CVE-2021-31932

Nokia BTS TRS web console FTMW20FP22019.08.160010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . dot character...

CVE-2021-31932

The CVE affects Nokia BTS TRS Web Console (FTM_W20_FP2_2019.08.16_0010). A vulnerability in how the web server (lighttpd) handles special character encoding allows an unauthenticated attacker to bypass authentication via URL-encoded dot characters, granting access to all web panel functionalities...

Weblogic Console Login Form Bruteforced

The scanner successfully authenticated on the Weblogic console by using weak or predictable credentials. No source data...

CockroachDB Web Console Detection

Binary data cockroachdbwebconsoledetect.nbin...

Nokia Transport Module Authentication Bypass Vulnerability

The TRS web console allows an authenticated user to remotely manage the BTS and its configuration. Analysis discovered an authentication bypass vulnerability in the web management console. BTS TRS web console version FTMW20FP22019.08.160010 is affected. title: Nokia Transport Module Authenticatio...

Nokia BTS TRS web console 安全漏洞

Nokia BTS TRS web console is Nokia Transfer Module Authentication from Nokia Finland. A security vulnerability exists in the Nokia BTS TRS web console, which originates in the Nokia BTS TRS web console FTMW20FP22019.08.160010 version, that allows an unauthenticated, malicious user to bypass the...

Deserialization of Untrusted Data in Apache ShardingSphere

In Apache ShardingSphereincubator 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security...

GHSA-2CJF-W7C4-FHF6 Cross-site Scripting in Beanstalk console

Beanstalk console ptrofimov/beanstalkconsole prior to 1.7.14 is vulnerable to cross-site scripting...

Cross-site Scripting (XSS) in Apache ActiveMQ Artemis

In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and th...

GHSA-3H2H-XQR2-2JP7 Cross-site Scripting (XSS) in Apache ActiveMQ Artemis

In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and th...

Cross-site scripting (XSS) in Apache ActiveMQ

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0...

CVE-2022-0539

Cross-site Scripting XSS - Stored in Packagist ptrofimov/beanstalkconsole prior to 1.7.14...

beanstalk_console 跨站脚本漏洞

beanstalkconsole is the management console for the Beanstalk Queue Server and is written in PHP. A cross-site scripting vulnerability exists in beanstalkconsole, which stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to...

Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_console

Description Stored XSS in parameter 'host' when add server Proof of Concept // PoC.req GET / HTTP/1.1 Host: 127.0.0.1:8088 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:97.0 Gecko/20100101 Firefox/97.0 Accept:...

PrinterLogic Web Stack Cross-Site Scripting Vulnerability

PrinterLogic Web Stack PrinterLogic Printer Installer is a native Web application from PrinterLogic, Inc. It enables It departments to manage and automate the creation/propagation of PrinterObjects and printer drivers across print environments from a single management console. PrinterLogic Web...

PrinterLogic Web Stack Insecure Direct Object Reference (IDOR) Vulnerability

PrinterLogic Web Stack PrinterLogic Printer Installer is a native Web application from PrinterLogic USA, Inc. Enabling the It department to manage and automate the creation/propagation of PrinterObjects and printer drivers across print environments from a single management console. PrinterLogic W...

Cross-site Scripting in Beanstalk console

Beanstalk console prior to version 1.7.12 is vulnerable to cross-site scripting...

CVE-2022-0501

Cross-site Scripting XSS - Reflected in Packagist ptrofimov/beanstalkconsole prior to 1.7.12...

beanstalk_console 跨站脚本漏洞

beanstalkconsole is the administration console for the Beanstalk Queue Server and is written in PHP. A cross-site scripting vulnerability exists in beanstalkconsole, which stems from a cross-site scripting vulnerability in beanstalkconsole...

Veeam Service Provider Console fails to connect to restored VSPC database due to collation conflict

Challenge When attempting to connect Veeam Service Provider Console to an existing VSPC database the following error occurs: Implicit conversion of varchar value to varchar cannot be performed because the collation of the value is unresolved due to a collation conflict between "" and "" in add...