CVE-2018-18071

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as...

CVE-2018-18071

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as...

CVE-2018-18071

The CVE concerns Daimler Mercedes-Benz Me app for iOS (version 2.11.0-846). The issue is the encrypted Connected Vehicle API data exchange between the app and its server, which could be intercepted. This could allow misuse of the Remote Parking Pilot, vehicle unlocks, or access to sensitive data ...

CVE-2018-18071

An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as...

Circontrol CirCarLife Information Disclosure Vulnerability (CNVD-2018-20063)

Circontrol CirCarLife is a parking lot automation system from Circontrol, Spain. A security vulnerability exists in Circontrol CirCarLife versions prior to 4.3, which originates from the program storing sensitive information elements in JSON format in the /services/system/setup.json file. An...

Attackers Can Use Sonic and Ultrasonic Signals to Crash Hard Drives

Researchers have demonstrated how sonic and ultrasonic signals inaudible to human can be used to cause physical damage to hard drives just by playing ultrasonic sounds through a target computer's own built-in speaker or by exploiting a speaker near the targeted device. Similar research was...

PT-2018-46: Code Injection in EVLink Parking

The specialists of the Positive Research center have detected a Code Injection vulnerability in the EVLink Parking product. A code injection vulnerability in Schneider Electric’s EVLink Parking allows remote attackers to execute arbitrary code and obtain unauthorized access with maximum privilege...

PT-2018-47: SQL Injection in EVLink Parking

The specialists of the Positive Research center have detected an SQL Injection vulnerability in the EVLink Parking product. An SQL injection vulnerability in Schneider Electric’s EVLink Parking allows attackers to obtain unauthorized access to the web interface with full privileges. How to fix Us...

PT-2018-45: Hard-coded Credentials in EVLink Parking

The specialists of the Positive Research center have detected an Hard-coded Credentials vulnerability in the EVLink Parking product. A hard-coded credentials vulnerability in Schneider Electric’s EVLink Parking allows attackers to obtain unauthorized access to the device. How to fix Use vendor's...

Geldkarte - transaktionsid Cross Site Scripting Vulnerability

Document Title: =============== Geldkarte - transaktionsid Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2118 Release Date: ============= 2018-02-20 Vulnerability Laboratory ID VL-ID:...

D-Park Pro Domain Parking Script SQL Injection Vulnerability

D-Park Pro Domain Parking Script is a domain parking script. A SQL injection vulnerability exists in D-Park Pro Domain Parking Script version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...

D-Park Pro 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Username: Password: 0day.today 2018-04-02...

D-Park Pro 1.0 - SQL Injection

D-Park Pro 1.0 - SQL Injection Username: Password:...

D-Park Pro 1.0 - SQL Injection

Username: Password:...

Sql injection

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 is affected by SQL Injection in the login form. The vulnerability arises via the username parameter sent to admin/loginform.php, enabling an attacker to inject SQL commands. Reported in CVE-2017-15958 with remote, unauthenticated exploitation potential and hig...

D-Park Pro Domain Parking Script 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Username: Password: 0day.today 2018-01-03...

D-Park Pro Domain Parking Script 1.0 SQL Injection

Username: Password:...

RingGo - pay by phone parking - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application RingGo - pay by phone parking published at the 'play' market has multiple vulnerabilities...