107 matches found
Session fixation
Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5...
CVE-2023-3711 Potential Predictable Session ID
Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5...
CVE-2023-3711
Honeywell PM43 industrial printers (32-bit ARM) are affected by CVE-2023-3711 through a Session Fixation vulnerability in the printer web page modules, enabling session credential falsification via prediction. The issue affects PM43 versions prior to P10.19.050004. Remediation per the connected d...
CVE-2023-3711 Potential Predictable Session ID
Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5...
USN-6356-1: OpenDMARC vulnerabilities
Jianjun Chen, Vern Paxson and Jian Jiang discovered that OpenDMARC incorrectly handled certain inputs. If a user or an automated system were tricked into receiving crafted inputs, an attacker could possibly use this to falsify the domain of an e-mails origin. CVE-2020-12272 Patrik Lantz discovere...
Falsification of conduit keys
Lines of code Vulnerability details Impact In function createConduit, users can falsify their keys by providing their address in the first 20bytes of the conduitkey. Being able to create as many conduits as someone wants. Proof of Concept Given the check that opensea is making: if...
go-resolver 数据伪造问题漏洞
go-resolver is a Golang DNSSEC validation parser library implemented on top of miekg/dns by the peterzen personal developer. A security vulnerability exists in go-resolver, which stems from DNSSEC authentication not being performed correctly...
go-resolver 数据伪造问题漏洞
go-resolver is a Golang DNSSEC validation parser library implemented on top of miekg/dns by the peterzen personal developer. A security vulnerability exists in go-resolver, which stems from DNSSEC authentication not being performed correctly...
libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo children
A improper certificate validation flaw was found in LibreOffice allowing an attacker to manipulate a digitally signed ODF document to appear that no alteration of the document occurred since the last signing and that the signature is valid...
Rust 数据伪造问题漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in libsecp256k1 crate before Rust 0.5.0, which stems from libsecp256k1 crate allowing R or S arguments to be greater than curve order...
showdoc 数据伪造问题漏洞
showdoc is open source a great tool for IT teams to share documents online. A data forgery issue vulnerability exists in showdoc, which stems from the vulnerability of showdoc to a lost password step attack...
LocalFilesEditor 数据伪造问题漏洞
LocalFilesEditor is a software application. Photobooth software for the web, built by an active community of users and developers. A security vulnerability exists in the LocalFilesEditor extension prior to version 11.4.0.1, which stems from a file parameter not being validated by proper regular...
Łukasz Magiera lotus 数据伪造问题漏洞
Łukasz Magiera lotus is an open source application by Łukasz Magiera.Filecoin distributed storage network implementation. Lotus has a security vulnerability. the Lotus block validation function performs a uniqueness check on the supplied block...
matrix-react-sdk 数据伪造问题漏洞
Travis Ralston matrix-react-sdk is an open source application by Travis Ralston. It is used to insert the Matrix chat/voice client into web pages. A security vulnerability exists in matrix-react-sdk before version 3.15.0, which stems from the possibility that user content sandboxing could be abus...
WHO COVID-19 Mobile App: Improper Input Validation on User's Location on PUT /WhoService/putLocation Could Affect Availability/Falsify Users
Summary: Note: I noticed that that the team has fixed issues like an XSS that's caused only from a header value typically OOS since it's not directly exploitable https://github.com/WorldHealthOrganization/app/pull/855, so in the spirit of this I'm also reporting another "good-to-fix" issue. On th...
Rest Devices Mimo Baby Man-in-the-Middle Attack Vulnerability
Rest Devices Mimo Baby is a baby sleep tracker device from Rest Devices UK. A security vulnerability exists in Rest Devices Mimo Baby version 2, which stems from the program failing to properly perform authentication or encryption for Bluetooth Low Energy BLE communication between the Turtle and...
The vulnerability of the microprogramming software of the Cisco TelePresence ISDN Gateway allows a perpetrator to access the authentication data of arbitrary users.
The vulnerability of the microprogramming software of the Cisco TelePresence ISDN Gateway relates to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the authentication data of arbitrary users...
webwinmail to brute force crack the falsification of any of the mailbox the sender-vulnerability warning-the black bar safety net
First of all, we landed an account test02,as shown: ! 7. png We test01 set up inside a proxy of the sender, here we set another account name called test02 ! 8. png ! 9. png We go to test01 view: ! 1 0. png We violence to crack this CAPTCHA: ! 1 1. png ! 1 2. png Hack is finished, we look at: ! 1 ...
PHP WDDX Serializier Data Injection Vulnerability-vulnerability warning-the black bar safety net
PHP WDDX Serializier Data Injection Vulnerability Taoguang Chen - 2014.11.2 PHP in the array is serialized into a WDDX structure of the process, there is no array key name strictly limited, can lead to falsification of the object WDDX structure. i serialize the object PHP in the object is...
Microsoft Internet Explorer 6.0 Meta Data Foreign Domain Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10248/info A vulnerability has been reported in Microsoft Internet Explorer that may facilitate certificate spoofing. This issue could aid in attacks which falsify web content to victim users. The cause of the vulnerabili...