58 matches found
CVE-2024-4708 mySCADA myPRO Use of Hard-coded Password
mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4708-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in wlwz-2312-4708 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be740d68510acd8a799ff75ec94222620547ba6a28b46d799b1ad368724a2c02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-601 Malicious code in wlwz-2312-4708 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be740d68510acd8a799ff75ec94222620547ba6a28b46d799b1ad368724a2c02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Clcknshop 1.0.0 - SQL Injection
Exploit Title: Clcknshop 1.0.0 - SQL Injection Exploit Author: CraCkEr Date: 16/08/2023 Vendor: Infosoftbd Solutions Vendor Homepage: https://infosoftbd.com/ Software Link: https://infosoftbd.com/multitenancy-e-commerce-solution/ Demo: https://kidszone.clckn.shop/ Version: 1.0.0 Tested on: Window...
Clcknshop 1.0.0 SQL Injection Vulnerability
Exploit Title: Clcknshop 1.0.0 - SQL Injection Exploit Author: CraCkEr Vendor: Infosoftbd Solutions Vendor Homepage: https://infosoftbd.com/ Software Link: https://infosoftbd.com/multitenancy-e-commerce-solution/ Demo: https://kidszone.clckn.shop/ Tested on: Windows 10 Pro Impact: Database Access...
Clcknshop 1.0.0 SQL Injection
Exploit Title: Clcknshop 1.0.0 - SQL Injection Exploit Author: CraCkEr Date: 16/08/2023 Vendor: Infosoftbd Solutions Vendor Homepage: https://infosoftbd.com/ Software Link: https://infosoftbd.com/multitenancy-e-commerce-solution/ Demo: https://kidszone.clckn.shop/ Tested on: Windows 10 Pro Impact...
CVE-2023-4708
CVE-2023-4708 affects Infosoftbd Clcknshop 1.0.0. The vulnerability lies in the GET Parameter Handler for the path /collection/all, where the GET parameter named “tag” can be manipulated to perform an SQL injection. Root cause: improper handling of the tag argument leads to database queries being...
CVE-2023-4708 Infosoftbd Clcknshop GET Parameter all sql injection
A vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the argument tag leads to sql injection. The attack may be initiated remotely...
CVE-2022-4708
CVE-2022-4708 affects the WordPress plugin Royal Elementor Addons. The vulnerability is an insufficient access control in the AJAX action wpr_save_template_conditions , impacting versions up to and including 1.3.59 . This allows any authenticated user (including subscribers) to modify the conditi...
WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control
Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4708 Patch priority Medium CVSS severity Medium 4.3 Developer WProyal PSID 6e33149edb24 Credits Ramuel Gall Required...
CVE-2020-4708
CVE-2020-4708 affects IBM Trusteer Pinpoint Detect/Trusteer Pinpoint (11.6.5 and earlier). The root cause is a wildcard in the Access-Control-Allow-Origin header, enabling information disclosure. IBM lists a fix: Trusteer Pinpoint version 11.6.5.2 adds a server-side setting to restrict CORS respo...
Debian DSA-4708-1 : neomutt - security update
Damian Poddebniak and Fabian Ising discovered two security issues in the STARTTLS handling of the Neomutt mail client, which could enable MITM attacks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4708. Th...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4708)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4708 advisory. - fork: record starttime late David Herrmann Orabug: 29850579 CVE-2019-6133 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2017-4708
This CVE-2017-4708 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-4708
CVE-2016-4708 affects CFNetwork across Apple platforms (iOS before 10, OS X before 10.12, tvOS before 10, watchOS before 3). Root cause: input parsing/validation flaw in the Set-Cookie header handling that can disclose sensitive information via a crafted HTTP response. Impact: information disclos...
About the security content of tvOS 10
About the security content of tvOS 10 This document describes the security content of tvOS 10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...
CVE-2013-4708
The CVE-2013-4708 issue affects SEIL Series routers from Internet Initiative Japan Inc. The vuln arises from predictable random-number generation in the PPP Access Concentrator (PPPAC) when performing RADIUS authentication, allowing remote attackers who can sniff RADIUS traffic to bypass authenti...
