CVE-2020-8889

The CVE-2020-8889 entry refers to ShipStation.com plugin version 1.0 for CS-Cart. The weakness stems from a typo that allows a comparison between a blank password and NULL via the action=export endpoint, enabling remote attackers to obtain sensitive information. Reported impact indicates confiden...

CVE-2020-8889

The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information via action=export because a typo results in a successful comparison of a blank password and NULL...

CVE-2020-8889

The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information via action=export because a typo results in a successful comparison of a blank password and NULL...

Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-5954-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5954-2 advisory. USN-5954-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the...

cs-lewis.de Cross Site Scripting vulnerability OBB-3227203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cs.helsinki.fi Cross Site Scripting vulnerability OBB-3225467

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-16867 · Sourcecodester · Sourcecodester Online Graduate Tracer System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Graduate Tracer System version 1.0 Description: A critical issue affects the function mysqli query of the file admin cs.php, leading to sql injection. The attack may be initiated remotely. The exploitation is known to be...

Thunderstorm - Modular Framework To Exploit UPS Devices

Thunderstorm is a modular framework to exploit UPS devices. For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future. CVE Thunderstorm is currently capable of exploiting the following CVE: CVE-2022-47186 – Unrestricted fi...

SUSE CVE-2016-9756

arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment CS in certain error cases, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

SUSE CVE-2022-23482

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2023-22370

Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer...

CVE-2023-22370

Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer...

Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G 跨站脚本漏洞

PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G is a camera from PLANEX. A security vulnerability exists in the Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G. An attacker can exploit this vulnerability to inject arbitrary scripts...

PT-2023-18469 · Cs-Wmv02G · Cs-Wmv02G

Name of the Vulnerable Software and Affected Versions: Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions Description: A reflected cross-site scripting issue allows a remote unauthenticated attacker to inject arbitrary scripts. This affects products that are no longer supported by...

Virtuozzo Hybrid Infrastructure 5.4 (5.4.0-133)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover compute services, management node high availability, monitoring and alerts, and the user interface. Additionally, this release delivers stability improvements and addresses issues found in previous...

CVE-2023-22370

CVE-2023-22370 is a stored cross-site scripting vulnerability in PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G (all versions). The issue allows a network-adjacent authenticated attacker to inject arbitrary scripts via the device’s web interface. Root cause per the sources is a store...

CVE-2023-22375

The CVE-2023-22375 issue affects the PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G (all versions). It is a Cross-site Request Forgery (CSRF) vulnerability that could allow a remote unauthenticated attacker to hijack a logged-in user’s session and perform arbitrary operations by tric...

PT-2023-18464 · Cs-Wmv02G · Cs-Wmv02G

Name of the Vulnerable Software and Affected Versions: Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions Description: A stored cross-site scripting issue allows a network-adjacent authenticated attacker to inject an arbitrary script. This issue only affects products that are no...

Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G 跨站脚本漏洞

PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G is a camera from PLANEX. A security vulnerability exists in the Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G that stems from a stored cross-site scripting vulnerability, which can be exploited by an authenticated attacker in a...

CVE-2023-22375: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user to view a malicious page. NOTE: This vulnerability...