mp4.ir XSS vulnerability

Vulnerable URL: http://www.mp4.ir/search/'%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 76822 VIP website status:| No Coordinated...

Running an Effective Incident Response Tabletop Exercise

Are you ready for an incident? Are you confident that your team knows the procedures, and that the procedures are actually useful? An incident response tabletop exercise is an excellent way to answer these questions. Below, Ive outlined some steps to help ensure success for your scenario-based...

Remote Control for all TV IR - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Remote Control for all TV IR published at the 'play' market has multiple vulnerabilities...

khabarjoo24.ir XSS vulnerability

Open Bug Bounty ID: OBB-230831 Description| Value ---|--- Affected Website:| khabarjoo24.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-10226

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service bitfield out-of-bounds read and application crash via crafted JavaScript code that is mishandled in the operatorString function, related to...

Secdo Automates End-to-End Incident Response with Preemptive IR

As vast volumes of digital data are created, consumed and shared by companies, customers, employees, patients, financial institutions, governments and so many other bodies, information protection becomes a growing risk for everyone. Who wants to see personal customer purchasing data flying into t...

Fortinet FortiGate ZebOS routing remote shell service enabled (FG-IR-15-020)

The Fortinet FortiGate device has the ZebOS routing remote shell service enabled. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descriptio...

ema2016.ir XSS vulnerability

Vulnerable URL: http://ema2016.ir/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7659239 VIP website status:| No Check ema2016.ir SSL connection:|...

mechconf2.ir XSS vulnerability

Vulnerable URL: http://mechconf2.ir/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 868450 VIP website status:| No Check...

pce2016.ir XSS vulnerability

Vulnerable URL: http://www.pce2016.ir/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5287830 VIP website status:| No Check pce2016.ir SSL connection:|...

geo2016.ir XSS vulnerability

Vulnerable URL: http://www.geo2016.ir/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3357198 VIP website status:| No Check...

Windows Forensic Data Collection: IR-rescue

Windows Forensic Data Collection ir-rescue is a Windows Batch script that collects a myriad of forensic data from 32-bit and 64-bit Windows systems while respecting the order of volatility. It is intended for incident response use at different stages in the analysis and investigation process. It...

Canon IR-ADV Password Extractor

An authentication bypass vulnerability exists in Canon IR-ADV. A remote attacker can exploit this vulnerability by extracting the passwords from address books on various Canon IR-Adv mfp devices...

SIEMENS IP-Camera CVMS2025-IR, CCMS2025 - Credentials Disclosure

No description provided by source...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR Credential Disclosure

Advisory Information ======================================== Title : Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR Remote Credentials Disclosure Vendor Homepage : https://is.spiap.com/ Remotely Exploitable : Yes Tested on Camera types : CCPW3025-IR , CVMW3025-IR Product References :...

Siemens IP-Camera Unauthenticated Remote Credential Disclosure

Advisory Information ======================================== Title : SIEMENS IP-Camera Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.siemens.com Remotely Exploitable : Yes Versions Affected : x.2.2.1798, CxMS2025V2458SP1, x.2.2.1798, x.2.2.1235 Tested on Camera...

SIEMENS IP-Camera CVMS2025-IR CCMS2025 - Credentials Disclosure

SIEMENS IP-Camera CVMS2025-IR CCMS2025 - Credentials Disclosure 1. Advisory Information ======================================== Title : SIEMENS IP-Camera Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.siemens.com Remotely Exploitable : Yes Versions Affected :...

SIEMENS IP-Camera CVMS2025-IR / CCMS2025 - Credentials Disclosure

Advisory Information ======================================== Title : SIEMENS IP-Camera Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.siemens.com Remotely Exploitable : Yes Versions Affected : x.2.2.1798, CxMS2025V2458SP1, x.2.2.1798, x.2.2.1235 Tested on Camera...

SIEMENS IP Camera CVMS2025-IR / CCMS2025 - Credentials Disclosure

Exploit for cgi platform in category web applications 1. Advisory Information ======================================== Title : SIEMENS IP-Camera Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.siemens.com Remotely Exploitable : Yes Versions Affected : x.2.2.1798,...

msh313.ir XSS vulnerability

Open Bug Bounty ID: OBB-173777 Description| Value ---|--- Affected Website:| msh313.ir Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...