527 matches found
AUO SunVeillance Monitoring System 1.1.9e SQL Injection
Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on: It is a proprietary devices:...
AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control
AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions...
AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control
Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prior to v1.1.9e Tested on: It is a proprietary devices:...
SQL Injection Vulnerability in AIOT Structural Health Monitoring System
Shanghai Tonglei Civil Engineering Technology Co., Ltd. is a professional technical service company dedicated to providing information technology solutions in the building structure industry. AIOT structural health monitoring system has a SQL injection vulnerability, which can be exploited by...
On the IoT road: perks, benefits and security of moving smartly
Kaspersky has repeatedly investigated security issues related to IoT technologies for instance, here, or here. Earlier this year our experts have even gained foothold in the security of biomechanical prosthetic devices. The same implies to smart car security: our own research has indicated that...
Arbitrary Code Execution
Red Hat Gluster Storage is a software only scale-out storage solution that provides flexible and affordable unstructured data storage. It unifies data storage and infrastructure, increases performance, and improves availability and manageability to meet enterprise-level storage challenges. Red Ha...
CVE-2018-18798
CVE-2018-18798 affects Attendance Monitoring System 1.0. The vulnerability is a SQL Injection via the id parameter in multiple PHP entry points (student/index.php?view=view, event/index.php?view=view, user/index.php?view=view). The issue arises from unsafely using user input in SQL queries, enabl...
CVE-2018-18798
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view...
ABB CMS-770 Authentication Bypass Vulnerability
The CMS-770 is a multi-loop monitoring system from ABB for monitoring branch circuits in electrical systems. An authentication bypass vulnerability exists in ABB CMS-770 version 1.7.1 and earlier. An attacker could exploit the vulnerability to read sensitive configuration files, which could be us...
School Attendance Monitoring System Cross-Site Request Forgery Vulnerability (CNVD-2019-00825)
School Attendance Monitoring System is a school attendance monitoring system. A cross-site request forgery vulnerability exists in School Attendance Monitoring System version 1.0, which can be exploited by remote attackers to update administrator information via the /user/user/edit.php file...
School Equipment Monitoring System SQL Injection Vulnerability
School Equipment Monitoring System is a school equipment management system. A SQL injection vulnerability exists in School Equipment Monitoring System version 1.0. A remote attacker can use the login page to view, add, modify, or delete information in the back-end database...
CVE-2018-18799
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...
CVE-2018-18797
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php...
Sql injection
School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...
Cross site request forgery (csrf)
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...
CVE-2018-18797
CVE-2018-18797 affects School Attendance Monitoring System 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) via /user/user/edit.php that enables an attacker to trigger admin data updates (e.g., account fields) by forged requests. Public exploit references (Exploit-DB, PacketStorm) an...
CVE-2018-18799
CVE-2018-18799 affects School Attendance Monitoring System 1.0. The vulnerability is a CSRF flaw via event/controller.php?action=photos, with exploitable upload flow leading to arbitrary file upload (and potential remote access) as shown in exploits (Exploit-DB) and CNVD-cnvd-2019-00384 descripti...
CVE-2018-18806
The CVE-2018-18806 vulnerability affects School Equipment Monitoring System 1.0. An SQL injection exists in the login flow, related to include/user.vb, enabling manipulation of the backend database according to sources such as NVD and CNVD. Public exploit content (Exploit-DB, ExploitPack, and 0da...