CVE-2022-22828

CVE-2022-22828 Synametrics - SynaMan version 4.9 Summary Viden Labs has found an Insecure Direct Object Reference IDOR vulnerability in Synametric's SynaMan. This vulnerability is present in versions 4.9 and earlier. This vulnerability has since been patched in version 5.0. “Insecure direct objec...

EUVD-2018-2883

Malware in sbrugna...

EUVD-2018-2833

Malware in sbrugna...

EUVD-2022-27966

Malicious code in bioql PyPI...

CVE-2022-22828

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2022-22828

Synametrics SynaMan prior to version 5.0 is affected by CVE-2022-22828 due to an insecure direct object reference in the file-download URL. An attacker can access unshared files by modifying the base64-encoded filename string, enabling remote file disclosure. The vulnerability is exposed via the ...

CVE-2022-22828: Authorization Bypass Through User-Controlled Key

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

PT-2022-15698

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan versions prior to 5.0 Description The issue is related to an insecure direct object reference for the file-download URL, allowing a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2018-10814

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

CVE-2018-10763

Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...

Default credentials

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

CVE-2018-10763

Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...

CVE-2018-10814

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

CVE-2018-10763

SynaMan 4.0 build 1488 contains multiple XSS vulnerabilities exploitable through the Main heading or Sub heading fields in Partial Branding. Reported across CVE-2018-10763 records (NVD/CNVD/CVE List) and mirrored in exploit DB entries; one source notes a remote attacker could inject script/HTML v...

CVE-2018-10763: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...

CVE-2018-10814: Insufficiently Protected Credentials

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

PT-2018-10092

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities can be exploited via the Main heading or Sub heading fields in the Partial Branding configuratio...

PT-2018-10124

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488 Description The issue concerns the use of cleartext password storage for SMTP credentials. Recommendations For Synametrics SynaMan version 4.0 build 1488, consider updating the configuration to use...