GE Proficy WebSpace - Login Panel Detection

GE Proficy WebSpace is a thin-client delivery platform for GE Proficy HMI/SCADA iFIX, CIMPLICITY applications over the web. It exposes industrial HMI screens via browser on TCP/491 by default. The Server header "WebSocket++/0.7.0" is a unique indicator. !/usr/bin/env python3 -- coding: utf-8 --...

webspace (>=2.7.84, <=2.7.89) potentially affected by CVE-2024-40647 via sentry-sdk (0.16.1)

sentry-sdk PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - webspace =2.7.84, =2.7.89 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

webspace (>=2.7.84, <=2.7.89) potentially affected by CVE-2023-28117 via sentry-sdk (0.16.1)

sentry-sdk PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - webspace =2.7.84, =2.7.89 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

webspace (>=2.7.84, <=2.7.89) potentially affected by CVE-2024-40647 via sentry-sdk (0.16.1)

sentry-sdk PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - webspace =2.7.84, =2.7.89 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

webspace-guenstig-mieten.de Improper Access Control vulnerability OBB-3772909

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webspace (>=2.7.84, <=2.7.89) potentially affected by CVE-2023-28117 via sentry-sdk (0.16.1)

sentry-sdk PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - webspace =2.7.84, =2.7.89 Source cves: CVE-2023-28117 Source advisory: OSV:GHSA-29PR-6JR8-Q5JM...

dvc (>=0.8.2, <=0.8.6), gutenberg2zim (>=1.1.3.0, <=1.1.9) +5 more potentially affected by CVE-2022-21699 via ipython (5.3.0)

ipython PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - dvc =0.8.2, =1.1.3.0, =1.0.0b1, =0.0.5, =0.0.2, =0.1.3, =2.7.73, =2.7.89 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

Denial of Service in Extension "Deferred image processing" (deferred_image_processing)

Wrong usage of the TYPO3 FAL API results in copies of processed files being saved to the /var/transient/ folder of a TYPO3 website on every frontend request. This can result in Denial of Service, since the webspace may be filled up with image files simply by crafting a large amount of requests to...

Denial of Service in extension "Authenticator" (defbu_authenticator)

The extension bundles demo files of a 3rd party QR Code generator allowing a remote user to create QR Codes saved as PNG files on the webserver. This can result in Denial of Service, since the webspace can be filled up with a large amount of PNG files...

Joomla! 1.7.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can...

Joomla! 1.5.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can...

webspace-discount-24.de XSS vulnerability

Open Bug Bounty ID: OBB-226493 Description| Value ---|--- Affected Website:| webspace-discount-24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

webspace-for-you.de XSS vulnerability

Vulnerable URL: http://www.webspace-for-you.de/?domaincheck Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check webspace-for-you.d...

[20170704] - Core - Installer: Lack of Ownership Verification

The CMS installer application lacked a process to verify the users ownership of a webspace, potentially allowing users to gain control...

Insider revealed the thunder catch the chicken to achieve a method and prevention tips-vulnerability warning-the black bar safety net

The world's largest sorrow, than they are to harm you, unbeknownst to you also for him too beholden to. Such absurd things, only in the TV series appear in? You ever think of yourself will become like that? If you don't believe, after reading this article the quasi surprise you! Thundercatch the...

Unfixed XSS vulnerability at webspace-verkauf.de

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting webspace-verkauf.de, which at the time of submission ranked 511393 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...