CVE-2023-29055: Insufficiently Protected Credentials

In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain serverside credentials. When the kylin service runs over HTTP or other plain text protocol, it is possible for network sniffers to hijack the HTTP...

Akuvox R50P Command Injection Vulnerability

AKUVOX NETWORKS R50P VoIP phone is an IP phone from AKUVOX NETWORKS, China. A command injection vulnerability exists in the IP address field of the configuration web interface used for log servers in the AKUVOX NETWORKS R50P VoIP phone using firmware version 50.0.6.156. The vulnerability arises...