CVE-2020-16230

All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as under which domains can request resources. An attacker with local access and high privileges could inject scripts into the Cross-origin Resource Sharing CORS configuration that could abuse this vulnerability, allowing the...

HMS Networks HMS Cosy+ 安全漏洞

HMS Networks HMS Cosy+ is an application for industrial remote access from the Swedish company HMS Networks. A security vulnerability exists in HMS Networks HMS Cosy+ that stems from the ease of leaking information via cookies...