365 matches found
epay.ucmerced.edu XSS vulnerability
Vulnerable URL: http://epay.ucmerced.edu/Help/NetHelp/default.htm?turl=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...
Brave Software: [iOS/Android] Address Bar Spoofing Vulnerability
Hello, I am Aaditya Purani, I would like to Report Address Bar spoofing vulnerability in Brave Browser on the IOS as well as Android Platform. All the Test have been carried out against Latest Brave Browser whose versions i have mentioned in Products affected section. Summary: Brave Browser Suffe...
PHPCMS V9 version of the background design flaws lead to arbitrary code execution vulnerability
Source link: http://www.cnbraid.com/ 0x01 background Since the default after installation requires Super administrator privileges, so the vulnerability is very tasteless, but the feeling should be in other cms, there are also, so the main share under the mining idea PS: using the test environment...
Moxa Discontinuing Vulnerable Line of ICS Devices
A vulnerability that exists in embedded computers manufactured by Moxa could allow remote authenticated users to overwrite firmware, in turn rendering the devices unusable. Moxa, a Taiwan-based networking company, announced recently that instead of patching the line of products affected by the...
CVE-2016-4500
Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access...
CVE-2016-4500
The CVE-2016-4500 entry concerns Moxa UC-7408 LX-Plus devices where remote authenticated users can write to the firmware and render a device unusable by leveraging root access. Technical details indicate missing authentication for critical function (CWE-306) enabling a firmware overwrite that is ...
UC Browser HD for Tablet - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application UC Browser HD for Tablet published at the 'play' market has multiple vulnerabilities...
Moxa UC 7408-LX-Plus Firmware Overwrite Vulnerability
OVERVIEW NCCIC/ICS-CERT has received information from a third party that identified a firmware overwrite vulnerability in Moxa’s UC 7408-LX-Plus device. Moxa has produced instructions to reduce exposure to this vulnerability. The Moxa UC 7408-LX-Plus device has been discontinued. This vulnerabili...
ecal-printer.ce.berkeley.edu XSS vulnerability
Vulnerable URL: http://ecal-printer.ce.berkeley.edu/pbio/uncfgdev.html?MACADDRESS=30055c181f14=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
Polycom VVX-Series Business Media Phones - Path Traversal Vulnerability
Exploit for hardware platform in category web applications Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom...
Polycom VVX-Series Business Media Phones - Directory Traversal
Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom VVX 101, 201, 300, 310, 400, 410, 500, 600, & 1500 UC...
Polycom VVX-Series Business Media Phones - Directory Traversal
Polycom VVX-Series Business Media Phones - Directory Traversal Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects--...
Polycom VVX-Series Path Traversal
Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom VVX 101, 201, 300, 310, 400, 410, 500, 600, & 1500 UC...
idm.ucmerced.edu XSS vulnerability
Vulnerable URL: https://idm.ucmerced.edu/idm/idclaim/index.jsp?error=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
Drupal UC Profile模块信息泄露漏洞
No description provided by source...
CVE-2015-8232
CVE-2015-8232 affects the Drupal UC Profile module (6.x-1.x) prior to version 6.x-1.3. The vulnerability arises from incomplete access checks when accessing profiles, potentially allowing remote attackers to disclose sensitive information from anonymous user profiles via unspecified vectors. The ...
CVE-2015-8232
The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors...
CmsTop Media Edition SQL Injection Vulnerability
CmsTop is a content management system CMS for domestic media websites, mainly serving online media, newspapers, magazines, radio and television, government and large and medium-sized enterprises, etc., and has served more than one hundred well-known media websites. There is a SQL injection...
致远A8-V5协同管理软件日志信息泄露
致远A8-V5日志信息泄露，包括UC认证信息和ctp信息,ctp日志内含有密码信息一、ctp信息泄露包含系统内运行信息，如某某用户登录，某某用户操作功能等等http://a8v51.seeyon.com/seeyon/logs/ctp.log可以利用此处泄露信息获取系统内大量账户信息，包括密码信息二、UC认证信息泄露，包括token等信息http://a8v51.seeyon.com/seeyon/logs/uc.log如果UC配置在互联网或者本地恶意员工利用可以劫持UC登录。...