13162 matches found
The vulnerability of the readycloud_control.cgi file in the embedded software of NETGEAR routers such as NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R7000, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43, NETGEAR RAX45, NETGEAR RAX48, NETGEAR RAX50, NETGEAR RAX50S, and NETGEAR LAX20 allows a hacker to bypass authentication.
The vulnerability of the readycloudcontrol.cgi file in NETGEAR’s integrated routing software for models such as NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R7000, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43, NETGEAR...
CVE-2022-25017
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
CVE-2022-25017
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57803)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and previous versions, which can be exploited by remote attackers to execute HTML or JavaScript code with the help...
UBUNTU-CVE-2021-37517
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service...
Jenkins Proxmox Plugin Licensing Issue Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Proxmox Plugin 0.7.0 and earlier...
Dolibarr ERP/CRM 安全漏洞
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM 13.0.2,...
CVE-2008-10001 Pro2col Stingray FTS cross site scriting
A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects...
CVE-2021-46434
EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid...
CVE-2021-46434
EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid...
CVE-2021-46434
EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid...
Code injection
UNSUPPORTED WHEN ASSIGNED EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid...
CVE-2021-46434
EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid...
CVE-2021-46434
EMQ X Dashboard 3.0.0 is affected by a username enumeration vulnerability in the /api/v3/auth interface. The login response differs depending on whether the username exists, allowing an attacker to determine if a given username is valid. Public references across CNVD/OSV/NVD/CVE records confirm t...
PT-2022-12705 · Emq · Emq X Dashboard
Name of the Vulnerable Software and Affected Versions: EMQ X Dashboard version 3.0.0 Description: The issue concerns username enumeration in the "/api/v3/auth" interface. When a user logs in, the application returns different results depending on whether the account is correct, allowing an attack...
Pro2col Stingray FTS 跨站脚本漏洞
Pro2col StingRay FTS is a file transfer server for Internet communication from Pro2col, UK. A cross-site scripting vulnerability exists in the Pro2col Stingray FTS that stems from the fact that manipulation of the Username parameter can lead to a cross-site scripting vulnerability...
PT-2022-7719 · Unknown · Pro2Col Stingray Fts
Name of the Vulnerable Software and Affected Versions: Pro2col Stingray FTS affected versions not specified Description: A problematic issue has been found in the software, where the manipulation of the Username argument leads to cross-site scripting. The attack can be initiated remotely. It is...
Over 200 Malicious NPM Packages Caught Targeting Azure Developers
A new large scale supply chain attack has been observed targeting Azure developers with no less than 218 malicious NPM packages with the goal of stealing personal identifiable information. "After manually inspecting some of these packages, it became apparent that this was a targeted attack agains...