CVE-2024-12644 Chunghwa Telecom tbm-client - Arbitrary File Copy and Paste

The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through...

CVE-2024-12643

The CVE-2024-12643 entry concerns Chunghwa Telecom's tbm-client, where an API lacking CSRF protection enables unauthenticated remote use via phishing, and one API contains an Absolute Path Traversal flaw that can delete arbitrary files on a user’s system. Affected versions (per CNNVD) are 0.3.15 ...

CVE-2024-54285: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in SeedProd LLC SeedProd Pro allows Upload a Web Shell to a Web Server.This issue affects SeedProd Pro: from n/a through 6.18.10...

CVE-2024-12645: Cross-Site Request Forgery (CSRF)

The topm-client from Chunghwa Telecom has an Arbitrary File Read vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use these APIs...

PT-2024-17689

Name of the Vulnerable Software and Affected Versions topm-client from Chunghwa Telecom affected versions not specified Description The topm-client from Chunghwa Telecom has an issue that allows attackers to read arbitrary files on the user's system. The application sets up a simple local web...

PT-2024-17690

Name of the Vulnerable Software and Affected Versions topm-client from Chunghwa Telecom affected versions not specified Description The topm-client application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the...

PT-2024-17688

Name of the Vulnerable Software and Affected Versions tbm-client from Chunghwa Telecom affected versions not specified Description The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with t...

CVE-2021-32007 Missing security header: Referrer-Policy URL

This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers...

CVE-2024-54262: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Import Export For WooCommerce: from n/a through = 1.6.2...

PT-2024-10930

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.5 Description The issue is related to a Protection Mechanism Failure vulnerability in the web server of Secomea GateManager, which could potentially leak information to remote servers. Recommendations Fo...

CVE-2021-32007: Exposure of Sensitive Information to an Unauthorized Actor

This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers...

Important: python-waitress

Issue Overview: Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more...

Microsoft Update Catalog code-related vulnerabilities

The Microsoft Update Catalog is an update Web site from the U.S.-based Microsoft Corporation Microsoft. It is used to provide the company with a list of patches, drivers and software. Microsoft Update Catalog suffers from a deserialization vulnerability that originates from deserializing untruste...

php: cgi.force_redirect configuration is bypassable due to the environment variable collision

A flaw was found in PHP. The configuration directive cgi.forceredirect prevents anyone from calling PHP directly with a URL such as http://host.example/cgi-bin/php/secretdir/script.php. However, in certain uncommon configurations, an attacker may be able to bypass this restriction and access...

Splunk Enterprise 9.1.0 < 9.1.7, 9.2.0 < 9.2.4, 9.3.0 < 9.3.2 (SVD-2024-1204)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-1204 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Waitress HTTP Request Smuggling

The vulnerability of the channelrequestlookahead function in the WSGI server for Python Waitress is related to synchronization errors when using shared resources due to inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a remote attacker to send hidden HTTP request...

CVE-2024-54214

Unrestricted Upload of File with Dangerous Type vulnerability in roninwp Revy revy allows Upload a Web Shell to a Web Server.This issue affects Revy: from n/a through = 1.18...

CVE-2024-11022

The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used several times for login and is therefore vulnerable for a replay attack...

CVE-2024-11022

The CVE-2024-11022 entry relates to SICK InspectorP61x/InspectorP62x (and potentially related TiM3xx) where the web server authentication uses a challenge–response that includes nonce and other data, allowing replay of login attempts. Connected documents from SICK PSIRT and CVE records confirm a ...

PT-2024-16711

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The authentication process to the web server uses a challenge response procedure that includes a nonce and additional information. This challenge can be reused multiple times for logi...