The vulnerability of the ReadyScript e-commerce management system, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ReadyScript e-commerce management system lies in the improper implementation of the sequence of actions to be performed, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the “REDAAM” IT-infrastructure centralized management system, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the Test IT testing management system, related to the use of default login credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the FOQUZ platform, related to the incorrect duration of a session, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FOQUZ platform, related to synchronization errors when using a shared resource, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a password hash instead of a password for authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected informati...

CVE-2021-44228

CVE-2021-44228 في 9 ديسمبر 2021، علم العالم بثغرة أمنية جديدة تخص Log4J. تم تقييم درجة CVSSv3 نظام تقييم الثغرات المشترك للثغرة بمقدار 10، مما يجعلها ذات مستوى حرج https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 ناقل CVSSv3 الخاص بها هو كما يلي: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:...

CVE-2023-31595

CVE-2023-31595 كاميرا IC Realtime ICIP-P2012T معرضة لثغرة التحكم غير السليم في الوصول عبر منفذ مفتوح كاميرا IC Realtime IP PTZ المقببة موديل ICIP-P2012 إصدار البرنامج: 2.420 يستجيب منفذ مكشوف 9989 بلقطة مباشرة في وقت الطلب، وباستخدام سكربت، يمكن استغلاله للحصول على صورة بث مباشر كل x ثانية. تؤثر...

CVE-2018-9995_dvr_credentials

أداة عرض بيانات اعتماد DVR عنوان الاستغلال: "يحصل على بيانات اعتماد DVR" CVE: CVE-2018-9995 درجة CVSS الأساسية v3: 7.3 / 10 سلسلة متجه CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N التاريخ: 09/04/2018 مؤلف الاستغلال: Fernandez Ezequiel twitter:@capitanalfa الاستغلال: $ curl...

libsrtp

Introduction à libSRTP Ce paquet fournit une implémentation du protocole de transport temps réel sécurisé SRTP, de la transformation de sécurité universelle UST, ainsi qu'un noyau cryptographique de support. L'API SRTP est documentée dans include/srtp.h, et la bibliothèque se trouve dans libsrtp2...

CVE-2023-22515-Confluence

CVE-2023-22515 Confluence Ce dépôt a été créé à des fins éducatives et ne constitue pas un appel à l'action. Les informations doivent être traitées avec prudence, car certains fichiers exécutables peuvent compromettre l'intégrité/disponibilité/confidentialité des systèmes...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 الوصف الثغرة موجودة في منتج Oracle WebLogic Server من Oracle Fusion Middleware المكوّن: Core. الإصدارات المتأثرة المدعومة هي 12.2.1.4.0 و14.1.1.0.0. هذه الثغرة سهلة الاستغلال وتسمح لمهاجم غير مصادق مع إمكانية الوصول إلى الشبكة عبر T3 أو IIOP باختراق Oracle WebLogic...

Javafaces LFI

An Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware...

AcyMailing < 10.11.1 - Unauthenticated SQL Injection

AcyMailing component for Joomla 10.11.1 contains a sql injection caused by improper input sanitization, letting attackers access unauthorized database data, exploit requires crafted input. id: CVE-2026-56292 info: name: AcyMailing 10.11.1 - Unauthenticated SQL Injection author: str4k3r severity:...

Leantime < 2.4 - Authenticated SQL Injection

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

CVE-2018-16987

CVE-2018-16987 هذه ثغرة في تخزين المعلومات الحساسة بنص واضح وكشف المعلومات الحساسة وجدتها في Squash TM أثناء اختبار اختراق. SquashTM Squash TM هو واجهة ويب تُستخدم لإدارة حالات الاختبار. رابط المشروع الوصف يعرض Squash TM حتى الإصدار 1.18.0 على الأقل كلمات المرور النصية الصريحة للخدمات الخارجية في...

udpack

UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...