59 matches found
Ruby SAML 数据伪造问题漏洞
Ruby SAML is an open source implementation of a SAML authorization client from SAML-Toolkits. A data forgery vulnerability exists in Ruby SAML that stems from Ruby-SAML's inability to properly verify the signature of a SAML response, allowing an attacker to log in to a vulnerable system as an...
Exploit for Improper Authentication in Genetechsolutions Pie_Register
CVE-2021-24647 CVE-2021-24647 Pie Register 3.7.1.6 - Unau...
UBUNTU-CVE-2022-35947
GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions have been found to be vulnerable to a SQL injection attack which an attacker could...
GLPI SQL注入漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...
CVE-2021-24647 Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login
The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or userna...
Arbitrary User Login Vulnerability in Tongda OA Frontend
Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...
Front-end Arbitrary User Fake Login Vulnerability in Tongda OA
Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software developed by Beijing Tongda Science and Technology Co. Ltd. is a collaborative office automation software developed by the company. Tongda OA front-end arbitrary user forgery login...
Arbitrary User Login Vulnerability in Ziggy's Fortress
Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. An arbitrary user login vulnerability exists in Qiji Fortress. An attacker can exploit this vulnerability to log in as an arbitrary user...
CCTV News App Has Arbitrary Account Login Vulnerability
CCTV News App is a portal news app software. CCTV News APP has an arbitrary account login vulnerability. Attackers can use this vulnerability to log into other people's accounts and obtain sensitive information by grabbing packets and modifying UID parameters...
Lovefilm APP suffers from arbitrary user login vulnerability
Love Shadow APP is a video editing software for cell phones. There is an arbitrary user login vulnerability in Love Shadow APP. An attacker can log into any user account by capturing packets and obtaining authentication codes...
Hangzhou Dana Technology Co., Ltd. Shape and Color APP has arbitrary account login vulnerability
Shape and Color is a new app for identifying flowers and sharing nearby flowers launched by Hangzhou Dana Technology Co. An arbitrary account login vulnerability exists in the Shape and Color APP of Hangzhou Dana Technology Co. The vulnerability is due to the failure of the server side to...
Multiple vulnerabilities in the Family Matters App
The Home Care App is a professional home service booking online platform. Worry-Free Home App suffers from arbitrary account login and cross-site scripting vulnerabilities, which can be exploited by an attacker to login to any account, insert cross-site code, and obtain sensitive information such...
Learning Orange Education App Has Multiple Vulnerabilities
Learn Orange Education App is a mobile online learning application. There are arbitrary user registration, arbitrary user login and arbitrary user password reset vulnerabilities in XUOE APP. An attacker can register any account, log in to other users' systems, and reset any password by capturing...
Arbitrary user login vulnerability in DeDecms cookie.helper.php file
Weaving dream content management system DedeCms is a PHP open source website management system. There is an arbitrary user login vulnerability in the DeDecms cookie.helper.php file. Attackers can use the vulnerability to bypass the security checks , login any user...
Shanghai Shenglang Information Consulting Co., Ltd. Chatterbox APP has arbitrary number login vulnerability
Chatterbox is a location-based mobile video social app. Shanghai Shenglang Information Consulting Co., Ltd. Chatty Guest APP exists arbitrary number login vulnerability, the vulnerability is due to the server failed to verify the authentication code request number of times and time to do the limi...
PySAML2 Password Acceptance Vulnerability
PySAML2 is an implementation of SAML2 written in python. A security vulnerability exists in PySAML2 4.4.0 and earlier versions, which stems from the program receiving arbitrary passwords. An attacker can exploit the vulnerability to log in as an arbitrary user...
Worry-Free Shopping System ASP General Edition has multiple vulnerabilities
Hassle-free shopping system ASP General Edition is a shopping site based on ASP/Access development of general management system set up. Worry-Free Shopping System ASP General Edition is vulnerable to default database download, arbitrary user login, multiple stored cross-site scripts, payment desi...
Arbitrary User Login and Password Reset Vulnerability in Birthless App
Birthless App is a platform that focuses on IVF pregnancy assistance services. Worry Free App has an arbitrary user login and password reset vulnerability, attackers can login to any user account and reset any user password by grabbing packets and modifying cell phone numbers...
Arbitrary User Login Vulnerability in 365 Housing Worry-Free App
365 Housing Worry-Free App is a home service app that provides one-stop service for daily home maintenance, repairs, tool rental and more. 365 Housing Worry-Free App has an arbitrary user login vulnerability, attackers can login to any user account by grabbing packets and modifying the cell phone...