ballerupbladet.dk XSS vulnerability

Vulnerable URL: http://ballerupbladet.dk/wp-content/banners/xl-byg.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5423868 VIP websi...

xl-shop.com XSS vulnerability

Vulnerable URL: http://www.xl-shop.com/xlshop/pages/showProductList.asp?category=KENNER%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/Textarea/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CVideo/Src/Onloadstart=confirm'OPENBUGBOUNTY'%3E==Kenner=sell Details: Description| Value ---|--- Patched:| No Latest che...

Google Android Qualcomm Wi-Fi Driver Denial of Service Vulnerability (CNVD-2017-10594)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm Wi-Fi Driver is a wifi driver. A denial of service vulnerability exists in the Qualcomm Wi-Fi Driver in Android on Nexus 5X, Pixel and Pixel XL devices. An attacker...

Google Pixel/Pixel XL Qualcomm Video Driver Information Disclosure Vulnerability

Google Pixel/Pixel XL are both a smartphone from the American company Google Google. Google Pixel/Pixel XL suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to gain access to potentially sensitive information, leading to further attacks...

Android Qualcomm bootloader boost vulnerability

Android on Google Pixel XL, etc. is an open source Linux-based operating system for Google Pixel XL, etc. smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm bootloader is one of the programs used in the... Qualcomm bootloader is a bootloader developed by Qualcomm...

Google Android Qualcomm Wi-Fi Driver Information Disclosure Vulnerability (CNVD-2017-03824)

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm Wi-Fi Driver is one of the wireless driver components. Qualcomm Wi-Fi Driver is one of the wireless driver components...

Honeywell XL Web II Controller Directory Traversal Vulnerability

Honeywell XL Web Controller is a web-based SCADA system. A directory traversal vulnerability exists in Honeywell XL Web II Controller. An unauthenticated user can perform a path traversal attack by accessing a specially crafted URL...

CVE-2017-5139

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password...

CVE-2017-5141

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated session...

CVE-2017-5142

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management...

CVE-2017-5143

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal attack by accessing a specific URL...

CVE-2017-5141

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated session...

CVE-2017-5142

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management...

CVE-2017-5140

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text...

Design/Logic Flaw

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text...

Session fixation

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated session...

Directory traversal

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal attack by accessing a specific URL...

Design/Logic Flaw

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management...

Default credentials

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password...

CVE-2017-5143

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal attack by accessing a specific URL...