EUVD-2023-56097

Malicious code in bioql PyPI...

CVE-2023-51376

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34...

CVE-2023-51376

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34...

CVE-2023-51376 WordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34...

PT-2024-14099 · Brainstorm Force · Projecthuddle Client Site

Name of the Vulnerable Software and Affected Versions: ProjectHuddle Client Site versions 1.0.34 and earlier Description: The issue is related to a Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site. Recommendations: For versions 1.0.34 and earlier, update to a...

WordPress ProjectHuddle Client Site Plugin <= 1.0.34 is vulnerable to Broken Access Control

Software ProjectHuddle Client Site Type Plugin Vulnerable versions = 1.0.34 Fixed in 1.0.35 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51376 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 662f316bbcd6 Credits Rafie...

Stored XSS on entire Client site

Description Admin or Staff with "System" permission can produce a store XSS on entire Client site Proof of Concept Edit the "Signature" field to this value "FOSSBilling.org - Client Management, Invoice and Support Software"" Then it will trigger in every Client screens Seems like it was rendered ...

Vicidial v2.14-783a - Multiple XSS Web Vulnerabilities

Document Title: =============== Vicidial v2.14-783a - Multiple XSS Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2311 Release Date: ============= 2022-10-10 Vulnerability Laboratory ID VL-ID: ==================================== 23...

OKI C5510MFP printers unauthroized access

Web interface password is checked on client site...

PT-2000-1097 · Comstock · Comstock Multicsp Client Site Processor System

Name of the Vulnerable Software and Affected Versions: ComStock MultiCSP Client Site Processor system affected versions not specified Description: The issue concerns the presence of accounts with no passwords or easily guessable default passwords in the ComStock MultiCSP system. Recommendations: ...