CVE-2017-9931

Cross-Site Scripting XSS exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi...

CVE-2017-9980

CVE-2017-9980 affects Green Packet DX-350 firmware (example: v2.8.9.5-g1.4.8-atheeb). The web interface’s PING feature (tag_ipPing) can be abused to perform command injection via the pip parameter, enabling arbitrary commands to be executed through the vulnerable web interface. The issue is evide...

gSOAP open-source software development library aeration“green rose”vulnerability, millions of IoT devices in jeopardy-vulnerability warning-the black bar safety net

Remember a few days ago Avanti vending machines loopholes, leakage of a large amount of user information? It didn't take long, the other one for IoT device attacks appeared again, this time the recruitment is the development of IoT devices open-source software library that may affect millions of...

Keeping up with the Petyas: Demystifying the malware family

Last June 27, there was a huge outbreak of a Petya-esque malware with WannaCry-style infector in the Ukraine. Since there is still confusion about how exactly this malware is linked to the original Petya, we have prepared this small guide on the background of the Petya family. The origin of Petya...

green-energy-jobs.net XSS vulnerability

Open Bug Bounty ID: OBB-262629 Description| Value ---|--- Affected Website:| green-energy-jobs.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Reflected Cross-site Scripting Vulnerability in Some Versions of the Landing Page of Green League Anti-Denial-of-Service System

Green Alliance Anti-DDoS System NSFOCUS Anti-DDoS System, or NSFOCUS ADS for short is an anti-DDoS product. The system is capable of timely discovering various types of attack traffic in the background traffic, quickly intercepting the attack traffic for the type of attack, and ensuring the passa...

UBUNTU-CVE-2017-10794

When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...

qualityhomesupplies.com XSS vulnerability

Vulnerable URL: http://www.qualityhomesupplies.com/CountertopsZoom.asp?stone=MarbleSlabsBig/M-Hulien-Jade-Green-M742.jpg=1"...

Ransomware & Advanced Attacks: Servers are Different

Ransomware and other advanced attacks are the scourge of the modern IT security team. If allowed to gain access to your IT environment, these attacks could shut down the organization, denying access to mission critical applications & data for potentially days, or even indefinitely. The result? Th...

CVE-2017-8907

Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this...

green_valley.explore-nevada.us XSS vulnerability

Vulnerable URL: http://greenvalley.explore-nevada.us/Profile/Demographicsbyzipcode.asp?zipcode=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

kawaguchi-green-golf.jp Open Redirect vulnerability

Open Bug Bounty ID: OBB-220065 Description| Value ---|--- Affected Website:| kawaguchi-green-golf.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

My NJ Client APP has parallel override access vulnerability

My Nanjing Client APP is a city-level public service mobile application that integrates all kinds of living information in Nanjing. My Nanjing Client APP has a parallel override access vulnerability. Allowing an attacker to access all the real-name registered user and enterprise information and...

The green Alliance Web application firewall arbitrary command execution vulnerability

Green UNITA, Web application firewall, NSFOCUS Web Application Firewall, also known as Web application protection system, referred to as WAF is a green Union company Research and development of Web Security Products. The green Alliance Web application firewall there is an arbitrary command...

SMS Messages Neon Led Green - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SMS Messages Neon Led Green published at the 'play' market has multiple vulnerabilities...

Weak Password Vulnerability in Sichuan Green Blue e-Government System Website

Sichuan green blue e-government system is an e-government building system. Weak password vulnerability exists in some websites of Sichuan Green Blue e-government system. Allow attackers to use the account password admin/scjg888 to log in to the system background, to obtain sensitive information...

gemselect.com XSS vulnerability

Vulnerable URL: http://www.gemselect.com/group/gemselect.php?a=0type=86=Green%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3Eshape=Octagon%20/%20Emerald%20Cut,Square=Asscher-Cut=single Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

OpenVPN to Undergo Cryptographic Audit

The next version of the open-source OpenVPN software will be audited by an well-known cryptographer. It was announced Wednesday that Matthew D. Green, PhD, a cryptographer, computer science professor, and researcher at Johns Hopkins University will carry out an audit of the code currently availab...

Green Packet DX-350 contains insecure default credentials

Overview Green Packet DX-350 uses default credentials Description CWE-255: Credentials Management - CVE-2016-6552Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device. --- Impact A remote attacker can ta...

Arbitrary Command Execution Vulnerability in GreenManager Web Application Firewall

NSFOCUS Web Application Firewall NSFOCUS Web Application Firewall, also known as Web Application Protection System, or WAF for short is a Web security product developed by Green Alliance. NSFOCUS Web Application Firewall has an arbitrary command execution vulnerability. Due to the WAF in the open...