CVE-2019-13553

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

CVE-2019-13549

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...

Authentication flaw

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...

Hardcoded credentials

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

CVE-2019-13553

The CVE-2019-13553 entry describes a vulnerability in the Rittal Chiller SK 3232-Series web interface built on Carel pCOWeb firmware (A1.5.3–B1.2.4). The underlying issue is hard-coded credentials in the authentication mechanism, which could allow an attacker to influence core operations of the c...

CVE-2019-13553

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

CVE-2019-13549

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...

CVE-2019-13549

CVE-2019-13549 affects the Rittal Chiller SK 3232-Series web interface built on Carel pCOWeb firmware A1.5.3–B1.2.4. The issue is improper access control: authentication does not sufficiently protect against unauthorized configuration changes, allowing modification of primary operations (turning ...

Rittal Chiller SK 3232-Series

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rittal Equipment: Rittal Chiller SK 3232-Series Vulnerabilities: Missing Authentication for Critical Function, Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of these...

web1.sk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-894870 Security Researcher Gh05tPT Helped patch 6878 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting web1.sk website and its...

@bart.sk-ecommerce/node-touchstore-service (=1.0.17), @based/server (>=0.0.1 <=2.6.1) +156 more potentially affected by unknown CVE via squel (>=1.1.1 <=5.13.0)

squel NPM version =1.1.1, =0.0.1, =2.1.0, =1.1.2, =0.0.1, =2.0.0, =1.4.0, =0.1.1, =1.0.0, =0.11.4-canary.0f11eb2, =0.1.0, =0.0.1, =1.0.0, =1.0.15, =1.0.0, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4QHX-G9WP-G9M6...

CVE-2019-2095

In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

Walkthrough. Investigating an SSD

I had an interesting job come in. A client wants the data off a dead SSD, and it’s a model that regular data recovery companies won’t deal with, an SK Hynix drive. It’s used extensively on many Dell laptops. The drive is NVMe which means it uses several PCIe lanes for communication. First things...

reality69.sk XSS vulnerability

Open Bug Bounty ID: OBB-713104 Description| Value ---|--- Affected Website:| reality69.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

web1.sk XSS vulnerability

Open Bug Bounty ID: OBB-709788 Description| Value ---|--- Affected Website:| web1.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

ta3.sk XSS vulnerability

Open Bug Bounty ID: OBB-693125 Description| Value ---|--- Affected Website:| ta3.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

The vulnerability of the SkSampler::Fill method in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the SkSampler::Fill method SkSampler.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

auto123.sk XSS vulnerability

Open Bug Bounty ID: OBB-683246 Description| Value ---|--- Affected Website:| auto123.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

maltodextrin (=1.0.0), sk-stand (=0.2.12) +2 more potentially affected by CVE-2017-16044 via d3.js (=0.0.2-security)

d3.js NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on d3.js and may be impacted: - maltodextrin =1.0.0 - sk-stand =0.2.12 - smart-cloud-platform =1.0.0, =0.0.25, =0.0.27 Source cves: CVE-2017-16044 Source advisory:...

sk-rankweil.at XSS vulnerability

Open Bug Bounty ID: OBB-637478 Description| Value ---|--- Affected Website:| sk-rankweil.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...