721 matches found
The vulnerability of microprogrammed software for STARDOM FCN/FCJ programmable logic controllers lies in the possibility of using hard-coded account data, allowing an intruder to gain access to the device.
The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to the possibility of using strictly encrypted account data. Exploiting this vulnerability can allow a remote attacker to gain access to the device...
CVE-2022-31800 Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers
An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device...
CVE-2022-30229
A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known...
Insurance Management System SQL Injection Vulnerability
Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...
Arbitrary file deletion in Gitea
Description When user delete the LFS data in Gitea, the oid parameter is not been validated. The attacker can make an oid whose prefix is .... to traverse directory and delete any files on the server. Proof of Concept Create a repository on Gitea. e.g. foo/bar Send a POST request with your Gitea...
CVE-2021-46564
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-23902
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in exportdata.php via the dname parameter...
@cloudnexa/vnoc-bedrock (>=0.3.27 <=1.0.2), @oguennec/remotedev-server (=0.8.4) +46 more potentially affected by CVE-2020-28442 via js-data (>=0.4.2 <=3.0.0-rc.5)
js-data NPM version =0.4.2, =0.3.27, =1.0.2, =1.0.0, =0.2.5, =1.0.0, =2.0.1, =1.1.1, =1.0.0, =0.0.2, =0.4.2, =0.4.2, =2.2.4 and more Source cves: CVE-2020-28442 Source advisory: OSV:GHSA-MQGV-67VX-G4M5...
Chainlink's latestRoundData might return stale results
Handle WatchPug Vulnerability details function badChainlinkResponseChainlinkResponse memory response internal view returns bool // Check for response call reverted if !response.success return true; // Check for an invalid roundId that is 0 if response.roundId == 0 return true; // Check for an...
CVE-2021-23259
creationtimestamp| type| source ---|---|--- 2021-12-02 18:36:39+00:00| seen| https://t.me/cibsecurity/33265...
The vulnerability in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData functions of the EBML analysis library Libebml, related to writing beyond the buffer boundary, allows a attacker to cause a service failure.
The vulnerability in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData functions of the EBML analysis library in Libebml is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2021-22482
There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data...
Change require conditions can prevent fund loss when called with mistaken input data
Handle WatchPug Vulnerability details function swapByQuote address zrxSellTokenAddress, uint256 amountToSell, address zrxBuyTokenAddress, uint256 minimumAmountReceived, address zrxAllowanceTarget, address payable zrxTo, bytes calldata zrxData, uint256 deadline external payable whenNotPaused...
CVE-2021-32571
In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported ...
IBM Security Verify Bridge Information Disclosure Vulnerability (CNVD-2021-77468)
IBM Security Verify Bridge is an IBM application component from International Business Machines IBM, Inc. provides IBM Cloud access to user attributes and authentication that are controlled by the client's local LDAP or Active Directory. A security vulnerability exists in IBM Security Verify Brid...
SQL Injection in slackero/phpwcms
✍️ Description Data enters a program from an untrusted source 🕵️♂️ Proof of Concept if$result = mysqliquery$db, 'SELECT FROM '. $phpwcms"dbprepend" ? $phpwcms"dbprepend".'' : ''.'phpwcmsuser' 💥 Impact A successful attack may result in the unauthorized viewing of user lists, the deletion of entire...
OracleManagerChainlink price data could be stale
Handle cmichel Vulnerability details There is no check in OracleManagerChainlink.getLatestPrice if the return values indicate stale data. This could lead to stale prices according to the Chainlink documentation: under current notifications: "if answeredInRound roundId could indicate stale data."...
The vulnerability of the software for updating Schneider Electric Software Update (SESU) lies in the possibility of restoring unreliable data in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the software for updating Schneider Electric Software Update SESU involves the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Design/Logic Flaw
An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...