cybersec-hw2

cybersec-hw2 Homework 2 for Introduction to Computer Securi...

ebc-brakes.de Cross Site Scripting vulnerability OBB-3886648

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ebc-leibersperger.de Improper Access Control vulnerability OBB-3816556

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ebcbrakeshop.co.uk Cross Site Scripting vulnerability OBB-3505034

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ebc-brakes.de Cross Site Scripting vulnerability OBB-3437817

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ebc-brakes.de Cross Site Scripting vulnerability OBB-2384927

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Geutebruck instantrec Remote Command Execution Exploit

This Metasploit module exploits a buffer overflow within the 'action' parameter of the /uapi-cgi/instantrec.cgi page of Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and EWPC-22xx devices running firmware versions equal to 1.12.0.27 as well as firmware versions 1.12.13.2 and...

Geutebruck Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Geutebruck Multiple Remote Command Execution', 'Description' = %q This module bypasses the HTTP basic authentication used to access the /uapi-cgi...

多款Geutebrück产品操作系统命令注入漏洞

Geutebrück G-Code EEC-2xxx and so on are products of Geutebrück Germany.Geutebrück G-Code EEC-2xxx is an analog video encoder module.Geutebrück G-Cam EBC-21xx is an EBC-21xx series network camera. The Geutebrück G-Cam EFD-22xx is an EFD-22xx series network camera. An operating system command...

多款Geutebrück产品操作系统命令注入漏洞

Geutebrück G-Code EEC-2xxx and so on are products of Geutebrück Germany.Geutebrück G-Code EEC-2xxx is an analog video encoder module.Geutebrück G-Cam EBC-21xx is an EBC-21xx series network camera. The Geutebrück G-Cam EFD-22xx is an EFD-22xx series network camera. An operating system command...

多款Geutebrück产品操作系统命令注入漏洞

Geutebrück G-Code EEC-2xxx and so on are products of Geutebrück Germany.Geutebrück G-Code EEC-2xxx is an analog video encoder module.Geutebrück G-Cam EBC-21xx is an EBC-21xx series network camera. The Geutebrück G-Cam EFD-22xx is an EFD-22xx series network camera. An operating system command...

多款Geutebrück产品操作系统命令注入漏洞

Geutebrück G-Code EEC-2xxx and so on are products of Geutebrück Germany.Geutebrück G-Code EEC-2xxx is an analog video encoder module.Geutebrück G-Cam EBC-21xx is an EBC-21xx series network camera. The Geutebrück G-Cam EFD-22xx is an EFD-22xx series network camera. An operating system command...

Geutebruck testaction.cgi Remote Command Execution Exploit

This Metasploit module exploits an authenticated arbitrary command execution vulnerability within the 'server' GET parameter of the /uapi-cgi/testaction.cgi page of Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and EWPC-22xx devices running firmware versions 'Geutebruck...

CVE-2019-10958

Geutebruck IP Cameras G-Code (EEC-2xxx) and G-Cam (EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx) are affected by CVE-2019-10958. All versions up to 1.12.0.25 may allow a remote authenticated attacker with network configuration access to supply system commands to the server, leading to remote code execut...

CVE-2019-10957

CVE-2019-10957 affects Geutebrück G-Code (EEC-2xxx) and G-Cam (EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx) where all versions up to 1.12.0.25 are vulnerable. The issue is an improper neutralization of input during web page generation (cross-site scripting) that allows a remote authenticated attacker w...

PcwRunAs 0.4 Password Obfuscation Design Flaw

Vuln Title: PcwRunAs Password Obfuscation Design Flaw Date: 26.03.2012 Author: Christian Landström, otr Software Link: http://www.pcwelt.de/downloads/pcwRunAs-1215998.html Version: = 0.4 Tested on: Windows CVE : CVE-2012-1793 Risk: high Type: Privilege Escalation Vendor: PC-Welt Timeline:...