CVE-2016-4495

CVE-2016-4495 affects KMC Controls BAC-5051E routers with firmware prior to E0.2.0.2. The issue allows remote attackers to bypass access restrictions and read a configuration file via unspecified vectors. NVD/NIST records a CVSS v3 base score of 5.3 (Network, low complexity, no privileges require...

Angle Casino-Holdem&Slot&Bac - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Angle Casino-Holdem&Slot&Bac published at the 'play' market has multiple vulnerabilities...

KMC Controls Conquest BACnet Router Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on May 5, 2016, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified authentication and cross-site request forgery CSRF vulnerabilities in KMC Controls’ Conquest...

Nokia N97 m3u Playlist Crash PoC

No description provided by source. !/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested on...

Cisco Broadcast Access Center for Telco and Wireless Cross-Site Scripting Vulnerability

A vulnerability in the web framework of the Cisco Broadcast Access Center for Telco and Wireless BAC-TW could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the Cisco BAC-TW web interface. The vulnerability is due to insufficient input...

Cisco Broadcast Access Center for Telco and Wireless Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework of the Cisco Broadcast Access Center for Telco and Wireless BAC-TW could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack against the Cisco BAC-TW web interface. The vulnerability is due to insufficient CSRF...

CVE-2014-2190

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and CSCuo26389...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and CSCuo26389...

CVE-2014-2191

The CVE-2014-2191 entry affects Cisco’s Broadcast Access Center for Telco and Wireless (BAC-TW). It is a Cross-Site Scripting (XSS) vulnerability in the BAC-TW web framework caused by insufficient input validation of a parameter, enabling an unauthenticated, remote attacker to inject arbitrary sc...

CVE-2014-2190

Cisco BAC-TW’s web framework suffers a CSRF vulnerability where an unauthenticated attacker can trick an authenticated user into performing changes on the BAC-TW interface. The issue stems from insufficient CSRF protections, enabling cross-site requests that may modify BAC-TW settings. Cisco’s ad...

CVE-2014-2191

Cross-site scripting XSS vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Business Availability Center BAC 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

HP Business Availability Center BAC 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors...

CVE-2012-3255

HP BAC 8.07 on Windows/Solaris is affected by CVE-2012-3255 (XSS) which allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue is documented in HP security bulletin HPSBMU02811 and is associated with CVSS v2 base score 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N). HP provi...

CVE-2012-3257

HP BAC 8.07 (Windows and Solaris) is affected by CVE-2012-3257. The HP security bulletin documents cross-site scripting (XSS), cross-site request forgery (CSRF), and web session hijacking as potential issues that could be remotely exploited by authenticated users. Patches are provided for BAC v8....

CVE-2012-3256

CVE-2012-3256 is a CSRF vulnerability in HP Business Availability Center (BAC) v8.07 . The issue could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Affected product/version: HP BAC 8.07 on Windows and Solaris. Underlying cause is CSRF in the BAC ...

[security bulletin] HPSBMU02749 SSRT100793 rev.1 - HP Business Availability Center (BAC) Running on Windows, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03242623 Version: 1 HPSBMU02749 SSRT100793 rev.1 - HP Business Availability Center BAC Running on Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Business Availability Center BAC 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0132

HP BAC 9.01 on Windows is affected by a remote Cross-Site Scripting (XSS) vulnerability (CVE-2012-0132). The HP Security Bulletin HPSBMU02749 rev.1 notes that the vulnerability could be exploited remotely to run arbitrary script/HTML and provides the mitigation BAC_00772 as the patch. CVSSv2 base...