182 matches found
CVE-2020-36660
CVE-2020-36660 affects paxswill EVE Ship Replacement Program 0.12.11, specifically the User Information Handler component and the file src/evesrp/views/api.py. The vulnerability enables information disclosure due to manipulation in processing that is described in public advisories; remote initiat...
PT-2023-11828 · Unknown · Paxswill Eve Ship Replacement Program
Name of the Vulnerable Software and Affected Versions: paxswill EVE Ship Replacement Program version 0.12.11 Description: A vulnerability was found in the paxswill EVE Ship Replacement Program, affecting the User Information Handler component. This issue leads to information disclosure and can be...
Exposure of Sensitive Information in EVE-SRP
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to information disclosure. The attack may ...
[SECURITY] Fedora 35 Update: docker-distribution-2.6.2-17.git48294d9.fc35
Docker toolset to pack, ship, store, and deliver content...
[SECURITY] Fedora 36 Update: docker-distribution-2.6.2-17.git48294d9.fc36
Docker toolset to pack, ship, store, and deliver content...
ship-db.de Improper Access Control vulnerability OBB-2402447
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ship-2-shore.com.au Cross Site Scripting vulnerability OBB-2371454
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ship Ferry Ticket Reservation System v1.0 SQL-Injection-Bypass-Authentication
Description: The Ship/Ferry Ticket Reservation System v1.0 is vulnerable in the application /shipticketing/classes/Login.php from SQL-Injection-Bypass-Authentication. The parameter username from the login form is not protected correctly and there is no security and escaping from malicious payload...
WordPress Ship To eCourier plugin <= 1.0.1 - Cross-Site Request Forgery (CSRF) vulnerability allowing Plugin Settings Update
Cross-Site Request Forgery CSRF vulnerability allowing Plugin Settings Update discovered by WPScan Team in WordPress Ship To eCourier plugin versions = 1.0.1. Solution Update the WordPress Ship To eCourier plugin to the latest available version at least 1.0.2...
XSS Vulnerability in Ship 100 Virtual Goods Autoship System (CNVD-2021-19737)
Shipping 100 virtual goods automatic delivery system is a powerful virtual goods automatic delivery system/article pay to read the system, without human guards, customers can buy online to automatically complete the transaction. Support out-of-stock reminders/quick login/recycling bin/no login to...
2034, Part I: Peril in the South China Sea
“We've got a ship in duress that hasn't sent out a distress signal. Something doesn't add up.”...
SQL Injection Vulnerability in Shining Networks Virtual Goods Auto-Shipping System (Ship 100)
Virtual Goods Autoship System Ship 100 is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in Shining Networks Virtual Goods Auto Shipment System Shipment 100, which can be exploited by attackers to obtain sensitive information from the database...
Logic Flaw Vulnerability in Shining Networks Virtual Goods Auto-Shipping System (Ship 100) (CNVD-2020-27473)
Shipping 100 is a virtual goods autoship system/article pay to read system. Shining Networks Virtual Goods Auto-Shipping System Ship 100 has a logic flaw vulnerability, which can be exploited through this level of transgression vulnerability, you can delete arbitrary use of information...
Are you cyber seaworthy?
The decision to set sail in a commercial vessel rests with the captain. A captain with years of experience and training, who is skilled at sailing and navigating in all conditions. Increasingly, the state of a vessel’s cyber security will affect its seaworthiness. Yet in future we may expect a...
Pen Testing Ships. A year in review
Partially driven by the upcoming inclusion of Cyber Security by the IMO International Maritime Organisation, 2019 was a really busy year for maritime security testing at PTP. What can we all learn from a year of evaluating the security of ships? We’ve been involved in all sorts of ship testing,...
Mozilla Bug Bounty Program Doubles Payouts, Adds Firefox Monitor
Mozilla is bumping up its bug bounty payouts and has added new websites and services – including the recently deployed Firefox Monitor– to its bug bounty program in hopes of attracting more researchers to sniff out vulnerabilities. The browser-maker is doubling bug bounty payouts for most of its...
A week in security (July 8 – 14)
Last week on Malwarebytes Labs, we looked at ways to send your sensitive information in a secure fashion, examined some tactics in incident response land, and explored federal data privacy law. We also looked at how security tools can turn against you, and took a deep dive into the rather fiendis...
GAT-Ship Web Module 1.30 Information Disclosure Vulnerability
Exploit for multiple platform in category web applications GAT-Ship Web Module 1.30 - Unauthenticated Information Disclosure Vulnerability It is possible in versions 1.30 and below for unauthenticated attackers to query the GAT-Ship Web Module for system information via a crafted request: PoC:...
