CVE-2023-41442

CVE-2023-41442 affects Kloudq Technologies Limited Tor Equip 1.0 and Tor Loco Mini 1.0–3.1, where a crafted request to the MQTT component allows a remote attacker to execute arbitrary code. Public documentation consistently describes an MQTT-related vulnerability arising in these devices, with a ...

Tor Equip Security Vulnerability

Tor Equip is Tor's gateway for monitoring chillers, gensets and compressors. A security vulnerability exists in Tor Equip version 1.0, Tor Loco Mini versions 1.0 through 3.1, which originated from a vulnerability that could allow a remote attacker to execute arbitrary code via a crafted request t...

PT-2023-27945 · Kloudq Technologies Limited · Tor Loco Mini +1

Name of the Vulnerable Software and Affected Versions: Kloudq Technologies Limited Tor Equip version 1.0 Kloudq Technologies Limited Tor Loco Mini versions 1.0 through 3.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted request to the "MQTT component"...

Multiple Honeywell Products Input Validation Error Vulnerability

Honeywell equIP H4L2GR1 and so on are an IP camera from Honeywell USA. An input validation error vulnerability exists in multiple Honeywell products, which can be exploited by an attacker to cause a denial of service with a specially crafted HTTP packet request...

Honeywell equIP Series, Performance Series IP Cameras and Recorders Authentication Bypass Vulnerability

Honeywell equIP and so on are the products of the American Honeywell Honeywell company.Honeywell equIP is an equIP series IP camera products.Honeywell Performance is a Performance series IP camera products.Honeywell Honeywell equIP is an equIP series IP camera. Honeywell Performance is a...

CVE-2019-18226

CVE-2019-18226 affects Honeywell equIP series and Performance series IP cameras and Recorders. The root cause is an authentication bypass via capture-replay, retained for legacy compatibility, enabling unauthenticated access and potential playback attacks (per CVSS v3 base 7.5). Public disclosure...

CVE-2019-18230

The CVE-2019-18230 entry affects Honeywell equIP and Performance series IP cameras. Root cause: Missing Authentication for Critical Function (CWE-306) leading to unauthenticated access to audio streams over HTTP. Affected products/versions are Honeywell equIP and Performance series cameras; CVSS ...

CVE-2019-18228

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service...

CVE-2019-18228

The CVE-2019-18228 entry concerns Honeywell equIP series IP cameras. Affected products are multiple equIP series cameras; root cause is improper input validation on HTTP requests, where a specially crafted HTTP packet can cause denial of service. The vulnerability is documented with CVSS v3 base ...

Honeywell equIP Series and Performance Series IP Camera Access Control Error Vulnerability

Honeywell equIP H4L2GR1 and so on are an IP camera from Honeywell USA. An access control error vulnerability exists in the Honeywell equIP Series and Performance Series IP cameras, which can be exploited by an attacker to gain unauthorized access...

Honeywell equIP Series IP Cameras

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Honeywell Equipment: equIP series IP cameras Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could result in denial-of-service conditions...

Honeywell equIP Series IP Cameras CVE-2019-18228 Denial of Service Vulnerability

Description Honeywell equIP Series IP Cameras is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service conditions. Technologies Affected Honeywell H3W2GR1 Honeywell H3W2GR2 Honeywell H3W4GR1 Honeywell H4L2GR1 Honeywell H4W2GR1 Honeywell...

equip-garage.fr XSS vulnerability

Open Bug Bounty ID: OBB-682028 Description| Value ---|--- Affected Website:| equip-garage.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

equip-interim.be XSS vulnerability

Open Bug Bounty ID: OBB-627783 Description| Value ---|--- Affected Website:| equip-interim.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

equip-habitat.com XSS vulnerability

Vulnerable URL: http://www.equip-habitat.com/recherche.htm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6276319 VIP website status:| No Check equip-habitat.com SSL connection:|...

equip-bid.com XSS vulnerability

Open Bug Bounty ID: OBB-247545 Description| Value ---|--- Affected Website:| equip-bid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

equip-bid.com XSS vulnerability

Open Bug Bounty ID: OBB-246964 Description| Value ---|--- Affected Website:| equip-bid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sql injection

SQL injection vulnerability in the Club Manager comclubmanager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cmid parameter in an equip presenta action to index.php...