541 matches found
CVE-2021-35961
Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission...
CVE-2021-35962
The CVE-2021-35962 entry concerns Dr. ID Door Access Control and Personnel Attendance Management system. The connected sources confirm a vulnerability in specific page parameters that do not filter special characters, enabling path traversal. Result: remote attackers can download credential files...
CVE-2021-35961
CVE-2021-35961 concerns the Dr. ID Door Access Control and Personnel Attendance Management system, where the root cause is hard-coded admin default credentials . This enables remote attackers to access the system through the default password and obtain the highest privileges . Multiple connected ...
Taiwan Secom Personnel Attendance Management 路径遍历漏洞
Taiwan Secom Personnel Attendance Management is an attendance management system of Taiwan Secom, Taiwan, China. Dr. ID Door Access Control and Personnel Attendance Management system are vulnerable to path traversal vulnerability, which stems from specific page parameters that do not filter specia...
CVE-2021-35961
Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission...
CVE-2021-35962
Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission...
Lending Pair initialize function can be front run.
Handle jonah1005 Vulnerability details Impact LendingPair does not initialize tokenMaster, controller, tokens. A hacker can listen the deployer address and front run the initialize transaction. The initialized contract would look almost exactly the same if the hacker only replace lpTokenMaster wi...
SOYAL Biometric Access Control System 5.0 Master Code Disclosure
SOYAL Biometric Access Control System 5.0 Master Code Disclosure Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: AR-727 i/CM - F/W: 5.0 AR837E/EF - F/W: 4.3 AR725Ev2 - F/W: 4.3 191231 AR331/725E - F/W: 4.2 AR837E/EF - F/W: 4.1...
Apple Outlines 2021 Security, Privacy Roadmap
Click to Register Apple released its 2021 Platform Security guide, Thursday, outlining its current and year-ahead agenda for its device hardware, software and silicon security. This year’s 192-page report is beefed-up, compared to past reports, with a wealth of new insights into how Apple is...
Modernizing your network security strategy
From the global pandemic to recent cyberattacks, our world has faced many challenges during the past 12 months. Some of these challenges we can’t change. However, I’m pleased about the ones we can, and are changing across the cybersecurity landscape. For example, to facilitate remote work and...
Lock and Code S1Ep16: Investigating digital vulnerabilities with Samy Kamkar
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Samy Kamkar, chief security officer and co-founder of Open Path, about the digital vulnerabilities in our physical world. If you look through a recent...
iSmartgate PRO Malicious File Upload Vulnerability
The iSmartgate PRO is a smart garage door opening system. A malicious file upload vulnerability exists in iSmartgate PRO 1.5.9. An attacker can exploit this vulnerability to upload a malicious file via a form that uploads an image to the garage door...
ismartgate PRO Cross-Site Request Forgery Vulnerability (CNVD-2021-01053)
iSmartGate is a smart garage door opener system. The ismartgate PRO suffers from a cross-site request forgery vulnerability that allows a remote attacker to exploit the vulnerability to construct a malicious URI, bait a request, and can perform a malicious operation in the context of the target...
iSmartgate PRO Cross-Site Scripting Vulnerability
iSmartGate is a smart garage door opener system. A security vulnerability exists in iSmartgate PRO version 1.5.9, which can be exploited by an attacker to open/close a specified garage door/gate via /isg/opendoor.php...
CVE-2020-12843
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used...
Design/Logic Flaw
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used...
Design/Logic Flaw
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used...
CVE-2020-12837
Affected product: iSmartgate PRO 1.5.9. Vulnerability: Malicious file uploads via the image upload form for garage doors. The attack requires the PNG magic bytes, indicating a crafted PNG payload could bypass basic checks. The reports consistently describe a vulnerability in the image upload path...
