CVE-2017-12733

A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may crea...

CVE-2017-12731

A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of...

CVE-2017-12733: Missing Authentication for Critical Function

A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may crea...

CVE-2017-12731: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of...

PT-2017-12669

Name of the Vulnerable Software and Affected Versions OPW Fuel Management Systems SiteSentinel Integra 100 versions older than V175 OPW Fuel Management Systems SiteSentinel Integra 100 versions V175 through V189 OPW Fuel Management Systems SiteSentinel Integra 100 versions V191 through V195 OPW...

PT-2017-12671

Name of the Vulnerable Software and Affected Versions OPW Fuel Management Systems SiteSentinel Integra 100 versions older than V175 OPW Fuel Management Systems SiteSentinel Integra 100 versions V175 through V189 OPW Fuel Management Systems SiteSentinel Integra 100 versions V191 through V195 OPW...

OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: OPW Fuel Management Systems Equipment: SiteSentinel Integra and SiteSentinel iSite Vulnerabilities: Missing Authentication for Critical Function, SQL Injection AFFECTED PRODUCTS OPW Fuel Management Systems OPW reports...

Charge & Fuel - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Charge & Fuel published at the 'play' market has multiple vulnerabilities...

fuel-pdsh (>=1.0.0.dev19, <=1.0.0.dev21) potentially affected by CVE-2013-7459 via pycrypto (2.4.1)

pycrypto PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pycrypto and may be impacted: - fuel-pdsh =1.0.0.dev19, =1.0.0.dev21 Source cves: CVE-2013-7459 Source advisory: OSV:PYSEC-2017-94...

Papouch Backdoor Account / CSRF / Missing Authentication

+++++ Vulnerable Products 1. Papouch TME Ethernet thermometer 2. Papouch TME multi: Temperature and humidity via Ethernet All versions affected TME - Ethernet Thermometer http://www.papouch.com/en/shop/product/tme-ip-ethernet-thermometer/ TME multi: Temperature and humidity via Ethernet...

arbitrary file read

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a maliciou...

Gas Station & Fuel Finder - External URLs, Runtime command execution, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Gas Station & Fuel Finder published at the 'play' market has multiple vulnerabilities...

Fuel Buddy - Car Mileage Log - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fuel Buddy - Car Mileage Log published at the 'play' market has multiple vulnerabilities...

Fuel Manager (Consumption) - Customized SSL, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Fuel Manager Consumption published at the 'play' market has multiple vulnerabilities...

Drivenote: Fuel log & more - Base64 encoded String, Corrupted files, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Drivenote: Fuel log & more published at the 'play' market has multiple vulnerabilities...

Fuel Calculator - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Fuel Calculator published at the 'play' market has multiple vulnerabilities...

CVE-2015-2875

Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi...

PT-2015-3214

Name of the Vulnerable Software and Affected Versions Seagate GoFlex Satellite versions prior to 3.4.1.105 Seagate Wireless Mobile Storage versions prior to 3.4.1.105 Seagate Wireless Plus Mobile Storage versions prior to 3.4.1.105 LaCie FUEL versions prior to 3.4.1.105 Description The issue allo...

PT-2015-3215

Name of the Vulnerable Software and Affected Versions Seagate GoFlex Satellite versions prior to 3.4.1.105 Seagate Wireless Mobile Storage versions prior to 3.4.1.105 Seagate Wireless Plus Mobile Storage versions prior to 3.4.1.105 LaCie FUEL versions prior to 3.4.1.105 Description The issue is...

CVE-2015-2874: Undefined Security Weakness

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session...