CVE-2017-11494: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection

Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect ISET-mpp meter 1.2.4.2 and possibly earlier Vulnerable...

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection Vulnerability

Exploit for hardware platform in category web applications Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect...

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect ISET-mpp...

Command Injection Vulnerability in Multiple Satel Products

Satel SenNet Optimal DataLogger, SenNet Solar Datalogger and SenNet Multitask Meter are products of Satel Spain. The SenNet Optimal DataLogger and SenNet Solar Datalogger are data loggers and the SenNet Multitask Meter is a multifunction meter. A command injection vulnerability exists in multiple...

SenNet Data Logger / Electricity Meter Code Execution

SenNet Data Logger appliances and Electricity Meters Multiple Vulnerabilities Note: Vendor has released the fix. Details to be documented in ICS-CERT Advisory. About SenNet is a trademark of Satel Spain that offers monitoring and remote-control solutions for businesses. Our engineers develop,...

[SECURITY] Fedora 24 Update: python-tqdm-4.11.2-1.fc24

tqdm read taqadum, =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD means "progress" in Arabic. Instantly make your loops show a smart progress meter - just wrap any itera ble with "tqdmiterable", and you are done!...

[SECURITY] Fedora 25 Update: python-tqdm-4.11.2-1.fc25

tqdm read taqadum, =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD means "progress" in Arabic. Instantly make your loops show a smart progress meter - just wrap any itera ble with "tqdmiterable", and you are done!...

InstaLikes Meter for Instagram - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application InstaLikes Meter for Instagram published at the 'play' market has multiple vulnerabilities...

CVE-2017-5167

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords...

CVE-2017-5166

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device...

CVE-2017-5165

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per sensitive function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration...

CVE-2017-5162

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration...

Design/Logic Flaw

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords...

Design/Logic Flaw

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device...

Cross site request forgery (csrf)

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per sensitive function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration...

Cross site request forgery (csrf)

An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. Locus Energy meters use a PHP script to manage the energy meter parameters for voltage monitoring and network configuration. The PHP code does not properly validate information...

CVE-2016-5782

An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. Locus Energy meters use a PHP script to manage the energy meter parameters for voltage monitoring and network configuration. The PHP code does not properly validate information...

CVE-2017-5162

The CVE-2017-5162 entry affects BINOM3 Universal Multifunctional Electric Power Quality Meter. Root cause is improper access control: lack of authentication for a remote service allows access to device setup and configuration. Documented impact includes unauthorized access to configuration data a...

CVE-2017-5167

The CVE-2017-5167 issue affects BINOM3 Universal Multifunctional Electric Power Quality Meter due to a hard-coded password/Vulnerability: Users cannot change their passwords. Public advisories (ICS-CERT update and CVE entries) describe the impact as unauthorized access to the device, potential se...