742 matches found
Authorization
An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP GET parameter passed to the "PhreeBooksERP-master/extensions/ShippingMethods/ups/labelmgr/jsinclude.php" and...
Netman 204 - Backdoor Account / Password Reset Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Netman 204 Backdoor and weak password recovery function Google Dork: intitle:"Netman 204 login" Date: 31st Jan 2017 Exploit Author: Simon Gurney Vendor Homepage: blog.synack.co.uk Software Link:...
upsexpresscritical.ups.com XSS vulnerability
Open Bug Bounty ID: OBB-205962 Description| Value ---|--- Affected Website:| upsexpresscritical.ups.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WinPower Elevation of Privilege Vulnerability
WinPower is a UPS monitoring software. WinPower suffers from an elevation of privilege vulnerability. An attacker is allowed to exploit the vulnerability to elevate privileges...
NetMan 204 Backdoor Account
NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Reference Installation Manual :...
Riello UPS / NetMan Detection (HTTP)
HTTP based detection of Riello NetMan network cards and the underlying uninterruptible power supply UPS device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
NetMan 204 - Backdoor Account Vulnerability
Exploit for hardware platform in category remote exploits NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Referenc...
NetMan 204 - Backdoor Account
NetMan 204 - Backdoor Account NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Reference Installation Manual :...
NetMan 204 - Backdoor Account
NetMan 204 - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NetMan 204 Vendor: http://www.riello-ups.com Product URL: http://www.riello-ups.com/products/4-software-connectivity/85-netman-204 Quick Reference Installation Manual :...
wwwapps.ups.com XSS vulnerability
Vulnerable URL: https://wwwapps.ups.com/WebTracking/processRequest?tracknum=K2512296114&WT.z;eCTAid=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
directron.com XSS vulnerability
Vulnerable URL: https://www.directron.com/hardware/accessories/power-protection/ups.html?manufacturer=";alert'OPENBUGBOUNTY';0:// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
WordPress Unlimited Pop-Ups 1.4.3 Cross Site Scripting
FULL DISCLOSURE Product : Unlimited Pop-Ups WordPress Plugin Exploit Author : Rahul Pratap Singh Version : 1.4.3 Home page Link : http://codecanyon.net/item/unlimited-popups-wordpress-plugin/8575498 Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date :...
Push Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Push Ups Workout published at the 'play' market has multiple vulnerabilities...
Pull Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Pull Ups Workout published at the 'play' market has multiple vulnerabilities...
Abs – Push-Ups - Arms - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Abs – Push-Ups - Arms published at the 'play' market has multiple vulnerabilities...
Runtastic Pull-ups Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Runtastic Pull-ups Workout published at the 'play' market has multiple vulnerabilities...
Abs Sit Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Abs Sit Ups Workout published at the 'play' market has multiple vulnerabilities...
Runtastic Sit-Ups Abs Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Runtastic Sit-Ups Abs Workout published at the 'play' market has multiple vulnerabilities...
Runtastic Push-Ups Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Runtastic Push-Ups Workout published at the 'play' market has multiple vulnerabilities...
