Lucene search
+L

36 matches found

Vulnrichment
Vulnrichment
added 2024/09/16 5:39 a.m.10 views

CVE-2024-8776 INTUMIT SmartRobot - Cross-site Scripting

SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks...

6.1CVSS6.8AI score0.00288EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/16 12:0 a.m.7 views

Intumit SmartRobot 跨站脚本漏洞

Intumit SmartRobot is a web development framework from Intumit, Inc. A cross-site scripting vulnerability exists in Intumit SmartRobot versions prior to v7.1.0 that stems from failure to properly validate a specific page parameter, which could allow an unauthenticated, remote attacker to inject...

6.1CVSS6.2AI score0.00288EPSS
Exploits0References3
OSV
OSV
added 2024/03/13 3:15 a.m.5 views

CVE-2024-2413

Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute...

9.8CVSS6.2AI score0.00574EPSS
Exploits0References1
NVD
NVD
added 2024/03/13 3:15 a.m.18 views

CVE-2024-2413

Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute...

9.8CVSS9.9AI score0.00574EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/13 2:51 a.m.13 views

CVE-2024-2413 Intumit SmartRobot - Use of Hard-coded Cryptographic Key

Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute...

9.8CVSS8.2AI score0.00574EPSS
Exploits0References1
CVE
CVE
added 2024/03/13 2:51 a.m.38 views

CVE-2024-2413

CVE-2024-2413 affects Intumit SmartRobot, which uses a fixed cryptographic key for authentication. This allows remote attackers to craft an authentication code by encrypting a string of the user’s name and a timestamp, enabling administrator privileges and potential arbitrary code execution on th...

9.8CVSS10AI score0.00574EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/13 2:51 a.m.22 views

CVE-2024-2413 Intumit SmartRobot - Use of Hard-coded Cryptographic Key

Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute...

9.8CVSS10AI score0.00574EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.4 views

Intumit SmartRobot Security Vulnerability

Intumit SmartRobot is a web development framework from Intumit, Inc. A security vulnerability exists in Intumit SmartRobot, which stems from the use of a fixed cryptographic key for authentication, and can be exploited by an attacker to gain administrator privileges and execute arbitrary code on ...

9.8CVSS7.9AI score0.00574EPSS
Exploits0References2
OSV
OSV
added 2024/01/15 4:15 a.m.5 views

CVE-2024-0552

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server...

9.8CVSS6.5AI score0.01179EPSS
Exploits0References1
NVD
NVD
added 2024/01/15 4:15 a.m.17 views

CVE-2024-0552

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server...

9.8CVSS9.9AI score0.01179EPSS
Exploits0References1
Prion
Prion
added 2024/01/15 4:15 a.m.18 views

Remote code execution

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server...

7.5CVSS8.7AI score0.01179EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/15 4:3 a.m.11 views

CVE-2024-0552 Intumit inc. SmartRobot - Remote Code Execution

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server...

9.8CVSS8.4AI score0.01179EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/15 4:3 a.m.28 views

CVE-2024-0552 Intumit inc. SmartRobot - Remote Code Execution

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server...

9.8CVSS10AI score0.01179EPSS
Exploits0References1
CVE
CVE
added 2024/01/15 4:3 a.m.48 views

CVE-2024-0552

CVE-2024-0552 relates to a remote code execution vulnerability in Intumit inc. SmartRobot’s web framework. The most concrete details across the provided documents indicate that the issue lies in the framework’s handling in a way that allows an unauthenticated attacker to execute arbitrary command...

9.8CVSS9.8AI score0.01179EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/15 12:0 a.m.4 views

Intumit SmartRobot Security Vulnerability

Intumit SmartRobot is a web development framework from Intumit. A security vulnerability exists in Intumit SmartRobot v6.0.0-202012tw and earlier versions that stems from a remote code execution vulnerability in SmartRobo's web framework. An attacker can exploit the vulnerability to execute...

9.8CVSS8.5AI score0.01179EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/14 12:0 a.m.10 views

PT-2024-15652 · Intuit · Smartrobot

Name of the Vulnerable Software and Affected Versions: Intumit inc. SmartRobot affected versions not specified Description: The issue is related to a remote code execution vulnerability in the web framework of Intumit inc. SmartRobot. This allows an unauthorized remote attacker to execute arbitra...

9.8CVSS8.5AI score0.01179EPSS
Exploits0References5
Rows per page
Query Builder