Information disclosure

Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface...

Design/Logic Flaw

Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device...

CVE-2018-15124

Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device...

CVE-2018-15125

Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface...

CVE-2018-15125

CVE-2018-15125 affects the Zipato Zipabox Smart Home Controller. The vulnerability is described as a Sensitive Information Disclosure that enables a remote attacker to obtain sensitive information and expand the attack surface. Public details include a network attack vector with low complexity an...

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software HomeController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the IBOS Enterprise Collaboration Management Software HomeController.php page. An attacker is allowed to exploit the vulnerability to obtain sensitive...

MiCasaVerde VeraLite UPnP RCE

The remote MiCasaVerde VeraLite Smart Home Controller is affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this, via the UPnP RunLua action, to execute arbitrary shell commands as root. Note that MiCasaVerde VeraLite is reportedly affected by...

dwcms \app\Home\Controller\IndexController.class.php parameters cname SQL injection

No description provided by source...

BEdita Cross-Site Scripting Vulnerability

BEdita is a web development framework that provides a full-featured content management system. A cross-site scripting vulnerability in controllers/homecontroller.php in versions prior to BEdita 3.1 allows remote attackers to inject arbitrary web script or HTML...

XSS vulnerability in BEdita

Vulnerability ID: HTB22723 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbedita.html Product: BEdita Vendor: Chialab ChannelWeb http://www.bedita.com/ Vulnerable Version: 3.0.1.2550 "betula" and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: XSS...