CVE-2022-3735

Incident summary (CVE-2022-3735): A vulnerability in seccome Ehoney affects the file /api/public/signup, where improper access controls could enable privilege escalation. Multiple connected sources confirm the issue as critical with unknown product versions and incomplete details on affected rele...

CVE-2022-3729

CVE-2022-3729 affects seccome Ehoney. The vulnerability resides in the /api/v1/attack handler where manipulation of the AttackIP argument enables SQL injection. Exploitation may be remote. Initial sources assign high/critical risk, but none provide explicit patch versions or confirmed exploit det...

PT-2022-23912 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue was found in seccome Ehoney. It affects an unknown function of the /api/v1/attack/falco API endpoint. The manipulation of the Payload argument leads to SQL injection...

seccome Ehoney 安全漏洞

seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system open-sourced by China's seccome. A security vulnerability exists in seccome Ehoney, which stems from incorrect access control of some unknown handlers in its file /api/public/signup causing an attack...

CVE-2022-3735 seccome Ehoney signup access control

A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/public/signup. The manipulation leads to improper access controls. The identifier VDB-212417 was assigned to this vulnerability...

CVE-2022-3732

seccome Ehoney contains a SQL injection vulnerability in /api/v1/bait/set triggered by manipulating the Payload argument. The issue affects an unknown functionality and can be exploited remotely. CVSS data indicates high/severe impact across confidentiality, integrity, and availability (up to 9.8...

CVE-2022-3731 seccome Ehoney token sql injection

A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413...

CVE-2022-3731 seccome Ehoney token sql injection

A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413...

CVE-2022-3730

CVE-2022-3730 affects seccome Ehoney. An unknown function in /api/v1/attack/falco allows SQL injection via the Payload parameter, enabling remote exploitation. The vulnerability is rated critical (CVSS v3.1: 9.8) with high impact on confidentiality, integrity, and availability. Root cause: input ...

CVE-2022-3732 seccome Ehoney set sql injection

A vulnerability was found in seccome Ehoney and classified as critical. Affected by this issue is some unknown functionality of the file /api/v1/bait/set. The manipulation of the argument Payload leads to sql injection. The attack may be launched remotely. VDB-212414 is the identifier assigned to...

CVE-2022-3735 seccome Ehoney signup access control

A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/public/signup. The manipulation leads to improper access controls. The identifier VDB-212417 was assigned to this vulnerability...

CVE-2022-3729 seccome Ehoney attack sql injection

A vulnerability, which was classified as critical, has been found in seccome Ehoney. This issue affects some unknown processing of the file /api/v1/attack. The manipulation of the argument AttackIP leads to sql injection. The attack may be initiated remotely. The associated identifier of this...

seccome Ehoney 安全漏洞

seccome Ehoney is a secure, fast, highly interactive, enterprise-grade honeypot management system open-sourced by China seccome. seccome Ehoney has a security vulnerability , the vulnerability stems from its file /api/v1/attack in the unknown handler for the parameter AttackIP operation leads to...

PT-2022-23907 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue has been found in seccome Ehoney, affecting the processing of the file "/api/v1/attack". The manipulation of the AttackIP argument leads to SQL injection. This issue...

CVE-2022-3731

CVE-2022-3731 affects seccome Ehoney. The vulnerability is an SQL injection in an unknown function of the file "/api/v1/attack/token" triggered by manipulating the Payload parameter. It appears exploitable remotely and is rated critical/high impact in reported metrics, with CVSSv3.1 vectors indic...

seccome Ehoney SQL注入漏洞

seccome Ehoney is a secure, fast, highly interactive, enterprise-grade honeypot management system open-sourced by China seccome. seccome Ehoney has a security vulnerability , the vulnerability stems from its file /api/v1/bait/set in the unknown function of the parameter Payload operation leads to...

PT-2022-23917 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue has been discovered, affecting an unknown functionality of the file "/api/v1/attack/token". The manipulation of the Payload argument leads to SQL injection. This iss...