CVE-2019-14453

CVE-2019-14453 affects Comelit App lejos de casa (web) 2.8.0. A privilege-escalation flaw is triggered by modifications to domus and logged fields, related to js/bridge.min.js and login.json, enabling attackers to achieve installer/administrator level within the graphical interface (e.g., via a 1...

PT-2021-8976

Name of the Vulnerable Software and Affected Versions Comelit "App lejos de casa web" version 2.8.0 Description The issue allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. An attacker can achieve high privileges, such as installer or...

CVE-2019-14453: Improper Privilege Management

An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...

Comelit App lejos de casa 安全漏洞

Comelit App lejos de casa is a home automation application from the Spanish company Comelit. A security vulnerability in Comelit App lejos de casa 2.8.0 allows attackers to elevate privileges via modified domain and log fields associated with js/bridge.min.js and login.json...

casa-merlin.com Cross Site Scripting vulnerability OBB-1434884

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

blog.casa-andina.com Cross Site Scripting vulnerability OBB-1402785

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

casa-service.de Cross Site Scripting vulnerability OBB-1400891

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

mia-casa-immobilien.de Cross Site Scripting vulnerability OBB-1342130

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

casa-betulla.ch Cross Site Scripting vulnerability OBB-1315706

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

casa.sapo.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-1159183 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

casa-pizza.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1071016 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting casa-pizza.com website and its users. Following coordinated...

casa-di-cura.eu XSS vulnerability

Open Bug Bounty ID: OBB-710681 Description| Value ---|--- Affected Website:| casa-di-cura.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

casa-diroma.fr XSS vulnerability

Open Bug Bounty ID: OBB-659029 Description| Value ---|--- Affected Website:| casa-diroma.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

chicago.casasdeventa.casa XSS vulnerability

Open Bug Bounty ID: OBB-584379 Description| Value ---|--- Affected Website:| chicago.casasdeventa.casa Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

deandar.com XSS vulnerability

Vulnerable URL: https://deandar.com/casa/buscar?cx=002923311741711675260:ush3gy5bwus=FORID:9="=UTF-8=deandar.com/ferratas/via-ferrata-grau-jou=www.google.com.mx/= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:|...

gite-dieppe-casa-serena.fr XSS vulnerability

Vulnerable URL: http://www.gite-dieppe-casa-serena.fr//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Novell CASA PAM Module Stack Buffer Overflow - Ver2 (CVE-2006-0736)

A buffer overflow vulnerability has been reported in Novell's CASA. The vulnerability is due to a boundary error in the CASA PAM handler 'pammicasa' authentication module. A remote attacker can exploit this vulnerability by gaining root access to any machine with CASA installed...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CASA package for the SUSE Linux Enterprise operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Casa Presidencial website defaced by Latinhack

Casa Presidencial website defaced by Latinhack The Casa Presidencial website was in temporary control of hackers on Sunday. The minister explained that the hack was noticed while doing a backup of the site. The cyber-attack was attributed to a group called Latinhack, whose members have perpetrate...

Unfixed XSS vulnerability at www.uwe.prospects.ac.uk

Security researcher Uber0n, has submitted on 08/05/2008 a cross-site-scripting XSS vulnerability affecting www.uwe.prospects.ac.uk, which at the time of submission ranked 18329 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is...