GHSA-X68X-WVM2-HQC8 Stored XSS vulnerability in Jenkins Compact Columns Plugin

Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips. This results in a stored cross-site scripting vulnerability that can be exploited by users with Job/Configure permission. Compact Columns Plugin 1.12 applies the configured markup formatter to the job...

Circutor COMPACT DC-S BASIC 安全漏洞

Circutor COMPACT DC-S BASIC is a compact DC concentrator from Circutor Spain. A security vulnerability exists in Circutor COMPACT DC-S BASIC CIRCDCv1.2.17 version, which originates from a buffer overflow in the firewall function of the provisioning management portal. An attacker could send a long...

SolarView Compact 6.0 - OS Command Injection

Exploit Title: SolarView Compact 6.0 - OS Command Injection Date: 2022-05-15 Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29303 Tested on: Windows Exploit HTTP Request : POST...

SolarView Compact 6.0 - OS Command Injection Vulnerability

Exploit Title: SolarView Compact 6.0 - OS Command Injection Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29303 Tested on: Windows Exploit HTTP Request : POST /confmail.php HTTP/1.1...

SolarView Compact 6.0 Command Injection

Exploit Title: SolarView Compact 6.0 - OS Command Injection Date: 2022-05-15 Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29303 Tested on: Windows Exploit HTTP Request : POST...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

Directory traversal

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

Design/Logic Flaw

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

Command injection

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29303

CVE-2022-29303 targets SolarView Compact (CONTEC). Affected: ver.6.00; vulnerability in the web server’s conf_mail.php allows OS command injection due to improper input validation on the send test mail console. Impact per sources: potential remote execution of arbitrary commands with high confide...

CVE-2022-29302

CVE-2022-29302 affects SolarView Compact ver.6.00. The vulnerability is a local file disclosure via the hidden page at /html/Solar_Ftp.php, allowing a remote attacker to read and/or alter arbitrary files on the web server (local file disclosure). The related documents confirm this vulnerability a...