PT-2023-15160 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a buffer overflow in the gf vvc read pps bs internal function, located in the media tools/av parsers.c file. Recommendations: For GPAC MP4box version...

PT-2023-15455 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev644-g5c4df2a67 Description: The issue is related to a Buffer Overflow in the gf bs read data function. No information is provided about the estimated number of potentially affected devices worldwide or real-worl...

open build service information disclosure vulnerability

The open build service is a general-purpose system for building and distributing packages from source code in an automated, consistent and repeatable manner. A security vulnerability exists in the bsworker code in versions of open build service prior to 20170320. An attacker can exploit the...

PT-2017-15094

Name of the Vulnerable Software and Affected Versions Hoermann BiSecur devices versions prior to 2018 Hoermann Hand Transmitter HS5-868-BS version prior to 2018 Hoermann Hand Transmitter HSE1-868-BS version prior to 2018 Hoermann Hand Transmitter HSE2-868-BS version prior to 2018 Description A...

CVE-2017-17910: Use of Insufficiently Random Values

On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The intercepti...

Verkehr-BS - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Verkehr-BS published at the 'play' market has multiple vulnerabilities...

bs-ffb.de XSS vulnerability

Vulnerable URL: http://www.bs-ffb.de/index.php?option=comcontact=contact=338:cornelia-dinter=38:kollegium? Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Sql injection

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

CVE-2014-4197

CVE-2014-4197 describes multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9. The affected component is the BS-Client, with vulnerable input paths via the CARDS and XACTION parameters, enabling remote attackers to execute arbitrary SQL commands. The CVSSv2 vector...

PT-2014-5730

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client version 3.17.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the CARDS or XACTION parameter. Recommendations For Bank Soft Systems BSS RBS BS-Client...

CVE-2014-4197: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

PT-2014-6162

Name of the Vulnerable Software and Affected Versions Blogstand Banner plugin version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the bs blog id parameter to "wp-admin/options-general.php". Recommendations For Blogstand Banne...

Bs Scripts_Directory SQL Injection/Auth Bypass Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...

BS Auction <= SQL Injection Vulnerability Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : BS Auction = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auction +Price : $24.95 +Language :PHP +Exploi...

BS Scripts Directory (info.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: BS Script Directory remote SQL injection vulnerability Date: 15th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 24.95 $ Software Link:http://www.brotherscripts.com/productinfo.php?productsid=454 Greetz to :b0nd,...

CVE-2010-4969

CVE-2010-4969 refers to a SQL injection in articlesdetails.php of BrotherScripts (BS) Business Directory. The underlying flaw allows remote attackers to inject arbitrary SQL via the id parameter, potentially compromising data confidentiality and integrity. The NVD metrics indicate a CVSS v2 base ...

PT-2011-1904

Name of the Vulnerable Software and Affected Versions BrotherScripts BS Business Directory affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "articlesdetails.php" file. Recommendations At t...

CVE-2010-4969: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in articlesdetails.php in BrotherScripts BS Business Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

BS Player 2.56 DLL Hijacking Exploit

/ Description: BS Player 2.56 vulnerable for another DLL Preloading on ehtrace.dll while loading .mp3 content. Date: August 29, 2010 Author: Classity Security Scans PoC: Displaying message box, but can be replaced by DLL with arbitrary payload. / include define DllExport declspec dllexport BOOL...

CVE-2010-2906

CVE-2010-2906 affects ScriptsFeed and BrotherScripts (BS) Scripts Directory: SQL injection in articlesdetails.php via the id parameter, allowing remote execution of arbitrary SQL commands. This is a separate vector from CVE-2010-2905 (info.php). Documented impact is partial confidentiality/integr...