CVE-2017-7726: Improper Certificate Validation

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability...

PT-2017-17912

Name of the Vulnerable Software and Affected Versions iSmartAlarm cube devices affected versions not specified Description The issue is related to incorrect cryptography, leading to authentication bypass. This allows for the remote execution of commands, such as setting the alarm on or off...

PT-2017-17913

Name of the Vulnerable Software and Affected Versions iSmartAlarm cube devices affected versions not specified Description The issue is related to Incorrect Access Control. A "new key" is transmitted in cleartext, which can lead to unauthorized access. Recommendations At the moment, there is no...

PT-2017-17914

Name of the Vulnerable Software and Affected Versions iSmartAlarm cube devices affected versions not specified Description The issue allows for Denial of Service. By sending a SYN flood on port 12345, the "cube" can be frozen, causing it to stop responding. Recommendations At the moment, there is...

PT-2017-17910

Name of the Vulnerable Software and Affected Versions iSmartAlarm cube devices affected versions not specified Description The issue is related to an SSL Certificate Validation Vulnerability. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2017-7730: Improper Input Validation

iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding...

CVE-2017-2185

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI...

CVE-2017-2186

HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI...

HOME SPOT CUBE2 vulnerable to buffer overflow in WebUI

Overview HOME SPOT CUBE2 provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE2 contains buffer overflow in WebUI. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...

cube.anker.eu XSS vulnerability

Vulnerable URL: https://cube.anker.eu/de Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check cube.anker.eu SSL connection:| Grade:...

CVE-2017-2117

Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors...

CVE-2017-2090

Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...

CVE-2017-2098

Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...

emobility cube - BSD license, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application emobility cube published at the 'play' market has multiple vulnerabilities...

cube-display.fr XSS vulnerability

Vulnerable URL: http://www.cube-display.fr/index.php?lg=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1976512 VIP website status:| No Check...

le-cube-immo.com XSS vulnerability

Vulnerable URL: http://www.le-cube-immo.com/rechercher.php?codeloc=f%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3Er Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type...

Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change

!/bin/sh Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change HW version: LIS001A Application FW: 2.34 Metrology FW: 2.10 Modem FW: 12.00.005 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous...

Acoem 01dB CUBE/DUO Smart Noise Monitor - Password Change

!/bin/sh Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change HW version: LIS001A Application FW: 2.34 Metrology FW: 2.10 Modem FW: 12.00.005 / 08.01.108 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...

Cube Escape: Theatre - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Cube Escape: Theatre published at the 'play' market has multiple vulnerabilities...

EC-CUBE Server-Side Request Forgery Vulnerability

LOCKON EC-CUBE is an open source e-commerce website building platform developed by LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. A server-side request forgery vulnerability exists in EC-CUBE version 2.12.6en-p1, which can be exploited by remote attacke...