mz-opleiders.nl Cross Site Scripting vulnerability OBB-2146673

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2021-21778

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...

CVE-2021-21778

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...

CVE-2021-21778

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...

CVE-2021-21778

CVE-2021-21778 affects MZ Automation GmbH’s lib60870.NET 2.2.0. The denial-of-service arises in the ASDU message processing path when handling IEC60870-5-104 messages. According to TALOS, the vulnerable code checks if (msgLength - bufPos) is large enough for the ASDU header, but if this check fai...

WordPress MZ MBO Access plugin <= 2.0.8 - Unauthorized AJAX call vulnerability

Unauthorized AJAX call vulnerability discovered by WPScanTeam in WordPress MZ MBO Access plugin versions = 2.0.8. Solution Update the WordPress MZ MBO Access plugin to the latest available version at least 2.0.9...

MZ MBO Access < 2.0.9 - Unauthorised AJAX call

The plugin did not properly check for CSRF in some of its AJAX action, allowing attackers to make users unwanted actions...

MZ Automation GmbH lib60870.NET ASDU message processing denial of service vulnerability

Summary A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability. Tested...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

Buffer overflow

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

CVE-2019-1010300 affects mz-automation libiec61850 1.3.0–1.3.2; vulnerability is a buffer overflow in server_example_complex_array that can cause a software crash. Attack vector is sending a specific MMS protocol packet. NVD metrics show CVSS v3.0 base score 7.5 (HIGH), network attack vector, low...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

SQL Injection Vulnerability in Co.MZ Enterprise System v1.1.0 Backend

Co.MZ Enterprise System is a lightweight enterprise website management system. Co.MZ Enterprise System v1.1.0 suffers from a SQL injection vulnerability in the backend. An attacker can exploit the vulnerability to obtain sensitive database information...

mz-clinic.ru Improper Access Control vulnerability

Open Bug Bounty ID: OBB-711222 Description| Value ---|--- Affected Website:| mz-clinic.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden...

mz-opleiders.nl XSS vulnerability

Open Bug Bounty ID: OBB-551697 Description| Value ---|--- Affected Website:| mz-opleiders.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mz-web.de XSS vulnerability

Vulnerable URL: http://www.mz-web.de/action/mz-web/4484314/search?query=...

MZ-WEB.DE - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MZ-WEB.DE published at the 'play' market has multiple vulnerabilities...

PwnPi - A Pen Test Drop Box distro for the Raspberry Pi

PwnPi is a Linux-based penetration testing dropbox distribution for the Raspberry Pi. It currently has 200+ network security tools pre-installed to aid the penetration tester. It is built a stripped down version of the Debian Wheezy image from the Raspberry Pi foundation's website and uses Openbo...

WordPress Mz-jajak plugin <= 2.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Mz-jajak plugin = 2.1 SQL Injection Vulnerability Date: 2012-08-10 Author: StRoNiX E-mail: [email protected] Software Link: http://downloads.wordpress.org/plugin/mz-jajak.zip Version: 2.1 tested --------------- PoC POST data...