OPSWAT MetaDefender KIOSK 代码注入漏洞

OPSWAT MetaDefender KIOSK is a digital security guard from OPSWAT USA. A security vulnerability exists in OPSWAT MetaDefender KIOSK versions prior to 4.7.0. An attacker can exploit the vulnerability to execute arbitrary code...

CVE-2024-37364

Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information such as hotel invoice content with PII, and potentially create unauthorized room keys, by entering a guest-search quote character and then...

CVE-2022-24287

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

Malicious code in kiosk-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0cf98cf99dad32c045dfb31f81bc76a17bf67597b85b27273856761d7b3d31e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Topaz Signature Pad as COM Port Device Disappears after Logoff

Topaz Signature will disappear after users log off on a kiosk workstation. The environment contained: Citrix Virtual Apps and Desktops version 2203 CUx Desktop of Server VDA, any supported OS Citrix Workspace App 2402 CUx Windows 10/Windows 11...

CVE-2024-36498

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function...

CVE-2024-36498

Image Access Scan2Net (Image Access Germany) is affected by a stored XSS vulnerability in the configuration menu’s Edit Disclaimer Text function due to missing input sanitization. The stored JavaScript payload executes in users’ browsers (including kiosk mode) when the ScanWizard loads. A fix was...

CVE-2024-47947

CVE-2024-47947 concerns a stored XSS vulnerability in Image Access Scan2Net/ScanWizard ecosystem. The issue arises from missing input sanitization in the configuration menu’s "Edit Disclaimer Text" function, exploitable by an attacker to inject JavaScript that runs in other users’ browsers. Affec...

PT-2024-32909 · Unknown · Scanwizard

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to missing input sanitization, allowing an attacker to perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit...

CVE-2024-28140

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and...

CVE-2024-28140

CVE-2024-28140 describes a vulnerability in the Image Access Scan2Net scanner software where the device boots into kiosk mode and opens the Scan2Net interface in a browser window that runs with root privileges, with several other applications also running as root. The issue is evidenced by proces...

CVE-2024-28140 Violation of Least Privilege Principle

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and...

Image Access Scan2Net 安全漏洞

Image Access Scan2Net is a scanning software from the German company Image Access. A security vulnerability exists in Image Access Scan2Net, which originates when the scanner device boots into kiosk mode by default and opens the Scan2Net interface in a browser window. The browser is running with...

Malicious code in kiosk-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7f59314a206c7faa0082a49930dfe6b18851236824c9539436bf92a3f71a08a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10893 Malicious code in kiosk-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7f59314a206c7faa0082a49930dfe6b18851236824c9539436bf92a3f71a08a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-51829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in figoliquinn Mobile Kiosk mobile-kiosk allows Stored XSS.This issue affects Mobile Kiosk: from n/a through = 1.3.0...

CVE-2024-51829 WordPress Mobile Kiosk plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in figoliquinn Mobile Kiosk mobile-kiosk allows Stored XSS.This issue affects Mobile Kiosk: from n/a through = 1.3.0...

CVE-2024-51829 WordPress Mobile Kiosk plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Figoli Quinn & Associates Mobile Kiosk allows Stored XSS.This issue affects Mobile Kiosk: from n/a through 1.3.0...

CVE-2024-51829

CVE-2024-51829: WordPress Mobile Kiosk vulnerability in Figoli Quinn & Associates Mobile Kiosk plugin (WordPress plugin Mobile Kiosk, versions up to 1.3.0) allows Stored XSS due to improper input neutralization during web page generation. Affected: Figoli Quinn & Associates Mobile Kiosk (n/a thro...

PT-2024-34956 · Figoli Quinn & Associates · Figoli Quinn & Associates Mobile Kiosk

Name of the Vulnerable Software and Affected Versions: Figoli Quinn & Associates Mobile Kiosk versions n/a through 1.3.0 WordPress Mobile Kiosk Plugin version 1.3.0 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site...