11 matches found
CVE-2024-52510
تجاوز X-E2EE-SIGNATURE في Nextcloud - إثبات المفهوم POC ملخص أثناء التشغيل العادي لبروتوكول E2EEv2 في Nextcloud، يوقّع العملاء البيانات الوصفية للمجلدات توقيعًا تشفيريًا قبل رفعها إلى الخادم. وهذا يضمن عدم العبث بالبيانات الوصفية عند إعادة جلبها لأغراض مشاركة الملفات أو مزامنة التغييرات. يتم التح...
EUVD-2023-35776
Malicious code in bioql PyPI...
EUVD-2022-48081
Malicious code in bioql PyPI...
CVE-2023-31471
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install...
CVE-2023-31471
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install...
CVE-2023-31471: Undefined Security Weakness
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install...
CVE-2022-45173
An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /api/v1/vdeskintegration/challenge endpoint. Because only the client-side verifies whether a check was successful, an attacker can modify the response, and fool the...
CVE-2022-45173: Improper Authentication
An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /api/v1/vdeskintegration/challenge endpoint. Because only the client-side verifies whether a check was successful, an attacker can modify the response, and fool the...
CVE-2020-25195
The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send input to crash the device...
ZTE F602W CAPTCHA Bypass
Exploit Title: ZTE Router F602W - Captcha Bypass Exploit Author: Hritik Vijay @MrHritik Vendor Homepage: https://zte.com.cn Reported: 2019-06-14 Version: F6x2W V6.0.10P2T2 Version: F6x2W V6.0.10P2T5 Tested on: F602W CVE: CVE-2020-6862 Background ----------- Captcha is used to make sure the form i...
PT-2015-5493
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay versions 2.x before 2.1.0.3 Description The issue allows remote attackers to bypass intended access restrictions by modifying client behavior, as the software relies on client-side code to verify...