Default credentials

pamkrb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket tgt from the Kerberos KDC Key Distribution Center over the network, as a way to verify the password. However, if a keytab is not provisioned on the system, pamkrb5 has no way to validate...

CVE-2023-29707

Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...

CVE-2023-29707

Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...

Cross site scripting

Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...

GBCOM LAC WEB Control Center 跨站脚本漏洞

GBCOM LAC WEB Control Center is a WEB Control Center from China Huanchuang GBCOM. A security vulnerability exists in the GBCOM LAC WEB Control Center lac-1.3.x version that could allow an attacker to create arbitrary devices...

PT-2023-22363 · Gbcom · Gbcom Lac Web Control Center

Name of the Vulnerable Software and Affected Versions: GBCOM LAC WEB Control Center version lac-1.3.x Description: The issue allows attackers to create an arbitrary device through a Cross Site Scripting XSS vulnerability. Recommendations: For GBCOM LAC WEB Control Center version lac-1.3.x, consid...

CVE-2023-29707

CVE-2023-29707 concerns a cross-site scripting (XSS) vulnerability in the GBCOM LAC WEB Control Center, version lac-1.3.x. The available sources in the connected documents indicate that an attacker could leverage this flaw to create an arbitrary device. The CVE entry notes a CVSS v3.1 base score ...

CVE-2023-30347

Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...

CVE-2023-30347

Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...

CVE-2023-30347

CVE-2023-30347 is an XSS vulnerability in Neox Contact Center 2.3.9, triggered via the serach_sms_api_name parameter of the SMA API search. The connected documents consistently describe the issue as a Cross Site Scripting flaw in the SMA API search path, but do not provide concrete details on aff...

Neox Contact Center 跨站脚本漏洞

Neox Contact Center is a contact center solution from Neox Corporation. A security vulnerability exists in Neox Contact Center version 2.3.9 that originates from a cross-site scripting XSS vulnerability that allows attackers to implement cross-site scripting XSS via the serachsmsapiname parameter...

CVE-2023-29707

Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...

CVE-2023-29158

SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity...

CVE-2023-32659

SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications...

CVE-2023-32659

SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications...

Race condition

SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity...

Cross site scripting

SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications...

CVE-2023-32659 SUBNET PowerSYSTEM Center Cross-site Scripting

SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications...

CVE-2023-32659 SUBNET PowerSYSTEM Center Cross-site Scripting

SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications...

CVE-2023-32659

SUBNET PowerSYSTEM Center (PowerSYSTEM Center) versions 2020 U10 and prior are affected by CVE-2023-32659, a cross-site scripting (CWE-79) vulnerability in report header graphic file handling. The issue arises from improper input neutralization during web page generation, enabling an attacker to ...