7774 matches found
PT-2019-18680
Name of the Vulnerable Software and Affected Versions Hotels Server versions through 2018-11-05 Description The issue concerns password storage protection in Hotels Server. It relies on base64 encoding, which is insufficient for secure password storage. Recommendations For versions through...
CVE-2019-7648: Inadequate Encryption Strength
controller/fetchpwd.php and controller/doAction.php in HotelsServer through 2018-11-05 rely on base64 in an attempt to protect password storage...
Design/Logic Flaw
An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/register/:email, where :email is a base64 encoded e-mail address, to receive confirmation as to whether a user account exists in the system with the specifie...
CVE-2018-15656
An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/register/:email, where :email is a base64 encoded e-mail address, to receive confirmation as to whether a user account exists in the system with the specifie...
BEWARD N100 H.264 VGA IP Camera M2.1.6 Cross Site Request Forgery
BEWARD N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Exploit Vendor: Beward R&D Co., Ltd Product web page: https://www.beward.net Affected version: M2.1.6.04C014 Summary: The N100 compact color IP camera with support for a more efficient compression format is optimized for low-speed networks,...
BEWARD N100 H.264 VGA IP Camera M2.1.6 - CSRF (Add Admin) Vulnerability
Exploit for hardware platform in category web applications BEWARD N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Exploit Vendor: Beward R&D Co., Ltd Product web page: https://www.beward.net Affected version: M2.1.6.04C014 Summary: The N100 compact color IP camera with support for a more efficient...
SpotAuditor 3.6.7 Denial Of Service
Exploit Title: SpotAuditor v3.6.7 - Denial of Service PoC Discovery by: Rafael Pedrero Discovery Date: 2019-01-30 Vendor Homepage: http://www.nsauditor.com/order.html Software Link : http://www.nsauditor.com/order.html Tested Version: v3.6.7 Tested on: Windows XP SP3 Vulnerability Type: Denial of...
SpotAuditor 3.6.7 - 'Base64 Encrypted Password' Denial of Service (PoC)
Exploit Title: SpotAuditor v3.6.7 - Denial of Service PoC Discovery by: Rafael Pedrero Discovery Date: 2019-01-30 Vendor Homepage: http://www.nsauditor.com/order.html Software Link : http://www.nsauditor.com/order.html Tested Version: v3.6.7 Tested on: Windows XP SP3 Vulnerability Type: Denial of...
SpotAuditor 3.6.7 - Base64 Encrypted Password Denial of Service (PoC)
SpotAuditor 3.6.7 - Base64 Encrypted Password Denial of Service PoC Exploit Title: SpotAuditor v3.6.7 - Denial of Service PoC Discovery by: Rafael Pedrero Discovery Date: 2019-01-30 Vendor Homepage: http://www.nsauditor.com/order.html Software Link : http://www.nsauditor.com/order.html Tested...
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
SCP Client - Multiple Vulnerabilities SSHtranger Things Exploit Title: SSHtranger Things Date: 2019-01-17 Exploit Author: Mark E. Haase Vendor Homepage: https://www.openssh.com/ Software Link: download link if available Version: OpenSSH 7.6p1 Tested on: Ubuntu 18.04.1 LTS CVE : CVE-2019-6111,...
PT-2019-1897
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.40 PHP versions 7.x prior to 7.1.26 PHP versions 7.2.x prior to 7.2.14 PHP versions 7.3.x prior to 7.3.1 Description The issue is related to the xmlrpc decode function in PHP, which contains an error that leads to...
Denial Of Service (DoS)
nss is vulnerable to denial of service DoS attacks. The vulnerability exists as Mozilla Network Security Services NSS before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service out-of-bounds write or...
Internet Bug Bounty: buffer overread in base64 code of the xmlrpc module
Malformed input to the xmlrpcdecode function can cause an out of bounds read in the base64 code. This is fixed in the latest updates of PHP 7.3.1 etc. Report: https://bugs.php.net/bug.php?id=77380 Impact If the attacker has access to the decoded output this may leak memory contents...
End of support for Office 2016 and Office 2019
None None...
Fedora 28 : nodejs-base64-url (2018-b64b73ae61)
Security fix for https://snyk.io/vuln/npm:base64url:20180511 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...
SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2015:0553-1)
OpenSSL was updated to fix various security issues. Following security issues were fixed : - CVE-2015-0209: A Use After Free following d2iECPrivatekey error was fixed which could lead to crashes for attacker supplied Elliptic Curve keys. This could be exploited over SSL connections with client...
GDB-Connector
GDB Connector is a remote script to use for controlling a remote target and debug an exploit on a target directly from Exploit Pack. Copy this script to your target and execute it to connect back to your framework. Shell Script created using Exploit Pack http://www.exploitpack.com -...
Base64 Decoder 1.1.2 - Local Buffer Overflow (SEH) Exploit
Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Base64 Decoder 1.1.2 - Local Buffer Overflow SEH Date: 12-20-18 Vulnerable Software: Base64 Decoder 1.1.2 Vendor Homepage: http://4mhz.de/b64dec.html Version: 1.1.2...
D-Link myDlink Baby App Information Disclosure Vulnerability
D-Link myDlink Baby App is an application from AUO D-Link for managing and controlling D-Link baby monitors. The information disclosure vulnerability in the D-Link myDlink Baby App version 2.04.06 arises from the fact that when an operation is performed using the app e.g., modifying the camera...
Base64 Decoder 1.1.2 SEH Local Buffer Overflow
!/usr/bin/env python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Base64 Decoder 1.1.2 - Local Buffer Overflow SEH Date: 12-20-18 Vulnerable Software: Base64 Decoder 1.1.2 Vendor Homepage: http://4mhz.de/b64dec.html Version: 1.1.2 Software Link:...