PT-2018-13050

Name of the Vulnerable Software and Affected Versions KONE Group Controller KGC versions prior to 4.6.5 Description An issue allows unauthenticated remote code execution through the open HTTP interface by modifying autoexec.bat. Recommendations For versions prior to 4.6.5, update to version 4.6.5...

PT-2018-13051

Name of the Vulnerable Software and Affected Versions KONE Group Controller KGC versions prior to 4.6.5 Description An issue was discovered where FTP does not require authentication or authorization. Recommendations For versions prior to 4.6.5, update to version 4.6.5 or later to resolve the issu...

CVE-2018-15486: Inclusion of Functionality from Untrusted Control Sphere

An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02...

CVE-2018-15484: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01...

KONE KGC 4.6.4 DoS / Code Execution / LFI / Bypass

Vulnerabilities in KONEs Group Controller KGC ------------------------------------------------------------------------- Introduction ============ Vulnerabilities were identified in the KONE Group Controller KGC. These were discovered during a black box assessment and therefore the vulnerability...

KONE KGC 4.6.4 - Multiple Vulnerabilities

KONE KGC versions 4.6.4 and below suffer from unauthenticated remote code execution, denial of service, local file inclusion, and missing FTP access control vulnerabilities. Vulnerabilities in KONEs Group Controller KGC -------------------------------------------------------------------------...

kone-store.com XSS vulnerability

Open Bug Bounty ID: OBB-566164 Description| Value ---|--- Affected Website:| kone-store.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Unfixed XSS vulnerability at kone-liga.ru

Security researcher PaPPy, has submitted on 15/05/2008 a cross-site-scripting XSS vulnerability affecting kone-liga.ru, which at the time of submission ranked 10187321 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently...