CVE-2015-10129

CVE-2015-10129 affects planet-freo up to 20150116. A vulnerability exists in admin/inc/auth.inc.php where manipulation of the auth argument leads to an incorrect comparison. The attack could be launched remotely; exploit has been disclosed to the public. The patch is identified as 6ad38c58a45642e...

PT-2024-10562

Name of the Vulnerable Software and Affected Versions planet-freo up to 20150116 Description A vulnerability was found in the file admin/inc/auth.inc.php, where the manipulation of the auth argument leads to incorrect comparison. The attack can be launched remotely, with a rather high complexity...

CVE-2015-10129: Incorrect Comparison

A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/inc/auth.inc.php. The manipulation of the argument auth leads to incorrect comparison. The attack may be launched remotely. The complexity ...

PT-2023-32761 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A critical issue affects some unknown functionality of the file /adplanet/PlanetCommentList of the component API, leading to improper access controls. The attack may be launched remotely...

planet-aisthitiki.com Improper Access Control vulnerability OBB-3807123

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-6466

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file /planet of the component User Comment Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

PT-2023-32679 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability was found in the User Comment Handler component, affecting unknown code of the file /planet. The manipulation leads to cross site scripting. The attack can be initiated remotely...

planet-ice.co.uk Improper Access Control vulnerability OBB-3705320

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

peoplepowerplanet.com Cross Site Scripting vulnerability OBB-3585016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

planet-jet.es Cross Site Scripting vulnerability OBB-3511822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

Authentication flaw

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

CVE-2023-33553

Planet Technologies WDRT-1800AX v1.01-CP21 is vulnerable to an authentication bypass and root privilege escalation via manipulation of the LoginStatus cookie. The issue is documented across multiple sources, with public references noting a login cookie attack path and, in some records, a public P...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

CVE-2023-33553: Improper Authentication

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

PT-2023-24381 · Planet Technologies · Wdrt-1800Ax

Name of the Vulnerable Software and Affected Versions: Planet Technologies WDRT-1800AX version v1.01-CP21 Description: The issue allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie. Recommendations: For Planet Technologies WDRT-1800...

Planet WDRT-1800AX 授权问题漏洞

The Planet WDRT-1800AX is a wireless router from Planet China. A security vulnerability exists in Planet WDRT-1800AX version 1.01-CP21, which originated from a vulnerability that allows an attacker to bypass authentication and elevate privileges to root by manipulating the LoginStatus cookie...

Malicious code in planet-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55386c885b05d1c8fddc851d72b04df02d46b08a4b860a7038aa75f6ff8231c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...