7650 matches found
UBUNTU-CVE-2016-8622
The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...
iTrack Easy Authentication Mechanism Bypass Vulnerability
The iTrack Easy is a versatile Bluetooth device. The iTrack Easy fails to implement an authentication mechanism, which can be exploited by a remote attacker to modify the GPS data of a lost device using the 'parametercmd:setothergps' function...
iTrack Easy Man-in-the-Middle Attack Vulnerability
iTrack Easy is a multifunctional Bluetooth device. The device supports connecting with apps on your smartphone to find lost or misplaced things and more. A security vulnerability exists in iTrack Easy. An attacker could exploit this vulnerability to conduct a man-in-the-middle attack...
iTrack Easy Plaintext Password Acquisition Vulnerability
The iTrack Easy is a versatile Bluetooth device. The iTrack Easy uses base64 encoding to store account passwords. A remote attacker could use this vulnerability to submit a special request to obtain passwords in plaintext...
iTrack Easy Device Tracking Vulnerability
The iTrack Easy is a versatile Bluetooth device. The iTrack EasyMAC/device ID can be registered for use by multiple users, allowing a remote attacker to exploit the vulnerability by submitting a special request to access getgps GPS data to track the device...
iTrack Easy contains multiple vulnerabilities
Overview iTrack Easy contains multiple vulnerabilities including sensitive information exposure and missing authentication. Description CWE-200: Information Exposure - CVE-2016-6542The iTrack device tracking ID number is the device's BLE MAC address. It can be obtained by being in range of the...
easy-gliss.com XSS vulnerability
Vulnerable URL: http://www.easy-gliss.com/produits.php?rech=%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 19:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...
Detect It Easy Handles PE File Memory Corruption Vulnerability
Detect it Easy is a multifunctional PE-DIY tool mainly used for shell detection. Supports direct drag and drop of files, which can be added to the right-click menu. Detect it Easy has a memory corruption vulnerability in the processing of pe files, constructing malformed pe files can cause the...
CAEN RFID Easy Controller - External URLs, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application CAEN RFID Easy Controller published at the 'play' market has multiple vulnerabilities...
SQL Injection Vulnerability in Boardid Parameter of Movil Web Campus System
Dynamic easy network campus system is based on the actual application needs of customers in the education industry Dynamic easy to provide a complete set of school website application solutions, set "home-school interaction, knowledge sharing, teaching aids," in one, to assist the school website ...
D.R. Software Easy CD-DA Recorder PLS Buffer Overflow (CVE-2010-2343)
A buffer overflow vulnerability has been reported in Easy CD-DA Recorder. The vulnerability is due to an overlong string in a playlist entry. Successfully exploatetion of this issue may allow remote attackers to execute arbitrary code in the context of the application...
SQL Injection Vulnerability in ID Parameters of Dynamic Easy Network Campus System
Dynamic easy network campus system is based on the actual application needs of customers in the education industry Dynamic easy to provide a complete set of school website application solutions, set "home-school interaction, knowledge sharing, teaching aids," in one, to assist the school website ...
Weak Password Vulnerability in Dynamic Web Management System
Dynamic easy website management system is a series of independent research and development by the Foshan City, dynamic easy network technology limited company of the series of website management software products, for different industries to provide customers with reliable website construction...
Easy FTP Server APPE Remote Code Execution Vulnerability
Easy FTP Server is a free green software that does not require installation and is prohibited for commercial use Supports multiple users, multiple permissions, multiple directories, supports web access, supports Windows system service mode. Easy FTP Server has a security vulnerability. Due to the...
Easy FTP Server 1.7.0.11 APPE remote code execution vulnerability
No description provided by source. !/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team Easy FTP server remote exploit DATE 03/03/2012 DESCRIPTION Easy FTP Server - "APPE" command buffer overflow - remote exploit...
Manalyze - A static analyzer for PE executables
Manalyzer is a free service which performs static analysis on PE executables to detect undesirable behavior. A static analyzer for PE files Manalyze was written in C++ for Windows and Linux and is released under the terms of the GPLv3 license . It is a robust parser for PE files with a flexible...
Easy File Sharing Web Server GET HTTP request vulnerability
Added: 08/11/2016 Background Easy File Sharing Web Server is software that allows users to upload/download files to a server easily through a web browser, as well as providing a bulletin board system forum. Problem Easy File Sharing Web Server is vulnerable to a stack buffer overflow condition as...
curl: multiple issues
CVE-2016-5419 authentication bypass libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established...
WordPress Events Made Easy Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Events Made Easy WordPress plugin ------------------------------------------------------------------------ Job Diesveld, July 2016...
