Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2023-297-01)

The version of mozilla-firefox installed on the remote host is prior to 115.4.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-297-01 advisory. - It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the...

Mozilla Firefox < 119.0

The version of Firefox installed on the remote Windows host is prior to 119.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-45 advisory. - Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that...

Mozilla Firefox ESR < 115.4

The version of Firefox ESR installed on the remote Windows host is prior to 115.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-46 advisory. - Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed...

Mozilla Thunderbird < 115.4

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-47 advisory. - It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Thunderbird vulnerabilities (USN-5724-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5724-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a...

CVE-2020-5724

creationtimestamp| type| source ---|---|--- 2022-02-15 17:41:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/grandstreamucm62xxsqlaccountguess.rb 2024-10-18 16:52:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/881...

CVE-2017-5724

...

CVE-2017-5724

CVE-2017-5724 is rejected/not used per the Initial Description.

CVE-2020-5724

CVE-2020-5724 affects Grandstream UCM6200/UCM62xx devices prior to firmware 1.0.20.22. The vulnerability is an SQL injection in the HTTP server’s websockify endpoint that can be exploited by an unauthenticated remote attacker via the challenge action with a crafted username, potentially revealing...

Grandstream UCM62xx IP PBX WebSocket Blind SQL Injection Credential Dump

This module uses a blind SQL injection CVE-2020-5724 affecting the Grandstream UCM62xx IP PBX to dump the users table. The injection occurs over a websocket at the websockify endpoint, and specifically occurs when the user requests the challenge as part of a challenge and response authentication...

CVE-2016-5724

Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...

CVE-2016-5724

CVE-2016-5724 affects Cloudera CDH prior to 5.9. The vulnerability is an information disclosure risk in the Diagnostic Support Bundles, allowing a remote attacker to obtain potentially sensitive information from those bundles. The issue is described consistently across connected sources as a flaw...

CVE-2016-5724

Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...

Master IP CAM 01 - Multiple Vulnerabilities

Master IP CAM 01 - Multiple Vulnerabilities Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CV...

Master IP CAM 01 Hardcoded Password / Unauthenticated Access

Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CVE: CVE-2018-5723, CVE-2018-5724,...

CVE-2018-5724

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi...

CVE-2018-5724

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi...

CVE-2018-5724

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi...

CVE-2018-5724

The CVE-2018-5724 entry concerns MASTER IPCAMERA01 devices (version 3.3.4.2103) that allow unauthenticated configuration download and upload, demonstrated via restore.cgi. The connected sources corroborate that an attacker can obtain or replace the device configuration without authentication, ena...

CVE-2014-5724

The CVE-2014-5724 entry concerns the Android app Gambling Insider Magazine (package com.triactivemedia.gambling). Affected component: SSL/TLS certificate validation is not performed when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...