CVE-2021-36460

VeryFitPro com.veryfit2hr.second 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of passwords. This allows an attacker in possession of a hash to takeover a user's...

VeryFitPro 授权问题漏洞

VeryFitPro is a powerful health management software from Shenzhen Aidu Technology Co., Ltd. in China, which needs to be used with the same brand of smart bracelet, using the app users can view the number of steps taken, calories burned, sleep quality and other information in real time. VeryFitPro...

PT-2022-10515 · Unknown · Veryfitpro

Name of the Vulnerable Software and Affected Versions: VeryFitPro version 3.2.8 Description: The issue allows an attacker in possession of a hashed password to take over a user's account. This is because the password is hashed locally on the device and the hash is used for authentication with the...

EulerOS 2.0 SP8 : evince (EulerOS-SA-2022-1561)

According to the versions of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors...

GHSA-RWX5-7X5R-JGRM Typo3 Information Disclosure

TYPO3 before 4.5.4 allows Information Disclosure in the backend...

Typo3 Information Disclosure

TYPO3 before 4.5.4 allows Information Disclosure in the backend...

GHSA-FRF4-5P2C-C3FF Typo3 Information Disclosure

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend...

Typo3 Information Disclosure

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend...

GHSA-8XP9-99H5-4VCG TYPO3 is vulnerable to Information Disclosure on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Information Disclosure on the backend...

TYPO3 is vulnerable to Information Disclosure on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Information Disclosure on the backend...

GHSA-CG45-QGCF-HF9X TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...

GHSA-4RVC-5HRH-QMWF TYPO3 SQL injection vulnerability on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows SQL Injection on the backend...

TYPO3 Arbitrary Code Execution vulnerability on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend...

TYPO3 Open Redirection vulnerability on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend...

TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...

GHSA-WJPC-GJF7-9938 TYPO3 Arbitrary Code Execution vulnerability on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend...

GHSA-J628-384G-RMGC TYPO3 Open Redirection vulnerability on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend...

TYPO3 SQL injection vulnerability on the backend

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows SQL Injection on the backend...

KiteCMS 安全漏洞

KiteCMS is a website CMS. A security vulnerability exists in KiteCMS v1.1.1, which originates from the backend administration module containing arbitrary file reads...

Databasir 信任管理问题漏洞

Databasir is a relational database model document management platform for teams. A security vulnerability exists in Databasir 1.01, which stems from the fact that an attacker can use hard-coded login credentials to generate any user's login credentials and log in to the backend of a service locat...