45 matches found
CVE-2019-18283
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions. Plea...
CVE-2019-18288
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload. Please note that an attacker needs to have access to th...
CVE-2019-18285
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that ...
CVE-2019-18284
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The AdminService is available without authentication on the Application Server. An attacker can use methods exposed via this interface to receive password hashes of other users and to change...
Emerson 396983-02-2 Non-isolated Highway Addressable Remote Transducer Detection
Binary data 756532.prm...
Emerson 396983-01-4 Non-isolated Highway Addressable Remote Transducer Detection
Binary data 756531.prm...
Arbitrary File Traversal Read Delete Vulnerability in Shida Highway Project Management Information System
Servcorp Highway Project Management Information System is an engineering project management platform developed for project participants. The Servcorp Expressway Project Management Information System has an arbitrary file traversal read and delete vulnerability that can be exploited by an attacker...
File Upload Vulnerability in Servcorp Highway Project Management Information System
Servcorp Highway Project Management Information System is an engineering project management platform developed for project participants. A file upload vulnerability exists in the Servcorp Expressway Project Management Information System. The vulnerability stems from the failure to strictly restri...
highway-assurances.fr XSS vulnerability
Open Bug Bounty ID: OBB-459574 Description| Value ---|--- Affected Website:| highway-assurances.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
highway-gmbh.de XSS vulnerability
Open Bug Bounty ID: OBB-219370 Description| Value ---|--- Affected Website:| highway-gmbh.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Bill Calls for Study of Cybersecurity Standards for Cars
A House bill was introduced Tuesday that could accelerate the federal government’s involvement in regulating automobile cybersecurity. The Security and Privacy in Your Car Study Act of 2017, authored by Reps. Ted Lieu D-Calif. and Joe Wilson R-SC, calls on the National Highway Traffic Safety...
video.dailycamera.com XSS vulnerability
Vulnerable URL: http://video.dailycamera.com/Anti-Trump-Marchers-Block-the-Highway-into-Boulder-Colorado-31625969?playlistId="// Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Road Race: Smashy Highway - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Road Race: Smashy Highway published at the 'play' market has multiple vulnerabilities...
Highway Speed Motorbike Racing - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Highway Speed Motorbike Racing published at the 'play' market has multiple vulnerabilities...
Highway Racer : No Limit - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Highway Racer : No Limit published at the 'play' market has multiple vulnerabilities...
Highway Rider - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Highway Rider published at the 'play' market has multiple vulnerabilities...
Zombie Highway - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Zombie Highway published at the 'play' market has multiple vulnerabilities...
Zombie Highway 2 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Zombie Highway 2 published at the 'play' market has multiple vulnerabilities...
SQL Injection Vulnerability in Highway Management Platform of Shaanxi Public Shida Software Technology Co.
Ltd. highway management platform is a kilometer management website. A SQL injection vulnerability exists in the Highway Management Platform of Shaanxi Public Shida Software Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...
ICS-CERT Alert on Easily Hackable Road Signs
A new, remotely exploitable vulnerability in Daktronics’ Vanguard software could make it even easier for attackers to hack electronic road signs, a task that was reportedly never very difficult to begin with. Daktronics’ Vanguard dynamic highway message sign configuration software was initially...