17239 matches found
PT-2024-22580 · Infinera · Infinera Hit 7300
Name of the Vulnerable Software and Affected Versions: Infinera hiT 7300 version 5.60.50 Description: An issue was discovered in the web interface of the affected software, which contains hidden functionality. This allows a remote authenticated attacker to access reserved information by accessing...
CVE-2024-28808
An issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface allows a remote authenticated attacker to access reserved information by accessing undocumented web applications...
CVE-2024-28808
CVE-2024-28808 affects Infinera hiT 7300 (version 5.60.50). A hidden functionality in the web interface allows a remote authenticated attacker to access reserved information by accessing undocumented web applications. The issue is characterized by low CVSSv3.1 base score (2.7, LOW) with network a...
CVE-2024-20414
A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system through the web UI. This vulnerability is due to incorrectly accepting configuration...
CVE-2024-20475
CVE-2024-20475 describes a vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager (Cisco SD-WAN vManage). The issue arises because the interface does not properly validate user-supplied input, allowing an authenticated, remote attacker to perform a cross-site scripti...
Cisco Catalyst SD-WAN Manager 安全漏洞
Cisco Catalyst SD-WAN Manager Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. A security vulnerability exists in Cisco Catalyst SD-WAN Manager that stems from the...
PT-2024-32082 · Unknown · Becn Datagerry
Name of the Vulnerable Software and Affected Versions: BECN DATAGERRY version 2.2 Description: The issue allows attackers to execute arbitrary commands via crafted web requests due to incorrect access control. Recommendations: For BECN DATAGERRY version 2.2, consider restricting access to the web...
MAL-2024-12266 Malicious code in evil-select-pkg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db8225867ca74c2a2192382dc4abcc5119fb1ac07049412245e3a686524138f8 Package description attempts to pentest/exploit the PyPI web interface. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but als...
Malicious code in evil-select-pkg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db8225867ca74c2a2192382dc4abcc5119fb1ac07049412245e3a686524138f8 Package description attempts to pentest/exploit the PyPI web interface. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but als...
CVE-2024-33109
Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function...
Tiptel IP 286 安全漏洞
The Tiptel IP 286 is a smart IP phone from Tiptel. A security vulnerability exists in Tiptel IP 286 firmware version 2.61.13.10, which originates from a directory traversal in the web interface that allows an attacker to overwrite arbitrary files on the phone via the ringtone upload feature...
PT-2024-25117 · Tiptel · Tiptel Ip 286
Name of the Vulnerable Software and Affected Versions: Tiptel IP 286 version 2.61.13.10 Description: The issue allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function in the web interface. This is due to a Directory Traversal vulnerability. Recommendations: For...
CVE-2024-33109
CVE-2024-33109 affects Tiptel IP 286 (firmware 2.61.13.10). The vulnerability is a Directory Traversal in the web interface that enables an attacker to overwrite arbitrary files on the device through the Ringtone upload function. This is supported by multiple sources noting the same flaw and affe...
CVE-2024-8887
CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service DoS attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities implemented at web level that allow...
VulnCheck KEV: CVE-2020-3451
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system OS as a restricted user. For more...
VulnCheck KEV: CVE-2023-24229
DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
VulnCheck KEV: CVE-2023-5222
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
[SECURITY] Fedora 41 Update: nextcloud-29.0.6-1.fc41
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...