1078 matches found
CVE-2020-6989
The CVE-2020-6989 entry concerns Moxa PT-7528 series (firmware 4.0 or lower) and PT-7828 series (firmware 3.9 or lower). The vulnerability is a stack-based buffer overflow in the device web server that enables a remote attacker to cause a denial-of-service or to execute arbitrary code. Connected ...
CVE-2020-6983: Use of Hard-coded Cryptographic Key
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered...
CVE-2020-6989: Stack-based Buffer Overflow
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code...
CVE-2020-6987: Use of a Broken or Risky Cryptographic Algorithm
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed...
CVE-2020-6995: Weak Password Requirements
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access...
CVE-2020-6985: Use of Hard-coded Credentials
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console...
CVE-2020-6993: Exposure of Sensitive Information to an Unauthorized Actor
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization...
cintramedica.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1119398 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cintramedica.pt website an...
Moxa PT-7528 and PT-7828 Series Information Disclosure Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. An information disclosure vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by attackers to obtain sensitive information...
Moxa PT-7528 and PT-7828 Series Hard Credential Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A hard credential vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to obtain sensitive information...
Moxa PT-7528 and PT-7828 Series Weak Password Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to gain unauthorized access to the system...
Moxa PT-7528 and PT-7828 Series Hardcoding Vulnerabilities
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A hard-coded vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to recover confidential data...
Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm Vulnerability
Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by attackers to obtain sensitive information...
Moxa PT-7528 and PT-7828 Series Ethernet Switches
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: PT-7528 Series and PT-7828 Series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...
PT-2019-7038 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: The issue is related to improper input validation, which could lead to a partial Denial of Service. Recommendations: At the moment, there is no information about a newer version that contai...
QIWI: [qiwi.me] Stored XSS
Stored XSS with WAF bypass in "wishlist" functionality Хранимая ХСС в функционале вишлистов с обходом встроенного WAF. https://twitter.com/ptswarm...
QIWI: IDOR редактирование любого вишлиста
The Piggybox service had the ability to edit other people's wishlists using a specially formed request. В копилке существовала возможность редактировать чужие вишлисты с помощью специально сформированного запроса. https://twitter.com/ptswarm...
PT-2019-4228
Name of the Vulnerable Software and Affected Versions Microsoft Windows AppX Deployment Server affected versions not specified Description The issue is related to insufficient access restrictions in the Windows AppX Deployment Server component, allowing an attacker to elevate their privileges. To...
vasp.pt Open Redirect vulnerability
Open Bug Bounty ID: OBB-1013613 Security Researcher Gh05tPT Helped patch 6899 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting vasp.pt website and its...