CVE-2022-46122

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/viewcategory.php?id=...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site version v1.0 that stems from the presence of an unauthorized SQL...

PT-2022-27730 · Unknown · Helmet Store Showroom

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue is related to an unauthenticated SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

CVE-2022-46074

Helmet Store Showroom 1.0 is affected by CVE-2022-46074: a CSRF vulnerability due to missing CSRF protection enables an unauthenticated attacker to add an admin account. This is a high-severity issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The connected documents provide product/version...

1405_logging (1.0.0), @airy/maleo (>=0.0.1-canary.49, <=0.3.1-canary.36) +300 more potentially affected by unknown CVE via helmet-csp (>=1.2.2, <=2.9.0)

helmet-csp NPM version =1.2.2, =0.0.1-canary.49, =0.1.0, =1.0.22, =0.1.1-alpha.0, =0.1.0, =1.5.0, =0.1.0-alpha1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C3M8-X3CG-QM2C...

Configuration Override in helmet-csp

Versions of helmet-csp before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy CSP. The package's browser sniffing for Firefox deletes the default-src CSP policy, which is the fallback policy. This allows an attacker to remove an application'...

GHSA-C3M8-X3CG-QM2C Configuration Override in helmet-csp

Versions of helmet-csp before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy CSP. The package's browser sniffing for Firefox deletes the default-src CSP policy, which is the fallback policy. This allows an attacker to remove an application'...

PT-2020-21221

Name of the Vulnerable Software and Affected Versions helmet-csp versions prior to 2.9.1 Description The issue affects the application's Content Security Policy CSP by allowing an attacker to remove the default CSP, potentially rendering the application vulnerable to Cross-Site Scripting. This is...

Configuration Override

Overview Versions of helmet-csp before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy CSP. The package's browser sniffing for Firefox deletes the default-src CSP policy, which is the fallback policy. This allows an attacker to remove an...

Smart Ski Helmet Headphone Flaws Leak Personal, GPS Data

Researchers have found a slew of vulnerabilities in a pair of smart headphones designed to fit under ski helmets. The flaws could allow a bad actor to view victims’ personal information, track them and even listen to their private conversations via the headphones’ walkie-talkie function, which us...

Hacking ski helmet audio

I love snow sports, and I also like my tunes, so purchasing the Outdoor Tech CHIPS smart headphones was a no-brainer. They fit into audio-equipped helmets and have huge 40mm drivers. Warm ears and good bass. Better yet, they’re touch sensitive even with gloves on and I can take calls handsfree...