172 matches found
PT-2018-10746 · Lutron · Lutron Radiora 2
Name of the Vulnerable Software and Affected Versions: Lutron RadioRA 2 versions Revision M through Revision Y Description: The issue allows attackers to gain total super user control of an IoT device through a TELNET session. Default and unremovable support credentials are used, with the usernam...
capitallightingfixture.com XSS vulnerability
Open Bug Bounty ID: OBB-583211 Description| Value ---|--- Affected Website:| capitallightingfixture.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
goldenlighting.com XSS vulnerability
Vulnerable URL: http://www.goldenlighting.com/app/site/query/getcustomermessage.nl/c.1029593/n.1/.f?=Welcome+to+IS+Custom+Uniforms%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerabilit...
SQL Injection Vulnerability in City Lighting Wireless Control System of China Electronics Technology Group Corporation
China Electronics Technology Group Corporation CETC is a state-owned large-scale high-tech enterprise group established on the basis of electronic research institutes and high-tech enterprises directly under the former Ministry of Information Industry. A SQL injection vulnerability exists in the...
CVE-2017-0707
A elevation of privilege vulnerability in the HTC led driver. Product: Android. Versions: Android kernel. Android ID: A-36088467...
OSRAM SYLVANIA Osram Lightify Home Network Command Replay Vulnerability
OSRAM SYLVANIA Osram Lightify Home is a set of open IoT platforms for automated control of lighting devices from OSRAM Germany. A security vulnerability exists in OSRAM SYLVANIA Osram Lightify Home versions 2016-07-26 and earlier. An attacker could use the vulnerability to capture and recover...
OSRAM SYLVANIA Osram Lightify Pro Network Command Replay Vulnerability
OSRAM SYLVANIA Osram Lightify Pro is an open IoT platform for automated control of lighting devices from OSRAM Germany. A security vulnerability exists in OSRAM SYLVANIA Osram Lightify Pro 2016-07-26 and prior versions. An attacker can exploit the vulnerability to obtain and re-execute used...
Non-documented developer's screen in Toshiba Lighting & Technology Corporation Home gateway
Overview Home gateway provided by Toshiba Lighting & Technology Corporation contains non-documented developer's screen. Yutaka Kokubu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
OS command injection vulnerability in Toshiba Lighting & Technology Corporation Home gateway
Overview Home gateway provided by Toshiba Lighting & Technology Corporation contains OS command injection. Yutaka Kokubu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...
Hard-coded credentials vulnerability in Toshiba Lighting & Technology Corporation Home gateway
Overview Home gateway provided by Toshiba Lighting & Technology Corporation contains hard-coded credentials. Yutaka Kokubu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
Improper access control vulnerability in Toshiba Lighting & Technology Corporation Home gateway
Overview Home gateway provided by Toshiba Lighting & Technology Corporation contains improper access control. Yutaka Kokubu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
JVN#85901441: Multiple vulnerabilities in Toshiba Lighting & Technology Corporation Home gateway
Home gateway provided by Toshiba Lighting & Technology Corporation contains multiple vulnerabilities listed below. Non-documented developer's screen CWE-912 - CVE-2017-2234 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N| Base Score: 2.4 CVSS v2|...
Cell Phone Remote Lighting Monitoring System SQL Injection Vulnerability in txtUsername Parameter
Mobile Remote Lighting Monitoring System is a lighting monitoring system from China Electronic Technology Group Corporation. A SQL injection vulnerability exists in the Mobile Remote Lighting Monitoring System. The lack of filtering of the 'txtUsername' parameter allows an attacker to exploit the...
Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerabilities
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on March 1, 2016, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified vulnerabilities in Eaton Lighting Systems’ EG2 Web Control application. Eaton Lighting Systems...
lightingproducts.philips.com XSS vulnerability
Vulnerable URL: http://www.lightingproducts.philips.com/search-tool.html?brand=%22%3E%3Csvg%0Aonload=alert%27OPENBUGBOUNTY%27%3E// Details: Description| Value ---|--- Patched:| Yes, at 17.07.2017 Latest check for patch:| 17.07.2017 12:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...
lighting.cree.com XSS vulnerability
Vulnerable URL: http://lighting.cree.com/CoveoRest/searchresults/indexall?searchCollection="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
