2058 matches found
Hotel Kiosks Vulnerability Exposed Guest Data, Room Access
A security vulnerability in Ariane Allegro Hotel Check-In Kiosks exposed guest data and potentially compromised room access. However,…...
CVE-2024-37364
Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information such as hotel invoice content with PII, and potentially create unauthorized room keys, by entering a guest-search quote character and then...
CVE-2024-37364: Improper Privilege Management
Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information such as hotel invoice content with PII, and potentially create unauthorized room keys, by entering a guest-search quote character and then...
PT-2024-27501 · Microsoft +1 · Windows Os +1
Name of the Vulnerable Software and Affected Versions: Ariane Allegro Scenario Player through 2024-03-05 Description: The issue allows physically proximate attackers to obtain sensitive information, such as hotel invoice content with personally identifiable information PII, and potentially create...
CVE-2024-33471
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33471
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33471
The AVTECH Room Alert 4E (version v4.4.0 ) is vulnerable to the cleartext transmission of sensitive information. An attacker with administrative access can modify the mail server host to an attacker-controlled IP; when the device attempts authentication, it passes SMTP credentials in plaintext to...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33470
The AVTECH Room Alert 4E version v4.4.0 is vulnerable to a passback attack within its SMTP Email Settings. When an administrator authenticates and browses the settings pages, the SMTP password is loaded from the device and displayed in the DOM in plaintext . Additionally, SMTP credentials are tra...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
PT-2024-25276 · Avtech · Avtech Room Alert 4E
Name of the Vulnerable Software and Affected Versions: AVTECH Room Alert 4E version 4.4.0 Description: An issue in the Sensor Settings allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request to an unspecified API endpoint. This issue only affects products that...
PT-2024-25275 · Avtech · Avtech Room Alert 4E
Name of the Vulnerable Software and Affected Versions: AVTECH Room Alert 4E version 4.4.0 Description: An issue in the SMTP Email Settings allows attackers to gain access to credentials in plaintext via a passback attack. This issue only affects products that are no longer supported by the...
CVE-2024-33470: Cleartext Storage of Sensitive Information
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33471: Cleartext Storage of Sensitive Information
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
AVTECH Software Room Alert 4E 安全漏洞
AVTECH Software Room Alert 4E is an environmental monitoring device from AVTECH Software, Inc. A security vulnerability exists in AVTECH Software Room Alert 4E version v4.4.0, which originates from a vulnerability that allows an attacker to gain access to SMTP credentials in plaintext via a craft...
AVTECH Software Room Alert 4E 安全漏洞
AVTECH Software Room Alert 4E is an environmental monitoring device from AVTECH Software. A security vulnerability exists in AVTECH Software Room Alert 4E version v4.4.0, which originated from a vulnerability that allows an attacker to gain access to plaintext credentials via a pass-back attack...
CVE-2024-4314: Cross-Site Request Forgery (CSRF)
The Hostel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5.3. This is due to missing or incorrect nonce validation when managing rooms. This makes it possible for unauthenticated attackers to create and delete rooms via a forged request...
PT-2024-30329
Name of the Vulnerable Software and Affected Versions Hostel plugin for WordPress versions up to, and including, 1.1.5.3 Description The issue is related to Cross-Site Request Forgery. It occurs due to missing or incorrect nonce validation when managing rooms, allowing unauthenticated attackers t...
