punepolice.co.in XSS vulnerability

Open Bug Bounty ID: OBB-559256 Description| Value ---|--- Affected Website:| punepolice.co.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Gas is too expensive? Let’s make it cheap!

A few months ago, while undertaking unrelated research into online connected devices, we uncovered something surprising and realized almost immediately that we could be looking at a critical security threat. What we found was a simple purple web interface that was in fact a link to a real-life ga...

Hacker Used Malware To Hike Prices for Gas Station Customers

By Waqas Russian authorities have identified an extensively distributed malware campaign targeting This is a post from HackRead.com Read the original post: Hacker Used Malware To Hike Prices for Gas Station Customers...

Hacker Infects Gas Pumps with Code to Cheat Customers

Authorities in Russia have broken up a widespread scheme involving dozens of gas-station employees who used software programs on electronic gas pumps to con customers into paying for more fuel than then actually pumped into their tank. The scam shorted customers between 3-to-7 percent per gallon ...

Synology Photo Station 6.8.2-3461 Remote Code Execution

!/usr/local/bin/python """ Synology Photo Station = 6.8.2-3461 latest SYNOPHOTOFlickrMultiUpload Race Condition File Write Remote Code Execution Vulnerability Found by: mrme Tested: 6.8.2-3461 latest at the time Vendor Advisory: https://www.synology.com/en-global/support/security/SynologySA1802...

Synology Photo Station 6.8.2-3461 - SYNOPHOTO_Flickr_MultiUpload Race Condition File Write Remote Code Execution

Synology Photo Station 6.8.2-3461 - SYNOPHOTOFlickrMultiUpload Race Condition File Write Remote Code Execution !/usr/local/bin/python """ Synology Photo Station = 6.8.2-3461 latest SYNOPHOTOFlickrMultiUpload Race Condition File Write Remote Code Execution Vulnerability Found by: mrme Tested:...

Synology Photo Station 6.8.2-3461 - 'SYNOPHOTO_Flickr_MultiUpload' Race Condition File Write Remote Code Execution

!/usr/local/bin/python """ Synology Photo Station = 6.8.2-3461 latest SYNOPHOTOFlickrMultiUpload Race Condition File Write Remote Code Execution Vulnerability Found by: mrme Tested: 6.8.2-3461 latest at the time Vendor Advisory: https://www.synology.com/en-global/support/security/SynologySA1802...

Cross site scripting

In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could...

CVE-2017-14383

In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could...

Security Bulletin: NVIDIA Driver Security Updates for CPU Speculative Side Channel Vulnerabilities

NVIDIA driver response to CPU speculative side channel vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero’s January 3, 2018 publication of novel information disclosure attacks tha...

The vulnerability of the microprogrammed Wi-Fi router STATION L-02F, caused by buffer overflows, allows attackers to execute arbitrary code.

The vulnerability of the microprogrammed software of the Wi-Fi router STATION L-02F is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Dell EMC VNX2 Operating Environment for File and VNX1 Operating Environment for File VNX Control Station Cross-Site Scripting Vulnerability

The Dell EMC VNX2 Operating Environment for File and the VNX1 Operating Environment for File are both file storage appliances from Dell, U.S.A. The VNX Control Station is one of these consoles. A cross-site scripting vulnerability exists in the web server error page of the VNX Control Station in...

EMC VNX1 / VNX2 Family Cross Site Scripting Vulnerability

A fix is available for certain versions of VNX Control Station for VNX1 and VNX2 that contain a reflected cross site scripting vulnerability. This vulnerability could potentially be exploited by malicious users to compromise the affected system. Affected includes Dell EMC VNX2 versions prior to...

Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2018-01382)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in the PixlrEditorHandler.php file in Synology Photo Station versions prior to 6.8.0-3456. A remote attacker can exploit the vulnerability to inject...

Synology Photo Station Cross-Site Scripting Vulnerability (Synology_SA_17_80)

Synology Photo Station is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

CVE-2017-12072

Synology Photo Station is affected by a Cross-Site Scripting (XSS) vulnerability in PixlrEditorHandler.php. The issue allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter in versions earlier than 6.8.0-3456. Root cause: improper handling of the id paramet...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...