phoenix - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application phoenix published at the 'play' market has multiple vulnerabilities...

phoenixarizonadining.com XSS vulnerability

Vulnerable URL: http://www.phoenixarizonadining.com/search.htm?term=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Phoenix Contact Logic+ 弱口令

No description provided by source...

applications.phoenixgroupcareers.co.uk vulnerability

Vulnerable URL: https://applications.phoenixgroupcareers.co.uk/actuarial/sendtofriend.aspx?jobId=1266=http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

select.phoenixcontact.com XSS vulnerability

Vulnerable URL: http://select.phoenixcontact.com/phoenix/dwl/dwlfr1.jsp?lang=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Phoenix Contact Software ProConOs and MultiProg Authentication Vulnerability

OVERVIEW Reid Wightman of Digital Bond has identified an authentication vulnerability in Phoenix Contact Software’s ProConOs and MultiProg applications. KW-Software originally wrote these applications without authentication intentionally. This vulnerability could be exploited remotely. AFFECTED...

phoenixnewtimes.com XSS vulnerability

Vulnerable URL: http://www.phoenixnewtimes.com/search?keyword=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Phoenix Contact ILC 150 ETH PLC Remote Control Script

Exploit for hardware platform in category remote exploits ! /usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage:...

Phoenix Contact ILC 150 ETH PLC - Remote Control Script

!/usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage: https://www.phoenixcontact.com/online/portal/us?urile=pxc-oc-itemdetail:pid=2985330 Version: ALL FW VERSIONS Teste...

Phoenix Contact ILC 150 ETH PLC Remote Control

! /usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage: https://www.phoenixcontact.com/online/portal/us?urile=pxc-oc-itemdetail:pid=2985330 Version: ALL FW VERSIONS Test...

Decrypted Nuclear exploit kit Flash exploit encryption-vulnerability warning-the black bar safety net

In recent years, the rise of Exploit Kit the EK collection a variety of exploit tools for a variety of file formats for automated analysis, exploit test. The more famous EK with Blackhole EK, Phoenix EK, Nuclear EK, etc. Recently we received Nuclear EK new sample, then the VT of the samples were...

Iconium Phoenix Theme - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Iconium Phoenix Theme - SQL İnjection vulnerability Google Dork: intext:Powered by İconium Mühendislik Date: 03.02.2015 Exploit Author: Herdem Vendor Homepage: http://iconiummuhendislik.com Software Link:...

The Pirate Bay Updated With Phoenix Image and Set to return on 1 February

The Pirate Bay — an infamous Torrent website predominantly used to share copyrighted material free of charge — could be relaunched on 1st February, the date the website has long been expected to return. The website went dark from the Internet following a raid in Sweden last month. After a complai...

CVE-2014-9195

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic...

CVE-2014-9195 Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic...

CVE-2014-9195

CVE-2014-9195 targets Phoenix Contact ProConOs and MultiProg, where missing authentication allows remote attackers to execute commands via protocol traffic. Connected materials confirm: (1) affected products: ProConOs and MultiProg; (2) vulnerability type: missing authentication for critical func...

CVE-2014-9195: Missing Authentication for Critical Function

Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic...

PT-2015-4150

Name of the Vulnerable Software and Affected Versions Phoenix Contact ProConOs and MultiProg affected versions not specified Description The issue allows remote attackers to execute arbitrary commands without requiring authentication. This can be achieved by sending protocol-compliant traffic...

Phoenix Contact ProConOs and MultiProg Authentication Bypass Vulnerability

Phoenix Contact ProConOs and MultiProg are applications that run process control and manage IEC 61131 logic. The protocol used by Phoenix Contact ProConOs and MultiProg fails to have a proper authentication mechanism, allowing an attacker to exploit the vulnerability to inject commands into the...

Virtuosa-Phoenix-Edition-5.2-ASX

Exploit Title: Virtuosa Phoenix Edition 5.2 ASX BOF SEH Overwrite Date found: Aug 16th 2010 Author: Acidgen Software Link: http://download1.virtuosa.com/VirtuosaTrial.exe Version: 5.2 junkA = '\x41' 1021 junkB = '\x42' 8979 nSEH = '\xeb\x06\xff\xff' SEH = '\x7e\xaa\x01\x10' nop = '\x90' 10...