83 matches found
CVE-2024-52053
Stored Cross-Site Scripting in the Manager component of Wowza Streaming Engine below 4.9.1 allows an unauthenticated attacker to inject client-side JavaScript into the web dashboard to automatically hijack admin accounts...
CVE-2024-52053
CVE-2024-52053 affects Wowza Streaming Engine Manager prior to version 4.9.1, where an unauthenticated stored cross-site scripting (XSS) vulnerability in the Manager web dashboard can inject client-side JavaScript and enable hijacking of admin accounts. Technical details across connected sources ...
GO-2023-2067 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input in github.com/contribsys/faktory
Faktory Web Dashboard can lead to denial of serviceDOS via malicious user input in github.com/contribsys/faktory...
CVE-2024-44069
Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier reportedly does "not consider the bug a security issue" but the specific motivation for letting arbitrary persons change the value Celsius, Fahrenheit,...
CVE-2024-44069
Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier reportedly does "not consider the bug a security issue" but the specific motivation for letting arbitrary persons change the value Celsius, Fahrenheit,...
Pi-hole 安全漏洞
Pi-hole is a web-grade ad-blocking application from Pi-hole, Inc. A security vulnerability exists in versions prior to Pi-hole 6. An attacker exploiting the vulnerability could change the temperature units of the web dashboard...
CVE-2024-44069
Pi-hole prior to version 6 is vulnerable to unauthenticated calls to admin/api.php?setTempUnit= that change the web dashboard temperature units. The underlying issue, as described in multiple sources, is that an unauthenticated user can alter Celsius/Fahrenheit/Kelvin settings, visible to the dev...
Debian dla-3678 : horizon-doc - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3678 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3678-1 [email protected] https://www.debian.org/lts/security/...
CVE-2023-37279
Faktory web dashboard vulnerability: prior to version 1.8.0, a crafted malicious days URL query parameter is read without validation, used to create a string slice, leading to memory growth and potential DoS. The issue is fixed in 1.8.0. Public advisory (GHSA) provides PoC details; impact is serv...
PT-2023-25879 · Faktory · Faktory
Name of the Vulnerable Software and Affected Versions: Faktory versions prior to 1.8.0 Description: The Faktory web dashboard can suffer from denial of service by a crafted malicious URL query parameter days. This issue is related to how the backend reads the days URL query parameter in the Fakto...
Faktory Security Breach
Faktory is a job server. It is a repository for background jobs in the application. Jobs have a type and a set of parameters and are placed in a queue for staff to fetch and execute. A security vulnerability exists in Faktory versions prior to 1.8.0 that stems from the Faktory Web dashboard that...
Horizon Web Dashboard Open Redirect vulnerability
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...
GHSA-5PV6-RPRW-82WV Horizon Web Dashboard Open Redirect vulnerability
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...
CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...
DEBIAN-CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...
CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...
PYSEC-2023-153
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...
Open redirect
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...