1279 matches found
CVE-2023-34553
An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...
Code injection
An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...
CVE-2023-34553
An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...
PT-2023-24920 · Wafu · Wafu Keyless Smart Lock
Name of the Vulnerable Software and Affected Versions: WAFU Keyless Smart Lock version 1.0 Description: An issue was discovered that allows attackers to unlock a device via a code replay attack. Recommendations: For WAFU Keyless Smart Lock version 1.0, at the moment, there is no information about...
WAFU Keyless Smart Lock 安全漏洞
WAFU Keyless Smart Lock is a series of smart locks from the Chinese company WAFU. A security vulnerability exists in WAFU Keyless Smart Lock v1.0, which stems from a vulnerability that allows an attacker to unlock a device via a code replay attack...
CVE-2023-34553
An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...
CVE-2023-34553
The CVE-2023-34553 entry concerns WAFU Keyless Smart Lock v1.0, where a vulnerability allows unlocking the device via a code replay attack. The issue affects the Keyless Smart Lock software component; underlying cause details are not explicitly provided beyond the replay mechanism described in mu...
An agent without permission has the ability to update, add, or delete FAQ items
Description I discovered a vulnerability in the osticket application. When an administrator creates a category and adds some FAQ items, they have the ability to grant update, delete, and add permissions to agents. Once granted access, an agent can login and edit, delete, or add FAQs and record...
CVE-2023-31200
PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack...
CVE-2023-31200
PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack...
Cross site request forgery (csrf)
PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack...
CVE-2023-31200 PTC Vuforia Studio Cross-Site Request Forgery
PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack...
CVE-2023-31200
PTC Vuforia Studio contains a Cross-Site Request Forgery vulnerability (CVE-2023-31200): the local web app does not require a token, enabling an attacker with local access to perform CSRF or replay attacks. Affected products include Vuforia Studio prior to version 9.9. Mitigation recommended by t...
CVE-2023-31759
Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...
CVE-2023-31759
Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...
CVE-2023-31761
Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...
CVE-2023-31761
Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...
CVE-2023-31763
Weak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...