77 matches found
curiosity SQL注入漏洞
curiosity is an application by the individual developer Corin Cerami. It provides image data from NASA's Curiosity Mars Rover. A SQL injection vulnerability exists in curiosity, which stems from the fact that incorrect manipulation of the parameter sol can lead to sql injection...
cloud.e.infojaguarlandrover.com Cross Site Scripting vulnerability OBB-2872452
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Interpol Arrests Leader of SilverTerrier Cybercrime Gang Behind BEC Attacks
A year-long international investigation has resulted in the arrest of the suspected head of the SilverTerrier cybercrime group by the Nigeria Police Force. "The suspect is alleged to have run a transnational cybercrime syndicate that launched mass phishing campaigns and business email compromise...
CVE-2021-33205
Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privileges and carry out malicious activities such as...
Western Digital EdgeRover 安全漏洞
Western Digital EdgeRover is a personal content application from Western Digital USA. A security vulnerability existed prior to version 0.25 of Western Digital EdgeRover, which stems from the way Node.js is used, where a low-privileged user could load malicious content into a directory with highe...
jdtmotors.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-553105 Description| Value ---|--- Affected Website:| jdtmotors.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
roverinstruments.com XSS vulnerability
Vulnerable URL: http://www.roverinstruments.com/faq.php?padrefaq=18=How+do+I+retrieve+the+credentials+%28Username+and+Password%29+to+access+the+%E2%80%9CUpdate+SW%E2%80%9D+area+=18KNOXSS Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:02 GMT...
landroverinsurance.com XSS vulnerability
Vulnerable URL: https://www.landroverinsurance.com/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...
Land Rover InControl Remote - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Land Rover InControl Remote published at the 'play' market has multiple vulnerabilities...
Neslo Desktop Rover 3.0 Malformed Packet Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13281/info Neslo Desktop Rover is prone to a remote denial of service. Reports indicate that the software will crash when a malformed packet is processed on TCP port 61427. A remote attacker may exploit this condition cra...
20-Year Old Vulnerability Patched in Compression Algorithm
A 20-year old vulnerability in the Lempel-Ziv-Oberhumer LZO compression algorithm – used in some Android phones, the Linux kernel, and even Mars Rovers – was finally patched this week. Code stemming from the algorithm’s library function has existed in the wild for two decades, but was recycled ov...
20-Year Old Vulnerability in LZO Compression Algorithm Went to Planet Mars
A 20 year old critical subtle integer overflow vulnerability has been discovered in Lempel-Ziv-Oberhumer LZO, an extremely efficient data compression algorithm that focuses on decompression speed, which is almost five times faster than zlib and bzip compression algorithms. Lempel-Ziv-Oberhumer LZ...
Log Rover pword Parameter SQL Injection
The remote host is running Log Rover, an ASP application for analyzing web server log files. The web interface included with the version of Log Rover installed on the remote host fails to sanitize user-supplied input to the 'pword' parameter of the 'login.asp' script before using it to construct...
News Rover 12.1 Rev 1 - Stack Overflow (2)
!/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected] ==============================================================================================...
News Rover 12.1 Rev 1 Remote Stack Overflow Exploit
No description provided by source. / News Rover 12.1 Rev 1 Remote Stack Overflow exploit Coded and discovered by Marsu  ...
Stack overflow
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...
CVE-2007-1041
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...
CVE-2007-1041
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...
CVE-2007-1041
The CVE-2007-1041 entry affects S&H Computer Systems News Rover 12.1 Rev 1, with multiple stack-based buffer overflows triggered by a crafted .nzb file containing a long group or subject string. This allows remote attackers to execute arbitrary code. The vulnerability details describe a straightf...
CVE-2007-1041: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...