Lucene search
+L

1492 matches found

OSV
OSV
•added 2021/04/08 4:15 a.m.•19 views

CVE-2021-28174

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

6.5CVSS6.7AI score0.00953EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/08 4:15 a.m.•25 views

CVE-2021-28174

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

6.5CVSS0.00953EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/08 4:15 a.m.•26 views

Authentication flaw

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

6.4CVSS6.7AI score0.00953EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/08 3:50 a.m.•36 views

CVE-2021-28174 Mitake Smart Stock Selection System - Broken Authentication

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

6.5CVSS6.9AI score0.00953EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/08 3:50 a.m.•80 views

CVE-2021-28174

Mitake smart stock selection system is affected by CVE-2021-28174, a broken authentication vulnerability where URL parameter manipulation lets remote attackers obtain privileged access to transaction records and perform fraudulent trading without login. The available documents describe the vulner...

6.5CVSS6.6AI score0.00953EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/04/08 12:00 a.m.•4 views

PT-2021-17790

Name of the Vulnerable Software and Affected Versions: Mitake smart stock selection system affected versions not specified Description: The issue allows remote attackers to gain privileged permissions by manipulating parameters in the URL, enabling access to transaction records and fraudulent...

6.5CVSS0.00953EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/04/08 12:00 a.m.•16 views

Mitake smart stock selection system 授权问题漏洞

Mitake Information Mitake smart stock selection system is an application system of China-based Mitake Information Corporation. A security vulnerability exists in the Mitake smart stock selection system, which can be exploited by an attacker to gain privileged access to transaction records and...

6.5CVSS6.5AI score0.00953EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/08 12:00 a.m.•8 views

CVE-2021-28174: Improper Authentication

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

6.5CVSS5.9AI score0.00953EPSS
SaveExploits0References3
Wired Threat Level
Wired Threat Level
•added 2021/03/19 8:41 p.m.•47 views

A SpaceX Engineer's Dark Web Insider Trading Sparks SEC First

“MillionaireMike” allegedly ran a stock tip scam that earned him $27,000 in bitcoin payments...

3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/03/19 12:00 a.m.•10 views

PT-2021-3982 · WordPress · Woocommerce Stock Manager

Name of the Vulnerable Software and Affected Versions: WooCommerce Stock Manager versions up to, and including, 2.5.7 Description: The issue is related to the implementation of the import/export functionality in the WooCommerce Stock Manager plugin for WordPress, specifically in the...

8.8CVSS8.7AI score0.00719EPSS
SaveExploits2References6
The Hacker News
The Hacker News
•added 2021/01/11 7:11 a.m.•60 views

Russian Hacker Gets 12-Years Prison for Massive JP Morgan Chase Hack

A U.S. court on Thursday sentenced a 37-year-old Russian to 12 years in prison for perpetrating an international hacking campaign that resulted in the heist of a trove of personal information from several financial institutions, brokerage firms, financial news publishers, and other American...

1.1AI score
SaveExploits0
NVD
NVD
•added 2020/11/09 1:15 a.m.•41 views

CVE-2020-24405

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions issue vulnerability in the Inventory module. This vulnerability could be abused by authenticated users to modify inventory stock data without authorization...

4.3CVSS3.8AI score0.01519EPSS
SaveExploits0References1
Mend
Mend
•added 2020/11/09 12:39 a.m.•3 views

CVE-2020-24405

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions issue vulnerability in the Inventory module. This vulnerability could be abused by authenticated users to modify inventory stock data without authorization...

5.3CVSS0.01519EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/09 12:00 a.m.•6 views

CVE-2020-24405: Improper Authorization

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions issue vulnerability in the Inventory module. This vulnerability could be abused by authenticated users to modify inventory stock data without authorization...

4.3CVSS5.8AI score0.01519EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/10/15 11:00 p.m.•8 views

CVE-2020-24405

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions issue vulnerability in the Inventory module. This vulnerability could be abused by authenticated users to modify inventory stock data without authorization...

4.3CVSS5AI score0.01519EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/10/15 12:00 a.m.•7 views

PT-2020-4580 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.0 and 2.3.5p1 and earlier Description: The issue is related to an incorrect permissions problem in the Inventory module, which could be exploited by authenticated users to modify inventory stock data without proper...

7.8CVSS4.3AI score0.01519EPSS
SaveExploits0References10
Check Point Advisories
Check Point Advisories
•added 2020/10/04 12:00 a.m.•25 views

Stock Management System Project SQL Injection (CVE-2020-24197)

A SQL injection vulnerability exists in Stock Management System Project. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.3AI score0.01426EPSS
SaveExploits1
OSV
OSV
•added 2020/09/09 3:15 p.m.•16 views

CVE-2020-24198

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'...

6.1CVSS6.4AI score0.00835EPSS
SaveExploits1References2
NVD
NVD
•added 2020/09/09 3:15 p.m.•30 views

CVE-2020-24198

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'...

6.1CVSS0.00835EPSS
SaveExploits1References2
Prion
Prion
•added 2020/09/09 3:15 p.m.•26 views

Cross site scripting

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'...

4.3CVSS6AI score0.00835EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder