Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution

Summary We introduce SDT-CS3B1 LTE router which is a SKT 3G and 4G LTE wireless communication based LTE router product. Description The router suffers from authenticated arbitrary system command execution. The application interface allows users to perform certain actions via HTTP requests without...

isnos-huila.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-258027 Description| Value ---|--- Affected Website:| isnos-huila.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-6596

partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to launch a 'Denial of Service attack' in the context of the user running the affected application...

Struts2远程代码执行漏洞（S2-033）

参考来源：绿盟科技 影响的版本 Struts 2.3.20 – Struts 2.3.28 不包括 2.3.20.3和 2.3.24.3。 不受影响的版本 Struts 2.3.20.3、 2.3.24.3 或者 2.3.28.1。 编者注： 2.3.28.1版本默认不启用"enableOGNLEvalExpression", 当存在以下配置时可触发该漏洞 漏洞分析 经过对Apache Struts2版本进行回溯，发现修复S2-033的代码和S2-032的代码基本相同。 根据官方描述修复S2-032漏洞是在Struts...

Updated libidn packages fix CVE-2015-2059

Updated libidn packages fix security vulnerability: In libidn before 1.31, stringpreputf8toucs4 did not validate that the input UTF-8 string was actually valid UTF-8, which could lead to out-of-bounds reads CVE-2015-2059...

Hacking ipcam like Harold in POI-vulnerability warning-the black bar safety net

0x00 for ipcam attack mesh and preparation 0x01 for embedded devices parameter injection vulnerability to conventional weapons and methods of analysis 0x02 several wonderful case 0x03 Hacking like POI 0x00 preparation This time we discussed is the analysis of the smart camera firmware,through a...

Command Injection Vulnerability in Multiple Cisco TelePresence Products

A vulnerability in the web framework of multiple Cisco TelePresence products could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this...

phpcms_v9. 3. 2 a management module logic validation vulnerability-vulnerability warning-the black bar safety net

In the file\modules\sms\sms. php: class sms extends admin function construct $this-logdb = pcbase::loadmodel'smsreportmodel'; $this-moduledb = pcbase::loadmodel'modulemodel'; $this-memberdb = pcbase::loadmodel'membermodel'; //Get the SMS platform configuration information $siteid = getsiteid;...

Unfixed XSS vulnerability at pc-computersecurity.com

Security researcher AR3SW0RMED, has submitted on 11/01/2012 a cross-site-scripting XSS vulnerability affecting pc-computersecurity.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

akcms code execution vulnerability-vulnerability warning-the black bar safety net

Last week digging out of the akcms background stencil getshell feeling nothing new, and then carefully looked at the code, found a comparison with“the future”of the hole, the code execution vulnerability, and the problem function is that the authors provided to the station user for secondary...

Unfixed XSS vulnerability at iranexam.net

Security researcher Arash Allebrahim, has submitted on 09/01/2012 a cross-site-scripting XSS vulnerability affecting iranexam.net, which at the time of submission ranked 2096346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It is...

Unfixed Phishing vulnerability at www.steuerbuero-wintz-potrafke.de

Security researcher owege, has submitted on 21/02/2012 a Phishing vulnerability affecting www.steuerbuero-wintz-potrafke.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is currently...

Fixed XSS vulnerability at www.astarise.net

Security researcher jokers, has submitted on 20/02/2012 a cross-site-scripting XSS vulnerability affecting www.astarise.net, which at the time of submission ranked 24357499 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

Unfixed XSS vulnerability at www.montbeliard-zoom.fr

Security researcher Atmon3r, has submitted on 15/02/2012 a cross-site-scripting XSS vulnerability affecting www.montbeliard-zoom.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at www.punemirror.in

Security researcher Snypter Dhruv, has submitted on 20/12/2011 a cross-site-scripting XSS vulnerability affecting www.punemirror.in, which at the time of submission ranked 208233 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

Unfixed XSS vulnerability at airleader.biz

Security researcher p0pc0rn, has submitted on 14/12/2011 a cross-site-scripting XSS vulnerability affecting airleader.biz, which at the time of submission ranked 10025627 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is current...

Unfixed XSS vulnerability at gusgus.com

Security researcher Euforia33, has submitted on 04/08/2011 a cross-site-scripting XSS vulnerability affecting gusgus.com, which at the time of submission ranked 2234793 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

Unfixed XSS vulnerability at picfind.mobi

Security researcher Brenn0, has submitted on 02/04/2011 a cross-site-scripting XSS vulnerability affecting picfind.mobi, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixe...

Fixed XSS vulnerability at www.questback.com

Security researcher Busi, has submitted on 11/10/2010 a cross-site-scripting XSS vulnerability affecting www.questback.com, which at the time of submission ranked 46927 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

Unfixed XSS vulnerability at drfd.hbs.edu

Security researcher Sony, has submitted on 08/12/2010 a cross-site-scripting XSS vulnerability affecting drfd.hbs.edu, which at the time of submission ranked 8982 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...