thuraya.com XSS vulnerability

Vulnerable URL: http://www.thuraya.com/search/node/%3Cscript+src%3dhttps:%26sol;%26sol;openbugbounty.org%26sol;1.js%26num%3B Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 240257 V...

CVE-2013-6035

CVE-2013-6035 affects satellite terminals from Harris (BGAN RF-7800B-VU204, RF-7800B-DU204), Hughes (9201, 9450, 9502), Thuraya IP, Inmarsat, and Japan Radio JUE-250/JUE-500. The issue: firmware allows unauthenticated sessions on TCP port 1827 through an insecure proprietary protocol, enabling an...

CVE-2013-6034: Undefined Security Weakness

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login acce...

CVE-2013-6035: Improper Authentication

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to...

Hughes Network Systems Broadband Global Area Network (BGAN) satellite terminal firmware contains multiple vulnerabilities

Overview Firmware developed by Hughes Network Systems used in a number of BGAN satellite terminals contains undocumented hardcoded login credentials CWE-798. Additionally, the firmware contains an insecure proprietary communications protocol, likely a debugging service, that allows unauthenticate...