1934 matches found
PT-2024-5329 · Apache · Rocketmq
Name of the Vulnerable Software and Affected Versions: RocketMQ versions 5.2.0 and below Description: The issue is related to insufficient protection of service data in the RocketMQ messaging platform. This could allow a remote attacker to gain unauthorized access to protected information. Under...
liveSite 2019.1 Remote Code Execution Vulnerability
Exploit Title: liveSite Version : 2019.1 Remote Code Execution Exploit Author: tmrswrr Category: Webapps Vendor Homepage: https://livesite.com/ Version : 2019.1 Tested on: https://www.softaculous.com/apps/cms/liveSite 1 Login with admin cred Click Staff Home Edit Designer Region Name:megamenu ,...
CVE-2023-39171
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials...
CVE-2023-39171
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials...
Command injection
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials...
CVE-2023-39171
CVE-2023-39171 affects SENEC Storage Box V1, V2 and V3, where the management UI is exposed publicly with known admin credentials. The common description across sources confirms an unauthorized admin access risk due to credentials exposure, enabling administration UI access. The CVSS v3.1 base sco...
CVE-2023-39171 SENEC Storage Box V1,V2 and V3 accidentially expose a management interface
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials...
LOYTEC electronics GmbH LINX Configurator Security Breach
LOYTEC electronics GmbH LINX Configurator is a tool from the Austrian company LOYTEC electronics GmbH for configuring and managing devices on its LINX platform. A security vulnerability in LOYTEC electronics GmbH LINX Configurator version 7.4.10, which stems from the failure to encrypt the...
PT-2023-29994 · Loytec Electronics Gmbh · Linx Configurator
Name of the Vulnerable Software and Affected Versions: LOYTEC electronics GmbH LINX Configurator all versions Description: The issue concerns insecure permissions where an admin credential is passed as a value of URL parameters without encryption. This allows remote attackers to steal the passwor...
VulnCheck KEV: CVE-2023-49103
ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo via GetPhpInfo.php, including administrative credentials...
VulnCheck KEV: CVE-2021-30168
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...
Magento 2.4.6 XSLT Server Side Injection
Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection Date: 2023-11-17 Exploit Author: tmrswrr Vendor Homepage: https://magento2demo.firebearstudio.com/ Software Link: Magento 2.4.6-p3 Version: 2.4.6 Tested on: 2.4.6 POC 1. Enter with admin credentials to this URL:...
Magento 2.4.6 XSLT Server Side Injection Vulnerability
Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection Exploit Author: tmrswrr Vendor Homepage: https://magento2demo.firebearstudio.com/ Software Link: Magento 2.4.6-p3 Version: 2.4.6 Tested on: 2.4.6 POC 1. Enter with admin credentials to this URL: https://magento2demo.firebearstudio.com...
Siemens SCALANCE Family Products
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
PT-2023-9642 · Cisco · Cisco Small Business Rv340W +3
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers versions prior to 1.0.03.29 Description: A vulnerability in the web-based management interface of the affected devices could allow an authenticated, remote...
PT-2023-9505 · Cisco · Cisco Small Business Rv042G +3
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV042, RV042G, RV320, and RV325 Routers affected versions not specified Description: The issue is related to improper validation of user input in incoming HTTP packets, which could allow a remote attacker to cause an...
PT-2023-9615 · Cisco · Cisco Rv042 +3
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV042, RV042G, RV320, and RV325 Routers affected versions not specified Description: The issue is related to insufficient validation of user input in incoming HTTP packets, which can lead to a buffer overflow in memory...
PT-2023-9550 · Cisco · Cisco Small Business Rv042G +3
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV042, RV042G, RV320, and RV325 Routers affected versions not specified Description: The issue is related to a buffer overflow in the memory due to insufficient input validation when processing HTTP packets. This could...