2514 matches found
PT-2023-21089
Name of the Vulnerable Software and Affected Versions T&D Corporation data logger products versions all firmware versions ESPEC MIC CORP. data logger products versions all firmware versions Description Cross-site request forgery CSRF allows a remote unauthenticated attacker to conduct an arbitrar...
Screen SFT DAB 600/C - Authentication Bypass Password Change
!/usr/bin/env python3 Exploit Title: Screen SFT DAB 600/C - Authentication Bypass Password Change Exploit Author: LiquidWorm Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com...
Screen SFT DAB 600/C - Unauthenticated Information Disclosure (userManager.cgx)
Exploit Title: Screen SFT DAB 600/C - Unauthenticated Information Disclosure userManager.cgx Exploit Author: LiquidWorm Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com...
PT-2023-18606 · T&D +1 · Tr-71W/72W +7
Name of the Vulnerable Software and Affected Versions: T&D Corporation data logger products TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions ESPEC MIC CORP. data logger products RT-12N/RS-12N a...
Screen SFT DAB 600/C - Unauthenticated Information Disclosure Vulnerability
Exploit Title: Screen SFT DAB 600/C - Unauthenticated Information Disclosure userManager.cgx Exploit Author: LiquidWorm Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com...
CVE-2023-22654
Client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may lead to an arbitrary script execution on a logged-in user's web browser. Affected products and versions are as follows: T&D Corporation data logger products TR-71W/7...
PT-2023-2931 · Vmware · Vmware Nsx-T
Name of the Vulnerable Software and Affected Versions: VMware NSX-T affected versions not specified Description: The issue is related to a reflected cross-site scripting vulnerability in VMware NSX-T due to a lack of input validation. This allows a remote attacker to inject HTML or JavaScript,...
CVE-2023-22654
Client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may lead to an arbitrary script execution on a logged-in user's web browser. Affected products and versions are as follows: T&D Corporation data logger products TR-71W/7...
CVE-2023-27388
CVE-2023-27388 covers an improper authentication flaw in T&D Corporation and ESPEC MIC CORP. data logger products. Affected models include T&D TR-71W/72W, RTR-5W, WDR-7, WDR-3, WS-2 and ESPEC MIC RT-12N/RS-12N, RT-22BN, TEU-12N all firmware versions. The vulnerability allows a remote unauthentica...
CVE-2023-27387
Cross-site request forgery CSRF in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page. Affected products and versions are as follows: T&D Corporation data logger...
PT-2023-19027 · T&D +1 · Tr-71W/72W +7
Name of the Vulnerable Software and Affected Versions: T&D Corporation data logger products versions TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions ESPEC MIC CORP. data logger products versio...
CVE-2023-22654
CVE-2023-22654 affects T&D Corporation and ESPEC MIC CORP. data loggers: TR-71W/72W, RTR-5W, WDR-7, WDR-3, WS-2; RT-12N/RS-12N, RT-22BN, TEU-12N. Issue: client-side enforcement of server-side security may allow arbitrary script execution in a logged-in user’s browser. Impact details are limited t...
PT-2023-24245 · Akka Http · Akka Http
Name of the Vulnerable Software and Affected Versions: Akka HTTP versions prior to 10.5.2 Description: The issue arises when Akka HTTP accepts file uploads via the FileUploadDirectives.fileUploadAll directive, creating a temporary file with weak permissions that can be read by other users on Linu...
VMSA-2023-0010:NSX-T update addresses cross-site scripting vulnerability
Advisory ID: VMSA-2023-0010 CVSSv3 Range: 4.3 Issue Date:2023-05-23 Updated On: 2023-05-23 Initial Advisory CVEs: CVE-2023-20868 Synopsis: NSX-T update addresses cross-site scripting vulnerability CVE-2023-20868 RSS Feed Download PDF Download Text File Share this page on social media: 1. Impacted...
Screen SFT DAB 600/C Unauthenticated Information Disclosure (userManager.cgx)
Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...
CVE-2023-27648
Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...
CVE-2023-27648
CVE-2023-27648: A directory traversal vulnerability affects T-ME Studios Change Color of Keypad v1.275.1.277. The flaw enables a remote attacker to execute arbitrary code via a dex file stored in internal storage. Severity is reflected as CRITICAL (CVSS 3.1, base score 9.8). Root cause involves u...
CVE-2023-27648: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...
PT-2023-21281 · T Me Studios · T-Me Studios Change Color Of Keypad
Name of the Vulnerable Software and Affected Versions: T-ME Studios Change Color of Keypad version 1.275.1.277 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the dex file in the internal storage. This enables the attacker to potentially access and...