62 matches found
Bootloader mode vulnerability in Flexi Soft Gateways v3
The SICK PSIRT received a report about a Missing Authentication for Critical Function vulnerability in the firmware of FX0-GPNT v3 and FX0-GENT v3. This vulnerability was introduced with the hardware redesign of the v3 of FX0-GENT and FX0-GPNT as part of the implementation of the RK512 protocol...
[Important] [Security] Virtuozzo ReadyKernel patch 152.0 for Virtuozzo Hybrid Server 7.5
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5. NOTE: No more updates are planned for the kernel 3.10.0-1160.21.1.vz7.174.13. Vulnerability id: RK-286 3.10.0-1160.21.1.vz7.174.13 to...
rk-suedeifel.de Cross Site Scripting vulnerability OBB-2826363
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-21406
An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...
Denial of service
An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...
CVE-2020-21406
The CVE-2020-21406 vulnerability affects RK Smart TV Box MAX and V88 SmartTV box. It allows a denial-of-service via the switchNextDisplayInterface service. According to the initial records, the issue has a CVSS v3.1 base score of 7.5 (Network, no authentication, low complexity, high impact on ava...
CVE-2020-21406
An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...
rk-dentaltechnik.de Cross Site Scripting vulnerability OBB-2721637
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious Package
Overview tomtom-rk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
GSD-2021-1002755 net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
net: stmmac: dwmac-rk: fix oob read in rkgmacsetup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
rk-imperia.ru Cross Site Scripting vulnerability OBB-1470437
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
volen.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-665871 Description| Value ---|--- Affected Website:| volen.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
WordPress rk-responsive-contact-form SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. rk-responsive-contact-form is one of the responsive contact form plugin. A SQL injection vulnerability exists in...
CVE-2017-1002027
Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rkuserlist.php...
CVE-2017-1002027
CVE-2017-1002027 affects the WordPress plugin rk-responsive-contact-form v1.0. The root cause is SQL injection in rk_user_list.php where the parameter $delid is not sanitized before inclusion in a query. Public references describe this as an Authenticated Blind SQL Injection (WPVulndb) and the NV...
rk-responsive-contact-form 1.0 - Authenticated Blind SQL Injection
The rk-responsive-contact-form WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
phpAuthent 0.2.1 - SQL Injection Vulnerability
No description provided by source. phpAuthent 0.2.1 SQL Injection Vulnerability Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : phpAuthent http://phpauth.sourceforge.net/ Download : http://phpauth.sourceforge.net/download.php Vulnerable File...
photovideotube 1.11 - Multiple Vulnerabilities
photovideotube 1.11 - Multiple Vulnerabilities / | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team Researcher /- PhotoVideoTube v 1.1 = Multiple Vulnerabilities /- Insecure Cookie Handling & Cookie Grabber & Upload Shell /- http://photovideotube.com/ /- see demo script...
I-Rater Platinum SQL Injection
I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in password : Photo Rating Script Pro ...
I-Rater ProPlantinum 4.0 - Authentication Bypass
I-Rater ProPlantinum 4.0 - Authentication Bypass I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admi...