CVE-2012-1239

The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral MFP devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors...

CVE-2012-1239

The vulnerability CVE-2012-1239 affects Toshiba TEC e‑Studio MFPs via the TopAccess web-based management interface. Firmware 30x–302, 35x–354, and 4xx–421 allow remote attackers to bypass authentication and gain administrative privileges. Documented impact: administrative access with potential cr...

CVE-2012-1239: Undefined Security Weakness

The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral MFP devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors...

TOSHIBA TEC e-Studio series vulnerable to authentication bypass

Overview Multiple e-Studio series products provided by TOSHIBA TEC CORPORATION contain an authentication bypass vulnerability. e-Studio is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in an...

JVN#92830293: TOSHIBA TEC e-Studio series vulnerable to authentication bypass

e-Studio is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in an authentication bypass. Impact An attacker that can access the product may log in with administrative privileges. As a result, settings may...

Bennet-Tec TList ActiveX SaveData Arbitrary File Creation

An arbitrary file creation vulnerability has been reported in Bennet-Tec TList's ActiveX control...

Anonymous Targets U.S. Makers of Crowd Control Tools

The Anonymous hacker collective lashed out against two companies it accuses of selling crowd control technologies to repressive regimes and to law enforcement, the Associated Press reports. Web sites belonging to Combined Systems Inc. CSI and Sur-Tec Inc. were both down on Friday. The...

Unfixed XSS vulnerability at www.cecomsa.com

Security researcher Tec-n0x, has submitted on 12/01/2008 a cross-site-scripting XSS vulnerability affecting www.cecomsa.com, which at the time of submission ranked 119450 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is current...

Unfixed XSS vulnerability at www.yourownbux.com

Security researcher Tec-n0x, has submitted on 12/01/2008 a cross-site-scripting XSS vulnerability affecting www.yourownbux.com, which at the time of submission ranked 2778784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...

Unfixed XSS vulnerability at www.tiquicia.com

Security researcher Tec-n0x, has submitted on 11/06/2008 a cross-site-scripting XSS vulnerability affecting www.tiquicia.com, which at the time of submission ranked 817383 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

yourownbux40-sql.txt

.. \ \ | | | | \ / \ / // / \ | | | \ | \ | \ /\ \ | / /| /| / \ \ / || / / / / . . | | \ | | | \ \ | \ / / | | / | \ \ \ | / / / / / / ---------------==---------------==---------------==---------------==---------------==---------------= -----============ Yourownbux v4.0 Blind...

YourOwnBux 4.0 (COOKIE) Remote SQL Injection Vulnerability

No description provided by source. .. \ \ | | | | \ / \ / // / \ | | | \ | \ | \ /\ \ | / /| /| / \ \ / || / / / / . . | | \ | | | \ \ | \ / / | | / | \ \ \ | / / / / / / ---------------==---------------==---------------==---------------==---------------==---------------=...

Yourownbux 4.0 - 'cookie' SQL Injection

.. \ \ | | | | \ / \ / // / \ | | | \ | \ | \ /\ \ | / /| /| / \ \ / || / / / / . . | | \ | | | \ \ | \ / / | | / | \ \ \ | / / / / / / ---------------==---------------==---------------==---------------==---------------==---------------= -----============ Yourownbux v4.0 Blind...

yourownbux-bypass.txt

!/usr/bin/perl use LWP::UserAgent; use HTTP::Request; +-------------------------------------------------------------------------------------------------+- + Yourownbux v4.0 ------------------------------------------------------------+--+ + Cookie Modification Exploit...

Yourownbux 4.0 (COOKIE) Authentication Bypass Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Request; +-------------------------------------------------------------------------------------------------+- + Yourownbux v4.0 ------------------------------------------------------------+--+ + Cookie Modification...

Yourownbux 4.0 (COOKIE) Authentication Bypass Exploit

Exploit for unknown platform in category web applications ===================================================== Yourownbux 4.0 COOKIE Authentication Bypass Exploit ===================================================== !/usr/bin/perl use LWP::UserAgent; use HTTP::Request;...

Unfixed XSS vulnerability at buxdol.net

Security researcher Tec-n0x, has submitted on 23/07/2008 a cross-site-scripting XSS vulnerability affecting buxdol.net, which at the time of submission ranked 323169 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2008. It is currently...

Unfixed XSS vulnerability at www.unidir.ch

Security researcher Tec-n0x, has submitted on 07/05/2008 a cross-site-scripting XSS vulnerability affecting www.unidir.ch, which at the time of submission ranked 1825542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currentl...

Unfixed XSS vulnerability at www.fitoterapia.net

Security researcher Tec-n0x, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.fitoterapia.net, which at the time of submission ranked 398222 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...

Unfixed XSS vulnerability at www.a-i.com

Security researcher Tec-n0x, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.a-i.com, which at the time of submission ranked 440280 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/07/2008. It is currently...