CVE-2022-23475

daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting XSS and cross site request forgery CSRF vulnerability which leads to account takeover in the mng-del.php file because of an unescaped variable reflected in...

EUVD-2023-12149

Malicious code in bioql PyPI...

EUVD-2022-28537

Malicious code in bioql PyPI...

PT-2023-15970 · Unknown · Lirantal/Daloradius

Name of the Vulnerable Software and Affected Versions: lirantal/daloradius versions prior to master-branch Description: The issue is related to improper restriction of names for files and other resources. This affects the GitHub repository lirantal/daloradius. Recommendations: For versions prior ...

PT-2022-27800 · Unknown · Daloradius

Name of the Vulnerable Software and Affected Versions: daloradius versions prior to master Description: The issue concerns a sensitive cookie without the 'HttpOnly' flag in the GitHub repository lirantal/daloradius. This could potentially allow unauthorized access to sensitive information...

daloRADIUS 安全漏洞

daloRADIUS is an advanced RADIUS web management application from Liran Tal Personal Developer. It is designed to manage hotspot and universal ISP deployments. A security vulnerability exists in daloRADIUS, which stems from the absence of the HttpOnly token bit in its sensitive cookies...

CVE-2022-23475 dalorRadius full account take over

daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting XSS and cross site request forgery CSRF vulnerability which leads to account takeover in the mng-del.php file because of an unescaped variable reflected in...

daloRADIUS 跨站脚本漏洞

daloRADIUS is an advanced RADIUS web management application from Liran Tal Personal Developer. It is designed to manage hotspot and universal ISP deployments. A cross-site scripting vulnerability exists in daloRADIUS version 1.3 and earlier, which can be exploited by an attacker to take over an...