bosch-do-it.com XSS vulnerability

Open Bug Bounty ID: OBB-493114 Description| Value ---|--- Affected Website:| bosch-do-it.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...

crazyforsuccess.purchasing.bosch.com XSS vulnerability

Open Bug Bounty ID: OBB-457640 Description| Value ---|--- Affected Website:| crazyforsuccess.purchasing.bosch.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP X...

bosch-career.com XSS vulnerability

Open Bug Bounty ID: OBB-288989 Description| Value ---|--- Affected Website:| bosch-career.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bosch-professional.com XSS vulnerability

Vulnerable URL: https://www.bosch-professional.com/boptbeusearchfrontend/de/de/search/search.htm?searchVal=asdasdasd=1%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput%20Style=position:fixed;top:0;left:0;font-size:999px%20/;%20Onmouseenter=confirm1%20//%3E==true Details: Description|...

On The Latest ShadowBrokers Dump, Microsoft, Oracle, and the Bosch OBD-II Dongle Hack

Mike Mimoso and Chris Brook discuss the news of the week, including last Friday’s ShadowBrokers dump, how Microsoft learned and patched the vulnerabilities, and the Solaris bugs patched by Oracle. Microsoft ditching passwords, and a new car dongle hack are also discussed. Download:...

Patched Flaw in Bosch Diagnostic Dongle Allowed Researchers to Shut Off Engine

Two vulnerabilities were identified in Bosch’s Drivelog Connect OBD-II dongle and smartphone app that allowed researchers to shut off the engine of a vehicle. One of the issues was patched via server-side fix, Bosch said in an April 13 statement, while the other in the dongle itself will be handl...

Bosch automotive Drivelog Connector dongle remote vulnerability analysis-vulnerability warning-the black bar safety net

In this article, we will be on the Argus research team at Bosch Drivelog Connect BOD-II adapter in the discovery of the vulnerability is discussed in detail. Note that this vulnerability would allow an attacker to by Drivelog platform to stop a running car engine. According to the Argus of the...

Bosch Toolbox - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bosch Toolbox published at the 'play' market has multiple vulnerabilities...

appcenter.bosch.com XSS vulnerability

Vulnerable URL: https://appcenter.bosch.com/ar/details?ppid=58plifecycle=0pstate=maximizedpmode=view&58strutsaction=%2Flogin%2Fforgotpassword&58formDate=1485461645513&58step=1&[email protected]&58captionTitle=Request%20Passworddkqq1%3Cscript%3Ealert1%3C%2fscript%3Ep3lkbn74jen...

auto-repair-ideas.bosch.com XSS vulnerability

Vulnerable URL:...

bosch.com XSS vulnerability

Open Bug Bounty ID: OBB-205698 Description| Value ---|--- Affected Website:| bosch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blog.bosch-si.com XSS vulnerability

Vulnerable URL: http://blog.bosch-si.com/categories?s=xss%3Cscript%3Ealert%27OPENBUGBOUNTY%27;%3C/script%3E& Details: Description| Value ---|--- Patched:| Yes, at 13.02.2017 Latest check for patch:| 13.02.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

computerwinkels.nl XSS vulnerability

Vulnerable URL: https://www.computerwinkels.nl/den-bosch/%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E/alles Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 623199 VIP website status...

Bosch BLADEcontrol wind turbine monitoring device SQL injection vulnerability

No description provided by source...

CVE-2016-4508

Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4508

Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4507

SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-4507

SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...