5222 matches found
UBUNTU-CVE-2021-28940
Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...
CVE-2019-20464
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...
Default credentials
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...
CVE-2019-20464
CVE-2019-20464 affects the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The issue is that while the mobile-application streaming over UDP requires a password, other RTSP-based streaming services exposed by the device do not, allowing an unauthenticated attacker to access the video fe...
CVE-2019-20464
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...
PT-2021-9029 · Sannce · Sannce Smart Hd Wifi Security Camera
Name of the Vulnerable Software and Affected Versions: Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 affected versions not specified Description: An issue was discovered in the Sannce Smart HD Wifi Security Camera, where the device offers multiple streaming services. Although the servi...
de Consumentenbond Sannce Smart HD Baby Monitor 授权问题漏洞
The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices, which can be exploited by an attacker to gain...
zeek -- null-pointer dereference vulnerability
Jon Siwek of Corelight reports: Fix null-pointer dereference when encountering an invalid enum name in a config/input file that tries to read it into a setenum. For those that have such an input feed whose contents may come from external/remote sources, this is a potential DoS vulnerability...
CVE-2020-11261
creationtimestamp| type| source ---|---|--- 2021-03-23 06:29:47+00:00| exploited| https://t.me/cKure/4487 2021-03-23 10:14:49+00:00| exploited| https://t.me/truesecator/1547 2021-03-23 15:12:29+00:00| exploited| https://t.me/informationsecuritychannel/43681 2021-03-23 16:35:11+00:00| exploited|...
CVE-2021-24123
Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...
CVE-2021-24123
Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...
CVE-2021-24123
Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...
WordPress Social Slider Feed plugin <= 1.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by purine chu in WordPress Social Slider Feed plugin versions = 1.8.4. Solution Update the WordPress Social Slider Feed plugin to the latest available version at least 1.8.5...
CVE-2021-21193
creationtimestamp| type| source ---|---|--- 2021-03-13 04:24:31+00:00| exploited| https://t.me/thehackernews/1090 2021-03-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=562 2021-03-15 04:50:46+00:00| published-proof-of-concept| https://t.me/infobes/295 2021-03-15...
Tiny Tiny RSS 安全漏洞
Tiny Tiny RSStt-rss,tt-rss is an open source based browser-based news feed reader and aggregator. Tiny Tiny RSS before 2021-03-12 A security vulnerability exists that allows an attacker to log in via OTP code without a valid password...
CVE-2021-26411
creationtimestamp| type| source ---|---|--- 2021-03-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=560 2021-03-10 15:20:45+00:00| exploited| https://t.me/truesecator/1504 2021-03-11 19:00:31+00:00| seen| https://t.me/cibsecurity/24780 2021-03-15 04:50:46+00:00|...
Joomla! 2.5.0 - 3.9.24 Multiple XSS Vulnerabilities
Joomla! is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2021-23130
An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues...