CVE-2016-8357: Undefined Security Weakness

An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attacker with read-only access to make changes within the application...

PT-2017-9638

Name of the Vulnerable Software and Affected Versions Lynxspring JENEsys BAS Bridge versions 1.1.8 and older Description An issue was discovered in the application where it uses a hard-coded username with no password, allowing an attacker to access the system without authentication. Recommendatio...

PT-2017-9649

Name of the Vulnerable Software and Affected Versions Lynxspring JENEsys BAS Bridge versions 1.1.8 and older Description The application's database lacks sufficient safeguards for protecting credentials. Recommendations For versions 1.1.8 and older, consider implementing additional security...

PT-2017-9643

Name of the Vulnerable Software and Affected Versions Lynxspring JENEsys BAS Bridge versions 1.1.8 and older Description An issue was discovered where the application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which is related to...

PT-2017-9635

Name of the Vulnerable Software and Affected Versions Lynxspring JENEsys BAS Bridge versions 1.1.8 and older Description A user with read-only access can send commands to the software, and the application will accept those commands, allowing an attacker to make changes within the application...

Lynxspring JENEsys BAS Bridge Security Bypass Vulnerability

Lynxspring is a US based company.BAS Bridge is a web based SCADA system.BAS servers are deployed in areas such as commercial facilities, manufacturing, energy, water and wastewater systems and many more. A security bypass vulnerability exists in Lynxspring JENEsys BAS Bridge. An attacker can...

Lynxspring JENEsys BAS Bridge Cross-Site Request Forgery Vulnerability

Lynxspring is a US based company.BAS Bridge is a web based SCADA system.BAS servers are deployed in areas such as commercial facilities, manufacturing, energy, water and wastewater systems and many more. A cross-site request forgery vulnerability exists in Lynxspring JENEsys BAS Bridge. Due to th...

Lynxspring JENEsys BAS Bridge Elevation of Privilege Vulnerability

Lynxspring is a US based company.BAS Bridge is a web based SCADA system.BAS servers are deployed in areas such as commercial facilities, manufacturing, energy, water and wastewater systems and many more. An elevation of privilege vulnerability exists in Lynxspring JENEsys BAS Bridge. An attacker...

bas-rhin.gouv.fr XSS vulnerability

Vulnerable URL: http://www.bas-rhin.gouv.fr/Outils/Glossaire/namefilter/Y%22%3E%3Cmarquee%20onstart=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Tracer™ BAS Operator Suite - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tracer™ BAS Operator Suite published at the 'play' market has multiple vulnerabilities...

Hologram Guitar 3D Bas - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hologram Guitar 3D Bas published at the 'play' market has multiple vulnerabilities...

B.A.S C2Box Security Bypass Vulnerability

B.A.S C2Box is a financial management solution for managing domestic and cross-border payment processes from B.A.S France. A security vulnerability exists in B.A.S C2Box 4.0.0 r19171 and prior versions, which stems from a failure to protect server-side code when performing authentication on the...

bas-huep.aphp.fr. XSS vulnerability

Open Bug Bounty ID: OBB-86781 Description| Value ---|--- Affected Website:| bas-huep.aphp.fr. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2015-0490

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component...

CVE-2015-0490

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component...

PT-2015-4667

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 6.1.3.0 Description The issue affects confidentiality and integrity, and it can be exploited by remote authenticated users through vectors related to the BAS - Base Component in the Oracle Agile...

CVE-2015-0490: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component...

HIMSS Privacy & Security Forum – West 2014 Wrap-Up

The first HIMSS Privacy & Security Forum in the western U.S. proved to be a success and was attended by over 300 people including attendees CEs and BAs, speakers, exhibitors, and partners. We reconnected with several clients and met new friends at our booth, which was located right in the middle ...

[Full-disclosure] [SECURITY] [DSA 1725-1] New websvn packages fix information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1725-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 15, 2009 http://www.debian.org/security/faq -...