1196 matches found
PT-2023-26041 · Baramundi Software Gmbh · Emm Agent
Name of the Vulnerable Software and Affected Versions: baramundi software GmbH EMM Agent versions 23.1.50 and before Description: The issue allows an attacker to cause a denial of service via a crafted request to the password parameter. This can be exploited to disrupt service. Recommendations: F...
Engineers Online Portal SQL Injection Vulnerability
Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. Engineers Online Portal suffers from a SQL injection vulnerability that stems from manipulation of the username/password...
PT-2023-29135 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: process login.php affected versions not specified Description: The issue concerns the Password parameter of the process login.php resource, which does not validate the characters received. As a result, these characters are sent unfiltered to...
CVE-2023-42336
An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...
CVE-2023-42336
An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...
CVE-2023-42336
An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...
NETIS SYSTEMS WF2409E Trust Management Issues Vulnerability
NETIS SYSTEMS WF2409E is a wireless router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 version that originates from obtaining sensitive information via the password parameter in the /etc/shadow.sample component...
China Telecom Tianyi Home Gateway Security Vulnerability
China Telecom Tianyi Home Gateway is a home gateway from Sichuan Tianyi Kanghe Communication. A security vulnerability exists in Sichuan Tianyi Kanghe Communication China Telecom Tianyi Home Gateway v.TEWA-700G, which can be exploited by a local attacker to obtain sensitive information via the...
CVE-2023-41010
Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...
CVE-2023-41010
CVE-2023-41010 describes an Insecure Permissions vulnerability in the Sichuan Tianyi Kanghe / China Telecom Tianyi Home Gateway v.TEWA-700G. The issue allows a local attacker to obtain sensitive information via the device’s default password parameter . Affected product/version: v.TEWA-700G . Root...
PT-2023-27662 · Unknown · Opencart Cms
Name of the Vulnerable Software and Affected Versions: OpenCart CMS version 4.0.2.2 Description: The issue is related to a lack of protection against excessive login attempts on the login page, allowing unauthenticated attackers to perform a brute force attack to gain access to the application...
CVE-2023-40834: Improper Restriction of Excessive Authentication Attempts
OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter...
CVE-2023-41594
Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters...
Dairy Farm Shop Management System SQL Injection Vulnerability
Dairy Farm Shop Management System is a Dairy Farm Shop Management System by Anuj Kumar, an individual developer. A security vulnerability exists in Dairy Farm Shop Management System Using PHP and MySQL v1.1, which stems from multiple SQL injection vulnerabilities in the Username and Password...
N.V.K.INTER iBSG SQL注入漏洞
N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which originates from a SQL injection vulnerability in the parameter apasswd in the file /portal/user-register.php...
PT-2023-8849 · Openrapid +1 · Openrapid Rapidcms +1
Name of the Vulnerable Software and Affected Versions: OpenRapid RapidCMS version 1.3.1 Description: A critical issue affects the processing of the file admin/run-movepass.php, where the manipulation of the password and password2 arguments leads to weak password recovery. The attack can be...
PT-2023-5516 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda A18 version V15.13.07.09 Description: The issue is related to a stack overflow in the fromSetWirelessRepeat function, which can be triggered via the wpapsk crypto2 4g parameter. This can potentially allow a remote attacker to cause a...
ChurchCRM SQL注入漏洞
The NETGEAR R7100LG is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. The NETGEAR R7100LG version 1.0.0.78 suffers from a command injection vulnerability that stems from the password parameter in...
CVE-2023-39550
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...