CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

CVE-2020-12246

Beeline Smart Box 2.0.38 is affected by CVE-2020-12246, a OS command injection in the Diagnostics page (Advanced settings > Other > Diagnostics) via the Ping (ping_ipaddr), Nslookup (nslookup_ipaddr), and Traceroute (traceroute_ipaddr) parameters. Public sources in the connected set (NVD, R...

PT-2020-13070

Name of the Vulnerable Software and Affected Versions Beeline Smart Box version 2.0.38 Description The issue allows OS command injection via the "Advanced settings Other Diagnostics" feature. Specifically, it affects the ping ipaddr parameter in the Ping function, the nslookup ipaddr parameter in...

CVE-2020-12246: Improper Neutralization of Special Elements used in an OS Command

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

VK.com: [0.vk.com] Reflected XSS на странице подтверждения.

XSS в старых версиях IE на мобильной версии сайта, доступной некоторым операторам. Reflected XSS на поддомене 0.vk.com. only IE\MTS\Beeline...

CVE-2016-6564 Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges

Android devices with code from Ragentek contain a privileged binary that performs over-the-air OTA update checks. Additionally, there are multiple techniques used to hide the execution of this binary. This behavior could be described as a rootkit. This binary, which resides as /system/bin/debugs,...

beeline-i.com XSS vulnerability

Vulnerable URL: http://beeline-i.com/scripts/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5869794 VIP website status:| No Coordinated Disclosure Timeline: Description|...

beeline.com XSS vulnerability

Vulnerable URL: https://www.beeline.com/?tag=analyst-reporttype=resourcesname=case-studies=asd Details: Description| Value ---|--- Patched:| Yes, at 04.12.2017 Latest check for patch:| 04.12.2017 13:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 71730 VIP...

identity.beeline.ru XSS vulnerability

Vulnerable URL: https://identity.beeline.ru/identity/LoadProtectedResource?redirectUrl=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at 19.10.2017 Latest check for patch:| 19.10.2017 06:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

beeline.ru XSS vulnerability

Vulnerable URL: http://www.beeline.ru/media/banners/486-200bannerMac.swf?url=javascript:alert'XSSPOSED'=self Details: Description| Value ---|--- Patched:| Yes, at 18.10.2017 Latest check for patch:| 18.10.2017 12:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Dangerous Rootkit found Pre-Installed on nearly 3 Million Android Phones

Here's some bad news for Android users again. Nearly 3 Million Android devices worldwide are vulnerable to man-in-the-middle MITM attacks that could allow attackers to remotely execute arbitrary code with root privileges, turning over full control of the devices to hackers. According to a new...

a.beeline.ru Open Redirect vulnerability

Vulnerable URL: http://a.beeline.ru/a?p=166=1593=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 19.10.2017 Latest check for patch:| 19.10.2017 06:49 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

a.beeline.ru Open Redirect vulnerability

Vulnerable URL: http://a.beeline.ru/a?p=166=1455=https://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 19.10.2017 Latest check for patch:| 19.10.2017 06:46 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...