5279 matches found
CVE-2019-17119
Multiple SQL injection vulnerabilities in Logs.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allow authenticated users to execute arbitrary SQL commands via the source or subString parameter...
Unmasking mystery boxes on ship’s bridges
We pen test a variety of vessel and platform types across different fleets and operators. In every single test to date we have unearthed a system or device, that of the few crew that were aware, no-one could tell us what it is was for. In other scenarios an undocumented system or device would be...
Introducing Serverless Computing at the Edge with Akamai EdgeWorkers
For the first time, Akamai is introducing an all-new serverless compute capability to help you customize web traffic, expanding the possibilities of personalized engagement with your customers while putting the flexibility and control in the hands of your developers. Developers can now manipulate...
Google Chrome OS CVE-2019-16508 Integer Overflow Vulnerability
Description Google Chrome OS is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed. Google Chrome OS versions prior to...
plan-b-software.eu Improper Access Control vulnerability
Open Bug Bounty ID: OBB-976258 Security Researcher ANS Helped patch 452 vulnerabilities Received 8 Coordinated Disclosure badges Received 31 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting plan-b-software.eu website and i...
Rockwell Automation/Allen-Bradley PanelView 5510 2715P-T10CD-B 10.4-in. Touch HMI Terminal
Binary data 765031.prm...
Rockwell Automation/Allen-Bradley PanelView 5510 2715P-T19CD-B 19-in. Touch with Keypad HMI Terminal
Binary data 765041.prm...
Rockwell Automation/Allen-Bradley PanelView 5510 2715P-T7WD-B 7-in. Touch HMI Terminal
Binary data 765027.prm...
Yokogawa Vnet/IP Open Communication Driver Denial-of-Service (ICSA-19-003-02)
Binary data 720286.prm...
Webmin 1.920 - Remote Code Execution
Webmin 1.920 - Remote Code Execution !/bin/sh CVE-2019-15107 Webmin Unauhenticated Remote Command Execution based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...
Webmin 1.920 - Remote Code Execution
!/bin/sh CVE-2019-15107 Webmin Unauhenticated Remote Command Execution based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html Alternative advisory spanish:...
ZZCMS website building system investment module b_zs parameter SQL injection vulnerability
ZZCMS with product investment type template, you can quickly build product investment website. ZZCMS website building system investment module bzs parameter SQL injection vulnerability, attackers can use the vulnerability to obtain database information...
Rockwell Automation Arena Simulation Software (Update B)
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Low skill level to exploit Vendor: Rockwell Automation Equipment: Arena Simulation Software --------- Begin Update B Part 1 of 2 --------- Vulnerabilities: Use After Free, Information Exposure, Type Confusion, Insufficient UI Warning of Dangerous...
b-locked.be Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-882928 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting b-locked.be website and its...
The vulnerability of the command-line interface of Cisco UCS Blade Series B software allows a hacker to write arbitrary files.
The vulnerability of the command-line interface of Cisco UCS Blade series B micro-programming system software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to write arbitrary files by modifying the command-line interface parameters...
Trint Ltd: IDOR to update folder name of other user
Summary There is an IDOR to update folder name of other user Steps To Reproduce: - user A login to the application and see the folder name F494331 - user B login to the application and call the API with the projectId of user A POST / HTTP/1.1 Host: graphql2.trint.com User-Agent: Mozilla/5.0 Windo...
Rockwell Automation/Allen-Bradley PanelView 5500 19 Touch Version B HMI Terminal
Binary data 751092.prm...
Rockwell Automation/Allen-Bradley PanelView 5500 9 Touch Version B HMI Terminal
Binary data 751086.prm...