22 matches found
CVE-2026-8228
A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlanconf/Channel/skiplist/ieee80211h leads to os command injection. The attack may be launched remotely. The exploit has been...
MAL-2025-8228 Malicious code in @kollusietea/voluptate-porro-magnam-et (npm)
The package @kollusietea/voluptate-porro-magnam-et was found to contain malicious code...
CVE-2020-8228
A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times...
CVE-2024-8228
creationtimestamp| type| source ---|---|--- 2024-08-28 02:35:34+00:00| seen| https://t.me/cvedetector/4291...
CVE-2024-8228 Tenda O5 setMacFilterList fromSafeSetMacFilter stack-based overflow
A vulnerability was found in Tenda O5 1.0.0.85017. It has been classified as critical. This affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the argument remark/type/time leads to stack-based buffer overflow. It is possible to initiate the attack...
CVE-2019-8228
creationtimestamp| type| source ---|---|--- 2024-02-04 16:16:25+00:00| seen| https://t.me/ctinow/178866...
openSUSE Security Update : nextcloud (openSUSE-2020-1652)
This update for nextcloud fixes the following issues : nextcloud version 20.0.0 fix some security issues : - NC-SA-2020-037 PIN for passwordless WebAuthm is asked for but not verified - NC-SA-2020-033 CVE-2020-8228 Missing rate limit on signup page - NC-SA-2020-029 CVE-2020-8233, boo1177346...
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2020:1652-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-8228
creationtimestamp| type| source ---|---|--- 2020-10-05 18:27:12+00:00| seen| https://t.me/cibsecurity/15051...
CVE-2020-8228
A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times...
CVE-2020-8228
CVE-2020-8228 describes a missing rate limit on the signup page in the Nextcloud Preferred Providers app (version 1.7.0), allowing an attacker to repeatedly set the password. The OpenSUSE security advisory (NC-SA-2020-033) and related OSS notes confirm this CVE and indicate it was addressed in th...
CVE-2020-8228
A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times...
CVE-2019-8228
in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code into transactional email page when creating a new email template or editing existing email template...
CVE-2019-8228
The CVE-2019-8228 entry concerns Magento versions prior to 1.9.4.3 and 1.14.4.3, where an authenticated user with limited admin privileges can inject arbitrary JavaScript into the transactional email page when creating or editing email templates. The vulnerability appears to be an XSS issue withi...
CVE-2017-8228
Amcrest IPM-721S (V2.420.AC00.16.R.20160909) contains a vulnerability (CVE-2017-8228) where Amcrest cloud verification for adding cameras to a user’s account is insufficient. An attacker who knows a camera’s serial number and the user’s recent reboot window can add another user’s camera to their ...
Critical Flaws in Amcrest HDSeries Camera Allow Complete Takeover
Two critical severity bugs have been publicly disclosed that impact Amcrest HDSeries model IPM-721S cameras. Both vulnerabilities open the consumer-grade $50 Wi-Fi cameras to complete takeover by remote, unauthenticated attackers. Mandar Satam, senior security researcher at Synopsys, found the si...
CVE-2016-8228
CVE-2016-8228 (Lenovo Service Bridge) affects Lenovo Service Bridge on Windows. Before version 4, a user with local privileges could execute code with administrative privileges, enabling local privilege escalation. Connected sources corroborate a local code execution vulnerability in LSB prior to...
