CVE-2018-8855

The CVE-2018-8855 entry involves Echelon SmartServer 1 (all versions), SmartServer 2 (all versions before 4.11.007), i.LON 100 (all versions), and i.LON 600 (all versions). The vulnerability stems from cleartext transmission: devices allow unencrypted Web connections by default and can receive co...

Thousands of Android Devices Running Insecure Remote ADB Service

Despite warnings about the threat of leaving insecure remote services enabled on Android devices, manufacturers continue to ship devices with open ADB debug port setups that leave Android-based devices exposed to hackers. Android Debug Bridge ADB is a command-line feature that generally uses for...

Liberapay: Unsecure changing password

I would like to report about changing the password. When you change the password it didn't require the current password. The scenario here is when you forgot to logout your account when you login on other device it is easy to takeover the account by changing the password of it. Impact Easy to...

Microsoft Office: Allow Unsecure Apps, Web add-ins and Catalogs

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013allowinsecureappscatalogs.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Allow Unsecure Apps and Catalogs Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Apache JMeter uses an unsecure RMI connection in Distributed mode

Severity: Important Vendor: The Apache Software Foundation Versions Affected: JMeter 2.X, 3.X Description 0: When using Distributed Test only RMI based, jmeter uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code. This only affect...

Unsecure Server Exposed Private Data of Popular Ride-Hailing Service

By Uzair Amir Ride-hailing apps are currently in vogue now, there are countless This is a post from HackRead.com Read the original post: Unsecure Server Exposed Private Data of Popular Ride-Hailing Service...

CVE-2017-9045

The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocksv4.json file...

search.exeter.ac.uk XSS vulnerability

Vulnerable URL: http://search.exeter.ac.uk/s/search.html?query=%3C%2FSCript%3E%3CsvG%2FonLoad%3Dprompt%28%22OPENBUGBOUNTY%22%29%3E%2C=course-finder=defaultpreview Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

crok.biz XSS vulnerability

Vulnerable URL: http://www.crok.biz/index.php?lang=cz=odkazy" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

Windows Diagnostics Hub Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system...

blog.groupon.co.uk XSS vulnerability

Vulnerable URL: http://blog.groupon.co.uk/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

drsunilthanvi.com XSS vulnerability

Vulnerable URL: http://www.drsunilthanvi.com/video.php?videoname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

id.trefoil.tv Open Redirect vulnerability

Vulnerable URL: http://id.trefoil.tv/go.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

nomap.com.ng XSS vulnerability

Vulnerable URL: http://www.nomap.com.ng/search-store.php?q=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

ruedasytuercas.buscamas.pe XSS vulnerability

Vulnerable URL: http://ruedasytuercas.buscamas.pe/h/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 105471 Google Pagerank| 0 VIP website status:| No Check...

itBit Exchange: Unsecure data in "device" response - OTP

After open https://beta.itbit.com/api/user/devices url we got response:...

HT Editor 2.0.20 Buffer Overflow (ROP PoC)

No description provided by source. !/usr/bin/perl =head1 TITLE HT Editor 2.0.20 Buffer Overflow ROP PoC =head2 DESCRIPTION Since version 2.0.18, the stack overflow vulnerability has not been corrected, which I assume would make it 0day? I consequently recoded an exploit, as memory addresses have...

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server Remote Arbitrary File Deletion Vulnerability

No description provided by source. LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server WSVulnerabilityCore.dll SetTaskLogByFile Remote Arbitrary File Deletion Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page:...

AJ Auction Pro OOPD 2.3 - (id) SQL Injection Vulnerability

No description provided by source. ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE...

MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit

No description provided by source. !/usr/bin/perl MCPWS Personal - Webserver = 1.3.21 DoS Exploit Vendor: http://www.mcpsoftware.de The coder used a unsecure VB-function Open to open requested files and didn't include a working error handling On Error Goto etc. It's possible to exploit this...