1338 matches found
The vulnerability of the microprogrammed software of the MitraStar GPT-2541GNAC and MitraStar DSL-100HN-T1 lies in the use of a pre-installed account, allowing a perpetrator to gain access to the device.
The vulnerability of the microprogrammed routing devices MitraStar GPT-2541GNAC and MitraStar DSL-100HN-T1 is related to the use of a pre-installed account “zyad1234” with the password “zyad1234”. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the devic...
Multiple OEM - 'nsd' Remote Stack Format String (PoC)
STX Subject: Remote Stack Format String in 'nsd' binary from multiple OEM Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis December 2017 PoC: https://github.com/mcw0/PoC Release date: December 14, 2017 Full Disclosure: 0-Day - PoC - 1 $ curl...
Rating-Widget: Star Review System <= 2.8.9 - Enable Debugging
The Rating-Widget: Star Review System WordPress plugin was affected by an Enable Debugging security vulnerability...
libreoffice/xlsxfuzzer: Bad-cast to com::sun::star::uno::XInterface from cppuhelper::detail::XExceptionThrower in com::sun::star::uno::Reference<cppuhelper::detail::XExceptionThrower>::~Reference
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6162193541234688 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsxfuzzer Fuzz target binary: xlsxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...
libreoffice/docxfuzzer: Heap-buffer-overflow in cppu::OWeakObject::release
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4648468690763776 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...
Memory Corruption Vulnerability in AVI Video Processing by AVI Star
Video Star is a video player. A memory corruption vulnerability exists in the AVI video processing of the AVI Star player. An attacker can cause the program to crash by constructing a malformed AVI video, which if successfully exploited can lead to arbitrary code execution...
CVE-2017-16523
MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented...
Override Access Vulnerability in Flying Fishstar VE Series Routers
Flyingfish Star VE series router 1021 firmware is a router product developed by Chengdu Flyingfish Star Technology Development Co. An unauthorized access vulnerability exists in the Flying Fish Star VE Series Router 1021 firmware. An attacker could use this vulnerability to remotely change the...
staralliance.com XSS vulnerability
Open Bug Bounty ID: OBB-322089 Description| Value ---|--- Affected Website:| staralliance.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Star Queen Aliyun OSS credentials have information leakage vulnerability
Star Queen APP is a social platform based on beauty and beautification manicure plastic surgery and bodybuilding and other industries. AliCloud Object Storage Service OSS is a massive, secure and highly reliable cloud storage service provided by AliCloud. After the star AliCloud OSS credentials...
Friday Squid Blogging: Brittle Star Catches a Squid
Watch a brittle star catch a squid, and then lose it to another brittle star. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Cb Defense Scores Perfect 5-Star Overall Rating in SC Media Independent Test
What does it take to be the leading next-generation antivirus NGAV solution? Is it security efficacy? Is it visibility into malicious behavior throughout your enterprise? What about ease of use? SC Media recently looked to answer these questions and more by putting Cb Defense through its own...
CVE-2016-10042
The Arcadyan SLT-00 Star* (Swisscom Internet-Box) Web UI contains an authorization bypass (CVE-2016-10042) that allows unauthenticated HTTP requests to reconfigure the static routing table, enabling denial of service and information disclosure. Affected: Arcadyan SLT-00 Star* devices prior to R7....
Swisscom Internet-Box Authentication Bypass Vulnerability
Swisscom Internet-Box is a router from Arcadyan. An authentication bypass vulnerability exists in the web interface of the Arcadyan SLT-00 Star also known as Swisscom Internet-Box, which can be exploited by an attacker to cause a denial of service and information disclosure through unauthorized...
Website Star CMS has multiple vulnerabilities
Ltd. is a first-class Internet application service provider based on cloud computing. There is an arbitrary file name modification, arbitrary file reading vulnerability in the background of CMS. Attackers can use this vulnerability to arbitrarily delete or read website file information, and can n...
Trend Micro Smart Protection Complete Receives 5-Star Review from SC Magazine
The best days are the ones you wake up to good news you weren’t expecting, right? Well, earlier this month we woke up to find out the Trend Micro Smart Protection Complete had received a five-star rating and “Best Buy” recommendation from one of the security industries leading publications at SC...
classifieds.star-telegram.com XSS vulnerability
Vulnerable URL: http://classifieds.star-telegram.com/fort-worth-tx/all-categories/search?searchtype=advanced"'--!prompt/OPENBUGBOUNTY///...
tour.pornstarjustice.com XSS vulnerability
Open Bug Bounty ID: OBB-228804 Description| Value ---|--- Affected Website:| tour.pornstarjustice.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
