1187 matches found
Juniper Junos for M/MX Series Routers IPv6 Neighbor Discovery DoS (JSA10786)
According to its self-reported version and configuration, the remote Juniper Junos M/MX Series device is affected by a denial of service vulnerability in a Packet Forwarding Engine PFE when processing IPv6 neighbor discovery ND packets that originate from subscribers and are destined to M/MX seri...
CVE-2017-7457
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure...
CVE-2017-7457
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure...
Xxe
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure...
CVE-2017-7457
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure...
CVE-2017-7457
CVE-2017-7457 affects Moxa MX-AOPC Server 1.5 (MX-AOPC UA Server). The vulnerability is an XML External Entity (XXE) injection via ".AOP" files, leading to remote file disclosure. Root cause is improper handling of external entities in MX-AOPC Server file types. Public references in the connected...
mx-3.cz XSS vulnerability
Vulnerable URL: http://www.mx-3.cz/go.php?mode=print=en"';--=search.php=cartid2479192| Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22758774 VIP website status:| No Check mx-3.cz...
Moxa MX AOPC-Server v1.5 XML External Entity Exploit
Exploit for windows platform in category remote exploits + Credits: John Page AKA HYP3RLINX Vendor: ============ www.moxa.com Product: ======================= MX-AOPC UA SERVER - 1.5 Moxa's MX-AOPC UA Suite is the first OPC UA server for industrial automation supporting both push and pull...
Moxa MX AOPC-Server 1.5 - XML External Entity Injection
Credits: John Page AKA HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt + ISR: ApparitionSec Vendor: ============ www.moxa.com Product: ======================= MX-AOPC UA SERVER - 1.5 Moxa's MX-AOPC...
Moxa MX-AOPC UA Server 1.5 XML Injection
Credits: John Page AKA HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt + ISR: ApparitionSec Vendor: ============ www.moxa.com Product: ======================= MX-AOPC UA SERVER - 1.5 Moxa's MX-AOPC...
lanif.infotec.mx XSS vulnerability
Vulnerable URL: http://lanif.infotec.mx/swagenda/index.php?fecha= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
How I snooped into your private Slack messages [Slack Bug bounty worth $2,500]
When researching about MX records of slack.com, I noticed that they used a 3rd party email service. In that service, however slack.com was already claimed. After a little more research, I found that all the sub-domains of slack.com like teamname.slack.com also had MX set to the same service. Thes...
mx-3.cz XSS vulnerability
Vulnerable URL: http://mx-3.cz/go.php?page=home.htm"=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22104794 VIP website status:| No Check mx-3.cz SSL connection:| Grade: F...
support.clean-mx.com XSS vulnerability
Vulnerable URL: http://support.clean-mx.com/clean-mx/phishing.php?ip=50.87.144.247=id DESC'/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability
OVERVIEW Independent researcher Zhou Yu has identified an unquoted service path escalation vulnerability in Moxa’s Active OPC Server application. Moxa has produced a new version to mitigate this vulnerability. Zhou Yu has tested the new version to validate that it resolves the vulnerability...
Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability (cisco-sa-20160504-tpxml)
Cisco TelePresence Codec TC and Collaboration Endpoint CE Software are vulnerable to a vulnerability in the XML application programming interface API which could allow an unauthenticated, remote attacker to bypass authentication and access a targeted system through the API SPDX-FileCopyrightText:...
PRO MX 2 - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application PRO MX 2 published at the 'play' market has multiple vulnerabilities...
MX Motocross Free - Corrupted files, Dangerous filesystem permissions, Dynamic Code Loading vulnerabilities
HackApp vulnerability scanner discovered that application MX Motocross Free published at the 'play' market has multiple vulnerabilities...
2XL MX Offroad - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 2XL MX Offroad published at the 'play' market has multiple vulnerabilities...