8657 matches found
Enel X Waybox 安全漏洞
The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from the fact that the TCF proxy service can be used to gain administrator privileges on the Waybox system...
SUSE CVE-2024-36814
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory...
PT-2024-21932 · Unknown · Chamilo Lms
Name of the Vulnerable Software and Affected Versions: Chamilo LMS version 1.11.26 Description: A Cross Site Scripting issue allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component. Recommendations: For Chamilo LMS version 1.11.26,...
Chamilo LMS 安全漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.26, which stems...
PT-2024-22238 · Wbr-6012 · Wbr-6012
Name of the Vulnerable Software and Affected Versions: WBR-6012 affected versions not specified Description: The WBR-6012 is a wireless SOHO router that functions as an internet gateway for homes and small offices. It provides a WiFi access point and serves as a 4-port wired router, implementing...
CVE-2024-48459
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. Jixiang Tenda v.DI7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and...
CVE-2024-48459
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. Jixiang Tenda v.DI7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and...
CVE-2024-10327
A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...
CVE-2024-48544
Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file...
Sylvania Smart Home 安全漏洞
Sylvania Smart Home is a smart home control software from Sylvania. A security vulnerability exists in Sylvania Smart Home version v3.0.3, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to access sensitive information by analyzing code...
SourceCodeHero Clothes Recommendation System 安全漏洞
SourceCodeHero Clothes Recommendation System is an open source clothing recommendation system from SourceCodeHero. A security vulnerability exists in SourceCodeHero Clothes Recommendation System version 1.0, which originates from the parameter cat/subcat/t1/t2/text in the file...
CVE-2024-48544
Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file...
PT-2024-33142 · Sylvania · Sylvania Smart Home
Name of the Vulnerable Software and Affected Versions: Sylvania Smart Home version 3.0.3 Description: The issue is related to incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK...
CVE-2024-48544
Sylvania Smart Home version v3.0.3 is affected by a security vulnerability stemming from incorrect access control within its firmware update and download processes. This flaw allows an attacker to access sensitive information by analyzing the code and data contained within the APK file . While no...
CVE-2024-48544
Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file...
CVE-2024-48544: Incorrect Authorization
Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file...
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...
com.google.appengine:jetty12-assembly (>=2.0.20, <=2.0.21), org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded (>=12.0.0, <=12.0.2) +3 more potentially affected by CVE-2024-9823 via org.eclipse.jetty.ee9:jetty-ee9-servlets (>=12.0.0, <=12.0.2)
org.eclipse.jetty.ee9:jetty-ee9-servlets MAVEN version =12.0.0, =2.0.20, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.2 Source cves: CVE-2024-9823 Source advisory: OSV:GHSA-J26W-F9RQ-MR2Q...
PT-2024-33223 · Unknown · Com.Inatronic.Drivedeck.Home
Name of the Vulnerable Software and Affected Versions: com.inatronic.drivedeck.home version 2.6.23 Description: An issue in com.inatronic.drivedeck.home allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 2.6.23, consider...