116 matches found
Code Execution Vulnerability in ETA CMS (CNVD-2020-26408)
ETA CMS is a simple, practical and efficient website builder. A code execution vulnerability exists in EDA CMS, which can be exploited by an attacker to gain control of a web server...
Logic Flaw Vulnerability in ETA CMS (CNVD-2020-26403)
ETA CMS is a simple, practical and efficient website builder. A logical flaw exists in EDA CMS, which can be exploited by an attacker to rename arbitrary files to gain control of the web server...
Arbitrary File Deletion Vulnerability in ETA CMS (CNVD-2020-26406)
ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete configuration files...
Arbitrary File Deletion Vulnerability in ETA CMS (CNVD-2020-26404)
ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete configuration files...
Logic Flaw Vulnerability in ETA CMS
ETA CMS is a simple, practical and efficient website builder. A logic flaw vulnerability exists in ETA CMS, which can be exploited by an attacker to modify the administrator password...
Cisco IOS XE ETA Denial of Service Vulnerability
Cisco IOS XE is a modular operating system based on the Linux kernel. A denial of service vulnerability exists in the Cisco Encrypted Traffic Analysis ETA feature of Cisco IOS XE, which arises from a logic error in the program when processing malformed incoming packets, and can be exploited by a...
CVE-2019-1741
CVE-2019-1741 affects Cisco IOS XE Software ETA (Encrypted Traffic Analytics). The flaw is a logic error in handling malformed incoming IP packets that can lead to access to a freed internal data structure, enabling an unauthenticated, remote attacker to cause a device reload and a DoS. Exploitat...
canada-visa-eta.com XSS vulnerability
Open Bug Bounty ID: OBB-667353 Description| Value ---|--- Affected Website:| canada-visa-eta.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
canada-visa-eta.com XSS vulnerability
Open Bug Bounty ID: OBB-593409 Description| Value ---|--- Affected Website:| canada-visa-eta.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
pkapp.pka.gov.my IFRAME Injection vulnerability
Open Bug Bounty ID: OBB-544194 Description| Value ---|--- Affected Website:| pkapp.pka.gov.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-7326
The ETA Mobile aka com.en2grate.etamobile application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The ETA Mobile aka com.en2grate.etamobile application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7326
The CVE-2014-7326 entry concerns ETA Mobile (com.en2grate.etamobile) Android app 1.6.6, which does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources in the Connected documents conf...
CVE-2014-7326
The ETA Mobile aka com.en2grate.etamobile application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7905
Name of the Vulnerable Software and Affected Versions ETA Mobile aka com.en2grate.etamobile version 1.6.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...
CVE-2014-7326: Undefined Security Weakness
The ETA Mobile aka com.en2grate.etamobile application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...