43 matches found
PT-2024-28297
Name of the Vulnerable Software and Affected Versions vaeThink version 1.0.2 Description The issue concerns Information Disclosure via the system backend, specifically affecting the access management administrator function. Recommendations For vaeThink version 1.0.2, consider restricting access t...
CVE-2024-38970: Exposure of Sensitive Information to an Unauthorized Actor
vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function...
CVE-2024-38971
vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting XSS in the system backend...
CVE-2024-38971: Improper Neutralization of Input During Web Page Generation
vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting XSS in the system backend...
CVE-2024-38970
vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function...
Weak Password Vulnerability in Belkin's EA6500
The EA6500 is a router product from Belkin. A weak password vulnerability exists in the Belkin EA6500, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...
Weak Password Vulnerability in TP-LINK Archer-C7 Router
P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the Archer-C7 router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...
Weak password vulnerability in TP-LINK TL-WR743ND router
P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WR743ND router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...
Weak password vulnerability in TP-LINK TL-WA801ND router
P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WA801ND router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...
Weak Password Vulnerability in Telecom Gateway Configuration Management System
Shenzhen Huashimida Information Technology Co., Ltd. is a collection of research and development, production, sales, installation and service in one of the professional interactive video high-tech enterprises. A weak password vulnerability exists in the telecom gateway configuration management...
Weak password vulnerability in H3C GR2200 routers
The H3C GR2200 router is an enterprise-class router. A weak password vulnerability exists in the H3C GR2200 router. An attacker can exploit this vulnerability to log into the system backend and obtain sensitive information...
SQL Injection Vulnerability in ASK2 Q&A System Backend uid Parameter
ask2 Q&A system is whatsns product community, providing free version of the open source php Q&A system, integration of paid Q&A system, paid voice Q&A system, comes with a super collection of features, rapid station building, powerful seo optimization. ASK2 Q&A system background uid parameters...
Rice Shell enterprise website system backend exists arbitrary file reading vulnerability
Rice Shell enterprise station building system is a tailor-made for enterprises, webmasters, developers, network companies, VI planning and design companies, SEO promotion and marketing companies, website beginners and other users of a new enterprise station, content management system, services fo...
Code Execution Vulnerability in FastAdmin System Backend
FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend code execution vulnerability, an attacker can exploit the vulnerability to obtain server privileges...
Arbitrary File Deletion Vulnerability in FastAdmin System Backend
FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...
SQL Injection Vulnerability in Sl***_St***.aspx of Bid 1.0 Backend of Qixing Engineering Bidding System
Qixing Bidding System is suitable for enterprises to collect information on government procurement, engineering construction, land grant and other bidding information, and to track the progress of works and payment of successful projects. QiStar Engineering Bidding System Bid 1.0 backend SlSt.asp...
Weak Password Vulnerability in AppEx CRE Smart Acceleration Gateway
AppEx is a full line of application delivery, WAN acceleration, and Internet acceleration hardware and software products. A weak password vulnerability exists in AppEx CRE Smart Acceleration Gateway. An attacker is allowed to log in to the system backend using the default weak password to gain...
Weak Password Vulnerability in Netnifty Security Management System - Log Audit System by Default
Netnifty Security Management System - Log Audit System hereinafter referred to as Leadsec-RS is a security product for information system log auditing. A weak password vulnerability exists in the Leadsec-RS. The system administrator account password is: sysadmin/leadsec.sysadmin allows an attacke...
FortiGate Firewall Has Design Flaw Vulnerability
FortiGate Fita Firewall is a network firewall product from Fortinet Fita for defense against attacks such as network and malicious code at the network and content layers. FortiGate Firewall has a design flaw vulnerability. It allows attackers to obtain sensitive information, log in to the system...
