RCE Platform: .NET 4.6, Powershell 4. Tested between Server 2016 and Windows 10 Anniversary Edition Class: Remote...
sct.edu.om XSS vulnerability
Vulnerable URL: https://www.sct.edu.om/weblibrary/shared/help.php?page=%27%22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
CVE-2016-4031
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices allow attackers to send AT commands by plugging the device into...
CVE-2016-4032
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attacke...
Code injection
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attacke...
Command injection
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices allow attackers to send AT commands by plugging the device into...
CVE-2016-4031
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices allow attackers to send AT commands by plugging the device into...
CVE-2016-4032
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attacke...
CVE-2016-4031
Technical details about CVE-2016-4031 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-3045
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to the palette box...
CVE-2016-5067
CVE-2016-5067 concerns Sierra Wireless GX440 devices running ALEOS firmware 4.3.2, where a Hayes AT command injection vulnerability exists. The vulnerability enables a remote attacker to inject and execute arbitrary commands via AT command handling in the gateway device, per connected CNVD/NVD en...
CVE-2016-5067
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...
epson.at XSS vulnerability
Vulnerable URL: https://www.epson.at/support?productID=1863=serviceinwarranty=%253E%27%253E%2522%253Ei%253Ci%253Ei%253Cimg+src%253Dx+onerror%253Dprompt%252FOPENBUGBOUNTY%252F%253Efindrepaircenter Details: Description| Value ---|--- Patched:| Yes, at 30.05.2017 Latest check for patch:| 30.05.2017...
gdk-pixbuf 'make_available_at_least' function denial of service vulnerability
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. A security vulnerability in the gdk-pixbuf 'makeavailableatleast' function allows remote attackers to build malicious files that can be exploited to trick an application into parsing, which can crash the application or execute...
neukirchen.ooe.gv.at XSS vulnerability
Vulnerable URL: http://www.neukirchen.ooe.gv.at/system/web/suche.aspx?search="-confirmopenbugbounty-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...
haibach-donau.ooe.gv.at XSS vulnerability
Vulnerable URL: http://www.haibach-donau.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...
bluecms v1. 6 Sql Injection analysis-vulnerability warning-the black bar safety net
Long time no code audit, take a simple look feel. bluecms is a comparison of the old portal cms, online also has a lot about its vulnerability has not been patched, so the following vulnerability is also not really up to date, just when practicing hand. SQL injectionanalysis First look at the dat...
eClinicalWorks healow@work SQL Injection Vulnerability
eClinicalWorks healow@work is a product for healthcare applications from eClinicalWorks, Inc. that provides a set of platforms for physicians to share health records. An SQL injection vulnerability exists in the EmployeePortalServlet page in eClinicalWorks healow@work version 8.0 build 8. An...