15 matches found
EUVD-2025-44151
Malicious code in zaki-saguer55-sukiwir npm...
CVE-2022-44151
Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...
macOS 14.x < 14.7 Multiple Vulnerabilities (121247)
The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18,...
CVE-2023-44151
Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1...
CVE-2023-44151
Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1...
CVE-2023-44151 WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1...
CVE-2023-44151
The CVE-2023-44151 entry corresponds to a Broken Access Control vulnerability in the WordPress Pre-Publish Checklist plugin (versions ≤ 1.1.1). The root cause is missing authorization/authentication validation, enabling access control bypass related to the Pre-Publish Checklist feature. Affected ...
CVE-2022-44151
creationtimestamp| type| source ---|---|--- 2022-11-30 20:30:52+00:00| seen| https://t.me/cibsecurity/53729...
CVE-2022-44151
Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php...
CVE-2022-44151
CVE-2022-44151 affects Simple Inventory Management System v1.0. The vulnerability is a SQL Injection in the login endpoint (/ims/login.php), caused by improper handling of user input. This can lead to unauthorized access to data and potential total compromise, with the CVSS v3.1 base score of 9.8...
CVE-2021-44151
creationtimestamp| type| source ---|---|--- 2022-06-28 18:24:07+00:00| seen| https://t.me/cibsecurity/33788...
CVE-2021-44151
An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version the Linux version appears to have 8 characters. An attacker can obtain the static part of the cooki...
CVE-2021-44151
An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version the Linux version appears to have 8 characters. An attacker can obtain the static part of the cooki...
CVE-2021-44151
CVE-2021-44151 describes a session-hijacking flaw in Reprise RLM 14.2 where short 4-hex-character cookies on Windows enable brute-force to hijack active sessions. An attacker can discover the cookie name by requesting a page (e.g., /goforms/menu) and saving the cookie name, then resend requests w...
Reprise License Manager 14.2 Session Hijacking
Product: Reprise License Manager 14.2 Vendor: Reprise Software CVE ID: CVE-2021-44151 Vulnerability Title: Unauthenticated Session Hijacking Severity: Medium/High Authors: Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard Date: 2021-11-...