214 matches found
Logic Flaw Vulnerability at Workbot Forgot Password
Work treasure is a mobile collaborative office platform for enterprises developed by Guangdong Jiamei Technology Co. There is a logic flaw vulnerability in WorkPower's forgotten password, which can be exploited by an attacker to reset any user's password and obtain sensitive information...
Logic flaw vulnerability in Ruoyi's backend management system
Ruoyi backend management system is based on SpringBoot2.0 rights management system . A logic flaw vulnerability exists in the Ruoyi Backend Management System. An attacker can view the source code to obtain a username and password to log in to the backend...
Logic Flaw Vulnerability in RG-SAM Campus Network Self-Service System
Ruijie RG-SAM authentication and billing management system not only supports the high integration of software and hardware to form a highly available solution, but also adds value-added profit and other functions to provide users with a win-win cooperation solution with a flexible mode of...
WPZD-163(II) Distribution Grid Integration Measurement and Control Terminal has Logic Flaw Vulnerability
Xuji Group Co., Ltd. is a high-tech modern industrial group specializing in electric power, automation and intelligent manufacturing. WPZD-163II Power Distribution Grid Integration Measurement and Control Terminal suffers from a logic flaw vulnerability that can be exploited by attackers to...
Smart Bluetooth door locks are vulnerable to logic flaws
Beijing Xiyou Information Technology Co., Ltd. is a company that provides online operation and management platform and offline intelligent service solutions for spaces, parks and commercial buildings. A logic flaw vulnerability exists in smart Bluetooth door locks, which can be exploited by...
Interactive Advertising Bureau OpenRTB Design Flaw Vulnerability
Interactive Advertising Bureau IAB OpenRTB is an open source real-time bidding system advertising industry. A security vulnerability exists in the implementation of the protocol in IAB OpenRTB version 2.3. A remote attacker could exploit the vulnerability to cancel the status of an advertisement...
Logic Flaw Vulnerability in Maipu MPSec VPN Series Security Gateway
Mapletree Technology Co., Ltd. is a mainstream network and industry application solution provider in China. A logic flaw vulnerability exists in the Maipu MPSec VPN series security gateway. An attacker can exploit this vulnerability to achieve arbitrary administrator login...
Logic Flaw Vulnerability in Cicada Knowledge Portal System
Cicada Knowledge Portal System chanzhiEPS is an open source and free enterprise portal system. It is built-in article publishing , member management , forum comments , product display , online sales , customer service tracking and other functions . Cicada Knowledge Portal System has a logic flaw...
TomatoCart with PayPal Express Checkout design flaw vulnerability
Overview TomatoCart 1.1.7 with PayPal Express Checkout, and possibly other versions, contains a design flaw that may allow an attacker to purchase items for free or less than advertised. Description It has been reported that TomatoCart 1.1.7 using the PayPal Express Checkout module in sandbox mod...
XYCMS law firm built Station system V1. 0 multi-flaw-vulnerability warning-the black bar safety net
XYCMS law firm built Station system V1. 0 http://down.admin5.com/asp/71909.html B0mbErM@n ; 2011-2-18 eWebEditor http://127.0.0.1:99/system/xyeWebEditor/admin/login.asp User=XY2010 Pass=XY2010 XSS http://127.0.0.1:99/online.asp Qq:XSS Mail:XSS Photo:XSS Contents:XSS Eval...
DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit
Hi --------------------------------- http://www.dataconline.com/software/realwin.php "RealWin is a SCADA server product which includes a FlexView HMI and runs on current Microsoft Windows platforms 2000 and XP. It can operate on a single PC or multiple PCs connected through a TCP/IP network. It...
RLA ("Remote LanD Attack")
Below is a copy of my RLA exploit submission in ASCII. Attached is a MSWord .doc version with rich formatting, created with ease of view in mind. Regards... ---------- RLA "Remote LanD Attack" 2005 As discovered by: Justin M. Wray [email protected] Devices/Vendors Vulnerable: - Microsoft Window...
ICQ Pro 2003a - 'ca1-icq.asm' Password Bypass
; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows you to login to ICQ server using a...