519 matches found
MIRACASE MHUB500 USB splitters 安全漏洞
MIRACASE MHUB500 USB splitters is a software application. This tool provides powerful functionality for audio output devices, allowing a remote attacker to retrieve code signaling sensors via oscilloscope and electro-optical from LEDs of connected devices. A security vulnerability in MIRACASE...
Logitech Z120 安全漏洞
The Logitech Z120 is a compact stereo speaker from Logitech Switzerland. A security vulnerability exists in the Logitech Z120 and S120 that stems from a problem with the device powering the audio output device under certain usage scenarios. The vulnerability can be exploited by an attacker to...
JBL Go 2 安全漏洞
The JBL Go 2 is a full-featured portable waterproof Bluetooth speaker from JBL Japan. A security vulnerability exists in the JBL Go 2 version 2021-08-09 and earlier. A remote attacker could recover voice signals from LEDs on the device through binoculars and photoelectric sensors also known as a...
Pebble 安全漏洞
Pebble is a customizable watch from the American company Pebble. Pebble suffers from a security vulnerability that stems from the device's ability to power an audio output device under certain specified usage scenarios. The vulnerability can be exploited by an attacker to recover voice signals fr...
Raspberry Pi 3 module B+ 安全漏洞
The Raspberry Pi 3 module B+ is an embedded system development board. A security vulnerability exists in the Raspberry Pi 3 module B+ and 4 B. The vulnerability stems from a problem with the device powering an audio output device under certain usage scenarios. The vulnerability can be exploited b...
TP-Link UE330 USB 安全漏洞
TP-Link UE330 USB is a port USB 3.0 hub. TP-Link UE330 USB has a security vulnerability that could be exploited by remote attackers to recover voice signals from LEDs on the device through binoculars and photoelectric sensors to conduct "firefly" attacks...
ToneWinner desktop speakers安全漏洞
ToneWinner desktop speakers Winner desktop speakers is a desktop speaker from the Chinese company ToneWinner. A security vulnerability exists in ToneWinner desktop speakers that can be exploited by a remote attacker to recover the voice signal from the power indicator LED via a telescope and a...
No Restriction of Excessive Authentication Attempts in Firefly III
firefly-iii is vulnerable to Improper Lack of Restriction of Excessive Authentication Attempts...
GHSA-56CX-WF47-HX7W No Restriction of Excessive Authentication Attempts in Firefly III
firefly-iii is vulnerable to Improper Lack of Restriction of Excessive Authentication Attempts...
firefly-iii has unspecified vulnerabilities
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a security vulnerability that stems from the program being susceptible to undue restrictions on excessive authentication attempts. No detailed vulnerability details are currently available...
Insecure Authentication
firefly-iii has insecure authentication. The vulnerability exists due to Improper Restriction of Excessive Authentication Attempts allowing an attacker to be able to gain access through brute forcing the login with a correct password list...
CVE-2021-3663
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
CVE-2021-3663
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
Input validation
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
CVE-2021-3663
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
CVE-2021-3663 Improper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
CVE-2021-3663
Firefly-III is affected by CVE-2021-3663: Improper Restriction of Excessive Authentication Attempts. Affected software is the Firefly-III personal finance manager. Documented severity via CVSSv3.1 base score 7.5 (remote, no authentication, high confidentiality impact; network access, low attack c...
firefly-iii 安全漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a security vulnerability that stems from the program being susceptible to undue restrictions on excessive authentication attempts. No detailed vulnerability details are currently available...
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
✍️ Description The /export/export endpoint does not have CSRF Protection. This could be used to force download account data and potentially spoof users. 🕵️♂️ Proof of Concept - Login to user account. - Create the following file and open the page in browser. // PoC.html To verify that you are a...
Cross-site Scripting (XSS)
grumpydictator/firefly-iii is vulnerable to cross-site scripting XSS. An attacker can inject malicious script via auto-completion suggestions for description field for new or edited transactions during adding transaction. This vulnerability is exploitable in a non-default configuration whereby th...