Ice Qube Thermal Management Center Information Disclosure Vulnerability

Ice Qube Thermal Management Center is a thermal management application from Ice Qube USA. The program includes features such as email notifications, remote management, LCD display and temperature alarms. An information disclosure vulnerability exists in Ice Qube Thermal Management Center versions...

CVE-2017-14026

In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information...

Authentication flaw

In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication...

CVE-2017-16714

In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication...

Information disclosure

In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information...

CVE-2017-14026

In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information...

CVE-2017-16714

In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication...

CVE-2017-14026

In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information...

CVE-2017-16714

In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication...

CVE-2017-16714

CVE-2017-16714 affects Ice Qube Thermal Management Center prior to v4.13, where passwords are stored in plaintext in a file accessible without authentication. This is a credential-disclosure vulnerability impacting the Thermal Management Center software; the root cause is unprotected storage of c...

CVE-2017-14026

CVE-2017-14026 affects Ice Qube Thermal Management Center prior to v4.13. The vulnerability is an improper authentication flaw in the web application, potentially allowing an attacker to access sensitive information without valid credentials. Affected product: Thermal Management Center (Ice Qube)...

Ice Qube Thermal Management Center

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Ice Qube Equipment: Thermal Management Center Vulnerabilities: Improper Authentication, Unprotected Storage of Credentials 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)

temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0022...

pandora.ice.it XSS vulnerability

Open Bug Bounty ID: OBB-655224 Description| Value ---|--- Affected Website:| pandora.ice.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Traffic sign near ICE headquarters hacked with “Abolish ICE” message

By Waqas For the last few years, hacking a traffic sign or This is a post from HackRead.com Read the original post: Traffic sign near ICE headquarters hacked with "Abolish ICE" message...

nas-sites.org XSS vulnerability

Open Bug Bounty ID: OBB-577279 Description| Value ---|--- Affected Website:| nas-sites.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Is Your DJI Drone a Chinese Spy? Leaked DHS Memo Suggests

The United States Department of Homeland Security DHS has recently accused Da-Jiang Innovations DJI, one of the largest drone manufacturers, of sending sensitive information about U.S. infrastructure to China through its commercial drones and software. A copy memo from the Los Angeles office of t...

ice-watch.com XSS vulnerability

Open Bug Bounty ID: OBB-388308 Description| Value ---|--- Affected Website:| ice-watch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Introducing GoCrack: A Managed Password Cracking Tool

FireEye's Innovation and Custom Engineering ICE team released a tool today called GoCrack that allows red teams to efficiently manage password cracking tasks across multiple GPU servers by providing an easy-to-use, web-based real-time UI Figure 1 shows the dashboard to create, view, and manage...

Introducing GoCrack: A Managed Password Cracking Tool

FireEye's Innovation and Custom Engineering ICE team released a tool today called GoCrack that allows red teams to efficiently manage password cracking tasks across multiple GPU servers by providing an easy-to-use, web-based real-time UI Figure 1 shows the dashboard to create, view, and manage...