803 matches found
CVE-2020-6985
CVE-2020-6985 affects Moxa PT-7528 and PT-7828 Ethernet switches: firmware versions PT-7528 ≤ 4.0 and PT-7828 ≤ 3.9 expose a hard-coded service code for console access. The Red Hat and NVD entries, plus the ICS advisory, confirm a remote-exploitation risk with high-impact vectors (remote, no user...
CVE-2020-6987
CVE-2020-6987 affects Moxa PT-7528 (firmware ≤4.0) and PT-7828 (firmware ≤3.9) Ethernet switches. The vulnerability is a weak cryptographic algorithm that may disclose confidential information. The issue is documented with CVSSv3.1 base score 7.5 (Network attack, no privileges, high confidentiali...
CVE-2020-6987
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed...
CVE-2020-6983
CVE-2020-6983 affects Moxa PT-7528 series (firmware version 4.0 or lower) and PT-7828 series (version 3.9 or lower). The root cause is a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered. The issue is documented with high impact (confidentiality...
CVE-2020-6983
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered...
CVE-2020-6989
The CVE-2020-6989 entry concerns Moxa PT-7528 series (firmware 4.0 or lower) and PT-7828 series (firmware 3.9 or lower). The vulnerability is a stack-based buffer overflow in the device web server that enables a remote attacker to cause a denial-of-service or to execute arbitrary code. Connected ...
CVE-2020-6989
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code...
cintramedica.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1119398 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cintramedica.pt website an...
Moxa PT-7528 and PT-7828 Series Hard Credential Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A hard credential vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to obtain sensitive information...
Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by attackers to obtain sensitive information...
Moxa PT-7528 and PT-7828 Series Weak Password Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to gain unauthorized access to the system...
Moxa PT-7528 and PT-7828 Series Information Disclosure Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. An information disclosure vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by attackers to obtain sensitive information...
Moxa PT-7528 and PT-7828 Series Hardcoding Vulnerabilities
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A hard-coded vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to recover confidential data...
Moxa PT-7528 and PT-7828 Series Ethernet Switches
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: PT-7528 Series and PT-7828 Series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...
PT-2019-7038 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: The issue is related to improper input validation, which could lead to a partial Denial of Service. Recommendations: At the moment, there is no information about a newer version that contai...
QIWI: [qiwi.me] Stored XSS
Stored XSS with WAF bypass in "wishlist" functionality Хранимая ХСС в функционале вишлистов с обходом встроенного WAF. https://twitter.com/ptswarm...
QIWI: IDOR редактирование любого вишлиста
The Piggybox service had the ability to edit other people's wishlists using a specially formed request. В копилке существовала возможность редактировать чужие вишлисты с помощью специально сформированного запроса. https://twitter.com/ptswarm...
PT-2019-4228 · Microsoft · Windows Appx Deployment Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows AppX Deployment Server affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows AppX Deployment Server component, allowing an attacker to elevate their privileges. ...
vasp.pt Open Redirect vulnerability
Open Bug Bounty ID: OBB-1013613 Security Researcher Gh05tPT Helped patch 6899 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting vasp.pt website and its...