51 matches found
CVE-2017-18442
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands SEC-246...
EUVD-2013-6730
Malware in sbrugna...
EUVD-2017-9558
Malware in sbrugna...
EUVD-2021-12537
Malware in sbrugna...
EUVD-2014-2960
Malware in sbrugna...
EUVD-2025-4285
Malicious code in bioql PyPI...
EUVD-2023-40552
Malicious code in bioql PyPI...
CVE-2017-18444
cPanel before 64.0.21 allows demo accounts to execute SSH API commands SEC-248...
CVE-2024-56897
Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands. API commands can also be made to make unauthorized modifications to the device settings, such as disabling recording, disabling sounds, factory reset...
CVE-2024-56897
The CVE-2024-56897 issue affects YI Car Dashcam v3.88, caused by improper access control in the device’s HTTP server. This vulnerability allows unauthenticated attackers to perform unrestricted file downloads and uploads and to issue API commands that can modify device settings (e.g., disable rec...
CVE-2024-56897
Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands. API commands can also be made to make unauthorized modifications to the device settings, such as disabling recording, disabling sounds, factory reset...
CVE-2024-56897
Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands. API commands can also be made to make unauthorized modifications to the device settings, such as disabling recording, disabling sounds, factory reset...
CVE-2024-22197 Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)
Nginx-ui is online statistics for Server Indicators Monitor CPU usage, memory usage, load average, and disk usage in real-time. The Home Preference page exposes a small list of nginx settings such as Nginx Access Log Path and Nginx Error Log Path. However, the API also exposes testconfigcmd,...
Lenovo XClarity Controller Security Vulnerability
Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo China that is used to standardize and automate basic server management tasks. Lenovo XClarity Controller suffers from a security vulnerability that originates from the fact that an authenticated XCC user can change...
CVE-2023-36607
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents...
Authorization
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents...
CVE-2023-36607 CVE-2023-36607
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents...
Ovarro TBox RTU 安全漏洞
Ovarro TBox RTUs is a modular remote monitoring and automation solution from Ovarro Germany. A security vulnerability exists in the Ovarro TBox RTUs that stems from a lack of authorization to run certain API commands, which could be exploited by an attacker to disclose sensitive information, such...
PT-2023-25628 · Tbox Rtus · Tbox Rtus
Name of the Vulnerable Software and Affected Versions: TBox RTUs affected versions not specified Description: The issue concerns missing authorization for running certain API commands, which could allow an attacker to reveal sensitive information, including software versions and web server file...
Fortinet Fortigate Read-Only users able to add/modify the Interface fields using the API (FG-IR-22-174)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-174 advisory. - An improper access control CWE-284 vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remo...