217 matches found
Unraveling Real-Life Attack Paths – Key Lessons Learned
In the ever-evolving landscape of cybersecurity, attackers are always searching for vulnerabilities and exploits within organizational environments. They don't just target single weaknesses; they're on the hunt for combinations of exposures and attack methods that can lead them to their desired...
CVE-2023-34833
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
Privilege escalation
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-34833
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-34833
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-34833
CVE-2023-34833 describes an arbitrary file upload vulnerability in ThinkAdmin v6 at the /api/upload.php endpoint, enabling attackers to run arbitrary code via a crafted file. Affected product: ThinkAdmin v6; vulnerable component: /api/upload.php. Underlying issue: arbitrary file upload without pr...
The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to the use of an outdated cryptographic algorithm, MD5. This vulnerability allows a hacker to gain unauthorized access to protected information or cause service failures.
The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to the use of an outdated cryptographic algorithm, MD5. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information or cause service failures...
CVE-2023-23040
TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication...
CVE-2023-23040
TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication...
Malicious Package
Overview strip-ansi-v6 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Malicious Package
Overview copy-webpack-plugin-v6 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
CVE-2022-46287
Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script...
Baxter Spectrum 格式化字符串错误漏洞
Baxter Spectrum is an infusion pump from Baxter, Inc. A format string error vulnerability exists in the Baxter Spectrum WBM v20D29, which stems from vulnerability to a format string attack delivered via an application message, and can be used by an attacker to read memory in the WBM to access...
CVE-2022-36215
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...
CVE-2022-36215
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...
Remote code execution
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...
CVE-2022-36215
CVE-2022-36215 affects DedeBIZ v6; a remote code execution flaw exists in the sys_info.php component. Public entries consistently describe remote code execution via that file, with the root cause at the sys_info.php module. Impact details are that arbitrary code execution could be achieved on the...
CVE-2022-36215
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...
ThinkAdmin Admin Panel Access using Default Credentials
ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboard access...