seccome Ehoney 安全漏洞

seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system from China seccome open source. A security vulnerability exists in seccome Ehoney, which stems from the manipulation of the parameter id in an unknown part of its file Admin/edit-admin.php leading to...

PT-2022-23917 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue has been discovered, affecting an unknown functionality of the file "/api/v1/attack/token". The manipulation of the Payload argument leads to SQL injection. This iss...

CVE-2022-3732 seccome Ehoney set sql injection

A vulnerability was found in seccome Ehoney and classified as critical. Affected by this issue is some unknown functionality of the file /api/v1/bait/set. The manipulation of the argument Payload leads to sql injection. The attack may be launched remotely. VDB-212414 is the identifier assigned to...

CVE-2022-3731 seccome Ehoney token sql injection

A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413...

PT-2022-23926 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue was found, affecting some unknown functionality of the file "/api/v1/bait/set". The manipulation of the Payload argument leads to SQL injection. This issue can be...

PT-2022-23907 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue has been found in seccome Ehoney, affecting the processing of the file "/api/v1/attack". The manipulation of the AttackIP argument leads to SQL injection. This issue...

CVE-2022-3735 seccome Ehoney signup access control

A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/public/signup. The manipulation leads to improper access controls. The identifier VDB-212417 was assigned to this vulnerability...

PT-2022-23942 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue affects the processing of the file "/api/public/signup", leading to improper access controls. Recommendations: At the moment, there is no information about a newer...

CVE-2022-3732 seccome Ehoney set sql injection

A vulnerability was found in seccome Ehoney and classified as critical. Affected by this issue is some unknown functionality of the file /api/v1/bait/set. The manipulation of the argument Payload leads to sql injection. The attack may be launched remotely. VDB-212414 is the identifier assigned to...

seccome Ehoney 安全漏洞

seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system open-sourced by China seccome. seccome Ehoney has a security vulnerability , the vulnerability stems from its file /api/v1/attack/falco in the unknown function of the parameter Payload operation lead...

seccome Ehoney 安全漏洞

seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system open-sourced by China's seccome. A security vulnerability exists in seccome Ehoney, which stems from incorrect access control of some unknown handlers in its file /api/public/signup causing an attack...

CVE-2022-3730 seccome Ehoney falco sql injection

A vulnerability, which was classified as critical, was found in seccome Ehoney. Affected is an unknown function of the file /api/v1/attack/falco. The manipulation of the argument Payload leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is...

CVE-2022-3735

Incident summary (CVE-2022-3735): A vulnerability in seccome Ehoney affects the file /api/public/signup, where improper access controls could enable privilege escalation. Multiple connected sources confirm the issue as critical with unknown product versions and incomplete details on affected rele...

CVE-2022-3730

CVE-2022-3730 affects seccome Ehoney. An unknown function in /api/v1/attack/falco allows SQL injection via the Payload parameter, enabling remote exploitation. The vulnerability is rated critical (CVSS v3.1: 9.8) with high impact on confidentiality, integrity, and availability. Root cause: input ...

CVE-2022-3729

CVE-2022-3729 affects seccome Ehoney. The vulnerability resides in the /api/v1/attack handler where manipulation of the AttackIP argument enables SQL injection. Exploitation may be remote. Initial sources assign high/critical risk, but none provide explicit patch versions or confirmed exploit det...

CVE-2022-3731

CVE-2022-3731 affects seccome Ehoney. The vulnerability is an SQL injection in an unknown function of the file "/api/v1/attack/token" triggered by manipulating the Payload parameter. It appears exploitable remotely and is rated critical/high impact in reported metrics, with CVSSv3.1 vectors indic...

CVE-2022-3732

seccome Ehoney contains a SQL injection vulnerability in /api/v1/bait/set triggered by manipulating the Payload argument. The issue affects an unknown functionality and can be exploited remotely. CVSS data indicates high/severe impact across confidentiality, integrity, and availability (up to 9.8...