13895 matches found
Nexx Smart Home Device 安全漏洞
Nexx Smart Home Device is a smart home device from Nexx. A security vulnerability exists in the Nexx Smart Home Device that stems from a lack of proper access control...
多款Nexx产品安全漏洞
Nexx Garage Door Controller and others are products of Nexx Corporation.Nexx Garage Door Controller is a garage door controller.Nexx Smart Plug is a smart plug.Nexx Smart Alarm is a smart alarm. A security vulnerability exists in the Nexx Smart Home Device that stems from a lack of proper access...
多款Nexx产品授权问题漏洞
Nexx Garage Door Controller and others are products of Nexx Corporation.Nexx Garage Door Controller is a garage door controller.Nexx Smart Plug is a smart plug.Nexx Smart Alarm is a smart alarm. A security vulnerability exists in the Nexx Smart Home Device that stems from allowing any user to...
多款Nexx产品安全漏洞
Nexx Smart Plug and others are products of Nexx Corporation.Nexx Smart Plug is a smart plug.Nexx Smart Alarm is a smart alarm.Nexx Smart Home Device is a smart home device. A security vulnerability exists in the Nexx Smart Home Device that stems from not verifying that the holder token in the...
PT-2023-2620 · Nexx · Nexx Smart Alarm +2
Name of the Vulnerable Software and Affected Versions: Nexx Garage Door Controller versions NXG-100B, NXG-200 Nexx Smart Plug version NXPG-100W Nexx Smart Alarm version NXAL-100 Description: The issue is related to a lack of proper access control when executing actions on Nexx Smart Home devices...
PT-2023-2619 · Nexx · Nexx Smart Alarm +2
Name of the Vulnerable Software and Affected Versions: Nexx Garage Door Controller versions NXG-100B, NXG-200 Nexx Smart Plug version NXPG-100W Nexx Smart Alarm version NXAL-100 Description: The issue is related to the use of hard-coded credentials in the firmware of Nexx Smart Home devices. This...
PT-2023-2623 · Nexx · Nexx Garage Door Controller +3
Name of the Vulnerable Software and Affected Versions: Nexx Smart Home devices affected versions not specified Nexx Garage Door Controller NXG-100B, NXG-200 Nexx Smart Plug NXPG-100W Nexx Smart Alarm NXAL-100 Description: The issue is related to weaknesses in the authentication procedure of Nexx...
多款Nexx产品信任管理问题漏洞
Nexx Garage Door Controller and others are products of Nexx Corporation.Nexx Garage Door Controller is a garage door controller.Nexx Smart Plug is a smart plug.Nexx Smart Alarm is a smart alarm. A security vulnerability exists in the Nexx Smart Home Device that stems from the use of hard-coded...
MuteAmplifier.rescueTokens() should check conditions for fee tokens(token0/token1) as well
Lines of code Vulnerability details Impact rescueTokens can be used to withdraw fee tokens without any validations. As a result, the reward logic would be broken due to the lack of fee tokens. Proof of Concept rescueTokens doesn't validate anything for the fee tokens. So if some fee tokens were...
ELSI Smart Floor V3.3.3 - Stored Cross-Site Scripting (XSS)
Exploit Title: ELSI Smart Floor V3.3.3 - Stored Cross-Site Scripting XSS Date: 12/09/2022 Exploit Author: Rob, CTRL Group Vendor Homepage: marigroup.com Version: V3.3.3 and under Tested on: Windows IIS all versions CVE : CVE-2022-35543 “Stored Cross-Site Scripting” Vulnerability within the Elsi...
Active Healthcare ELSI Smart Floor 安全漏洞
Active Healthcare ELSI Smart Floor is Active Healthcare's state-of-the-art smart flooring solution that reduces falls and improves safety in care environments. A security vulnerability exists in Active Healthcare ELSI Smart Floor version 3.3.3 that stems from the presence of a stored cross-site...
GHSA-5X5Q-8CGM-2HJQ Karate has vulnerable dependency on json-smart package (CVE-2023-1370)
Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...
Karate has vulnerable dependency on json-smart package (CVE-2023-1370)
Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...
smart-cufflinks.com.hk Cross Site Scripting vulnerability OBB-3242769
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
[SECURITY] [DLA 3373-1] json-smart security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3373-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès March 30, 2023 https://wiki.debian.org/LTS -...
Debian: Security Advisory (DLA-3373-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3373 : libjson-smart-java - security update
The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3373 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3373-1 [email protected]...
[SECURITY] [DLA 3373-1] json-smart security update
...
smart-up.me Cross Site Scripting vulnerability OBB-3242072
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
