Fuji Electric NR Digital IO Module Detection

Binary data 757464.prm...

nr-kurier.de XSS vulnerability

Open Bug Bounty ID: OBB-549375 Description| Value ---|--- Affected Website:| nr-kurier.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OAuth - Critical - Access Bypass - SA-CONTRIB-2017-056

This module enables you to protect requests via the OAuth authentication protocol. The module doesn't sufficiently notify the Cache API to avoid caching responses under the scenario in which an authenticated user requests a resource such as unpublished node. This vulnerability is mitigated by the...

UBUNTU-CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

OAuth - Less Critical - Access Bypass - SA-CONTRIB-2017-006

This module enables you to use the OAuth 1.a protocol to authenticate requests. The module does not does not implement the OAuth 1.0a security fix reported at https://oauth.net/advisories/2009-1/. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordance wit...

nr-pro.com XSS vulnerability

Open Bug Bounty ID: OBB-198375 Description| Value ---|--- Affected Website:| nr-pro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID20951: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43425 First Published: 2016 February 5 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20951 may contain the following files: Name |...

Threat Outbreak Alert RuleID20659: Email Messages Distributing Malicious Software on January 23, 2016

Medium Alert ID: 43174 First Published: 2016 January 25 13:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20659 may contain the following files: Name |...

Cross site scripting

Cross-site scripting XSS vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr parameter to the default URI...

CVE-2008-3505

PolyPager 1.0 rc2 and earlier is affected by a Cross‑site Scripting (XSS) vulnerability. The issue arises in the default URI where an attacker can inject arbitrary web script or HTML through the nr parameter. This is documented in CVE-2008-3505/ NVD as an XSS with a base score of 4.3 (Medium) and...

Xitami Web Server 2.5c2 - LRWP Processing Format String (PoC)

/ PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email: [email protected] Thanks to BuzzDee for learning me how to us...

CVE-2005-4243

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the 1 popupid parameter in popups.edit.php; 2 so, 3 sb, and 4 nr parameters in customer.tickets.view.php; 5 subrackingid parameter in subscribers.tracking.edit.php; 6 delete...

[SECURITY] New version of apcd released

Package: apcd Vulnerability type: symlink attack Debian-specific: no The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. If the apcd process gets a SIGUSR1 signal it will dump its status to /tmp/upsstat. However this file is not opened safely, which makes it a...