6 matches found
NUUO NVRmini2 Devices Missing Authentication Vulnerability
NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users...
PT-2022-15907
Name of the Vulnerable Software and Affected Versions NUUO NVRmini2 versions 3.11 and earlier Description The issue allows an unauthenticated attacker to upload an encrypted TAR archive. This can be abused to add arbitrary users due to the lack of authentication in handle import user.php. When...
CVE-2014-2327
Cross-site request forgery CSRF vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that 1 modify binary files, 2 modify configurations, or 3 add arbitrary users...
CVE-2014-2327: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that 1 modify binary files, 2 modify configurations, or 3 add arbitrary users...
CVE-2013-7204: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in setusers.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users...