76 matches found
Exploit for Path Traversal in Apache Http_Server
CVE-2021-42013 - Apache HTTP Server 2.4.50 Cara Menjalankan...
Uffizio Gps Tracker 访问控制错误漏洞
Uffizio Gps Tracker is a Gps tracker from Uffizio India. Uffizio GPS Tracker suffers from an Access Control Error vulnerability that originates when accessed via a browser or a curl operation on a vulnerable host with port 9000 open responds to a JSON body displaying information about the deploye...
CVE-2021-33700
SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of...
Code injection
SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of...
CVE-2021-33700
SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of...
CVE-2021-33700
SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of...
Compro Technology IP Camera - 'killps.cgi' Denial of Service (DoS)
Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service DoS Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40378 There is a backdoor...
ZOLL Defibrillator Dashboard 安全漏洞
ZOLL Defibrillator Dashboard is a defibrillator management tool. A vulnerability exists in ZOLL Defibrillator Dashboard prior to version 2.2 where passwords are stored in a recoverable format. An attacker could exploit this vulnerability to retrieve credentials from a web browser...
GHSA-XF46-8VVP-4HXX Keycloak Missing authentication for critical function
A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality,...
CVE-2021-20262
A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality,...
Design/Logic Flaw
A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality,...
CVE-2020-15774
An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a user who has recently logged in to Gradle Enterprise and since closed their browser could reopen their browser to access Gradle Enterprise as that user...
CVE-2020-14519
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected WebSockets API still enabled. This is especially relevant for systems or devices where a web browser is used to access a...
Information disclosure
An issue was discovered in Mattermost Server before 2.2.0. It allows unintended access to information stored by a web browser...
Dark Web search engine Kilos lets users find hidden marketplaces
By Waqas The kilos search engine can be accessed through the Tor browser but not everyone is talking positively about it. Here's why. This is a post from HackRead.com Read the original post: Dark Web search engine Kilos lets users find hidden marketplaces...
Security Bulletin: Log viewer vulnerability affects IBM Workload Deployer (CVE-2014-6190)
Summary Log viewer vulnerability affects IBM Workload Deployer. Vulnerability Details CVEID:CVE-2014-6190 DESCRIPTION: Defined system users without proper permissions can access the log viewer functionality by entering the log page URLs in their browser. CVSS Base Score: 5.0 CVSS Temporal Score:...
CVE-2018-2410
SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting XSS vulnerability...
CVE-2018-2410
SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting XSS vulnerability...