13500 matches found
User Enumeration via Response Timing
Description There is a significant timing difference in the login functionality of the Nakama Console for valid and invalid email addresses or usernames. Proof of Concept 1. Login to the Nakama Console as admin and create a User [email protected] 2. Logout 3. Attempt a Login with an incorrect passwor...
Exposure of password hashes in notrinos/notrinos-erp
The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...
GHSA-44W5-Q257-8428 Exposure of password hashes in notrinos/notrinos-erp
The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...
PT-2022-19462 · Unknown · Notrinoserp
Name of the Vulnerable Software and Affected Versions: notrinoserp versions prior to v0.7 Description: The issue results in exposure of private personal information to an unauthorized actor, leading to privilege escalation to a system administrator account. This allows an attacker to gain access ...
CVE-2022-29805
creationtimestamp| type| source ---|---|--- 2022-08-19 16:17:26+00:00| seen| https://t.me/cibsecurity/48435...
CVE-2022-36216
creationtimestamp| type| source ---|---|--- 2022-08-18 00:40:52+00:00| seen| https://t.me/cibsecurity/48312...
Secheron SEPCOS Control and Protection Relay Information Disclosure Vulnerability
Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.The Secheron SEPCOS Control and Protection Relay is vulnerable to an...
CVE-2022-35111
SWFTools commit 772e55a2 was discovered to contain a stack overflow via sanitizer::StackDepotNode::hashsanitizer::StackTrace const& at /sanitizercommon/sanitizerstackdepot.cpp...
CVE-2022-35111
SWFTools commit 772e55a2 was discovered to contain a stack overflow via sanitizer::StackDepotNode::hashsanitizer::StackTrace const& at /sanitizercommon/sanitizerstackdepot.cpp...
UBUNTU-CVE-2022-35111
SWFTools commit 772e55a2 was discovered to contain a stack overflow via sanitizer::StackDepotNode::hashsanitizer::StackTrace const& at /sanitizercommon/sanitizerstackdepot.cpp...
CVE-2022-35111
SWFTools (commit 772e55a2) ontains a stack overflow in sanitizer_stackdepot.cpp: __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&). The CVE-2022-35111 entry reflects a stack overflow vulnerability in SWFTools, with exploitation described as LOCAL vector, HIGH availability impact ...
WWBN AVideo password hash improper authentication vulnerability
Talos Vulnerability Report TALOS-2022-1545 WWBN AVideo password hash improper authentication vulnerability August 16, 2022 CVE Number CVE-2022-32282 SUMMARY An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a...
Jenkins < 1.447, < 1.424.2 LTS DoS Vulnerability - Windows
Jenkins is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
Jenkins < 1.447, < 1.424.2 LTS DoS Vulnerability - Linux
Jenkins is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
PT-2022-22579 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A stack overflow issue was discovered in SWFTools via sanitizer::StackDepotNode::hash sanitizer::StackTrace const& at /sanitizer common/sanitizer stackdepot.cpp. Recommendations: At the...
SWFMill 缓冲区错误漏洞
SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690 that stems from a heap buffer overflow in its SWF::Writer::writeByteunsigned char function...
The vulnerability of Siemens SIMATIC process control system’s API interface allows a hacker to obtain the password hash.
The vulnerability of Siemens SIMATIC process control system APIs is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to obtain the password hash...
CVE-2022-35820
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:13+00:00| seen| https://t.me/cibsecurity/47809...
