CVE-2021-33537

In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iwwebs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An...

White Shark System (WSS) Sensitive Information Disclosure Vulnerability

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A sensitive information disclosure vulnerability exis...

CVE-2020-18659: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in GetSimpleCMS =3.3.15 via the 1 sitename, 2 username, and 3 email parameters to /admin/setup.php...

PT-2021-10198

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS versions prior to 3.3.16 Description: A Cross Site Scripting issue exists due to improper validation of user input in the sitename, username, and email parameters to the "/admin/setup.php" API endpoint. This allows an attacker to...

[ASA-202106-52] helm: information disclosure

Arch Linux Security Advisory ASA-202106-52 ========================================== Severity: Medium Date : 2021-06-22 CVE-ID : CVE-2021-32690 Package : helm Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-2078 Summary ======= The package helm before version...

CVE-2020-20472

White Shark System WSS 1.3.2 has a sensitive information disclosure vulnerability. The ifgetaddbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site...

CVE-2020-20472

White Shark System WSS 1.3.2 has a sensitive information disclosure vulnerability. The ifgetaddbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site...

Information disclosure

White Shark System WSS 1.3.2 has a sensitive information disclosure vulnerability. The ifgetaddbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site...

CVE-2020-20472

CVE-2020-20472 affects White Shark System (WSS) 1.3.2. The vulnerability is in if_get_addbook.php, which operates without authentication, allowing remote attackers to obtain username information for all users on the current site. The condition arises from lack of access control on that endpoint (...

PT-2021-3454

Name of the Vulnerable Software and Affected Versions White Shark System WSS version 1.3.2 Description The issue is related to a sensitive information disclosure. The if get addbook.php file lacks an authentication operation, allowing remote attackers to obtain username information for all users ...

White Shark System 访问控制错误漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A sensitive information disclosure vulnerability exis...

CVE-2020-25754

An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an...

CVE-2021-28857

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie...

PT-2021-17967

Name of the Vulnerable Software and Affected Versions: TL-WPA4220 version 4.0.2 Build 20180308 Rel.37064 Description: The issue concerns the transmission of sensitive information, specifically the username and password, via a cookie. This could potentially expose user credentials to unauthorized...

CVE-2021-28857: Insufficiently Protected Credentials

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie...

Cross site scripting

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

CVE-2021-34540

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

PT-2021-20537

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess versions 8.4.2 through 8.4.4 Description: The issue allows for cross-site scripting XSS attacks via the username column of the "bwRoot.asp" page of WADashboard. This occurs because the application does not properly validat...

CVE-2021-34540: Improper Neutralization of Input During Web Page Generation

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

CVE-2021-21663

A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in...