CVE-2023-23464: Permissive Cross-domain Policy with Untrusted Domains

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

CVE-2023-23467

Media CP Media Control Panel shows a reflected XSS vulnerability via an unspecified endpoint. The Connected documents consistently describe reflected XSS without detailing affected versions, exploit specifics, or a fix. No remediation information is provided in the supplied sources; monitor for u...

CVE-2023-23465 Media CP Media Control Panel – CSRF

Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...

CVE-2023-23467: Improper Neutralization of Input During Web Page Generation

Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...

CVE-2023-23466: Insufficiently Protected Credentials

Media CP Media Control Panel latest version. Insufficiently protected credential change...

PT-2023-18973

Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel latest version Description A Permissive Flash Cross-domain Policy in the Media CP Media Control Panel may allow information disclosure. Recommendations For the Media CP Media Control Panel latest version, consider...

Media CP Media Control Panel 跨站请求伪造漏洞

MEDIA CONTROL PANEL Media CP Media Control Panel is an application from MEDIA CONTROL PANEL, Inc. A security vulnerability exists in Media CP Media Control Panel, which can be exploited by an attacker to conduct cross-site request forgery CSRF via an unspecified endpoint...

PT-2023-18976 · Unknown · Media Cp Media Control Panel

Name of the Vulnerable Software and Affected Versions: Media CP Media Control Panel latest version Description: The issue concerns a reflected XSS that can be executed through an unspecified endpoint. There is no information provided about the estimated number of potentially affected devices...

CVE-2023-23464 Media CP Media Control Panel – Information Disclosure

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2023-22953: Undefined Security Weakness

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

PT-2023-18795 · Ellislab · Expressionengine

Name of the Vulnerable Software and Affected Versions: ExpressionEngine versions prior to 7.2.6 Description: The issue allows remote code execution by an authenticated Control Panel user. Recommendations: For versions prior to 7.2.6, update to version 7.2.6 or later to resolve the issue...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2022-47648

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...

CVE-2022-47648: Improper Access Control

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...

BDWeb-Link LMS 1.11.5 Insecure Direct Object Reference

==================================================================================================================================== | Title : BDWeb-Link Lms v1.11.5 Unauthorized administrative access Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozil...

Control iD Panel 跨站脚本漏洞

Control iD Panel is a web application. Control iD Panel suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the Nome parameter leading to cross-site scripting...

PT-2023-14787 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.33 Description: The issue allows remote authenticated users with high privileges to achieve local file inclusion and execution through the Admin CP Languages module, due to a Directory Traversal vulnerability...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...