CVE-2016-10107

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header...

CVE-2016-10107

CVE-2016-10107 is an unauthenticated remote command‑injection vulnerability in Western Digital My Cloud NAS, affecting at least version 2.11.142 where an attacker can exploit a modified cookie header in index.php to execute arbitrary commands as root. Multiple sources corroborate the issue as a r...

CVE-2016-10108

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/googleanalytics.php URL via a modified arg parameter in the POST data...

CVE-2016-10108

CVE-2016-10108 : Western Digital MyCloud NAS (around version 2.11.142) is vulnerable to an unauthenticated remote command injection via the POST parameter arg in the /web/google_analytics.php endpoint, enabling potential root access. The CVSS metrics listed (3.0: 9.8, CRITICAL; 2.0: 10.0) reflect...

PT-2016-3231 · Western Digital · Western Digital My Cloud

Name of the Vulnerable Software and Affected Versions: Western Digital MyCloud NAS version 2.11.142 Description: The issue is related to unauthenticated remote command injection as root in the Western Digital MyCloud NAS. This occurs via a modified arg parameter in the POST data to the "/web/goog...

Western Digital MyCloud unauthenticated command injection

This module exploits authentication bypass CVE-2018-17153 and command injection CVE-2016-10108 vulnerabilities in Western Digital MyCloud before 2.30.196 in order to achieve unauthenticated remote code execution as the root user. The module first performs a check to see if the target is WD MyClou...

payments.westernunion.com XSS vulnerability

Vulnerable URL: https://payments.westernunion.com/products-and-services/?'"-- Details: Description| Value ---|--- Patched:| Yes, at 07.12.2016 Latest check for patch:| 07.12.2016 17:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Threat Outbreak Alert RuleID25120: Email Messages Distributing Malicious Software on September 21, 2016

Medium Alert ID: 48989 First Published: 2016 September 21 18:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25120 may contain the following files: Name ...

custsupport.westernunion.com XSS vulnerability

Vulnerable URL: https://custsupport.westernunion.com/GTConnect/UnifiedAcceptor/AddWebFramework.Main/yyy!aaa";alert"XSSPOSED";xxx=function111// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

custsupport.westernunion.com XSS vulnerability

Vulnerable URL: https://custsupport.westernunion.com/livechat/locale/en-us/chat-type/wucom/launchWUCom.html?%22gPrefillValues%22:%22XXXXX%22:%22%22%3E%3Csvg%20onload=alert%28%2FXSSPOSED%2F%29%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability...

Threat Outbreak Alert RuleID24514: Email Messages Distributing Malicious Software on August 24, 2016

Medium Alert ID: 48579 First Published: 2016 August 24 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24514 may contain the following files: Name |...

payments.westernunion.com XSS vulnerability

Vulnerable URL: https://payments.westernunion.com/uploads/?1 Details: Description| Value ---|--- Patched:| Yes, at 21.01.2017 Latest check for patch:| 21.01.2017 10:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

Western Craft: Wild West - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Western Craft: Wild West published at the 'play' market has multiple vulnerabilities...

Western Union - Paybybank - WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Western Union - Paybybank published at the 'play' market has multiple vulnerabilities...

ir.greatwesternbank.com Open Redirect vulnerability

Vulnerable URL: http://ir.greatwesternbank.com/PDFPageView.aspx?iid=4557904=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.03.2016 Latest check for patch:| 16.03.2016 04:31 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

Western Union Cross Site Scripting

Document Title: =============== Western Union CN Bug Bounty 6 - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-12-14 Vulnerability Laboratory ID VL-ID:...

Western Union CN Bug Bounty #6 - CS XSS Web Vulnerability

Document Title: =============== Western Union CN Bug Bounty 6 - CS XSS Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-12-14 Vulnerability Laboratory ID VL-ID: ====================================...

Western Union CN Bug Bounty #6 - CS XSS Web Vulnerability

Document Title: =============== Western Union CN Bug Bounty 6 - CS XSS Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-12-14 Vulnerability Laboratory ID VL-ID: ====================================...

Threat Outbreak Alert RuleID19353: Email Messages Distributing Malicious Software on November 12, 2015

Medium Alert ID: 42063 First Published: 2015 November 13 15:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19353 may contain the following files: Name |...

Threat Outbreak Alert RuleID18992: Email Messages Distributing Malicious Software on October 27, 2015

Medium Alert ID: 41749 First Published: 2015 October 27 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18992 may contain the following files: Name |...