236 matches found
CVE-2022-30496
CVE-2022-30496 describes an SQL injection on the login page of MV Informática IDCE MV (version 1.0). The flaw arises in the user field, enabling an attacker to inject SQL payloads and connect to the underlying database to access enterprise‑level private and sensitive information. The provided con...
CVE-2022-30496: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...
Ransom.Conti Code Execution
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/20f0c736a966142de88dee06a2e4a5b1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Ransom.Conti Vulnerability: Code Execution Description: Conti looks for and executes DLLs ...
mv-streit.de Cross Site Scripting vulnerability OBB-2538481
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE: Security Advisory (SUSE-SU-2021:2555-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-23283
CVE-2020-23283 affects MV mConnect application v02.001.00 and enables information disclosure on the login page, allowing an attacker to determine valid users from the application’s database via brute force. Red Hat and other connected records corroborate the logon-page information disclosure; CNN...
MV mConnect application SQL注入漏洞
MV mConnect application is a software application. A SQL injection vulnerability exists in the MV mConnect application, which can be exploited to brute-force obtain user information due to a failure to restrict user actions on the product's login page. The following products and versions are...
MV IDCE application 日志信息泄露漏洞
The MV IDCE application is a software application. A log information disclosure vulnerability exists in the MV IDCE application. The vulnerability arises from the abnormal output of log files from a networked system or product...
PT-2021-2229 · Siemens · Simatic Mv400
Name of the Vulnerable Software and Affected Versions: SIMATIC MV400 family versions prior to v7.0.6 Description: The issue is related to the implementation of the ISN generator in the TI-NDKTCPIP protocol stack, which uses insufficiently random values. This could allow a remote attacker to predi...
mv-makler.de Cross Site Scripting vulnerability OBB-1409852
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mv-regglisweiler.de Cross Site Scripting vulnerability OBB-1346139
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mv-unterweissach.de Cross Site Scripting vulnerability OBB-1328302
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-22638
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions ihevcd mv pred, ihevcd get mv ctb, and ihevcd parse slice data...
mail.mv-agusta-club.com Cross Site Scripting vulnerability OBB-1220088
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-22412
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions ihevcd get mv ctb, ihevcd process, and ihevcd decode. No informati...
PT-2020-22468
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: ihevcd mv merge, ihevcd get mv ctb, and ihevcd parse sli...
mv-werften.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109644 Security Researcher Hchabik Helped patch 2357 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting mv-werften.com website and...
PT-2019-15755
Name of the Vulnerable Software and Affected Versions TitanHQ WebTitan versions prior to 5.18 Description An issue was discovered that allows low-privilege users to execute a number of commands as root, including mv, chown, and chmod, which can be exploited to gain root privileges by an attacker...
Rockwell Automation ArmorPoint 2pt TC/mV Input M12 1738-IT2IM12/A
Binary data 753875.prm...
Sinking a ship and hiding the evidence
Our earlier work on Voyage Data Recorder manipulation got us thinking about how a malicious individual or organisation might bring about the demise of a ship and hide the evidence. There are plenty of ways to get malware on to a ship. Whether it’s via satcoms, phishing, USB, crew Wi-Fi, dodgy DVD...