173 matches found
Debian DSA-5555-1 : openvpn - security update
The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5555 advisory. Two vulnerabilities were discovered in openvpn, a virtual private network application which could result in memory disclosure or denial of service. The oldstable...
CVE-2023-5555
CVE-2023-5555 is a Cross-site Scripting (XSS) vulnerability in Frappe LMS (frappe/lms) with XSS in the GitHub repository before 5614a6203fb7d438be8e2b1e3030e4528d170ec4. Connected sources identify the affected component as the LMS front-end/backend code handling user input such as search and tags...
CVE-2023-5555 Cross-site Scripting (XSS) - Generic in frappe/lms
Cross-site Scripting XSS - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4...
CVE-2023-5555 Cross-site Scripting (XSS) - Generic in frappe/lms
Cross-site Scripting XSS - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4...
FortiNAC - argument injection in XML interface on port tcp/5555
An improper neutralization of special elements used in a command 'command injection' vulnerability CWE-77 in FortiNAC tcp/5555 service may allow an unauthenticated attacker to copy local files of the device to other local directories of the device via specially crafted input fields. To access the...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : GStreamer Good Plugins vulnerabilities (USN-5555-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5555-1 advisory. It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to...
Backdoor.Win32.FTP.Ics Remote Command Execution
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/584bc06128469423f9e50e8a359d18acB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Ics Vulnerability: Unauthenticated Remote Command Execution Description: The...
Android devices caught in Matryosh botnet
Researchers at Netlab have discovered a new botnet that re-uses the Mirai framework to pull vulnerable Android devices into DDoS attacks. The new botnet, which is called Matryosh, is named after the Russian nesting dolls because the encryption algorithm it uses, and the process of obtaining comma...
CVE-2020-25988
UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 P4410-V2–1.34H has an action 'XGetAccess' which leaks the credentials of 'admin', provided that the attacker is network adjacent...
Genexis Platinum 4410 Security Vulnerability
Genexis Platinum 4410 is a router from genexis A security vulnerability exists in the Genexis Platinum 4410 Router version V2.1, which originates from the UPNP Freeciv service on port 5555, which has an XGetAccess operation that can be exploited by an attacker to disclose the credentials of the...
CVE-2012-5555
The CVE-2012-5555 entry is rejected/not used; this identifier does not represent an active vulnerability.
CVE-2020-5555
CVE-2020-5555 affects Shihonkanri Plus GOOUT (Ver1.5.8, Ver2.2.10). The issue stems from improper input validation, enabling remote attackers to read and write files in the server directory (and, for CVE-2020-5554, in arbitrary file paths). Connected docs corroborate multiple vulnerabilities in t...
CVE-2020-5555
Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue...
Multiple vulnerabilities in Shihonkanri Plus GOOUT
Overview Shihonkanri Plus GOOUT provided by EKAKIN is a CGI that enables to view data stored in Shihonkanri Plus outside. Shihonkanri Plus GOOUT contains multiple vulnerabilities which allow reading/writing an arbitrary file listed below because of the improper validation of input parameter...
JVN#32415420: Multiple vulnerabiliteis in Shihonkanri Plus GOOUT
Shihonkanri Plus GOOUT provided by EKAKIN is a CGI that enables to view data stored in Shihonkanri Plus outside. Shihonkanri Plus GOOUT contains multiple vulnerabilities which allow reading/writing an arbitrary file listed below because of the improper validation of input parameter. Directory...
elitdress.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1082024 Security Researcher sardharabadal Helped patch 267 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting elitdress.ru website a...
MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Vulnerability
Exploit for hardware platform in category web applications Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Author: LiquidWorm Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome https://www.domoticz.com/wiki/ImperiHome...
MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure
Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Date: 2019-12-30 Author: LiquidWorm Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome https://www.domoticz.com/wiki/ImperiHome https://docs.imperihome.com/app/iss Affected version: 0.2.40...