3864 matches found
CVE-2024-3742
Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...
EUVD-2024-32316
Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...
CVE-2024-3741
Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access...
CVE-2024-3741 Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access...
CVE-2024-3741 Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access...
CVE-2024-3741
Summary : CVE-2024-3741 affects Electrolink FM/DAB/TV Transmitters and is an authentication-bypass vulnerability in the login cookie, allowing an attacker to gain full system access by setting an arbitrary cookie value other than 'NO'. Affected products : A wide range of Electrolink transmitters ...
Electrolink FM/DAB/TV Transmitter 安全漏洞
The Electrolink FM/DAB/TV Transmitter is a series of transmitters from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter that stems from the presence of an authentication bypass vulnerability. An attacker can set any value other than NO to a login cookie and ha...
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Authentication Bypass
Summary ESE Elber Satellite Equipment product line, designed for the high-end radio contribution and distribution market, where quality and reliability are most important. The Elber IRD Integrated Receiver Decoder ESE-01 offers a professional audio quality and composite video at an excellent...
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Device Config
Summary Cleber offers a powerful, flexible and modular hardware and software platform for broadcasting and contribution networks where customers can install up to six boards with no limitations in terms of position or number. Based on a Linux embedded OS, it detects the presence of the boards and...
Elber Wayber Analog/Digital Audio STL 4.00 Device Config
Summary Wayber II is the name of an analogue/digital microwave link able to transport a Mono or a MPX stereo signal from studio to audio transmitter. Compact and reliable, it features very high quality and modern technology both in signal processing and microwave section leading to outstanding...
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Device Config
Summary The SIGNUM controller from Elber satellite equipment demodulates one or two DVB-S/ S2 signals up to 32APSK single/multi-stream, achieving 256 KS/s as minimum symbol rate. The TS demodulated signals can be aligned and configured in 1+1 seamless switching for redundancy. Redundancy can also...
nginxWebUI path traversal vulnerability
nginxWebUI is an nginx web configuration tool. A path traversal vulnerability exists in nginxWebUI, which stems from the failure of the dir parameter of the findCountByQuery method of the /adminPage/www/addOver file to correctly filter for special elements in the path of a resource or file. An...
CVE-2024-27261
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed. IBM X-Force ID: 283986...
lollms-webui 安全漏洞
LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in lollms-webui. An attacker exploiting this vulnerability could read any file on a file system accessible to the web server...
Esri Portal for ArcGIS Path Traversal Vulnerability
Esri Portal For ArcGIS is a component of esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A path traversal vulnerability exists in Esri Portal for ArcGIS that stems from the program failing to properly filter for specif...
Siemens SINEC NMS 路径遍历漏洞
Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A path traversal vulnerability exists in Siemens SINEC NMS versions...
EUVD-2024-23009
There is a path traversal in Esri Portal for ArcGIS versions = 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory...
Internet Bug Bounty: Improper handling of wildcards in --allow-fs-read and --allow-fs-write
The Node.js Permission Model was found to have improper handling of wildcards in the --allow-fs-read and --allow-fs-write options. The implementation silently ignored any text after a wildcard character, potentially granting unintended file system access. Additionally, when the wildcard character...
PT-2024-13955 · Sikka · Sikka Sscwindowsservice
Name of the Vulnerable Software and Affected Versions: Sikka SSCWindowsService version 5 2023-09-14 Description: The issue allows low-privileged users to execute arbitrary code as LocalSystem due to full control being granted to them. This is possible because low-privileged users have write acces...
