PT-2023-12994 · Tcredence · Tcredence Analytics Ideal Wealth/Funds

Name of the Vulnerable Software and Affected Versions: tCredence Analytics iDEAL Wealth and Funds version 1.0 Description: The issue allows authenticated remote attackers to inject a payload via the v parameter in the "/Framewrk/Home.jsp" file using the POST method. Recommendations: For version...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

Old Age Home Management SQL Injection Vulnerability

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in Old Age Home Management version 1.0, which stems from a problem with the username parameter and can be exploited by an attacker to conduct an SQL injection attack...

Blitzwolf BW-IS22 Smart Home Security Alarm security vulnerabilities

The Blitzwolf BW-IS22 Smart Home Security Alarm is a smart home alarm system from Blitzwolf. A security vulnerability exists in the Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 firmware version, which stems from a vulnerability that allows an attacker to gain full access, where the attacker c...

Digoo DG-HAMB Smart Home Security System security vulnerabilities

The Digoo DG-HAMB Smart Home Security System is a suite of smart home security alarm systems from Digoo. A security vulnerability exists in the Digoo DG-HAMB Smart Home Security System v1.0 firmware version, which stems from a vulnerability that allows an attacker to gain full access, where the...

CVE-2023-31762

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31761: Authentication Bypass by Capture-replay

Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

PT-2023-24305 · Unknown · Old Age Home Management

Name of the Vulnerable Software and Affected Versions: Old Age Home Management version 1.0 Description: The issue concerns SQL Injection via the username parameter. This allows for potential unauthorized access or manipulation of data. Recommendations: For Old Age Home Management version 1.0,...

PT-2023-23455 · Digoo · Digoo Dg-Hamb Smart Home Security System

Name of the Vulnerable Software and Affected Versions: Digoo DG-HAMB Smart Home Security System version 1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For Digoo DG-HAMB Smar...

PT-2023-23454 · Blitzwolf · Blitzwolf Bw-Is22 Smart Home Security Alarm

Name of the Vulnerable Software and Affected Versions: Blitzwolf BW-IS22 Smart Home Security Alarm version v1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For Blitzwolf...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

CVE-2023-31761

The CVE-2023-31761 entry concerns the Blitzwolf BW-IS22 Smart Home Security Alarm v1.0. The vulnerable component is the transmitter, where weak transmitter security enables a code replay attack, allowing an attacker to gain full access to the system. The available sources indicate an adjacent att...

CVE-2023-31762

Summary: CVE-2023-31762 concerns the Digoo DG-HAMB Smart Home Security System (v1.0) and its transmitter. The core issue is a weak security design in the transmitter that enables a code replay attack, which could let an attacker gain full system access. The affected component is the transmitter; ...

CVE-2023-31762: Authentication Bypass by Capture-replay

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31761

Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-33338

CVE-2023-33338 refers to the Old Age Home Management System v1.0, where the username parameter is vulnerable to SQL Injection (CWE-89). The issue allows an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage or data manipulation, with CVSS v3.1 metr...

CVE-2023-33338: Improper Neutralization of Special Elements used in an SQL Command

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

elevatedhomeproducts.com Cross Site Scripting vulnerability OBB-3355248

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-36327

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could allow an attacker to write files to locations with certain critical filesystem types leading to remote code execution was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk i...