PT-2018-17113

Name of the Vulnerable Software and Affected Versions: MASTER IPCAMERA01 version 3.3.4.2103 Description: The issue allows remote attackers to obtain sensitive information via a crafted HTTP request. This can include accessing the username, password, and configuration settings. Recommendations: Fo...

PT-2018-17112

Name of the Vulnerable Software and Affected Versions: MASTER IPCAMERA01 version 3.3.4.2103 Description: The issue allows for unauthenticated configuration changes. This is demonstrated by the ability to modify the port number of the web server. Recommendations: For MASTER IPCAMERA01 version...

CVE-2018-5724: Unrestricted Upload of File with Dangerous Type

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi...

CVE-2018-5726: Exposure of Sensitive Information to an Unauthorized Actor

MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request, as demonstrated by the username, password, and configuration settings...

CVE-2018-5725: Use of Hard-coded Credentials

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of the web server...

CVE-2018-5723: Use of Hard-coded Credentials

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account...

PT-2018-1033

Name of the Vulnerable Software and Affected Versions MASTER IPCAMERA01 version 3.3.4.2103 Description The issue is related to unauthenticated configuration download and upload in the MASTER IPCAMERA01 device. This can be exploited through the restore.cgi endpoint, allowing a remote attacker to...

PT-2018-1034

Name of the Vulnerable Software and Affected Versions MASTER IPCAMERA01 version 3.3.4.2103 Description The issue is related to the use of hardcoded credentials in the device's software. Specifically, the root account has a hardcoded password of cat1029. This could allow a remote attacker to gain...

[SECURITY] Fedora 27 Update: heimdal-7.5.0-1.fc27

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

Bus Booking Script admin/new_master.php file cross-site request forgery vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Bus Booking Script. A remote attacker can exploit this vulnerability to perform unauthorized operations via the admin/newmaster.php file...

CVE-2017-17830

Bus Booking Script has CSRF via admin/newmaster.php...

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

Unauthorized Access

salt is vulnerable to unauthorized access through its minions. The vulnerability exists as the Vault minions are receiving master tokens, which can be used to access secrets, even without a matching access policy...

DEBIAN-CVE-2014-3250

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4...

EMC ScaleIO for Linux Information Disclosure Vulnerability

EMC ScaleIO for Linux is a software-defined solution for converting DAS storage to shared data block storage based on the Linux platform from EMC. An information disclosure vulnerability exists in EMC ScaleIO version 2.0.1.x for Linux-based platforms, which originates when the program saves the...

master-belt.com XSS vulnerability

Open Bug Bounty ID: OBB-401713 Description| Value ---|--- Affected Website:| master-belt.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

IBM InfoSphere Master Data Management Security Bypass Vulnerability (CNVD-2017-35510)

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A security vulnerability exists in IBM InfoSphere MDM - Collaborative Edition. An attacker could exploit the vulnerability to downlo...

SaltStack Salt Directory Traversal Vulnerability (CNVD-2017-35509)

SaltStack Salt aka SaltStack is a set of open source tools for managing infrastructure from SaltStack, Inc. in the United States. The tool provides configuration management, remote execution and other functions , able to manage tens of thousands of servers , with the ability to quickly complete t...

CVE-2017-1523

IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892...

GHSA-G89M-3WJW-H857 Puppet vulnerable to Path Traversal

Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. dot dot in a...