vitacollections.ca Cross Site Scripting vulnerability OBB-3482301

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CISA Releases Three Industrial Control Systems Advisories

CISA has released three Industrial Control Systems ICS advisories on July 6, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for...

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

A suspected senior member of a French-speaking hacking crew known as OPERA1ER has been arrested as part of an international law enforcement operation codenamed Nervone, Interpol has announced. "The group is believed to have stolen an estimated USD 11 million -- potentially as much as 30 million -...

CVE-2023-34995: Weak Password Requirements

There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines...

PT-2023-23932 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue is related to the lack of validation of identification strings before processing, which could make PiiGAB M-Bus vulnerable to cross-site scripting attacks. Recommendations: A...

CVE-2023-35765: Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

PiiGAB M-Bus 代码注入漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data acquisition systems or prepaid units from PiiGAB. A code injection vulnerability exists in PiiGAB M-Bus version 900S, which stems from an inability to properly clean up user input and could allow an attacker to inje...

PT-2023-25297 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue allows a low-level user to potentially gain admin credentials because PiiGAB M-Bus stores credentials in a plaintext file. Recommendations: At the moment, there is no...

PiiGAB M-Bus 跨站脚本漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data acquisition systems or prepaid units from PiiGAB. A cross-site scripting vulnerability exists in PiiGAB M-Bus version 900S, which stems from the fact that it will not validate identification strings and may be...

PiiGAB M-Bus 安全漏洞

PiiGAB M-Bus is a communication protocol from PiiGAB used between meters and centralized data acquisition systems or prepaid units. A security vulnerability exists in the PiiGAB M-Bus 900S version that stems from the use of a weak hash algorithm to store passwords...

PiiGAB M-Bus 安全漏洞

PiiGAB M-Bus is a communication protocol from PiiGAB used between meters and centralized data acquisition systems or prepaid units. A security vulnerability exists in the PiiGAB M-Bus 900S version, which stems from the fact that there is no requirement to set a complex password, which could be...

CVE-2023-36859: Improper Control of Generation of Code

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands...

CVE-2023-34433: Use of Password Hash With Insufficient Computational Effort

PiiGAB M-Bus stores passwords using a weak hash algorithm...

CVE-2023-32652: Improper Neutralization of Input During Web Page Generation

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...

PT-2023-24875 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns the use of a weak hash algorithm for storing passwords. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2023-35987: Use of Hard-coded Credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

PT-2023-23270 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns the transmission of credentials in plaintext format. This means that when credentials are sent over the network, they are not encrypted, potentially allowing...

CVE-2023-31277: Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-35120: Cross-Site Request Forgery (CSRF)

PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then...

PT-2023-25152 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker could send a phishing email to the device owner with a link that, when clicked, executes a certain command if the...