12 matches found
CVE-2022-22828
CVE-2022-22828 Synametrics - SynaMan 版本 4.9 摘要 Viden Labs 在 Synametrics 的 SynaMan 中发现了一个不安全的直接对象引用（IDOR）漏洞。该漏洞存在于 4.9 及更早版本中。 该漏洞已在 5.0 版本中修复。 “不安全的直接对象引用（IDOR）是一种访问控制漏洞，当应用程序使用用户提供的输入直接访问对象时就会出现这种漏洞。” - https://portswigger.net/web-security/access-control/idor。 利用该漏洞，可以访问 SynaMan...
EUVD-2018-2883
Malware in sbrugna...
EUVD-2018-2833
Malware in sbrugna...
EUVD-2022-27966
Malicious code in bioql PyPI...
CVE-2022-22828
Synametrics SynaMan prior to version 5.0 is affected by CVE-2022-22828 due to an insecure direct object reference in the file-download URL. An attacker can access unshared files by modifying the base64-encoded filename string, enabling remote file disclosure. The vulnerability is exposed via the ...
CVE-2022-22828
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
CVE-2018-10763
Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...
CVE-2018-10814
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...
Default credentials
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...
CVE-2018-10763
SynaMan 4.0 build 1488 contains multiple XSS vulnerabilities exploitable through the Main heading or Sub heading fields in Partial Branding. Reported across CVE-2018-10763 records (NVD/CNVD/CVE List) and mirrored in exploit DB entries; one source notes a remote attacker could inject script/HTML v...