CVE-2018-12666

The CVE-2018-12666 entry concerns SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices where authentication is based solely on a cookie value. The underlying issue allows remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255. The ...

PT-2018-11321

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B Description The issue allows OS Command Injection, which can be exploited by attackers. No information is provided about the estimated numbe...

CVE-2018-12672: Improper Neutralization of Input During Web Page Generation

The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B does not perform proper validation on user-supplied input and is vulnerable to cross-site scripting attacks. If proper authorization was implemented, this vulnerability could be leveraged to perform actions on behalf of another user or th...

CVE-2018-12668: Use of Hard-coded Credentials

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password...

PT-2018-11319

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B Description The issue allows remote authenticated users to reset arbitrary accounts. This can be achieved by sending a request to the...

PT-2018-11318

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B Description The issue concerns a hard-coded password in the affected devices. Recommendations For versions V2.3.4.2103-S50-NTD-B20170508B an...

CVE-2018-12669: Undefined Security Weakness

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset arbitrary accounts via a request to web/cgi-bin/hi3510/param.cgi...

CVE-2018-12670: Improper Neutralization of Special Elements used in an OS Command

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection...

CVE-2018-12674: Cleartext Transmission of Sensitive Information

The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B stores the username and password within the cookies of a session. If an attacker gained access to these session cookies, it would be possible to gain access to the username and password of the logged-in...

CVE-2018-12666: Improper Authentication

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cookies, which allow remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255...

PT-2018-11316

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA version 2.3.4.2103-S50-NTD-B20170508B Description The issue allows remote attackers to bypass authentication and gain administrator access. This is possible because the device improperly identifies users only by the...

l-marketing-group.com XSS vulnerability

Open Bug Bounty ID: OBB-663151 Description| Value ---|--- Affected Website:| l-marketing-group.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

l-objet.com XSS vulnerability

Open Bug Bounty ID: OBB-663120 Description| Value ---|--- Affected Website:| l-objet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-7558

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inetdiagmsgsctp,laddrfill and sctpgetsctpinfo functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic...

CVE-2017-7558: Out-of-bounds Read

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inetdiagmsgsctp,laddrfill and sctpgetsctpinfo functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic...

l-tike.com XSS vulnerability

Open Bug Bounty ID: OBB-648908 Description| Value ---|--- Affected Website:| l-tike.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

l-m-r.se XSS vulnerability

Open Bug Bounty ID: OBB-629268 Description| Value ---|--- Affected Website:| l-m-r.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

l-boudart.fr XSS vulnerability

Open Bug Bounty ID: OBB-610720 Description| Value ---|--- Affected Website:| l-boudart.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The Ugly Duckling in factoring aka the filtering steps part I

People that knows me well are well aware that prime numbers have been my obsession since my childhood and they are source of continue interest for me. Actually thanks to cryptography they are a relevant part of my everyday life. One of the most important problem in cryptography since the discover...

A Sobering Look at Fake Online Reviews

In 2016, KrebsOnSecurity exposed a network of phony Web sites and fake online reviews that funneled those seeking help for drug and alcohol addiction toward rehab centers that were secretly affiliated with the Church of Scientology. Not long after the story ran, that network of bogus reviews...