3578 matches found
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb
Description Secure flag is not implemented on the application Proof of Concept https://drive.google.com/file/d/1ESnBKwFef8D42A2VD3W59vXMLdWhCxS9/view?usp=sharing Impact The secure flag is an option that can be set by the application server when sending a new cookie to the user within an HTTP...
in khodakhah/nodcms
Description Clear Text submission of password through unencrypted channel Proof of Concept POST /en/login HTTP/1.1 Host: demo.nodcms.com User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:92.0 Gecko/20100101 Firefox/92.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language:...
crystalclearpsychics.co.uk Cross Site Scripting vulnerability OBB-2136585
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-28498
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the...
CVE-2021-28499
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in...
CVE-2021-28499
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in...
Code injection
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the...
Default credentials
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in...
CVE-2021-28498
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the...
CVE-2021-28499
CVE-2021-28499 affects Arista MOS on 7130 devices; root cause is cleartext storage of user passwords, exposing passwords to unprivileged users. Affected MOS trains include MOS-0.18, MOS-0.1x (up to 0.2x and 0.3x MOS-0.31.1 and earlier in 0.3x). Mitigation: upgrade to remediated MOS versions MOS-0...
CVE-2021-28498
Arista MOS on 7130 devices is affected by CVE-2021-28498, where user enable passwords stored in clear text allow unprivileged access. Affected MOS versions include MOS-0.13 and later in MOS-0.1x train, MOS-0.26.6 in MOS-0.2x, and MOS-0.31.1 and earlier in MOS-0.3x. The issue is fixed by upgrading...
CVE-2021-28499: Insufficiently Protected Credentials
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in...
CVE-2021-28498: Insufficiently Protected Credentials
In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the...
PT-2021-17875
Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions 0.18 through 0.19 Arista Metamako Operating System versions 0.2x Arista Metamako Operating System versions 0.31.1 and prior Description: The issue affects Arista's MOS software, which is supported on...
PT-2021-17874 · Arista · Arista Metamako Operating System
Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions 0.13 through 0.26.6 Arista Metamako Operating System versions 0.31.1 and prior Description: The issue in Arista's MOS software allows unprivileged users to gain complete access to the systems when use...
CVE-2020-19137
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...
CVE-2020-19137
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...
Improper access control
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...
