56 matches found
CVE-2022-22828
CVE-2022-22828 Synametrics - SynaMan 版本 4.9 摘要 Viden Labs 在 Synametrics 的 SynaMan 中发现了一个不安全的直接对象引用（IDOR）漏洞。该漏洞存在于 4.9 及更早版本中。 该漏洞已在 5.0 版本中修复。 “不安全的直接对象引用（IDOR）是一种访问控制漏洞，当应用程序使用用户提供的输入直接访问对象时就会出现这种漏洞。” - https://portswigger.net/web-security/access-control/idor。 利用该漏洞，可以访问 SynaMan...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
CVE-2022-26251
The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...
EUVD-2018-2833
Malware in sbrugna...
EUVD-2018-2883
Malware in sbrugna...
EUVD-2015-3221
Malware in sbrugna...
EUVD-2022-27966
Malicious code in bioql PyPI...
EUVD-2022-30814
Malicious code in bioql PyPI...
EUVD-2022-30813
Malicious code in bioql PyPI...
CVE-2022-26251
The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...
CVE-2022-26251
The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
CVE-2022-26251
The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
Code injection
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
Code injection
The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
CVE-2022-26250
CVE-2022-26250 affects SynaMan v5.1 and earlier. Root cause is weak file permissions, enabling an authenticated attacker to escalate privileges. Documented impact is privilege escalation with local access; exploitation status is not detailed in the provided sources. No remediation details are inc...