EUVD-2023-58189

Malicious code in bioql PyPI...

CVE-2023-5916

A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config leads to improper access controls. It is possible to initiate the attack...

Improper access control

A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config leads to improper access controls. It is possible to initiate the attack...

CVE-2023-5916 Lissy93 Dashy Configuration save access control

A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config leads to improper access controls. It is possible to initiate the attack...

CVE-2023-5916

CVE-2023-5916 affects Lissy93 Dashy 2.1.1, specifically the /config-manager/save endpoint in the Configuration Handler. The vulnerability arises from improper access controls caused by manipulating the config argument, enabling remote initiation of an attack. Exploitation is publicly disclosed pe...

PT-2023-32415 · Unknown · Lissy93 Dashy

Name of the Vulnerable Software and Affected Versions: Lissy93 Dashy version 2.1.1 Description: A critical vulnerability has been found in Lissy93 Dashy, affecting an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config lead...

Dashy Access Control Error Vulnerability

Dashy is a self-hostable personal dashboard by Alicia Sykes Individual Developer. An Access Control Error vulnerability exists in Dashy version 2.1.1, which stems from incorrect manipulation of the parameter config resulting in incorrect access control...

WordPress Dashy – Google Analytics advanced dashboard plugin <= 2.1.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dashy – Google Analytics advanced dashboard plugin versions = 2.1.8. Solution No patched version available...

WordPress Dashy – Google Analytics advanced dashboard plugin <= 2.1.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Dashy – Google Analytics advanced dashboard plugin versions = 2.1.8. Solution No patched version available...