thuraya.com XSS vulnerability

Vulnerable URL: http://www.thuraya.com/search/node/%3Cscript+src%3dhttps:%26sol;%26sol;openbugbounty.org%26sol;1.js%26num%3B Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 240257 V...

CVE-2013-6035

CVE-2013-6035 affects satellite terminals from Harris (BGAN RF-7800B-VU204, RF-7800B-DU204), Hughes (9201, 9450, 9502), Thuraya IP, Inmarsat, and Japan Radio JUE-250/JUE-500. The issue: firmware allows unauthenticated sessions on TCP port 1827 through an insecure proprietary protocol, enabling an...

CVE-2013-6035: Improper Authentication

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to...

PT-2014-3019

Name of the Vulnerable Software and Affected Versions GateHouse affected versions not specified Harris BGAN RF-7800B-VU204 Harris BGAN RF-7800B-DU204 Hughes Network Systems 9201 Hughes Network Systems 9450 Hughes Network Systems 9502 Inmarsat affected versions not specified Japan Radio JUE-250...

CVE-2013-6034: Undefined Security Weakness

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login acce...

PT-2014-3020

Name of the Vulnerable Software and Affected Versions GateHouse firmware affected versions not specified Harris BGAN RF-7800B-VU204 firmware affected versions not specified Harris BGAN RF-7800B-DU204 firmware affected versions not specified Hughes Network Systems 9201 firmware affected versions n...

Hughes Network Systems Broadband Global Area Network (BGAN) satellite terminal firmware contains multiple vulnerabilities

Overview Firmware developed by Hughes Network Systems used in a number of BGAN satellite terminals contains undocumented hardcoded login credentials CWE-798. Additionally, the firmware contains an insecure proprietary communications protocol, likely a debugging service, that allows unauthenticate...