89 matches found
Input validation
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...
spc-ps.edu.hk Cross Site Scripting vulnerability OBB-1262757
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Siemens SPC Controllers < 3.6.0 Denial of Service
Binary data 720055.prm...
CVE-2019-5434
An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability could be used to perform various types of attacks, e.g. exploit serialize-related PHP vulnerabilities...
spc-ps.edu.hk XSS vulnerability
Open Bug Bounty ID: OBB-591756 Description| Value ---|--- Affected Website:| spc-ps.edu.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
spc-ps.edu.hk XSS vulnerability
Open Bug Bounty ID: OBB-556373 Description| Value ---|--- Affected Website:| spc-ps.edu.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
spc-ps.edu.hk XSS vulnerability
Open Bug Bounty ID: OBB-448017 Description| Value ---|--- Affected Website:| spc-ps.edu.hk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
GLSA-201707-02 : Game Music Emu: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201707-02 Game Music Emu: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Game Music Emu. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...
Game Music Emu: Multiple vulnerabilities
Background Game Music Emu is a multi-purpose console music emulator and player library. Description Multiple vulnerabilities have been discovered in Game Music Emu. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially...
spc-ps.edu.hk XSS vulnerability
Vulnerable URL: http://www.spc-ps.edu.hk/listAdNotice.php/"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2703435 VIP website status:| No Check spc-ps.edu.hk SSL connection:|...
Updated audacious-plugins packages fix security vulnerability
Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961. These issues were...
Security update for libgme (important)
This update for libgme fixes the following issues: - CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961: Various issues were fixed in the handling of SPC music files that could have been exploited for gaining privileges of desktop users. bsc1015941 This update was imported...
SUSE-SU-2016:3250-1 Security update for libgme
This update for libgme fixes the following issues: - CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961: Various issues were fixed in the handling of SPC music files that could have been exploited for gaining privileges of desktop users. bsc1015941...
Siemens SPC Controller Series Denial-of-Service Vulnerability
OVERVIEW Davide Peruzzi of GoSecure! has identified a denial-of-service DoS vulnerability in the Siemens SPC Controllers. Siemens has produced an update that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following SPC Controllers are affected:...
CVE-2014-9369
Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service device restart via crafted packets...
Code injection
Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service device restart via crafted packets...
CVE-2014-9369
CVE-2014-9369 – Affected products and impact : Siemens SPC Controllers SPC4000, SPC5000, and SPC6000 (all versions before 3.6.0) can be forced into a denial-of-service state by specially crafted packets sent to the web interface, causing the device to restart. The vulnerability is categorized as ...
CVE-2014-9369
Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service device restart via crafted packets...
SPSControl v1.2 iOS - (.spc) Persistent Vulnerability
Document Title: =============== SPSControl v1.2 iOS - .spc Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1404 Release Date: ============= 2015-01-16 Vulnerability Laboratory ID VL-ID: ==================================== 1404...
aWebNews <= 1.5 (visview.php) Remote File Include Vulnerability
No description provided by source. Credit : SpC-x mail : [email protected] SaVSaK.CoM | SpC-x - The-BeKiR | aWebNews 1.0 version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : aWebNews Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : include...