CVE-2024-22772 Hitron Systems DVR LGUVR-8H Improper Input Validation Vulnerability

Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.024.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

CVE-2024-22771

The Hitron Systems DVR LGUVR-4H (versions 1.02 through 4.02) is vulnerable to a denial-of-service (DoS) condition due to improper input validation (CWE-20). An attacker can exploit this by using the default administrative ID and password to trigger a service failure or a network attack. Exploitat...

CVE-2024-22770 Hitron Systems DVR HVR-16781 Improper Input Validation Vulnerability

Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

CVE-2024-22770

A vulnerability exists in Hitron Systems DVR HVR-16781 (versions 1.03 through 4.02) due to improper input validation (CWE-20 ). If default administrative credentials are used, an attacker can exploit this flaw to cause a denial-of-service condition or perform a network attack. While some sources ...

CVE-2024-22769

A high-severity improper input validation vulnerability (CWE-20) exists in Hitron Systems DVR HVR-8781 versions 1.03 through 4.02 . An attacker can exploit this flaw while utilizing the default admin name and password to cause a denial-of-service condition or a general network attack. CISA has re...

CVE-2024-22769 Hitron Systems DVR HVR-8781 Improper Input Validation Vulnerability

Improper Input Validation in Hitron Systems DVR HVR-8781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

CVE-2024-22768 Hitron Systems DVR HVR-4781 Improper Input Validation Vulnerability

Improper Input Validation in Hitron Systems DVR HVR-4781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

pw-design.at Improper Access Control vulnerability OBB-3781301

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-22358 · Tenda · Tenda N301

Name of the Vulnerable Software and Affected Versions: Tenda N301 version 6.0, firmware versions 12.02.01.61 multi through 12.03.01.06 pt Description: The issue allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password due to cleartext...

UBUNTU-CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

Mozilla: Data race and potential use-after-free in PK11_ChangePW

The Mozilla Foundation Security Advisory describes this flaw as: A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password...

pw-magazine.com Cross Site Scripting vulnerability OBB-2793205

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pw-stock.com Cross Site Scripting vulnerability OBB-2654053

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pw-cn.com Cross Site Scripting vulnerability OBB-2634572

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-13748 · Pesign +1 · Pesign +1

Name of the Vulnerable Software and Affected Versions: pesign affected versions not specified Description: A NULL pointer dereference flaw was found in pesign's cms set pw data function of the cms common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to...

PT-2022-3812

Name of the Vulnerable Software and Affected Versions Fujitsu ETERNUS CentricStor CS8000 versions prior to 8.1A SP02 P04 Description The issue is related to the possibility of command injection in the Fujitsu ETERNUS CentricStor CS8000 device. An attacker can influence the username user, password...

openSUSE: Security Advisory for nextcloud (openSUSE-SU-2021:1602-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2020-13995

Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue allows for Remote Command Execution due to improper escaping of shell metacharacters from a POST request in the pwsec.php file. An attacker can exploit this by sending a crafted payload containing shell...

cbet15.pw Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1093585 Security Researcher geeknik Helped patch 8781 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cbet15.pw website and its...

cloud1.pw Cross Site Scripting vulnerability

Security Researcher sshell Helped patch 2 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting cloud1.pw website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:...