CVE-2024-3346 Byzoro Smart S80 webmailattach.php os command injection

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

CVE-2024-3346

Byzoro Smart S80 (up to 20240328) contains an OS command injection vulnerability in /log/webmailattach.php via the mail_file_path parameter. This can be exploited remotely; the exploit has been disclosed publicly (VDB-259450). Affected product/version information is limited to the Byzoro Smart S8...

CVE-2024-3346 Byzoro Smart S80 webmailattach.php os command injection

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

PT-2024-12063 · Lenovo · Smart Office +3

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop, Smart Edge, Smart Office, and ThinkStation products affected versions not specified Description: A potential issue was reported in the BIOS update tool driver for some Lenovo products, which could allow a local user with...

PT-2024-12064 · Lenovo · Smart Edge +2

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop, Smart Edge, and ThinkStation products affected versions not specified Description: A potential issue was reported in the BIOS of some Lenovo products, including Desktop, Smart Edge, and ThinkStation, that could allow a local...

Byzro Networks Smart S80 安全漏洞

Byzro Networks Smart S80 is an Internet behavior management product from Byzro Networks, Inc. A security vulnerability exists in Byzro Networks Smart S80 20240328 and earlier versions, which originates from an operating system command injection vulnerability in the parameter mailfilepath of the...

WordPress Smart Online Order for Clover Plugin <= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Smart Online Order for Clover Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31238 Patch priority Low CVSS severity Low 5.4 Developer Zaytech PSID dad95ce21a7d Credits thiennv...

Lenovo ThinkStation 安全漏洞

Lenovo Desktops and Lenovo ThinkStation are both products of the Chinese company Lenovo.Lenovo Desktops are desktop computers.Lenovo ThinkStation are desktop workstations. A security vulnerability exists in the BIOS of Lenovo Desktop, Smart Edge, Smart Office, and ThinkStation, which stems from a...

CVE-2024-28520

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

Beijing Baichuo Smart S210 Management Platform 安全漏洞

Beijing Baichuo Smart S210 Management Platform is a multi-service security gateway intelligent management platform from Beijing Baichuo, China. A security vulnerability exists in the Beijing Baichuo Smart S210 Management Platform that could allow an attacker to obtain sensitive information via th...

CVE-2024-28520

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

The vulnerability of the MyEID driver of the software and library used for working with OpenSC smart cards allows a perpetrator to potentially gain unauthorized access to confidential data.

The vulnerability of the MyEID driver for software tools and libraries used to work with OpenSC smart cards lies in the fact that it allows reading beyond the memory buffer boundaries during the processing of symmetric-key encryption. Exploiting this vulnerability could potentially allow an...

The vulnerability of the program tools and libraries used for working with OpenSC smart cards involves improper authentication procedures. This allows attackers to gain unauthorized access, perform arbitrary actions, or compromise the system.

The vulnerability of the software tools and libraries used for working with OpenSC smart cards stems from the fact that token/card authentication can be performed as a cryptographic operation in other processes when a null-length PIN code is transmitted. Exploiting this vulnerability could allow ...

PT-2024-22451 · Byzoro Networks · Byzoro Networks Smart Multi-Service Security Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Networks Smart multi-service security gateway intelligent management platform version S210 Description: The issue allows an attacker to obtain sensitive information via the uploadfile.php component. This is a result of a File Upload...

CVE-2024-28520

CVE-2024-28520 is a file upload vulnerability in Byzoro Networks’ Smart multi-service security gateway intelligent management platform, version S210. The issue stems from the uploadfile.php component, enabling an attacker to obtain sensitive information. The vulnerability has a CVSSv3.1 vector of...

smart-it.io Cross Site Scripting vulnerability OBB-3898237

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Smart School 6.4.1 - SQL Injection Vulnerability

Exploit Title: Smart School 6.4.1 - SQL Injection Exploit Author: CraCkEr Vendor: QDocs - qdocs.net Vendor Homepage: https://smart-school.in/ Software Link: https://demo.smart-school.in/ Tested on: Windows 10 Pro Impact: Database Access CVE: CVE-2023-5495 CWE: CWE-89 - CWE-74 - CWE-707 Greetings...

Smart School 6.4.1 - SQL Injection

Exploit Title: Smart School 6.4.1 - SQL Injection Exploit Author: CraCkEr Date: 28/09/2023 Vendor: QDocs - qdocs.net Vendor Homepage: https://smart-school.in/ Software Link: https://demo.smart-school.in/ Tested on: Windows 10 Pro Impact: Database Access CVE: CVE-2023-5495 CWE: CWE-89 - CWE-74 -...

Smart Alarm 安全漏洞

Smart Alarm is a privacy-focused sleep tracker by the individual developer of fridgecow. A security vulnerability exists in Smart Alarm v1.8.1, which stems from an unknown part of the androidmanifest.xml in the component Backup File Handler, leading to the exposure of the backup file...

The vulnerability of the smart.disk.get component in the universal monitoring system Zabbix allows a attacker to execute arbitrary code.

The vulnerability of the smart.disk.get component in the universal monitoring system of Zabbix is related to the introduction of malicious code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...