Plantronics Hub 3.13.2 - Local Privilege Escalation

Exploit Title: Plantronics Hub 3.13.2 - Local Privilege Escalation Date: 2020-01-2 Exploit Author: Markus Krell - @MarkusKrell Vendor Homepage: https://support.polycom.com/content/dam/polycom-support/global/documentation/plantronics-hub-local-privilege-escalation-vulnerability.pdf Software Link:...

plantronics.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1022054 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting plantronics.com website...

plantronics.com XSS vulnerability

Open Bug Bounty ID: OBB-690868 Description| Value ---|--- Affected Website:| plantronics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

plantronics.com XSS vulnerability

Open Bug Bounty ID: OBB-580990 Description| Value ---|--- Affected Website:| plantronics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plantronics.com XSS vulnerability

Open Bug Bounty ID: OBB-568722 Description| Value ---|--- Affected Website:| plantronics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plantronics.com XSS vulnerability

Open Bug Bounty ID: OBB-564217 Description| Value ---|--- Affected Website:| plantronics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plantronics.com XSS vulnerability

Vulnerable URL: https://www.plantronics.com/us/catalog/comp/ajax-add-to-cart.jsp?skuId=sku6060021"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //==us=-1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability...

plantronics.com XSS vulnerability

Vulnerable URL: http://www.plantronics.com/us/support/kb/detail.jsp?k=1"' Style=position:fixed;top:0;left:0;font-size:999px; Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:|...

plantronics.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-166167 Description| Value ---|--- Affected Website:| plantronics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

plantronics.com XSS vulnerability

Vulnerable URL: http://www.plantronics.com/us/support/kb/index.jsp?category=All〈=enUS=%2FknowledgeSearch=All=All=--%3E%3C!%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E--%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

Plantronics Hub™ - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Plantronics Hub™ published at the 'play' market has multiple vulnerabilities...

Code injection

The sccp-protocol component in Cisco IP Communicator CIPC 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager CUCM, which allows remote attackers to cause a denial of service via vectors that trigger 1 on hook and 2 off hook messages, as demonstrated b...

Unfixed XSS vulnerability at www.plantronics.com

Security researcher tenest, has submitted on 14/12/2008 a cross-site-scripting XSS vulnerability affecting www.plantronics.com, which at the time of submission ranked 27021 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It is...