12 matches found
CVE-2022-22828
CVE-2022-22828 Synametrics - SynaMan संस्करण 4.9 सारांश Viden Labs ने Synametric के SynaMan में एक असुरक्षित प्रत्यक्ष वस्तु संदर्भ IDOR कमजोरी पाई है। यह कमजोरी संस्करण 4.9 और उससे पहले के संस्करणों में मौजूद है। इस कमजोरी को संस्करण 5.0 में ठीक कर दिया गया है। “Insecure direct object references...
EUVD-2018-2883
Malware in sbrugna...
EUVD-2018-2833
Malware in sbrugna...
EUVD-2022-27966
Malicious code in bioql PyPI...
CVE-2022-22828
Synametrics SynaMan prior to version 5.0 is affected by CVE-2022-22828 due to an insecure direct object reference in the file-download URL. An attacker can access unshared files by modifying the base64-encoded filename string, enabling remote file disclosure. The vulnerability is exposed via the ...
CVE-2022-22828
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
CVE-2018-10763
Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...
CVE-2018-10814
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...
Default credentials
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...
CVE-2018-10763
Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...
CVE-2018-10763
SynaMan 4.0 build 1488 contains multiple XSS vulnerabilities exploitable through the Main heading or Sub heading fields in Partial Branding. Reported across CVE-2018-10763 records (NVD/CNVD/CVE List) and mirrored in exploit DB entries; one source notes a remote attacker could inject script/HTML v...