347 matches found
CVE-2022-29420
CVE-2022-29420 affects WordPress plugin Countdown & Clock (countdown-builder) up to version 2.3.2, enabling stored XSS. Root cause described as improper input handling during web page generation. Some sources indicate authenticated/admin-level context may be required for exploitation; others do n...
testauth.boat-lifestyle.com Improper Access Control vulnerability OBB-2542683
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Advantech Trust Management Issues Vulnerabilities
Advantech, an application of Advantech China, provides intelligent electric bus management systems. A trust management issue vulnerability exists in Advantech ADAM-3600, which stems from a hard-coded private key available in the project folder, and can be exploited by an attacker to achieve Web...
CVE-2022-22987 Advantech ADAM-3600
The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions...
CVE-2022-22987 Advantech ADAM-3600
The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions...
Advantech 信任管理问题漏洞
Advantech, an application of Advantech China, provides intelligent electric bus management systems. A trust management issue vulnerability exists in Advantech ADAM-3600, which stems from a hard-coded private key available in the project folder, and can be exploited by an attacker to achieve Web...
Advantech ADAM-3600
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: ADAM-3600 Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unauthorized access to intercept traffic...
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the lack of authentication procedures, allowing attackers to gain full access to the device with administrator privileges.
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain full access to the device with administrator privileges using a specially crafted package...
The vulnerability of the microprogrammed Ethernet module software WISE-4060 and Adam-6050 D, due to insufficient validation of input data, allows attackers to identify the devices used in the network.
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to identify the devices used in the network through a specially crafted network packet...
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms, allowing attackers to gain full access to the device with administrator privileges.
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device with administrator privileges...
The software vulnerabilities of the Ethernet module servers WISE-4060 and Adam-6050 D allow attackers to redirect users to any desired URL address.
The vulnerability of the software for Ethernet server modules WISE-4060 and Adam-6050 D lies in the insufficient protection of web pages. Exploiting this vulnerability can allow a remote attacker to redirect users to any arbitrary URL address...
The vulnerability of the microprogrammed Ethernet module software WISE-4060 and Adam-6050 D lies in the lack of authentication for a critical function, allowing attackers to trigger a service failure.
The vulnerability of the Microprogrammed Ethernet module software of WISE-4060 and Adam-6050 D lies in the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the Microprogrammed Ethernet Module WISE-4060 and Adam-6050 D lies in errors in the password recovery mechanism, allowing attackers to reset the settings to the default values.
The vulnerability of the Ethernet microprogramming systems WISE-4060 and Adam-6050 D is related to errors in the password recovery mechanism. Exploiting this vulnerability allows a remote attacker to restore default settings using a specially crafted data packet...
The vulnerability of the microprogrammed Ethernet module software WISE-4060, Adam-6050 D, and Adam.NET Utility lies in their weak password requirements, allowing attackers to compromise user credentials.
The vulnerability of the microprogrammed Ethernet module WISE-4060, Adam-6050 D, and Adam.NET Utilit is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to compromise user credentials through brute-force attacks...
Twitter Suspends Accounts Used to Snare Security Researchers
Twitter has shuttered two accounts – @lagal1990 and @shiftrows13 – specifically used to trick security researchers into downloading malware in a long-running cyber-espionage campaign attributed to North Korea. The campaign was first discovered by the Google Threat Analysis Group TAG in January an...
High-Severity RCE Flaw Disclosed in Several Netgear Router Models
Networking equipment company Netgear has released patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system. Traced as CVE-2021-40847 CVSS score: 8.1, the security weakness...
h1-ctf: Adam and the Deadly Injections
Hi team adding the flag here ███ ████ I will do the writeup in the below comments before the deadline itself Thanks Akshansh Impact...
Weak Password Vulnerability in ADAM-3600-C2G of Advantech (China) Co.
Advantech China Co., Ltd. is a global leader in the intelligent systems industry. A weak password vulnerability exists in Advantech China Co. ADAM-3600-C2G, which can be exploited by attackers to obtain sensitive information...
Talking Emotet’s takedown with Adam Kujawa: Lock and Code S02E02
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Adam Kujawa, security evangelist and director of Malwarebytes Labs, about Emotet, the former public enemy No. 1 in the cybercrime world. What began in 20...
Ubuntu: Security Advisory (USN-4706-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...