230 matches found
Hardcoded credentials
RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information...
Authorization
RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...
CVE-2022-32967
Realtek RTL8111EP-CG/RTL8111FP-CG DASH function contains a hard-coded password. An unauthenticated physical attacker can exploit this during a reboot triggered by another user to access partial system information (e.g., serial number, server information). Affected firmware versions are prior to 3...
CVE-2022-32967 Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials
RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information...
CVE-2022-32967 Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials
RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information...
CVE-2022-32966 Realtek RTL8111FP-CG - Missing Authorization
RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...
CVE-2022-32966 Realtek RTL8111FP-CG - Missing Authorization
RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...
CVE-2022-32966
CVE-2022-32966 concerns Realtek RTL8111FP-CG/RTL8168FP-CG devices. The Dash remote management function has missing authorization, enabling an unauthenticated attacker on an adjacent network to connect to the DASH service port and disrupt service. The CVE is documented with a CVSSv3.1 base score o...
Realtek RTL8111FP-CG 安全漏洞
The Realtek RTL8111FP-CG is an Ethernet controller. An authorization issue vulnerability exists in Realtek RTL8111FP-CG Firmware prior to version 5.0.23, which stems from a lack of authorization for the Dash remote management feature, and can be exploited by an unauthenticated attacker on an...
Realtek RTL8111FP-CG和RTL8168FP-CG 信任管理问题漏洞
The Realtek RTL8111EP-CG and Realtek RTL8168FP-CG are both Ethernet controllers. A trust management issue vulnerability exists in Realtek RTL8111EP-CG, RTL8111FP-CG Firmware versions prior to 3.0.0.2019090, which stems from the Dash feature having a hard-coded password that can be exploited by an...
PT-2022-24325 · Centreon · Centreon
Name of the Vulnerable Software and Affected Versions: Centreon versions prior to 22.10.0-beta1 Description: A critical issue has been identified, affecting the Contact Groups Form component, specifically the file formContactGroup.php. The manipulation of the cg id argument leads to SQL injection...
cgcreativesets.com Cross Site Scripting vulnerability OBB-2966656
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cg (>=1.0.0 <=16.3.4) potentially affected by CVE-2022-1592 via scout-browser (>=4.24.0 <=4.51.0)
scout-browser PYPI version =4.24.0, =1.0.0, =16.3.4 Source cves: CVE-2022-1592 Source advisory: OSV:GHSA-G53G-Q539-93CV...
cg (>=1.0.0 <=16.3.4) potentially affected by CVE-2022-1554 via scout-browser (>=4.24.0 <=4.51.0)
scout-browser PYPI version =4.24.0, =1.0.0, =16.3.4 Source cves: CVE-2022-1554 Source advisory: OSV:GHSA-694V-63FQ-FMR4...
cg-tech.de Improper Access Control vulnerability OBB-2405505
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
formation-cg-conseil.com Cross Site Scripting vulnerability OBB-2155055
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-31507
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Pandora FMS 7.0 NG 749 SQL Injection
Exploit Title: Pandora FMS 7.0 NG 749 - 'CG Items' SQL Injection Authenticated Date: 11-14-2020 Exploit Author: Matthew Aberegg, Alex Prieto Vendor Homepage: https://pandorafms.com/ Patch Link: https://github.com/pandorafms/pandorafms/commit/1258a1a63535f60924fb69b1f7812c678570cc8e Software Link:...
premier6.cg Cross Site Scripting vulnerability OBB-1248847
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cg-blog.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177783 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...