Lucene search
+L

443 matches found

Vulnrichment
Vulnrichment
added 2022/10/17 12:00 a.m.8 views

CVE-2022-23770 WISA Smart Wing CMS Remote Command Execution Vulnerability

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal...

8.8CVSS7.4AI score0.01491EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2022/08/27 5:35 a.m.16 views

wing-wing.com Cross Site Scripting vulnerability OBB-2867607

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2022/08/17 9:15 p.m.8 views

CVE-2021-26639

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...

7.5CVSS5.8AI score0.00454EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/17 9:15 p.m.31 views

CVE-2021-26639

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...

8.1CVSS0.00454EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/17 9:15 p.m.25 views

Input validation

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...

5CVSS7.5AI score0.00454EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/17 8:21 p.m.22 views

CVE-2021-26639 WISA Smart Wing CMS File Download Vulnerability

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...

8.1CVSS8.2AI score0.00454EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/17 8:21 p.m.60 views

CVE-2021-26639

CVE-2021-26639 affects WISA Smart Wing CMS. The vulnerability arises from insufficient input validation in specific functions, allowing remote attackers to leak all files on the server without authentication. Reported details consistently describe unauthorized file disclosure as the impact. No co...

8.1CVSS7.6AI score0.00454EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/08/17 12:00 a.m.11 views

WISA Smart Wing CMS 安全漏洞

WISA Smart Wing CMS is a content management system from the Korean company WISA. A security vulnerability exists in WISA Smart Wing CMS that stems from a lack of validation of input values for specific functions. A remote attacker could exploit the vulnerability to disclose all files in the serve...

8.1CVSS7.3AI score0.00454EPSS
SaveExploits0References2
zdt
zdt
added 2022/02/08 12:00 a.m.355 views

Wing FTP Server 4.3.8 - Remote Code Execution (Authenticated) Exploit

Exploit Title: Wing FTP Server 4.3.8 - Remote Code Execution RCE Authenticated Exploit Author: notcos Credit: Credit goes to the initial discoverer of this exploit, Alex Haynes. Vendor Homepage: https://www.wftpserver.com/ Software Link: https://www.wftpserver.com/download/WingFtpServer.exe...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/02/08 12:00 a.m.336 views

Wing FTP Server 4.3.8 Remote Code Execution

Exploit Title: Wing FTP Server 4.3.8 - Remote Code Execution RCE Authenticated Date: 02/06/2022 Exploit Author: notcos Credit: Credit goes to the initial discoverer of this exploit, Alex Haynes. Vendor Homepage: https://www.wftpserver.com/ Software Link:...

7.4AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/09/21 7:22 p.m.69 views

Epik Confirms Hack, Gigabytes of Data on Offer

Epik, the domain registrar known for hosting several large right-wing organizations, has confirmed a hack of its systems, a week after attackers branding themselves part of the Anonymous hacktivist collective said that they had obtained and leaked gigabits of data from the hosting company,...

6.5AI score
SaveExploits0References14
CNVD
CNVD
added 2021/06/07 12:00 a.m.34 views

Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform has information leakage vulnerability

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform there is an information leakage...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2021/05/27 12:00 a.m.4 views

Unauthorized Access Vulnerability in Electronic Evidence Management Platform of Shenzhen Police Wing Intelligent Technology Co.

hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2021/05/20 12:00 a.m.9 views

Police Wing Law Enforcement Recorder Electronic Evidence Management Software has Information Leakage Vulnerability

hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...

6.6AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/05/17 7:27 a.m.665 views

EFB Tampering 3. Take-off pt2

Take-off Performance Part 2: Flap, Trim, Database and Sources of Data Target: FLAP SETTING There are various forms of flaps and slats. The difference between the two and the technicalities of how they work is outside the scope of this blog. As a general rule flaps extend from the rear/trailing ed...

6.8AI score
SaveExploits0
NVD
NVD
added 2021/02/04 6:15 a.m.32 views

CVE-2021-26688

An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...

9.8CVSS0.00437EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/04 6:15 a.m.9 views

CVE-2021-26688

An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...

9.8CVSS7.3AI score0.00437EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/04 6:15 a.m.28 views

Code injection

An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...

7.5CVSS9.2AI score0.00437EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/04 6:15 a.m.8 views

CVE-2021-26688

An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...

9.8CVSS8.4AI score0.00437EPSS
SaveExploits0References2
CVE
CVE
added 2021/02/04 5:15 a.m.87 views

CVE-2021-26688

Technical details about CVE-2021-26688 are not publicly available in the provided documents. Monitor for updates from official advisories.

9.8CVSS9.3AI score0.00437EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder