NetMan 204 - Backdoor Account

NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Reference Installation Manual :...

wwwapps.ups.com XSS vulnerability

Vulnerable URL: https://wwwapps.ups.com/WebTracking/processRequest?tracknum=K2512296114&WT.z;eCTAid=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

directron.com XSS vulnerability

Vulnerable URL: https://www.directron.com/hardware/accessories/power-protection/ups.html?manufacturer=";alert'OPENBUGBOUNTY';0:// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress Unlimited Pop-Ups 1.4.3 Cross Site Scripting

FULL DISCLOSURE Product : Unlimited Pop-Ups WordPress Plugin Exploit Author : Rahul Pratap Singh Version : 1.4.3 Home page Link : http://codecanyon.net/item/unlimited-popups-wordpress-plugin/8575498 Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date :...

Push Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Push Ups Workout published at the 'play' market has multiple vulnerabilities...

Pull Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pull Ups Workout published at the 'play' market has multiple vulnerabilities...

Abs – Push-Ups - Arms - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Abs – Push-Ups - Arms published at the 'play' market has multiple vulnerabilities...

Runtastic Pull-ups Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Runtastic Pull-ups Workout published at the 'play' market has multiple vulnerabilities...

Abs Sit Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Abs Sit Ups Workout published at the 'play' market has multiple vulnerabilities...

Runtastic Sit-Ups Abs Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Runtastic Sit-Ups Abs Workout published at the 'play' market has multiple vulnerabilities...

Runtastic Push-Ups Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Runtastic Push-Ups Workout published at the 'play' market has multiple vulnerabilities...

GE工业UPS SNMP适配器任意命令执行漏洞

No description provided by source...

Threat Outbreak Alert RuleID21459: Email Messages Distributing Malicious Software on March 10, 2016

Medium Alert ID: 44049 First Published: 2016 March 10 22:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21459KVR may contain the following files: Name |...

CVE-2016-0862

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors...

Code injection

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors...

CVE-2016-0861

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands via unspecified vectors...

EUVD-2016-0872

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2016-0862

GE SNMP/Web Interface adapter firmware versions prior to 4.8 are affected by CVE-2016-0862, which enables remote authenticated users to obtain sensitive cleartext account information due to cleartext storage of credentials. The connected ICS-CERT advisory confirms two vulnerabilities (including c...

CVE-2016-0861

The CVE covers GE SNMP/Web Interface adapters (firmware

GE Industrial Solutions UPS SNMP Adapter Command Injection

GE Industrial Solutions - UPS SNMP Adapter Command Injection and Clear-text Storage of Sensitive Information Vulnerabilities Timelines: Reported to ICS-CERT on: July 06, 2015 Fix & Advisory Released by GE: January 25, 2015 Vulnerability ID: GEIS16-01 GE Advisory:...