ZTE OTCP Cross-Site Scripting Vulnerability

ZTE OTCP is a set of next-generation network management platform products from China's ZTE Corporation ZTE. A cross-site scripting vulnerability exists in ZTE OTCP 1.19.20.02 and earlier versions. The vulnerability stems from the lack of proper validation of client data by the WEB application. An...

Linear eMerge E3-Series Cross-Site Scripting Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A cross-site scripting vulnerability exists in the Linear eMerge E3-Series. The vulnerability stems from a lack of proper validation of client data by the web application. An...

IPBRICK OS Cross-Site Scripting Vulnerability

IPBRICK OS is a Linux-based communication platform. The platform includes features such as document and process management, e-mail and collaboration tools. A cross-site scripting vulnerability exists in IPBRICK OS version 6.3. The vulnerability stems from a lack of proper validation of client dat...

Prometheus Cross-Site Scripting Vulnerability

Prometheus is open source software written in the Go language for recording real-time metrics from time-series databases built using the HTTP pull model. A cross-site scripting vulnerability exists in Prometheus versions prior to 2.7.1 that stems from a lack of proper validation of client-side da...

UBUNTU-CVE-2018-1000840

Processing Foundation Processing version 3.4 and earlier contains a XML External Entity XXE vulnerability in loadXML function that can result in An attacker can read arbitrary files and exfiltrate their contents via HTTP requests. This attack appear to be exploitable via The victim must use...

CVE-2016-10619

pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

The vulnerability of the microprogrammed software for Micrologix 1100 and Micrologix 1400, related to errors in managing registration data, allows a hacker to obtain user credentials.

The vulnerability of the microprogrammed logic controllers Micrologix 1100 and Micrologix 1400 lies in the fact that user credentials are sent to the web server using the HTTP GET method. Exploiting this vulnerability allows a malicious actor to obtain users’ credentials remotely...

UBUNTU-CVE-2017-10295

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker...

July 25, 2017 – Morning Cyber Coffee Headlines – “Henry Ford” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 25, 2017 - Headlines UK gov wants teens to practice cybersecurity in their...

Fixing Trust Through Certificate Transparency

SAN FRANCISCO–The security of data being transmitted over the Web relies on a large number of moving parts, from the integrity of the machine sending the data, to the security of the browser, to the implementation of encryption, to the fragility of the certificate authority system. Experts have...

Extract Website File Disclosure

Extract Website download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=74332316 demo : http://www.rightscripts.com/extractwebsite/ about : This tool help you extract web data include URL links, domain names,...

Extract Website (download.php filename) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Extract Website download.php filename File Disclosure Vulnerability ===================================================================== Extract Website download.php...

CMD build under virtual directory-vulnerability warning-the black bar safety net

The following is an ugly beggarweb data separation web and data separated,there was Pcanywhere,the database server has IIS, cscript.exe c:\inetpub\adminscripts\adsutil.vbs get w3svc/1/serverbindings first Web service port cscript.exe c:\inetpub\adminscripts\adsutil.vbs create w3svc/1/root/wodexi/...

CVE-2002-2118

Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL...

CVE-2002-2118

CVE-2002-2118 affects Blue World Lasso Web Data Engine 3.6.5. A buffer overflow in the URL handling allows remote attackers to trigger a denial of service. The available description confirms a network-facing vector via a long URL, with impact limited to DoS; no additional exploit details, affecte...