CVE-2023-23464

CVE-2023‑23464 concerns Media CP Media Control Panel. A Permissive Flash cross‑domain policy may allow information disclosure, constituting a confidentiality risk (C/H) with no explicit exploitation status or remediation details provided in the supplied documents. Affected software/component: Med...

PT-2023-18975

Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel affected versions not specified Description The issue is related to insufficient protection of credential changes. Recommendations At the moment, there is no information about a newer version that contains a fix fo...

PT-2023-18973

Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel latest version Description A Permissive Flash Cross-domain Policy in the Media CP Media Control Panel may allow information disclosure. Recommendations For the Media CP Media Control Panel latest version, consider...

CVE-2023-23465: Cross-Site Request Forgery (CSRF)

Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...

CVE-2023-23464: Permissive Cross-domain Policy with Untrusted Domains

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

CVE-2023-23467: Improper Neutralization of Input During Web Page Generation

Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...

CVE-2023-23466: Insufficiently Protected Credentials

Media CP Media Control Panel latest version. Insufficiently protected credential change...

CVE-2023-23467

Media CP Media Control Panel shows a reflected XSS vulnerability via an unspecified endpoint. The Connected documents consistently describe reflected XSS without detailing affected versions, exploit specifics, or a fix. No remediation information is provided in the supplied sources; monitor for u...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

PT-2023-18795 · Ellislab · Expressionengine

Name of the Vulnerable Software and Affected Versions: ExpressionEngine versions prior to 7.2.6 Description: The issue allows remote code execution by an authenticated Control Panel user. Recommendations: For versions prior to 7.2.6, update to version 7.2.6 or later to resolve the issue...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2023-22953: Undefined Security Weakness

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2022-47648

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...

CVE-2022-47648: Improper Access Control

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...

BDWeb-Link LMS 1.11.5 Insecure Direct Object Reference

==================================================================================================================================== | Title : BDWeb-Link Lms v1.11.5 Unauthorized administrative access Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozil...

Control iD Panel 跨站脚本漏洞

Control iD Panel is a web application. Control iD Panel suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the Nome parameter leading to cross-site scripting...

PT-2023-14787 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.33 Description: The issue allows remote authenticated users with high privileges to achieve local file inclusion and execution through the Admin CP Languages module, due to a Directory Traversal vulnerability...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...