CVE-2003-5003 ISS BlackICE PC Protection Update cross site scriting

A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may ...

CVE-2003-5002 ISS BlackICE PC Protection Update cleartext transmission

A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2003-5002

ISS BlackICE PC Protection is affected by a vulnerability in the Update Handler component that allows cleartext data transmission. Affected products are noted as no longer supported by the maintainer. Public documents describe this as a problematic issue without details on a fix. In practice, the...

CVE-2003-5001 ISS BlackICE PC Protection Cross Site Scripting Detection privileges management

A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit h...

CVE-2003-5001

The CVE-2003-5001 entry concerns ISS BlackICE PC Protection, specifically the Cross Site Scripting Detection component. The vulnerability arises from manipulation of POST/PUT/DELETE/OPTIONS requests, enabling privilege escalation. The attack surface is remote, and exploitation has been disclosed ...

CVE-2021-45488

The CVE-2021-45488 issue affects NetBSD up to 9.2, involving an information leak in the TCP ISN (ISS) generation algorithm within the IP/TCP stack. The root cause is an information disclosure flaw in how ISNs are generated, enabling partial exposure of sensitive data. Publicly documented details ...

CVE-2020-21990

Emmanuel MyDomoAtHome MDAH REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information...

CVE-2020-21990

Emmanuel MyDomoAtHome MDAH REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information...

Information disclosure

Emmanuel MyDomoAtHome MDAH REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information...

CVE-2020-21990

CVE-2020-21990 affects MyDomoAtHome REST API (Domoticz ISS Gateway) v0.2.40. The root cause is improper access control enforcement, allowing unauthenticated remote attackers to craft requests to gain access to sensitive information. Public sources in connected records describe an information-disc...

CVE-2020-21990

Emmanuel MyDomoAtHome MDAH REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information...

Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed an issue for nss-softokn as follows. Vulnerability Details CVEID: CVE-2019-11745 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system,...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM® WebSphere Application Server Liberty shipped with IBM Security Directory Suite (CVE-2019-4305)

Summary There is a vulnerability in IBM® WebSphere Application Server Liberty shipped with IBM Security Directory Suite. The issue was disclosed as part of the IBM WebSphere Application Server Liberty update and it includes all vulnerability details. Vulnerability Details CVEID: CVE-2019-4305...

Shell Backdoor List - PHP / ASP Shell Backdoor List

What is a shell backdoor ? A backdoor shell is a malicious piece of code e.g. PHP, Python, Ruby that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own. How to...

MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure

MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Date: 2019-12-30 Author: LiquidWorm Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome...

MyDomoAtHome (MDAH) REST API Domoticz ISS Gateway 0.2.40 Information Disclosure

MyDomoAtHome MDAH REST API Domoticz ISS Gateway 0.2.40 Information Disclosure Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome https://www.domoticz.com/wiki/ImperiHome https://docs.imperihome.com/app/iss Affected version: 0.2.40 Summary: REST Gateway between Domoticz an...

MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Vulnerability

Exploit for hardware platform in category web applications Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Author: LiquidWorm Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome https://www.domoticz.com/wiki/ImperiHome...

MyDomoAtHome (MDAH) REST API Domoticz ISS Gateway 0.2.40 Information Disclosure

Summary REST Gateway between Domoticz and Imperihome ISS. Domoticz is a home automation system with a pretty wide library of supported devices, ranging from weather stations to smoke detectors to remote controls, and a large number of additional third-party integrations are documented on the...

CVE-2019-13355

In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\ used by ccschedulersvc.exe allows local attackers to hijack dotnetproxy.exe, which leads to privilege escalation when the ccSchedulerSVC service runs the executable...

CVE-2018-10098

In MicroWorld eScan Internet Security Suite ISS for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD...