523 matches found
CVE-2021-47702 OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php
OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings...
CVE-2024-58277
CVE-2024-58277 affects the R Radio Network FM Transmitter v1.07, where an unauthenticated actor can access the admin password via the system.cgi endpoint, enabling authentication bypass and FM station setup access. Public sources (Zero Science Lab) describe an improper access control allowing dis...
CVE-2025-63223
The Axel Technology StreamerMAX MK II devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and...
CVE-2025-63221
The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...
ELCA Star Transmitter Remote Control 安全漏洞
ELCA Star Transmitter Remote Control is a wireless remote control for industrial machinery and equipment from ELCA Corporation. A security vulnerability exists in ELCA Star Transmitter Remote Control version 1.25, which stems from an unprotected /setup.xml endpoint that could disclose administrat...
CVE-2025-63223
The Axel Technology StreamerMAX MK II devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and...
CVE-2025-63218
The Axel Technology WOLF1MS and WOLF2MS devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and...
PT-2025-47499
Name of the Vulnerable Software and Affected Versions ELCA Star Transmitter Remote Control firmware version 1.25 Description The ELCA Star Transmitter Remote Control firmware version 1.25 has an issue that allows unauthenticated attackers to retrieve admin credentials and system settings. This is...
External Control of System or Configuration Setting
Overview taguette is a Free and open source qualitative research tool Affected versions of this package are vulnerable to External Control of System or Configuration Setting via the post function in the web/views.py file'. An attacker can gain unauthorized access to user accounts by crafting a...
VulnCheck KEV: CVE-2021-26829
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...
EUVD-2020-3057
Malware in sbrugna...
EUVD-2017-18259
Malware in sbrugna...
EUVD-2017-3354
Malware in sbrugna...
EUVD-2021-2362
Malware in sbrugna...
EUVD-2018-17783
Malware in sbrugna...
EUVD-2014-1297
Malware in sbrugna...
EUVD-2021-25226
Malware in sbrugna...
EUVD-2016-1588
Malware in sbrugna...