5326 matches found
PT-2024-24065 · Hamid Alinia · Idehweb Login With Phone Number
Name of the Vulnerable Software and Affected Versions: Hamid Alinia - idehweb Login with phone number versions 1.6.93 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Login with phone number feature. This allows an attacker to perform unintended actions on a user's...
WordPress Plugin Login with phone number 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2024-31424: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...
VulnCheck KEV: CVE-2024-32507
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.7.16...
Warehouse Management System 跨站脚本漏洞
Warehouse Management System is a warehouse management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Warehouse Management System version 1.0, which stems from the parameter namacustomer/alamatcustomer/notelpcustomer in the file customer.php and results in...
WordPress Login with Phone Number plugin <= 1.6.93 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Login with phone number versions = 1.6.93...
Malware in @lbnqduy11805/shiny-rotary-phone
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @lbnqduy11805/cautious-octo-rotary-phone
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
WordPress Login with phone number Plugin <= 1.6.93 is vulnerable to Cross Site Request Forgery (CSRF)
Software Login with phone number Type Plugin Vulnerable versions = 1.6.93 Fixed in 1.6.94 OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2024-31424 Patch priority Low CVSS severity Low 8.8 Developer Hamid Alinia PSID 32dbb4921861 Credits Majed...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066: Use of Hard-coded Password
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
PT-2024-22247 · Unify · Unify Cp Ip Phone
Name of the Vulnerable Software and Affected Versions: Unify CP IP Phone version 1.10.4.3 Description: The issue is related to weak credentials, specifically a hardcoded root password, in the firmware. Recommendations: For Unify CP IP Phone version 1.10.4.3, consider changing the hardcoded root...
CVE-2024-28066
The Unify CP IP Phone (version 1.10.4.3 ) is affected by a vulnerability involving weak credentials due to a hardcoded root password in its firmware. This configuration allows for unauthorized access to the device. As a temporary workaround until a patch is available, it is recommended to change ...
Unify CP IP Phone 安全漏洞
Unify CP IP Phone is a phone from Unify Germany. A security vulnerability exists in Unify CP IP Phone version 1.10.4.3, which stems from the use of weak credentials...
CVE-2024-28065
In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...
PT-2024-22246
Name of the Vulnerable Software and Affected Versions Unify CP IP Phone version 1.10.4.3 Description The issue concerns the lack of encryption for files in the firmware, which results in the exposure of sensitive information, including the root password hash. Recommendations For Unify CP IP Phone...