11 matches found
CVE-2026-102779 Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4
Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task records.customaction without authentication, ACL, CSRF, task-trigger, content-binding, or cron-token enforcement. A Guest can supply...
CVE-2020-25564
In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave Automation Tasks feature...
Design/Logic Flaw
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...
CVE-2020-25564
CVE-2020-25564 : A privilege escalation in SapphireIMS 5.0 allows a non-privileged user to create a local administrator on any client by directly accessing the RemoteMgmtTaskSave (Automation Tasks) feature. The root cause is insufficient access control in the Automation Tasks pathway. Impact repo...
CVE-2020-25563
SapphireIMS 5.0 is affected by an authentication-bypass vulnerability in the RemoteMgmtTaskSave (Automation Tasks) path that allows an unauthenticated user to create a local administrator on any client by accessing RemoteMgmtTaskSave without a JSESSIONID. Root cause: direct access to an automatio...
CVE-2020-25563
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...
PT-2021-11151
Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0 Description: The issue allows an attacker to create a local administrator on any client using the credentials of a non-privileged user. This is achieved by directly accessing the RemoteMgmtTaskSave feature, which is pa...
PT-2021-11150
Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0 Description: The issue allows creating a local administrator on any client without requiring credentials by directly accessing the RemoteMgmtTaskSave feature, which is part of Automation Tasks, and not having a...
CVE-2020-25563: Missing Authentication for Critical Function
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...
Siemens SIMATIC S7-1200多个漏洞
CVE ID: CVE-2014-2249,CVE-2014-2250,CVE-2014-2252,CVE-2014-2254,CVE-2014-2256,CVE-2014-2258 SIMATIC S7-1200是可编程控制器,可实现简单却高度精确的自动化任务。 Siemens SIMATIC S7-1200 4.0.0之前版本在实现上存在多个漏洞,可被恶意利用执行跨站请求伪造、劫持用户会话、造成拒绝服务。 1、向TCP端口443发送特制的数据包造成的错误可造成设备进入defect模式。 2、随机生成器内弱熵相关错误,可导致劫持另外用户的会话。...
Fedora Update for php-Smarty FEDORA-2008-9401
Check for the Version of php-Smarty OpenVAS Vulnerability Test Fedora Update for php-Smarty FEDORA-2008-9401 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...