577 matches found
ZKTeco ZKBio Time 安全漏洞
ZKTeco ZKBio Time is a powerful web-based time and attendance management software from ZKTeco, China. A security vulnerability exists in ZKTeco ZKBio Time version 9.0.1, which originates from the component Image File Handler where the file /authfiles/photo/ can lead to a direct request...
PT-2024-16723 · Zkteco · Zkteco Biotime
Name of the Vulnerable Software and Affected Versions: ZKTeco ZKBio Time version 9.0.1 Description: A vulnerability has been found in the Image File Handler component of ZKTeco ZKBio Time, affecting an unknown function of the file /auth files/photo/. This issue leads to direct request manipulatio...
CVE-2024-45250
ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-45250 ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor
ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-45250 ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor
ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-45250
CVE-2024-45250 affects ZKTeco iClock (biometric fingerprint reader) with versions around v3.1-168, described as CWE-200 exposure of sensitive information to an unauthorized actor. The vulnerability is framed as an information disclosure issue where sensitive data could be exposed to unauthorized ...
ZKteco iClock 信息泄露漏洞
ZKTeco iClock is a biometric fingerprint reader for time and attendance and access control applications from ZKTeco, a Chinese company. An information disclosure vulnerability exists in ZKteco iClock version v3.1-168, which originates from the exposure of sensitive information to unauthorized use...
PT-2024-31508 · Zkteco · Zkteco
Name of the Vulnerable Software and Affected Versions: ZKteco affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor, labeled as CWE 200. This flaw allows sensitive information to be exposed. Recommendations: At the moment,...
CVE-2023-51157
Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...
CVE-2023-51157
Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...
CVE-2023-51157
Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...
CVE-2023-51157
Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...
CVE-2023-51157
CVE-2023-51157 affects ZKTeco WDMS v5.1.3 Pro. A Cross Site Scripting (XSS) flaw allows a remote attacker, via a crafted script in the Emp Name field, to execute arbitrary code and access sensitive data. CVSS v3.1 base metrics: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (Impact: Confidentiality, Integri...
ZKTeco ZKBio WDMS 安全漏洞
ZKTeco ZKBio WDMS is a web-based data system from ZKTeco, China. A security vulnerability exists in ZKTeco ZKBio WDMS version v.5.1.3, which stems from a cross-site scripting vulnerability that could allow a remote attacker to execute arbitrary code and gain access to sensitive information via...
CVE-2023-51157
Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...
ZKTeco Central Control Attendance Machine Web Management Platform 安全漏洞
ZKTeco Central Control Attendance Machine Web Management Platform is a centralized control time and attendance machine web management platform from ZKTeco, China. A security vulnerability exists in Zkteco Central Control Attendance Machine Web Management Platform version v.3.0. An attacker can...
The vulnerability of microprogrammed software in biometric terminal models ZkTeco ProFace X, Smartec ST-FR043, and Smartec ST-FR041ME arises from the lack of protective measures for the SQL query structure. This allows attackers to execute arbitrary SQL code, circumvent security restrictions, and gain unauthorized access to protected information.
The vulnerability of microprogrammed software in biometric terminal devices such as ZkTeco ProFace X, Smartec ST-FR043, and Smartec ST-FR041ME is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows attackers to execute arbitrary SQL code,...
The vulnerability of the microprogrammed software of the biometric terminals ZkTeco ProFace X, Smartec ST-FR043, and Smartec ST-FR041ME lies in buffer overflow attacks on the glass components, allowing intruders to execute arbitrary codes.
The vulnerability of microprogrammed software in biometric terminals ZkTeco ProFace X, Smartec ST-FR043, and Smartec ST-FR041ME stems from buffer overflows in the stack due to the absence of protection mechanisms like Canary and PIE. Exploiting this vulnerability allows an attacker operating...