CVE-2023-44208

CVE-2023-44208 affects Acronis Cyber Protect Home Office for Windows prior to build 40713. The root cause is missing authorization, leading to disclosure and manipulation of sensitive information. Reported impacts include high confidentiality and integrity risks (per CVSS metrics: base scores up ...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security vulnerabili...

Schneider Electric SpaceLogic C-Bus Home Controller Security Vulnerability

The Schneider Electric SpaceLogic C-Bus Home Controller is a powerful, fully integrated system from Schneider Electric, France. It can control and automate lighting and many other electrical systems and products. A security vulnerability exists in the Schneider Electric SpaceLogic C-Bus Home...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A security vulnerability exists in Rite CMS version 3.0 that stems from a cross-site scripting XSS vulnerability in the Home Page field...

PT-2023-5806

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Home Office Windows before build 40713 Description The issue is related to sensitive information disclosure and manipulation due to missing authorization, potentially allowing a remote attacker to elevate their privileges...

CVE-2023-43877: Improper Neutralization of Input During Web Page Generation

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-44208: Missing Authorization

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

PT-2023-29022

Name of the Vulnerable Software and Affected Versions Rite CMS version 3.0 Description The issue allows attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu. This is a result of multiple Cross-Site scripting XSS vulnerabilities...

CVE-2023-41302

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-41302

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally...

Design/Logic Flaw

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-41302

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-41302

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-41302

The CVE (CVE-2023-41302) affects Huawei HarmonyOS, specifically a redirection permission verification vulnerability in the home screen (desktop) module. The underlying issue is a permission check flaw in redirection logic, which could cause features to behave abnormally upon exploitation. Publicl...

CVE-2023-41302: Improper Limitation of a Pathname to a Restricted Directory

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally...

PT-2023-27890 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A redirection permission verification vulnerability exists in the home screen module. Successful exploitation of this issue may cause features to perfor...

CVE-2023-43270

dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...

CVE-2023-43270

dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...

PT-2023-28753 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the userId parameter at the "/home/playerOperate" API endpoint. Recommendations: For dst-admin version 1.5.0, a...

CVE-2023-43270: Improper Control of Generation of Code

dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...