Lucene search
+L
Zero Science LabRecent

1149 matches found

Zero Science Lab
Zero Science Lab
•added 2023/09/30 12:00 a.m.•388 views

Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) Credentials Disclosure

Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...

8.7CVSS5.8AI score0.01418EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/09/22 12:00 a.m.•457 views

RoyalTSX 6.0.1 RTSZ File Handling Heap Memory Corruption PoC

Summary Royal TS is an ideal tool for system engineers and other IT professionals who need remote access to systems with different protocols. Not only easy to use, it enables secure multi-user document sharing. Description The application receives SIGABRT after RAPortCheck.createNWConnection...

7.8CVSS7.5AI score0.00189EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/09/01 12:00 a.m.•379 views

Tinycontrol LAN Controller v3 (LK3) Remote Admin Password Change

Summary Lan Controller is a very universal device that allows you to connect many different sensors and remotely view their readings and remotely control various types of outputs. It is also possible to combine both functions into an automatic if - this with a calendar when - then. The device...

9.8CVSS6AI score0.00698EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/09/01 12:00 a.m.•335 views

Tinycontrol LAN Controller v3 (LK3) Remote Credentials Extraction PoC

Summary Lan Controller is a very universal device that allows you to connect many different sensors and remotely view their readings and remotely control various types of outputs. It is also possible to combine both functions into an automatic if - this with a calendar when - then. The device...

5.8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2023/08/31 12:00 a.m.•383 views

Tinycontrol LAN Controller v3 (LK3) Remote Denial Of Service Exploit

Summary Lan Controller is a very universal device that allows you to connect many different sensors and remotely view their readings and remotely control various types of outputs. It is also possible to combine both functions into an automatic if - this with a calendar when - then. The device...

8.7CVSS6AI score0.00745EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/08/09 12:00 a.m.•391 views

EuroTel ETL3100 Transmitter Authorization Bypass (IDOR)

Summary RF Technology For Television Broadcasting Applications. The Series ETL3100 Radio Transmitter provides all the necessary features defined by the FM and DAB standards. Two bands are provided to easily complain with analog and digital DAB standard. The Series ETL3100 Television Transmitter...

9.8CVSS8AI score0.00805EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/08/09 12:00 a.m.•333 views

EuroTel ETL3100 Transmitter Unauthenticated Config/Log Download Vulnerability

Summary RF Technology For Television Broadcasting Applications. The Series ETL3100 Radio Transmitter provides all the necessary features defined by the FM and DAB standards. Two bands are provided to easily complain with analog and digital DAB standard. The Series ETL3100 Television Transmitter...

9.8CVSS8.4AI score0.00821EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/08/09 12:00 a.m.•327 views

EuroTel ETL3100 Transmitter Default Credentials

Summary RF Technology For Television Broadcasting Applications. The Series ETL3100 Radio Transmitter provides all the necessary features defined by the FM and DAB standards. Two bands are provided to easily complain with analog and digital DAB standard. The Series ETL3100 Television Transmitter...

9.8CVSS8.6AI score0.00769EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/07/07 12:00 a.m.•460 views

Ateme TITAN File 3.9 Job Callbacks SSRF File Enumeration

Summary TITAN File is a multi-codec/format video transcoding software, for mezzanine, STB and ABR VOD, PostProduction, Playout and Archive applications. TITAN File is based on ATEME 5th Generation STREAM compression engine and delivers the highest video quality at minimum bitrates with accelerate...

5.9AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2023/06/11 12:00 a.m.•335 views

Anevia Flamingo XL/XS 3.6.x Default/Hard-coded Credentials

Summary Flamingo XL, a new modular and high-density IPTV head-end product for hospitality and corporate markets. Flamingo XL captures live TV and radio content from satellite, cable, digital terrestrial and analog sources before streaming it over IP networks to STBs, PCs or other IP-connected...

9.8CVSS8.6AI score0.00649EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/06/11 12:00 a.m.•315 views

Anevia Flamingo XS 3.6.5 Authenticated Root Remote Code Execution

Summary Flamingo XL, a new modular and high-density IPTV head-end product for hospitality and corporate markets. Flamingo XL captures live TV and radio content from satellite, cable, digital terrestrial and analog sources before streaming it over IP networks to STBs, PCs or other IP-connected...

8.8CVSS8.8AI score0.0087EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/06/11 12:00 a.m.•306 views

Anevia Flamingo XL 3.6.20 Authenticated Root Remote Code Execution

Summary Flamingo XL, a new modular and high-density IPTV head-end product for hospitality and corporate markets. Flamingo XL captures live TV and radio content from satellite, cable, digital terrestrial and analog sources before streaming it over IP networks to STBs, PCs or other IP-connected...

8.8CVSS8.8AI score0.0087EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/06/11 12:00 a.m.•321 views

Anevia Flamingo XL 3.2.9 (login) Remote Root Jailbreak

Summary Flamingo XL, a new modular and high-density IPTV head-end product for hospitality and corporate markets. Flamingo XL captures live TV and radio content from satellite, cable, digital terrestrial and analog sources before streaming it over IP networks to STBs, PCs or other IP-connected...

10CVSS7.5AI score0.0078EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/05/13 12:00 a.m.•295 views

Screen SFT DAB 600/C Authentication Bypass Admin Password Change Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

9.3CVSS6AI score0.00512EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/05/13 12:00 a.m.•313 views

Screen SFT DAB 600/C Authentication Bypass Account Creation Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

5.7CVSS6.1AI score0.00343EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/05/13 12:00 a.m.•324 views

Screen SFT DAB 600/C Authentication Bypass Reset Board Config Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

8.7CVSS6AI score0.00512EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/05/13 12:00 a.m.•323 views

Screen SFT DAB 600/C Authentication Bypass Erase Account Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

9.8CVSS6AI score0.00636EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/05/13 12:00 a.m.•430 views

Screen SFT DAB 600/C Authentication Bypass Password Change Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

9.3CVSS6AI score0.00512EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/05/13 12:00 a.m.•371 views

Screen SFT DAB 600/C Unauthenticated Information Disclosure (userManager.cgx)

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

6.9CVSS6AI score0.00371EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/04/11 12:00 a.m.•265 views

Google Chrome Browser 111.0.5563.64 AXPlatformNodeCocoa Fatal OOM/Crash (macOS)

Summary Google Chrome browser is a free web browser used for accessing the internet and running web-based applications. The Google Chrome browser is based on the open source Chromium web browser project. Google released Chrome in 2008 and issues several updates a year. Description Fatal OOM/crash...

5.8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2023/04/10 12:00 a.m.•262 views

Sielco PolyEco Digital FM Transmitter 2.0.6 Authentication Bypass Exploit

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

9.8CVSS8.9AI score0.00814EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/04/10 12:00 a.m.•268 views

Sielco PolyEco Digital FM Transmitter 2.0.6 Default Credentials

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

9.8CVSS8.7AI score0.00616EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/04/10 12:00 a.m.•269 views

Sielco PolyEco Digital FM Transmitter 2.0.6 Account Takeover / Lockout / EoP

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

9.8CVSS8.8AI score0.00668EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/04/10 12:00 a.m.•278 views

Sielco PolyEco Digital FM Transmitter 2.0.6 Authorization Bypass Factory Reset

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

9.1CVSS8.6AI score0.00617EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/04/10 12:00 a.m.•315 views

Sielco PolyEco Digital FM Transmitter 2.0.6 Unauthenticated Information Disclosure

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

7.5CVSS7.5AI score0.0081EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/04/10 12:00 a.m.•369 views

Sielco PolyEco Digital FM Transmitter 2.0.6 Radio Data System POST Manipulation

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

8.1CVSS7.6AI score0.00551EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/04/10 12:00 a.m.•260 views

Sielco PolyEco Digital FM Transmitter 2.0.6 'polyeco' Session Hijacking

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

9.8CVSS8.9AI score0.00568EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/03/30 12:00 a.m.•281 views

Sielco Radio Link 2.06 Improper Access Control Change Admin Password

Summary Sielco develops and produces radio links for all transmission and reception needs, thanks to innovative units and excellent performances, accompanied by a high reliability and low consumption. Description The application suffers from improper access control when editing users. A user with...

6.5CVSS6.7AI score0.00446EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/03/30 12:00 a.m.•324 views

Sielco Radio Link 2.06 Remote Privilege Escalation

Summary Sielco develops and produces radio links for all transmission and reception needs, thanks to innovative units and excellent performances, accompanied by a high reliability and low consumption. Description The application suffers from a privilege escalation vulnerability. A user with Read...

8.8CVSS8.1AI score0.0075EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/03/30 12:00 a.m.•332 views

Sielco Radio Link 2.06 Cross-Site Request Forgery (Add Admin)

Summary Sielco develops and produces radio links for all transmission and reception needs, thanks to innovative units and excellent performances, accompanied by a high reliability and low consumption. Description The application interface allows users to perform certain actions via HTTP requests...

8.8CVSS8.1AI score0.0029EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/03/30 12:00 a.m.•332 views

Sielco Radio Link 2.06 'id' Cookie Brute Force Session Hijacking

Summary Sielco develops and produces radio links for all transmission and reception needs, thanks to innovative units and excellent performances, accompanied by a high reliability and low consumption. Description The Cookie session ID 'id' is of an insufficient length and can be exploited by brut...

9.8CVSS8.9AI score0.01089EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/03/28 12:00 a.m.•283 views

Sielco Analog FM Transmitter 2.12 Improper Access Control Change Admin Password

Summary Sielco designs and produces FM radio transmitters for professional broadcasting. The in-house laboratory develops standard and customised solutions to meet all needs. Whether digital or analogue, each product is studied to ensure reliability, resistance over time and a high standard of...

6.5CVSS6.7AI score0.00446EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/03/28 12:00 a.m.•300 views

Sielco Analog FM Transmitter 2.12 Cross-Site Request Forgery

Summary Sielco designs and produces FM radio transmitters for professional broadcasting. The in-house laboratory develops standard and customised solutions to meet all needs. Whether digital or analogue, each product is studied to ensure reliability, resistance over time and a high standard of...

8.8CVSS8.1AI score0.0029EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/03/28 12:00 a.m.•418 views

Sielco Analog FM Transmitter 2.12 'id' Cookie Brute Force Session Hijacking

Summary Sielco designs and produces FM radio transmitters for professional broadcasting. The in-house laboratory develops standard and customised solutions to meet all needs. Whether digital or analogue, each product is studied to ensure reliability, resistance over time and a high standard of...

9.8CVSS8.9AI score0.01089EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/03/28 12:00 a.m.•282 views

Sielco Analog FM Transmitter 2.12 Remote Privilege Escalation

Summary Sielco designs and produces FM radio transmitters for professional broadcasting. The in-house laboratory develops standard and customised solutions to meet all needs. Whether digital or analogue, each product is studied to ensure reliability, resistance over time and a high standard of...

8.8CVSS8.1AI score0.0075EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•309 views

Osprey Pump Controller 1.0.1 Unauthenticated Reflected XSS

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

7.5CVSS7.3AI score0.00835EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•300 views

Osprey Pump Controller 1.0.1 (pseudonym) Semi-blind Command Injection

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

9.8CVSS9.2AI score0.01597EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•269 views

Osprey Pump Controller 1.0.1 Unauthenticated File Disclosure

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

7.5CVSS7.4AI score0.01537EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•337 views

Osprey Pump Controller 1.0.1 Administrator Backdoor Access

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

9.8CVSS8.7AI score0.00771EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•411 views

Osprey Pump Controller 1.0.1 Unauthenticated Remote Code Execution Exploit

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

9.8CVSS8.3AI score0.01185EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•337 views

Osprey Pump Controller 1.0.1 Authentication Bypass Credentials Modification

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

5.8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•368 views

Osprey Pump Controller 1.0.1 (eventFileSelected) Command Injection

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

9.8CVSS9.2AI score0.17571EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•354 views

Osprey Pump Controller 1.0.1 Predictable Session Token / Session Hijack

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

8.3CVSS7.6AI score0.00649EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•322 views

Osprey Pump Controller 1.0.1 (userName) Blind Command Injection

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

9.8CVSS9.2AI score0.01597EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2023/02/27 12:00 a.m.•336 views

Osprey Pump Controller 1.0.1 Cross-Site Request Forgery

Summary Providing pumping systems and automated controls for golf courses and turf irrigation, municipal water and sewer, biogas, agricultural, and industrial markets. Osprey: door-mounted, irrigation and landscape pump controller. Technology hasn't changed dramatically on pump and electric motor...

8CVSS7.2AI score0.00254EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2023/02/08 12:00 a.m.•300 views

SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow

Summary The SOUND4 Link&Share L&S is a simple and open protocol that allow users to remotely control SOUND4 processors through a network connection. SOUND4 offers a tool that manage sending L&S commands to your processors: the Link&Share Transmitter. Description The application suffers from a...

9.8CVSS6.2AI score0.00733EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2022/12/28 12:00 a.m.•401 views

Hughes Satellite Router Remote File Inclusion Cross-Frame Scripting

Summary The HX200 is a high-performance satellite router designed to provide carrier-grade IP services using dynamically assigned high-bandwidth satellite IP connectivity. The HX200 satellite router provides flexible Quality of Service QoS features that can be tailored to the network applications...

6.1CVSS6.4AI score0.00686EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2022/12/14 12:00 a.m.•279 views

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (restorefactory.cgi) Unauthenticated Factory Reset

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

9.8CVSS5.8AI score0.0098EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2022/12/14 12:00 a.m.•227 views

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (password) Unauthenticated Command Injection

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

9.8CVSS6.1AI score0.03397EPSS
SaveExploits2
Zero Science Lab
Zero Science Lab
•added 2022/12/14 12:00 a.m.•310 views

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (traceroute.php) Conditional Command Injection

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

8.5CVSS6AI score0.04162EPSS
SaveExploits2
Total number of security vulnerabilities1149