SysLINK M2M Modular Gateway contains multiple vulnerabilities

Overview The SysLINK SL-1000 M2M Machine-to-Machine Modular Gateway contains multiple vulnerabilities. Description According to the researcher, the SysLINK SL-1000 M2M Modular Gateway contains multiple vulnerabilities:CWE-259: Use of Hard-coded Password - CVE-2016-2331 By default, the device's we...

studio-sl-one.de XSS vulnerability

Vulnerable URL: http://www.studio-sl-one.de/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7013321 Google...

STHLM Traveling - SL Planner - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application STHLM Traveling - SL Planner published at the 'play' market has multiple vulnerabilities...

WordPress Store Locator 3.33.1 - SQL Injection

Using a combination of GET fields, it is possible to perform a SQL Injection attack using the ‘sl-xml.php’ script. This injection is performed on the LIMIT of the SQL query, however retrieving data via this vulnerability is very easy, due to the outputting of the resulting SQL error by the script...

SL User Create 0.2.4 - LSL script Secret String Weakness Information Disclosure

The SL User Create WordPress plugin was affected by a LSL script Secret String Weakness Information Disclosure security vulnerability...

SafeNet HASP SL ActiveX Control ChooseFilePath Buffer Overflow

A stack buffer overflow vulnerability has been reported in SafeNet HASP SL's ActiveX control...

Scientific Linux Security Update : yum-conf on SL3.x i386/x86_64

yum-conf changes are needed for the transition of SL 3 into legacy mode. Changes from the old yum-conf The files /etc/yum.conf and /etc/cron.daily/yum.cron are not marked as 'noreplace'. This means that if you have modified /etc/yum.conf or /etc/cron.daily/yum.cron, your version will be saved as...

Scientific Linux Security Update : openafs on SL41-45 i386/x86_64

In pthread-aware fileservers, the 'hostglock' pthread lock, accessed via the HLOCK and HUNLOCK macros, is used to provide safe access to host structures. This lock is required to be held when updating information pertaining to a host. The RPC handler for the GiveUpAllCallBacks RPC did not hold th...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - A flaw was found in the Linux kernel's garbage collector for AFUNIX sockets. A local, unprivileged user could use this flaw to trigger a denial of service out-of-memory condition. CVE-2010-4249, Moderate - A flaw was found in the Linux kernel's...

Evidalia Web SL SQL Injection

rubenlinux vulnerable a injeccion remota SQL autor==rubenlinux equipo=rubenlinux + DORK: "Evidalia Web SL" inurl:categoria.php?cid= + URL: http://www.evprogramas.com/categoria.php?cid= slqi + DEMO:...

CVE-2011-2405

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

Design/Logic Flaw

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2011-2405

The vulnerability CVE-2011-2405 affects HP ProLiant SL Advanced Power Manager (SL-APM). Firmware versions before 1.20 fail to properly validate users, enabling remote attackers to cause a denial of service via unspecified vectors. The HP Security Bulletin HPSBHF02699 (SSRT100592) lists affected v...

CVE-2011-2405

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2002-1974

The CVE-2002-1974 entry concerns the FTP service in Zaurus PDAs SL-5000D and SL-5500 that does not require authentication, enabling remote attackers to access the file system as root. Affected component: FTP service on the specified Zaurus models. Root cause: unauthenticated access to the FTP ser...

CVE-2002-1975

The CVE-2002-1975 entry applies to Sharp Zaurus PDA models SL-5000D and SL-5500. The vulnerability arises from using a fixed salt value "A0" to encrypt the screen-locking password stored in Security.conf, which enables local attackers to more easily brute-force the password. Reported details from...

CVE-2004-0356

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0357

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

CVE-2004-0356

CVE-2004-0356: A stack-based buffer overflow in the Supervisor Report Center of SL Mail Pro 2.0.9 and earlier allows remote code execution via an HTTP request containing a long HTTP sub-version. Affects SL Mail Pro up to version 2.0.9; exploitation details are not provided in the connected docume...

CVE-2004-0356

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...