BINOM3 Electric Power Quality Meter

CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...

BINOM3 Electric Power Quality Meter (Update A)

CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...

tqdm Remote Code Execution Vulnerability

tqdm is a fast, scalable progress meter from Python. A remote code execution vulnerability exists in tqdm. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected application...

Schneider Electric IONXXXX Series Power Meter Vulnerabilities

OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-16-256-02 Schneider Electric ION Power Meter CSRF Vulnerability that was published September 12, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Karn Ganeshen has identified a cross-site request forgery CSRF and no...

BINOM3 Electric Power Quality Meter Sensitive Information Disclosure Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. BINOM3 Electric Power Quality Meter is vulnerable to sensitive information disclosure. Since the management portal is configured for HTTP by default, an attacker in the right position could sniff all log...

Unspecified Cross-Site Request Forgery Vulnerability in Schneider Electric ION Power Meter

The Schneider Electric ION Power Meter is an electrical power meter. A cross-site request forgery vulnerability exists in the Schneider Electric ION Power Meter. The program fails to properly validate HTTP requests, allowing remote attackers to exploit the vulnerability to perform certain...

BINOM3 Electric Power Quality Meter Stores Sensitive Information Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A vulnerability exists in the storage of sensitive information in the BINOM3 Electric Power Quality Meter. An attacker could exploit the vulnerability to gain privileged access to the device...

Multiple Reflective Cross-Site Scripting Vulnerabilities in BINOM3 Electric Power Quality Meter

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. BINOM3 Electric Power Quality Meter suffers from multiple reflected cross-site scripting vulnerabilities. These vulnerabilities can be exploited to inject arbitrary JavaScript at a specially crafted URL,...

BINOM3 Electric Power Quality Meter Cross-Site Request Forgery Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A cross-site request forgery vulnerability exists in BINOM3 Electric Power Quality Meter. Exploitation of this vulnerability could allow unauthorized actions on the device, such as configuration paramete...

BINOM3 Electric Power Quality Meter Weak Password Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. The BINOM3 Electric Power Quality Meter is vulnerable to a weak password. The device is configured with four login accounts "admin / 1", "user / 1", "alg / 1", "telem / 1". To further make it easier for...

BINOM3 Power Meter CSRF / XSS / Credential Management

Universal multifunctional Electric Power Quality Meter BINOM3 - Multiple Vulnerabilities About The meters are designed for autonomous operation in automated systems: aC/ SCADA systems aC/ Data aquisition and transmission systems aC/ Automated data and measurement systems for revenue and technical...

ELNet Power Meter Unauthenticated Access / Weak Credential Management

ELNet Energy & Electrical Power Meter - Mulitple Vulnerabilities http://elnet.feniks-pro.com/Elnet-LT.php http://www.elnet.cc/product/elnet-lt/ Powermeter with color graphic display for all electrical measurements and harmonics, with TCP/IP and RS485 communication ModBus and Bacnet, panel mounted...

Fedora 23 : webkitgtk4 (2016-d957ffbac1)

This update addresses the following vulnerabilities : - CVE-2016-4622, CVE-2016-4624, CVE-2016-4591, CVE-2016-4590 Additional fixes : - Fix performance in accelerated compositing mode with the modesetting intel driver and DRI3 enabled. - Reduce the amount of file descriptors that the Web Process...

Twerk Meter - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Twerk Meter published at the 'play' market has multiple vulnerabilities...

ŠKODA G-Meter - Suspicious files, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application ŠKODA G-Meter published at the 'play' market has multiple vulnerabilities...

Sound Meter PRO - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sound Meter PRO published at the 'play' market has multiple vulnerabilities...

Sound Meter - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Sound Meter published at the 'play' market has multiple vulnerabilities...

Sound Meter - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sound Meter published at the 'play' market has multiple vulnerabilities...

Sound Meter - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sound Meter published at the 'play' market has multiple vulnerabilities...

Glucose Meter Prank - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Glucose Meter Prank published at the 'play' market has multiple vulnerabilities...