CVE-2017-5166: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device...

CVE-2017-5164: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session CROSS-SITE SCRIPTING...

CVE-2017-5167: Use of Hard-coded Credentials

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords...

CVE-2017-5165: Cross-Site Request Forgery (CSRF)

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per sensitive function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration...

CVE-2017-5162: Missing Authentication for Critical Function

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration...

PT-2017-16357

Name of the Vulnerable Software and Affected Versions BINOM3 Universal Multifunctional Electric Power Quality Meter affected versions not specified Description The issue allows an attacker to execute arbitrary script code in another user's browser session due to improper verification of input sen...

PT-2017-16358

Name of the Vulnerable Software and Affected Versions BINOM3 Universal Multifunctional Electric Power Quality Meter affected versions not specified Description The issue is related to the lack of a CSRF Token generated per page and/or per sensitive function, which can allow silent execution of...

PT-2017-16360

Name of the Vulnerable Software and Affected Versions BINOM3 Universal Multifunctional Electric Power Quality Meter affected versions not specified Description The issue concerns the inability of users to change their own passwords, which could lead to security risks if default or weak passwords...

PT-2017-16359

Name of the Vulnerable Software and Affected Versions BINOM3 Universal Multifunctional Electric Power Quality Meter affected versions not specified Description An issue was discovered that can be used to gain privileged access to the device due to an INFORMATION EXPOSURE flaw. Recommendations At...

PT-2017-3142

Name of the Vulnerable Software and Affected Versions BINOM3 Universal Multifunctional Electric Power Quality Meter affected versions not specified Description The issue is related to the lack of authentication for remote services in the BINOM3 Universal Multifunctional Electric Power Quality...

Intercepter-NG v1.9 - Multifunctional Network Toolkit for Android

Intercepter-NG is a multifunctional network toolkit for various types of IT specialists. It has functionality of several famous separate tools and more over offers a good and unique alternative of Wireshark for android. The main features are: Network discovery with OS detection Network traffic...

CVE-2014-3894

Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...

CVE-2014-3894

CVE-2014-3894 is a documented cross-site scripting (XSS) vulnerability in PHP Kobo’s Multifunctional MailForm Free (≤2014/1/28). The issue stems from how HTTP Referer headers are processed, allowing remote attackers to inject arbitrary scripts/HTML. Affected product: Multifunctional MailForm Free...

CVE-2014-3894: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...

PT-2014-5583

Name of the Vulnerable Software and Affected Versions Kobo Multifunctional MailForm Free versions 2014/1/28 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header. This can lead to the execution of malicio...

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Exploit for windows platform in category local exploits Title: ====== Format Factory v2.95 - Buffer Overflow Vulnerabilities Introduction: ============= Format Factory is a multifunctional media converter. Provides functions below ... - All to MP4/3GP/MPG/AVI/WMV/FLV/SWF. - All to...