Schweitzer Engineering Laboratories Real Time Automation Controller 输入验证错误漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC that originates fr...

PT-2023-23189 · Schweitzer Engineering Laboratories · Sel Rtac

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC affected versions not specified Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue in the SEL RTAC Web Interfac...

Optoma 1080PSTX Firmware C02 Authentication Bypass

Exploit Title: Optoma 1080PSTX Firmware C02 - Auth Bypass Date: 2023/05/09 Exploit Author: Anthony Cole Contact: http://twitter.com/acole76 Website: http://twitter.com/acole76 Vendor Homepage: http://optoma.com Version: Optoma 1080PSTX Firmware C02 Tested on: N/A CVE : CVE-2023-27823 Details By...

PT-2023-23186 · Schweitzer Engineering Laboratories · Sel Rtac

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC affected versions not specified Description: An Authentication Bypass Using an Alternate Path or Channel issue in the SEL RTAC Web Interface allows authentication...

PT-2023-23195 · Schweitzer Engineering Laboratories · Sel Rtac

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC affected versions not specified Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue in the SEL RTAC Web Interfac...

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers allows attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers is related to insufficient protection of the web page structure when processing the USERDBUsers.Password argument. Exploiting this vulnerability allows a malicious actor to perform cross-site...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface of Netgear SRX5308 integrated router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request usin...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request usin...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using...

PT-2023-5686 · Unknown · Control Web Panel

Name of the Vulnerable Software and Affected Versions: Control Web Panel CWP affected versions not specified Description: The issue is related to a lack of proper authentication in the web interface of Control Web Panel, allowing remote attackers to execute arbitrary code on affected installation...

Siemens SICAM P850 and SICAM P855 Missing Authentication For Critical Function (CVE-2022-29877)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings...

Siemens SICAM P850 and SICAM P855 Improper Authentication (CVE-2022-29883)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication. This plugin only works with...

CVE-2023-24957

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

PT-2023-19839 · Ibm · Ibm Business Automation Workflow

Name of the Vulnerable Software and Affected Versions: IBM Business Automation Workflow versions 18.0.0.0 through 22.0.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure with...

The vulnerability in the web interface of the Cisco Modeling Labs network modeling tool allows a hacker to gain administrator privileges.

The vulnerability of the Cisco Modeling Labs network modeling tool’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to the web interface with administrator privileges...

The vulnerability in the web interface of Cisco SPA112 dual-port telephone adapters allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for Cisco SPA112 dual-port telephone adapters is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by loading a specially crafted...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface for managing microprogrammed software routers from Cisco, such as Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325, is related to insufficient validation of input data during the processing of HTTP packets. Exploiting this vulnerability...

Fortinet FortiNAC Web Interface Detection

Binary data fortinetfortinacwebdetect.nbin...

The vulnerability in the web interface of the Cisco Industrial Network Director software allows a perpetrator to gain unauthorized access to information.

The vulnerability of the Cisco Industrial Network Director software’s web interface is related to errors in the use of standard permissions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to sensitive information...