Lucene search
+L

98 matches found

OSV
OSV
•added 2024/01/08 10:15 p.m.•12 views

CVE-2023-52074

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

8.8CVSS5.8AI score0.00286EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•11 views

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

8.8CVSS6.7AI score0.00286EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/01/08 12:00 a.m.•6 views

CVE-2023-52074

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

7.7AI score0.00286EPSS
SaveExploits1References1
OSV
OSV
•added 2023/10/01 11:15 p.m.•21 views

CVE-2023-5326

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The explo...

8.8CVSS5.2AI score0.00472EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/01 11:15 p.m.•38 views

CVE-2023-5326

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The explo...

8.8CVSS7AI score0.00472EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/10/01 10:00 p.m.•15 views

CVE-2023-5326 SATO CL4NX-J Plus WebConfig improper authentication

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The explo...

6.3CVSS6.8AI score0.00472EPSS
SaveExploits0References3
CVE
CVE
•added 2023/10/01 10:00 p.m.•88 views

CVE-2023-5326

SATO CL4NX-J Plus 1.13.2-u455_r2 is affected by a critical vulnerability in the WebConfig component that allows improper authentication. The issue requires local-network access to exploit; the exploit has been disclosed publicly. There is no information in the provided documents about a fixed ver...

8.8CVSS7AI score0.00472EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/10/01 10:00 p.m.•52 views

CVE-2023-5326 SATO CL4NX-J Plus WebConfig improper authentication

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The explo...

6.3CVSS8.8AI score0.00472EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/01 12:00 a.m.•15 views

PT-2023-32045 · Sato · Sato Cl4Nx-J Plus

Name of the Vulnerable Software and Affected Versions: SATO CL4NX-J Plus version 1.13.2-u455 r2 Description: A critical issue affects an unknown functionality of the WebConfig component, leading to improper authentication. The attack must be carried out within the local network. The exploit has...

8.8CVSS6.8AI score0.00472EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/01 12:00 a.m.•1 views

CVE-2023-5326: Improper Authentication

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The explo...

8.8CVSS6.3AI score0.00472EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2023/03/24 12:00 a.m.•267 views

MAN-EAM-0003 3.2.4 XML Injection

Exploit Title: MAN-EAM-0003 V3.2.4 - XXE Date: 2022-09-19 Exploit Author: Ahmed Alroky Author: http://guralp.com/ Version: 3.2.4 Authentication Required: NO CVE : CVE-2022-38840 Google dork: " webconfig menu.cgi " Tested on: Windows Exploit 1 - browse to http:// name/cgi-bin/xmlstatus.cgi 2 - cli...

7.6AI score0.09803EPSS
SaveExploits4
OSV
OSV
•added 2022/11/25 6:15 a.m.•14 views

CVE-2022-36133

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

9.1CVSS5.8AI score0.00732EPSS
SaveExploits0References2
Prion
Prion
•added 2022/11/25 6:15 a.m.•22 views

Authentication flaw

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

6.4CVSS9.3AI score0.00732EPSS
SaveExploits0References2Affected Software9
Vulnrichment
Vulnrichment
•added 2022/11/25 12:00 a.m.•16 views

CVE-2022-36133

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

7.3AI score0.00732EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/25 12:00 a.m.•75 views

CVE-2022-36133

CVE-2022-36133 affects Epson TM-C3500 and TM-C7500 printers running firmware WAM31500, where the WebConfig functionality allows an authentication bypass. Multiple connected documents confirm the vulnerable component (WebConfig) and the affected firmware version, indicating a network-accessible fl...

9.1CVSS9.4AI score0.00732EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/25 12:00 a.m.•0 views

CVE-2022-36133: Improper Authentication

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

9.1CVSS5.8AI score0.00732EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/25 12:00 a.m.•38 views

CVE-2022-36133

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

9.7AI score0.00732EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/25 12:00 a.m.•14 views

PT-2022-23217 · Epson · Epson Tm-C7500 +1

Name of the Vulnerable Software and Affected Versions: Epson TM-C3500 version WAM31500 Epson TM-C7500 version WAM31500 Description: The WebConfig functionality of the devices allows authentication bypass. Recommendations: For Epson TM-C3500 version WAM31500, consider disabling the WebConfig...

9.1CVSS7AI score0.00732EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2022/06/04 1:46 a.m.•58 views

Exploit for Improper Restriction of XML External Entity Reference in Rocketsoftware Ags-Zena

Zena Housekeeping notes: The original CookieMonster Repo can b...

9.8CVSS7.5AI score0.01178EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2021/12/10 1:55 p.m.•15 views

Exploit for Cross-site Scripting in Rocketsoftware Ags-Zena

Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket...

7.5CVSS6.3AI score0.01178EPSS
SaveExploits3
Rows per page
Query Builder