366 matches found
CVE-2018-1000046
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000045
NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...
Design/Logic Flaw
NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...
Remote code execution
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000046
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000046
NASA Pyblock radar data parsing library (Python) versions 1.0–1.3 contain a CWE-502 code execution vulnerability. The issue arises in the Radar data parsing library and can be exploited by a victim opening a specially crafted radar data file, enabling remote code execution. The vulnerability is r...
CVE-2018-1000045
NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...
CVE-2018-1000045
NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...
CVE-2018-1000046
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000046: Deserialization of Untrusted Data
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000045: Deserialization of Untrusted Data
NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...
PT-2018-9232
Name of the Vulnerable Software and Affected Versions: NASA Singledop version v1.0 Description: The issue is related to a remote code execution flaw in the NASA Singledop library, specifically affecting the Weather data component. This can be exploited when a victim opens a specially crafted rada...
PT-2018-9233
Name of the Vulnerable Software and Affected Versions: NASA Pyblock versions v1.0 through v1.3 Description: The issue is related to a CWE-502 vulnerability in the Radar data parsing library, which can result in remote code execution. This can be exploited via a victim opening a specially crafted...
Vulnerability Management for Network Perimeter
Network Perimeter is like a door to your organization. It is accessible to everyone and vulnerability exploitation does not require any human interactions, unlike, for example, phishing attacks. Potential attacker can automate most of his actions searching for an easy target. It's important not t...
Heart Size: Yet Another Biometric
Turns out that heart size doesn't change throughout your adult life, and you can use low-level Doppler radar to scan the size -- even at a distance -- as a biometric. Research paper to be available soon...
Cardiac Scan Authentication — Your Heart As Your Password
Forget fingerprint authentication, retinal scanning or advanced facial recognition that has recently been implemented by Apple in its iPhone X—researchers developed a new authentication system that doesn't require any of your interaction, as simply being near your device is more than enough. A...
wunderground.com XSS vulnerability
Vulnerable URL: http://www.wunderground.com/auto/lmaero/radar/radblast.asp?scale=1.00=DYX=N0R=you=1"...
wunderground.com XSS vulnerability
Vulnerable URL: https://www.wunderground.com/radar/radblast.asp?scale=1"...
wunderground.cx XSS vulnerability
Vulnerable URL: http://www.wunderground.cx/radar/radblast.asp?ID=EWX" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
Radar - фота кантроль для РБ - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Radar - фота кантроль для РБ published at the 'play' market has multiple vulnerabilities...