7659 matches found
CVE-2020-21997
Smartwares HOME easy =1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control...
CVE-2020-21997
Smartwares HOME easy =1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control...
Information disclosure
Smartwares HOME easy =1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control...
CVE-2020-21997
Smartwares HOME easy =1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control...
CVE-2020-21997
Smartwares HOME easy
Smartwares Home Easy 访问控制错误漏洞
Smartwares Home Easy is an application from Smartwares USA. Comfortably control home devices from your iPhone or Android smartphone using a remote outlet An access control error vulnerability exists in Smartwares HOME easy version 1.0.9 and prior versions, which stems from susceptibility to...
PT-2021-10712 · Smartwares · Smartwares Home Easy
Name of the Vulnerable Software and Affected Versions: Smartwares HOME easy versions prior to 1.0.9 Description: The issue allows for an unauthenticated database backup download and information disclosure. This could lead to the disclosure of sensitive and clear-text information, potentially...
File Upload Vulnerability in Easy Tender's Corporate Bidding and Procurement Platform
Shanghai Huizhao Information Technology Co., Ltd. is a comprehensive service provider of electronic bidding system, specializing in the provision of electronic bidding software development and trading platform operation and other services. A file upload vulnerability exists in the E-Tendering...
Weak Password Vulnerability in RG-EG Easy Gateway Web Management System
Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A weak password vulnerability exists in the RG-EG Easy Gateway web management system, which can be exploited by attackers to obtain...
The vulnerability of the Easy Virtual Switching System (VSS) software, developed by Cisco IOS XE, affects Cisco Catalyst 4500 and Cisco Catalyst 4500-X network devices. This vulnerability allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the Easy Virtual Switching System VSS microprogramming software for Cisco IOS XE network devices from the Cisco Catalyst 4500 series and Cisco Catalyst 4500-X series is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or...
[SECURITY] Fedora 32 Update: CImg-2.9.7-1.fc32
The CImg Library is an open-source C++ toolkit for image processing. It consists in a single header file 'CImg.h' providing a minimal set of C++ classes and methods that can be used in your own sources, to load/save, process and display images. Very portable, efficient and easy to use, it's a...
File Upload Vulnerability in Easy Control World
Easy Control World is an automation monitoring and information management platform created by Beijing Jiushi Yi Automation Software Co. A file upload vulnerability exists in Easy Control World. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
Easy Digital Downloads < 2.10.3 - Unauthorised Stripe Disconnect via CSRF
The plugin did not property check for CSRF when disconnecting Stripe, allowing attackers to make logged in users with the manageoptions capability disconnect the Stripe gateway via a CSRF attack. PoC https://example.com/wp-admin/admin-post.php?page=edd-settings&edds-stripe-disconnect;=1...
File Upload Vulnerability in Easy Control World (CNVD-2021-33158)
Easy Control World is an automation monitoring and information management platform created by Beijing Jiushi Yi Automation Software Co. A file upload vulnerability exists in Easy Control World. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
WordPress Easy Digital Downloads plugin <= 2.10.2 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability discovered by WPScan team in WordPress Easy Digital Downloads plugin versions = 2.10.2. Solution Update the WordPress Easy Digital Downloads plugin to the latest available version at least 2.10.3...
WordPress File Upload Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in version 1.0 of the Easy Form Builder WordPress...
WordPress Easy Testimonials Plugin < 3.6 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113813";...
CVE-2021-24224
The EFBPverifyuploadfile AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE...
CVE-2021-24224
The EFBPverifyuploadfile AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE...
Default credentials
The EFBPverifyuploadfile AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE...