188 matches found
Heatmiser Netmonitor 3.03 - HTML Injection
Heatmiser Netmonitor 3.03 - HTML Injection Exploit Title: Heatmiser Netmonitor 3.03 - HTML Injection Date: 2019-12-22 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.heatmiser.com/en/ Hardware Link: https://www.zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf Software: Netmonitor...
CVE-2013-4867
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
Hardcoded credentials
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
CVE-2013-4867
CVE-2013-4867 affects Electronic Arts’ Karotz Smart Rabbit, version 12.07.19.00. Connected sources describe a vulnerability class called Python module hijacking occurring during the device setup, specifically related to a Python script used in Wi‑Fi setup (e.g., autorunwifi). The impact described...
CVE-2013-4867
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
CVE-2008-5008
Buffer overflow in src/srcsinc.c in Secret Rabbit Code aka SRC or libsamplerate before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file...
Rabbit Movie CMS has xss vulnerability
Rabbit TV CMS is an open source content building system. A cross-site scripting vulnerability exists in Rabbit Movie CMS. Attackers can use this vulnerability to embed malicious code in web pages to obtain users' personal information or steal administrator cookie information...
Rabbit Movie CMS has xss vulnerability
Rabbit TV CMS is an open source content building system. A cross-site scripting vulnerability exists in Rabbit Movie CMS. Attackers can use this vulnerability to embed malicious code in web pages to obtain users' personal information or steal administrator cookie information...
Linux/x86 - Rabbit Shellcode Crypter (200 bytes)
Introduction Exploit Title: Rabbit Shellcode Crypter Date: 24.4.2019 Exploit Author: Petr Javorik, www.mmquant.net Tested on: Linux ubuntu 3.13.0-32-generic, x86 Description: Crypter which encrypts, decrypts and executes given shellcode using Rabbit symmetric cipher Keep in mind before use 1. Max...
Rabbit Hole - Moderately critical - Access bypass - SA-CONTRIB-2019-029
The Rabbit Hole module allows administrators to control what should happen when a regular user tries to view an entity at its own page; for example, it may deliver a 403 Access Denied or 404 Page Not Found response, or redirect the user to another path. The module doesn't respect the Rabbit Hole...
SQL Injection Vulnerability in Rabbit Movie CMS
Rabbit TV CMS is an open source content building system. Rabbit Movie CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Authentication flaw
Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...
CVE-2018-11050
Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...
CVE-2018-11050
Dell EMC NetWorker is affected by CVE-2018-11050 in versions 9.0–9.1.1.8, 9.2.1.3, and 18.1.0.1. The issue is a Clear-Text authentication over the network in the RabbitMQ AMQP component, causing user credentials to be sent unencrypted to the remote AMQP service. An unauthenticated attacker on the...
CVE-2016-6567
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
Design/Logic Flaw
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
CVE-2016-6567 SHDesigns' Resident Download Manager (as well as the Ethernet Download Manager) does not authenticate firmware downloads before executing code and deploying them to devices
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
CVE-2016-6567
The CVE-2016-6567 entry describes SHDesigns’ Resident Download Manager for Rabbit 2000/3000 CPU boards as not authenticating firmware updates before executing code. A remote attacker able to send UDP traffic could potentially execute arbitrary code on the device. Public details indicate the Resid...
sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections
Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text...
PyeongChang 2018 Winter Olympics Opening Ceremony Disrupted by Malware Attack
The Pyeongchang Winter Olympics taking place in South Korea was disrupted over the weekend following a malware attack before and during the opening ceremony on Friday. The cyber attack coincided with 12 hours of downtime on the official website for the Winter Games, the collapse of Wi-Fi in the...