Buffer overflow

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "requestimage" as one of the service actions for ...

XSS Vulnerability in the Online School System of Beijing Yi Zhi Lu Technology Co.

Ltd. is a high-tech enterprise focusing on the research and development of online education products and one-stop service of online education solutions. There is an xss vulnerability in the online school system of Beijing EZL Technology Co., Ltd. that can be exploited by attackers to inject...

legilux.public.lu XSS vulnerability

Open Bug Bounty ID: OBB-685693 Description| Value ---|--- Affected Website:| legilux.public.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

sport24.lu XSS vulnerability

Open Bug Bounty ID: OBB-683242 Description| Value ---|--- Affected Website:| sport24.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PLANEX CS-QR20 Command Execution

Reserved CVE: CVE-2017-12576 Description A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. Vulnerability Type Insecure Permissions Affected Product Code Base Firmware ver 1.30 Affected Component Web management UI...

vmc3.lu XSS vulnerability

Open Bug Bounty ID: OBB-651187 Description| Value ---|--- Affected Website:| vmc3.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

quiksilver.lu XSS vulnerability

Open Bug Bounty ID: OBB-625445 Description| Value ---|--- Affected Website:| quiksilver.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lu.tezenis.com XSS vulnerability

Vulnerable URL: https://lu.tezenis.com/catalog/restsearch.cmd?formstate=searchForm=OPENBUGBOUNTY%3C/title%3E%3Cimg/src=x%20onerror=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:47 GMT Vulnerability type:| XSS...

tn3270-screen NSE Script

Connects to a tn3270 'server' and returns the screen. Hidden fields will be listed below the screen with row, col coordinates. Script Arguments tn3270-screen.commands a semi-colon separated list of commands you want to issue before printing the screen tn3270-screen.lu specify a logical unit you...

CVE-2016-1606

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via 1 the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, 2 the CPName property value to...

Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerabilities (USN-3017-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3017-3 advisory. USN-3017-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10. This update provides the corresponding updates for the Linux Hardware Enablement H...

CVE-2008-7159

The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...

CVE-1999-1279

An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU...

CVE-1999-1279

The CVE describes an interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier that allows users to view each other’s folders when the users share the same Local APPC LU. Affected components include AS/400 shared folders and Microsoft SNA Server 3.0 and earlie...

CVE-1999-1279

An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU...