Browsing the "disclosure" Tag

Castel NextGen DVR 1.0.0 Bypass / CSRF / Disclosure ≈ Packet Storm

June 5th, 2020 📆 | 4551 Views ⚑

All issues are associated with *Castel NextGen DVR v1.0.0 *and have beenresolved in v1.0.1*.* ——————————-*CVE-2020-11679* *Original Disclosure*https://www.securitymetrics.com/blog/attackers-known-unknown-authorization-bypass *Description*A low privileged

Tagged with:




Avaya IP Office 11 Insecure Transit / Password Disclosure ≈ Packet Storm

June 5th, 2020 📆 | 1950 Views ⚑

+] Credits: John Page (aka hyp3rlinx) +] Website: hyp3rlinx.altervista.org+] Source: http://hyp3rlinx.altervista.org/advisories/AVAYA-IP-OFFICE-INSECURE-TRANSIT-PASSWORD-DISCLOSURE.txt+] twitter.com/hyp3rlinx+] ISR: ApparitionSec Vendor]www.avaya.com Product]Avaya IP Office v9.1.8.0 –

Tagged with:







Joomla XCloner Backup 3.5.3 Local File Disclosure ≈ Packet Storm

May 27th, 2020 📆 | 8608 Views ⚑

#Exploit Title: Joomla XCloner Backup – Authenticated Local File Disclosure#Date: 10.05.2020#Exploit Author: Mehmet Kelepçe / Gais Cyber Security#Exploit-Db Author ID:

Tagged with:







File Explorer 1.4 Information Disclosure ↭

April 28th, 2020 📆 | 6981 Views ⚑

Document Title:===============File Explorer v1.4 iOS – Information Disclosure Vulnerability References (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2220 Release Date:=============2020-04-28 Vulnerability Laboratory ID (VL-ID):====================================2220 Common Vulnerability Scoring

Tagged with:




Edimax EW-7438RPn Information Disclosure ↭

April 22nd, 2020 📆 | 7069 Views ⚑

# Exploit Title: Edimax EW-7438RPn 1.13 – Information Disclosure (WiFi Password)# Date: 2020-04-21# Exploit Author: Besim ALTINOK# Vendor Homepage: https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/#

Tagged with:




Swift File Transfer Mobile Cross Site Scripting / Information Disclosure ↭

April 18th, 2020 📆 | 7518 Views ⚑

Document Title:===============Swift File Transfer Mobile – Multiple Web Vulnerabilities References (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2205 Release Date:=============2020-04-17 Vulnerability Laboratory ID (VL-ID):====================================2205 Common Vulnerability Scoring

Tagged with:




SMACom 1.2.0 Insecure Transit / Password Disclosure ↭

April 17th, 2020 📆 | 4203 Views ⚑

Document Title:===============SMACom v1.2.0 – Insecure Session Validation Vulnerability References (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2211 Release Date:=============2020-04-16 Vulnerability Laboratory ID (VL-ID):====================================2211 Common Vulnerability Scoring System:====================================7.1

Tagged with:




MicroStrategy Intelligence Server And Web 10.4 XSS / Disclosure / SSRF / Code Execution ↭

April 2nd, 2020 📆 | 3142 Views ⚑

# Exploit Title: MicroStrategy Intelligence Server and Web 10.4 – multiple vulnerabilities# Exploit Author: RedTimmy Security# Authors blog: https://www.redtimmy.com/web-application-hacking/another-ssrf-another-rce-the-microstrategy-case/# Vendor

Tagged with:




HP ThinPro 6.x / 7.x Information Disclosure ↭

March 25th, 2020 📆 | 6442 Views ⚑

HP ThinPro – Information disclosure=============================================================================== Identifiers————————————————-* CVE-2019-16285 CVSSv3 score————————————————-6.1 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendor————————————————-HP – https://www.hp.com](https://www.hp.com) Product————————————————-Deliver secure desktop virtualization that’s as comfortable

Tagged with: