Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability

OVERVIEW Independent researcher Zhou Yu has identified an unquoted service path escalation vulnerability in Moxa’s Active OPC Server application. Moxa has produced a new version to mitigate this vulnerability. Zhou Yu has tested the new version to validate that it resolves the vulnerability...

Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability (cisco-sa-20160504-tpxml)

Cisco TelePresence Codec TC and Collaboration Endpoint CE Software are vulnerable to a vulnerability in the XML application programming interface API which could allow an unauthenticated, remote attacker to bypass authentication and access a targeted system through the API SPDX-FileCopyrightText:...

PRO MX 2 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PRO MX 2 published at the 'play' market has multiple vulnerabilities...

MX Motocross Free - Corrupted files, Dangerous filesystem permissions, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application MX Motocross Free published at the 'play' market has multiple vulnerabilities...

2XL MX Offroad - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 2XL MX Offroad published at the 'play' market has multiple vulnerabilities...

Camera MX - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Camera MX published at the 'play' market has multiple vulnerabilities...

夏普 Sharp MX-M264FP 复印机未授权访问

No description provided by source...

62.67.194.183 XSS vulnerability

Vulnerable URL: http://62.67.194.183/clean-mx/viruses.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

app.iev.tabasco.gob.mx XSS vulnerability

Open Bug Bounty ID: OBB-91582 Description| Value ---|--- Affected Website:| app.iev.tabasco.gob.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Mitsubishi MX Component v3 ActiveX Buffer Overflow (CVE-2013-3075)

A code execution vulnerability has been reported in Mitsubishi's MX PLC component. The vulnerability is due to insufficient validation of input by several functions. A remote attacker can exploit this vulnerability by enticing a user to visit a maliciously crafted website. This can lead to code...

ucol.mx XSS vulnerability

Vulnerable URL: http://www.ucol.mx/interpretextos/buscar.php?idrevis=%22%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 22:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Juniper Junos MX Series Trio-based PFE Modules Security Bypass (JSA10666)

According to its self-reported version number, the remote Juniper Junos MX series device is affected by a security bypass vulnerability when processing stateless firewall filters on a device with Trio-based PFE modules with IPv4 filters. A remote attacker can exploit this issue to bypass stateles...

Juniper Junos MX Series BBE Routers jpppd Remote DoS (JSA10665)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Juniper PPP daemon jpppd. A remote attacker can exploit this issue by sending a specially crafted PAP Authenticate-Request after successful negotiation of the PPP...

CVE-2014-6382

The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge BBE router, allows remote attackers to cause a denial of service jpppd crash and restart by sending a crafted P...

Design/Logic Flaw

The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge BBE router, allows remote attackers to cause a denial of service jpppd crash and restart by sending a crafted P...

CVE-2014-6382

CVE-2014-6382 affects Juniper MX Series routers running Junos 13.3R3–13.3Rx pre-13.3R6, 14.1 pre-14.1R4, 14.1X50 pre-14.1X50-D70, and 14.2 pre-14.2R2 when configured as a broadband edge (BBE) router. The issue is a DoS in the PPP daemon (jpppd) triggered by a crafted PAP Authenticate-Request afte...

CVE-2014-6382: Improper Input Validation

The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge BBE router, allows remote attackers to cause a denial of service jpppd crash and restart by sending a crafted P...

CVE-2014-7994: Improper Input Validation

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, aka Cisco-Meraki defect ID...

CVE-2014-7995: Undefined Security Weakness

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077...

CVE-2014-7999: Undefined Security Weakness

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565...