CVE-2018-1000871

HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "idutentemod" parameter in gestioneutenti.php file that can result in An attacker can dump all the database records of backend webserver. This attack appear to be exploitable via the attack can be done...

CVE-2018-13813

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15 Update 4, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15 Update 4, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F All versions V15 Update 4, SIMATIC WinCC Runtime...

CVE-2018-13813

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15 Update 4, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15 Update 4, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F All versions V15 Update 4, SIMATIC WinCC Runtime...

iniNet SpiderControl SCADA WebServer Cross-Site Scripting Vulnerability

The iniNet SpiderControl SCADA WebServer is a SCADA system server from iniNet Solutions, Switzerland. A cross-site scripting vulnerability exists in iniNet SpiderControl SCADA WebServer versions prior to 2.03.0001. A remote attacker can exploit this vulnerability by sending a specially crafted UR...

CVE-2018-18991

Reflected cross-site scripting non-persistent in SCADA WebServer Versions prior to 2.03.0001 could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser...

Cross site scripting

Reflected cross-site scripting non-persistent in SCADA WebServer Versions prior to 2.03.0001 could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser...

CVE-2018-18991

Reflected cross-site scripting non-persistent in SCADA WebServer Versions prior to 2.03.0001 could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser...

CVE-2018-18991

Reflected cross-site scripting non-persistent in SCADA WebServer Versions prior to 2.03.0001 could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser...

CVE-2018-18991

SpiderControl SCADA WebServer (versions prior to 2.03.0001) is affected by CVE-2018-18991: a reflected cross-site scripting (non-persistent) flaw caused by improper input neutralization during web page generation. An attacker can craft a URL to execute JavaScript in a victim’s browser. Mitigation...

SpiderControl SCADA WebServer

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: SpiderControl Equipment: SCADA WebServer Vulnerability: Reflected Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute JavaScript...

Directory Traversal

takeapeek is vulnerable to directory traversal. A remote attacker is able to exploit the vulnerability using the ../ characters to retrieve directory and files which are otherwise not available from the webserver...

WordPress sermon-shortcodes 1.0 Arbitrary File Download

Exploit Title : WordPress sermon-shortcodes 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org sermonmanager.pro...

WordPress allow-l10n-upload-filename 1.0 Arbitrary File Download

Exploit Title : WordPress allow-l10n-upload-filename 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Exploit Risk : Low...

Redirection Vulnerability Open in Multiple Siemens Products

Siemens SIMATIC HMI Comfort Panels and so on are used to control and monitor the HMI software of machines and equipment of Siemens Siemens Company of Germany. An open redirect vulnerability exists in the webserver of several Siemens products, which can be exploited by an attacker to redirect user...

Shell In A Box 2.2.0 Denial Of Service

Product: Shell In A Box aka shellinabox, shellinaboxd "Shell In A Box implements a web server that can export arbitrary command line tools to a web based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugin...

Intel Rapid Web Server webserver component information disclosure vulnerability

Intel Rapid Web Server is a rapid storage server from Intel Corporation. webserver is one of the web server components. A security vulnerability exists in the webserver component of Intel Rapid Web Server version 3. An attacker can exploit this vulnerability by accessing the network to obtain...

WAGO 750-881 01.09.18 - Cross-Site Scripting

WAGO 750-881 01.09.18 - Cross-Site Scripting Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting Date: 2018-08-30 Exploit Author: SecuNinja @secuninja Vendor Homepage: wago.com Version: 01.09.1813 and earlier Affected Products: Ethernet Controller 750-881 - 01.09.1813, 01.08.01 10 CVE : N...

CVE-2018-12161

Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access...

CVE-2018-12161

CVE-2018-12161 affects Intel Rapid Web Server 3 webserver component. The issue is insufficient session validation that may allow an unauthenticated user to disclose information over the network. Affected product: Intel Rapid Web Server 3 webserver component. Impact: information disclosure with ne...

Unrestricted file upload

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable co...