Lucene search
+L

75 matches found

Packet Storm
Packet Storm
•added 2024/06/24 12:00 a.m.•586 views

Paradox IP150 Internet Module 1.40.00 Cross Site Request Forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Paradox IP150 Internet Module Cross-Site Request Forgery Link: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240321-01ParadoxCrossSiteRequestForgery Vulnerability Overview The Paradox IP150 Internet Module in version 1.40.00 i...

6.8CVSS7.1AI score0.0034EPSS
SaveExploits1
NVD
NVD
•added 2024/06/19 10:15 a.m.•45 views

CVE-2024-5676

The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery CSRF attacks due to a lack of countermeasures and the use of the HTTP method GET to introduce changes in the system...

6.8CVSS0.0034EPSS
SaveExploits1References3
CVE
CVE
•added 2024/06/19 9:47 a.m.•81 views

CVE-2024-5676

CVE-2024-5676 affects the Paradox IP150 Internet Module, version 1.40.00. The issue is a Cross-Site Request Forgery (CSRF) vulnerability caused by a lack of countermeasures and the use of HTTP GET to introduce changes in the system. No exploitation details are provided in the supplied documents. ...

6.8CVSS6.7AI score0.0034EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/06/19 9:47 a.m.•17 views

CVE-2024-5676 Paradox IP150 Internet Module Cross-Site Request Forgery

The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery CSRF attacks due to a lack of countermeasures and the use of the HTTP method GET to introduce changes in the system...

6.8CVSS7AI score0.0034EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/06/19 9:47 a.m.•53 views

CVE-2024-5676 Paradox IP150 Internet Module Cross-Site Request Forgery

The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery CSRF attacks due to a lack of countermeasures and the use of the HTTP method GET to introduce changes in the system...

6.8CVSS0.0034EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/19 12:00 a.m.•2 views

CVE-2024-5676: Cross-Site Request Forgery (CSRF)

The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery CSRF attacks due to a lack of countermeasures and the use of the HTTP method GET to introduce changes in the system...

6.8CVSS5.8AI score0.0034EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/19 12:00 a.m.•13 views

Paradox IP150 Cross-Site Request Forgery Vulnerability

Paradox IP150 is a communication module from Paradox USA that provides monitoring and management of Paradox devices over the web. The module provides a web interface to monitor and manage connected Paradox devices. A security vulnerability exists in Paradox IP150 version 1.40.00, which stems from...

6.8CVSS6.7AI score0.0034EPSS
SaveExploits1References4
zdt
zdt
•added 2023/04/10 12:00 a.m.•273 views

Paradox Security Systems IPR512 - Denial Of Service Exploit

!/bin/bash Exploit Title: Paradox Security Systems IPR512 - Denial Of Service Google Dork: intitle:"ipr512 - login screen" Date: 09-APR-2023 Exploit Author: Giorgi Dograshvili Vendor Homepage: Paradox - Headquarters https://www.paradox.com/Products/default.asp?PID=423 Version: IPR512 CVE :...

7.5CVSS7.6AI score0.44171EPSS
SaveExploits9
Packet Storm
Packet Storm
•added 2023/04/10 12:00 a.m.•261 views

Paradox Security Systems IPR512 Denial Of Service

!/bin/bash Exploit Title: Paradox Security Systems IPR512 - Denial Of Service Google Dork: intitle:"ipr512 - login screen" Date: 09-APR-2023 Exploit Author: Giorgi Dograshvili Vendor Homepage: Paradox - Headquarters https://www.paradox.com/Products/default.asp?PID=423 Version: IPR512 CVE :...

7.5CVSS7.6AI score0.44171EPSS
SaveExploits9
Exploit DB
Exploit DB
•added 2023/04/10 12:00 a.m.•256 views

Paradox Security Systems IPR512 - Denial Of Service

!/bin/bash Exploit Title: Paradox Security Systems IPR512 - Denial Of Service Google Dork: intitle:"ipr512 - login screen" Date: 09-APR-2023 Exploit Author: Giorgi Dograshvili Vendor Homepage: Paradox - Headquarters https://www.paradox.com/Products/default.asp?PID=423 Version: IPR512 CVE :...

7.5CVSS7.3AI score0.44171EPSS
SaveExploits9
NVD
NVD
•added 2023/03/21 11:15 p.m.•16 views

CVE-2023-24709

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

7.5CVSS7.3AI score0.44171EPSS
SaveExploits9References3
Prion
Prion
•added 2023/03/21 11:15 p.m.•24 views

Design/Logic Flaw

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

5CVSS7.3AI score0.44171EPSS
SaveExploits9References3
CNNVD
CNNVD
•added 2023/03/21 12:00 a.m.•17 views

Paradox Security Systems IPR512 代码注入漏洞

Paradox Security Systems IPR512 is a communication module from Paradox USA that provides monitoring and management of Paradox devices over the network. A security vulnerability exists in Paradox Security Systems IPR512 version that originates from allowing an attacker to cause a denial of service...

7.5CVSS7.2AI score0.44171EPSS
SaveExploits9References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/21 12:00 a.m.•2 views

CVE-2023-24709: Improper Control of Generation of Code

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

7.5CVSS5.8AI score0.44171EPSS
SaveExploits9References3
Vulnrichment
Vulnrichment
•added 2023/03/21 12:00 a.m.•10 views

CVE-2023-24709

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

7.3AI score0.44171EPSS
SaveExploits9References3
CVE
CVE
•added 2023/03/21 12:00 a.m.•103 views

CVE-2023-24709

Paradox Security Systems IPR512 contains a Denial of Service vulnerability (CVE-2023-24709) in the web panel due to handling of login.html and login.xml parameters. Attackers can crash the login page, as demonstrated by PoC/exploit material tied to the IPR512, with no publicly documented fix in t...

7.5CVSS7.2AI score0.44171EPSS
SaveExploits9References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/21 12:00 a.m.•8 views

PT-2023-19745 · Paradox Security Systems · Paradox Security Systems Ipr512

Name of the Vulnerable Software and Affected Versions: Paradox Security Systems IPR512 affected versions not specified Description: The issue allows attackers to cause a denial of service. This can be achieved via the login.html and login.xml parameters. Recommendations: At the moment, there is n...

7.5CVSS7AI score0.44171EPSS
SaveExploits9References7
Cvelist
Cvelist
•added 2023/03/21 12:00 a.m.•56 views

CVE-2023-24709

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

7.5AI score0.44171EPSS
SaveExploits9References3
GithubExploit
GithubExploit
•added 2023/01/26 12:13 p.m.•75 views

Exploit for Code Injection in Paradox Ipr512_Firmware

Injection vulnerability in Paradox Security Systems IPR512 - C...

7.5CVSS7.8AI score0.44171EPSS
SaveExploits9
GithubExploit
GithubExploit
•added 2023/01/26 12:13 p.m.•154 views

Exploit for Code Injection in Paradox Ipr512_Firmware

Injection vulnerability in Paradox Security Systems IPR512 - C...

7.5CVSS7.8AI score0.44171EPSS
SaveExploits9
Rows per page
Query Builder