CVE-2024-1382 Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion

The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the ndrstlayout attribute of the ndrstsearch shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and...

BIT-MAGENTO-2021-21020 Magento Commerce Improper Access Control Vulnerability

Magento versions 2.4.1 and earlier, 2.4.0 and earlier and 2.3.6 and earlier are vulnerable to an access control bypass vulnerability in the Login as Customer module. Successful exploitation could lead to unauthorized access to restricted resources...

CVE-2023-38944

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

CVE-2023-38946

An issue in Multilaser RE160 firmware v5.07.51ptMTL01 and v5.07.52ptMTL01 allows attackers to bypass the access control and gain complete access to the application via supplying a crafted cookie...

CVE-2023-38946

An issue in Multilaser RE160 firmware v5.07.51ptMTL01 and v5.07.52ptMTL01 allows attackers to bypass the access control and gain complete access to the application via supplying a crafted cookie...

CVE-2023-38945

Multilaser RE160 v5.07.51ptMTL01 and v5.07.52ptMTL01, Multilaser RE160V v12.03.01.08pt and V12.03.01.09pt, and Multilaser RE163V v12.03.01.08pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL...

CVE-2023-38944

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

CVE-2023-38945

Multilaser RE160 v5.07.51ptMTL01 and v5.07.52ptMTL01, Multilaser RE160V v12.03.01.08pt and V12.03.01.09pt, and Multilaser RE163V v12.03.01.08pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL...

Improper access control

Multilaser RE160 v5.07.51ptMTL01 and v5.07.52ptMTL01, Multilaser RE160V v12.03.01.08pt and V12.03.01.09pt, and Multilaser RE163V v12.03.01.08pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL...

CVE-2023-38945

Multilaser RE160 v5.07.51ptMTL01 and v5.07.52ptMTL01, Multilaser RE160V v12.03.01.08pt and V12.03.01.09pt, and Multilaser RE163V v12.03.01.08pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL...

CVE-2023-38945

CVE-2023-38945 affects Multilaser RE160/RE160V/RE163V web interfaces. The vulnerability is an access control bypass exposed by crafting a URL, allowing attackers to bypass auth and gain full access to the application on affected versions: RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01; RE160V v12....

CVE-2023-38946

An issue in Multilaser RE160 firmware v5.07.51ptMTL01 and v5.07.52ptMTL01 allows attackers to bypass the access control and gain complete access to the application via supplying a crafted cookie...

CVE-2023-38946

The CVE-2023-38946 entry concerns Multilaser RE160 firmware versions 5.07.51_pt_MTL01 and 5.07.52_pt_MTL01. The root cause is an access control bypass via cookie manipulation in the router’s web interface, enabling an attacker to gain complete access to the application. Documented impact is high ...

Access Control Bypass

sulu/sulu is vulnerable to Access Control Bypass. The vulnerability is due to a misconfiguration or flaw in the implementation of role-based access controls, permission checks or security settings, enabling users to bypass intended restrictions, which can leads to a significant security risk...

Multilaser RE160 Security Vulnerability

The Multilaser RE160 is a wireless router from Multilaser. A security vulnerability exists in the Multilaser RE160 v5.07.51ptMTL01 and v5.07.52ptMTL01 firmware versions, which originated from a vulnerability that allows an attacker to bypass access control and gain full access to an application b...

CVE-2023-38944

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

CVE-2023-38944

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

Multilaser RE160 Cookie Manipulation Access Bypass Vulnerability

Multilaser RE160 versions 5.07.51ptMTL01 and 5.07.52ptMTL01 suffer from an access control bypass vulnerability through cookie manipulation. =====Tempest Security Intelligence - Security Advisory - CVE-2023-38946======= Access Control Bypass in Multilaser router's Web Management Interface Author:...

Multilaser RE160V / RE160 URL Manipulation Access Bypass Vulnerability

Multilaser RE160V web management interface versions 12.03.01.08pt and 12.03.01.09pt along with RE160 versions 5.07.51ptMTL01 and 5.07.52ptMTL01 suffer from an access control bypass vulnerability through URL manipulation. =====Tempest Security Intelligence - Security Advisory - CVE-2023-38945=====...

Multilaser RE160V / RE160 URL Manipulation Access Bypass

=====Tempest Security Intelligence - Security Advisory - CVE-2023-38945======= Access Control Bypass in Multilaser routers' Web Management Interface Author: Vinicius Moraes =====Table of Contents======================================================== 1. Overview 2. Detailed description 3. Other...