One Small Fix Would Curb Stingray Surveillance

The technology needed to limit stingrays is clear—but good luck getting telecoms on board...

5G Is Here—and Still Vulnerable to Stingray Surveillance

5G was supposed to offer new protections against so-called stingray surveillance devices. New research shows it's anything but...

New Attacks Against 4G, 5G Mobile Networks Re-Enable IMSI Catchers

At NDSS Symposium 2019, a group of university researchers yesterday revealed newly discovered cellular network vulnerabilities that impact both 4G and 5G LTE protocols. According to a paper published by the researchers, "Privacy Attacks to the 4G and 5G Cellular Paging Protocols Using Side Channe...

Cell-Site surveillance devices (Stingray) could disrupt 911 emergency calls

By Uzair Amir Senator Ron Wyden of Oregon has made startling new revelations about CSS or cell-site stimulators. These cell surveillance devices, better known as Stingray, are used to disrupt communications of cell phones, mostly of criminals and lawbreakers. However, Sen. Wyden asserts that the...

ICE is Using Stingray to Track Illegal Immigrants

According to court documents, US Immigration and Customs Enforcement is using Stingray cell-site simulators to track illegal immigrants...

BlackBerry CEO Defends Lawful Access Principles, Supports Phone Hack

BlackBerry’s CEO made the company’s stance on lawful access requests clear this week and is defending actions to provide Canadian law enforcement with what it needed to decrypt communications between devices. The company’s CEO John Chen penned a statement on Monday, reiterating that one of...

Police Using Planes Equipped with Dirtbox to Spy on your Cell Phones

The Anaheim Police Department of California — Home of Disneyland — admitted that they used special Cell Phone surveillance technology, known as DirtBox, mounted on aircraft to track millions of mobile users activities. More than 400 pages of new documents PDF published Wednesday revealed that Loc...

Feds Change Policy to Require Warrant for Use of Stingrays

The Department of Justice has established a new policy that requires federal law enforcement agents–and state and local agencies working with the department–to obtain search warrants in order to use Stingray devices. The change is a major one, as agents will now need to show probable cause before...

Riverbed SteelApp (Stingray) Traffic Manager < 9.7 Multiple XSS

The remote host is a Riverbed SteelApp formerly known as Stingray Traffic Manager running a version of the web user interface prior to 9.7. It is, therefore, affected by multiple cross-site scripting vulnerabilities in the 'locallog.cgi' script due to improper validation of user-supplied input to...

CVE-2014-5348

Cross-site scripting XSS vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray aka SteelApp Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray aka SteelApp Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter...

CVE-2014-5348

Cross-site scripting XSS vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray aka SteelApp Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter...

CVE-2014-5348

CVE-2014-5348 is a cross-site scripting (XSS) vulnerability in Riverbed Stingray (SteelApp) Traffic Manager Virtual Appliance, affecting the web UI script located at apps/zxtm/locallog.cgi (logfile parameter). The flaw exists in Stingray/Virtual Appliance 9.6 patchlevel 9620140312 and can be expl...

RiverBed Stingray Traffic Manager 9.6 Cross Site Scripting

I. VULNERABILITY ------------------------- XSS Reflected vulnerability in RiverBed Stingray Traffic Manager Virtual Appliance V 9.6 II. BACKGROUND ------------------------- Silver Peak VX software marries the cost and flexibility benefits of virtualization with the performance gains associated wi...

CVE-2008-4168

Cross-site scripting XSS vulnerability in verifylogin.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the formusername parameter aka user name field...

Cross site scripting

Cross-site scripting XSS vulnerability in verifylogin.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the formusername parameter aka user name field...

CVE-2008-4168

Cross-site scripting XSS vulnerability in verifylogin.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the formusername parameter aka user name field...

CVE-2008-4168

The CVE-2008-4168 entry describes a Cross-site scripting (XSS) vulnerability in Pro2col Stingray FTS, specifically in verify_login.jsp, exploitable via the form_username field (the user name). The underlying cause is an input handling flaw that allows injection of arbitrary web script or HTML. Af...

[scip_Advisory 3809] Pro2col StingRay FTS login username cross site scripting

Pro2col StingRay FTS login username cross site scripting scip AG Vulnerability ID 3809 09/12/2008 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3809 I. INTRODUCTION StingRay FTS is a file transfer server for Internet communications. Customers are able to transfer files or to send emails via the...

pro2col-xss.txt

Pro2col StingRay FTS login username cross site scripting scip AG Vulnerability ID 3809 09/12/2008 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3809 I. INTRODUCTION StingRay FTS is a file transfer server for Internet communications. Customers are able to transfer files or to send emails via the...