13896 matches found
Smart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041
The Smart IP Ban module enables a site to automatically ban an IP address based upon too many failed authentications. The module doesn't sufficiently protect access to certain paths provided by the module allowing a malicious user to view and modify the settings...
VulnCheck KEV: CVE-2023-43478
fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code...
CVE-2024-39081
CVE-2024-39081 affects SMART TYRE CAR & BIKE v4.2.0. The connected sources consistently describe a man-in-the-middle risk via Bluetooth communications in this version. The documents do not provide the exact root cause or vulnerable component details beyond this Bluetooth MITM exposure. A practica...
PT-2025-2092 · Drupal · Drupal Cms +1
Name of the Vulnerable Software and Affected Versions: Drupal Smart IP Ban versions 7.X-1.0 through 7.X-1.0 Description: The issue is related to insufficient authorization mechanisms in the Smart IP Ban module for the Drupal CMS, allowing a remote attacker to view and modify settings. This can le...
CVE-2024-39081
An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications...
TREEL Mobility SMART TYRE CAR & BIKE 安全漏洞
TREEL Mobility SMART TYRE CAR & BIKE is a smart tire protection and management solution from TREEL Mobility. A security vulnerability exists in TREEL Mobility SMART TYRE CAR & BIKE v4.2.0 that originates from Allows an attacker to perform a man-in-the-middle attack via Bluetooth communication...
CVE-2024-44445
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Master Your PCI DSS v4 Compliance with Innovative Smart Approvals
The PCI DSS landscape is evolving rapidly. With the Q1 2025 deadline looming ever larger, businesses are scrambling to meet the stringent new requirements of PCI DSS v4.0. Two sections in particular, 6.4.3 and 11.6.1, are troublesome as they demand that organizations rigorously monitor and manage...
CVE-2024-44445
This CVE-2024-44445 entry is rejected/not used and does not represent an active vulnerability.
编号撤回
BSC Smart Contract is a high-performance blockchain network from BSC. This CVE number has been withdrawn...
PT-2024-31155 · Unknown · Bafc Smart Contract
Name of the Vulnerable Software and Affected Versions: BSC Smart Contract 0x0506e571aba3dd4c9d71bed479a4e6d40d95c833 affected versions not specified Description: An issue was discovered in the BSC Smart Contract, allowing attackers to perform state manipulation attacks. This is achieved by...
CVE-2024-8784
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...
CVE-2024-8784
CVE-2024-8784 affects QDocs Smart School Management System 7.0.0, specifically the Chat component at /user/chat/mynewuser. The vulnerability arises from manipulation of the POST parameter users[] that leads to SQL injection (exploitation described as remote). Publicly disclosed exploit exists; im...
CVE-2024-8784 QDocs Smart School Management System Chat mynewuser sql injection
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...
CVE-2024-8784 QDocs Smart School Management System Chat mynewuser sql injection
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...
PT-2024-39250 · Unknown · Qdocs Smart School Management System
Name of the Vulnerable Software and Affected Versions: QDocs Smart School Management System version 7.0.0 Description: A critical vulnerability was found in the QDocs Smart School Management System. The issue affects an unknown functionality of the file /user/chat/mynewuser of the component Chat...
QDocs Smart School Management System SQL注入漏洞
QDocs Smart School Management System is a smart group building system from QDocs, Inc. A SQL injection vulnerability exists in QDocs Smart School Management System version 7.0.0, which originates from a parameter in the file /user/chat/mynewuser that can lead to SQL injection...
Enhancing Security and Compliance in the Energy Sector: Imperva’s Cipher Suite Support
In the energy and utility sector, safeguarding data and ensuring compliance with regulatory standards is paramount. With the increasing digitalization of operations, from smart grids to IoT-enabled devices, the need for robust encryption methods to protect sensitive information has never been...