143 matches found
CVE-2023-24050
Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...
CVE-2023-24052
The CVE-2023-24052 entry concerns Connectize AC21000 G6 641.139.1.1256. The vulnerability is in the change password functionality, which does not prompt for the current password, enabling an attacker to gain control of the device. The cited descriptions from Red Hat CVEs mirror this issue for the...
Connectize G6 AC2100 Security Vulnerability
The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256 that stems from the presence of a credential mismanagement issue, which allows an attacker to elevate privileges through the use of a weak hash algorit...
CVE-2023-24051
A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute force style attacks...
Connectize G6 AC2100 Security Vulnerability
The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256 that originates from allowing an attacker to run arbitrary commands by using specially crafted strings in the ping utility...
The vulnerability of the web interface of the Connectize G6 AC2100 router’s microprogramming software allows a hacker to bypass the authentication process and gain full access to the device.
The vulnerability of the web interface of the microprogramming router Connectize G6 AC2100 is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain full access to the device...
The vulnerability of the Connectize G6 AC2100 router’s microprogramming software lies in its overly restrictive mechanism for blocking user account data, which allows attackers to execute brute-force attacks.
The vulnerability of the Connectize G6 AC2100 router’s microprogramming software is related to an overly restrictive mechanism for blocking user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to carry out a brute-force attack...
The vulnerability of the web interface of the microprogramming software router Connectize G6 AC2100 allows a hacker to perform a CSRF attack.
The vulnerability of the web interface of the microprogramming router Connectize G6 AC2100 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...
PT-2023-6355 · Connectize · Connectize Ac21000 G6
Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: An issue in the Connectize AC21000 G6 allows attackers to run arbitrary commands via a crafted string in the ping utility. The vulnerability is caused by weaknesses in the authorizatio...
PT-2023-6356 · Connectize · Connectize Ac21000 G6
Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: The issue is related to insecure credential management, allowing attackers to gain escalated privileges via the use of a weak hashing algorithm. It also involves a vulnerability in the...
PT-2023-6360 · Connectize · Connectize Ac21000 G6
Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: An issue in the change password functionality of the Connectize AC21000 G6 allows attackers to gain control of the device without prompting for the current password. This is related to...
PT-2023-6361 · Connectize · Connectize Ac21000 G6
Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: The issue is related to a Cross Site Scripting XSS vulnerability that allows attackers to run arbitrary code via a crafted string when setting the Wi-Fi password in the admin panel. Th...
PT-2023-6359 · Connectize · Connectize Ac21000 G6
Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: A Cross Site Request Forgery CSRF vulnerability exists, allowing attackers to gain control of the device via a crafted GET request to /man password.htm. This issue is related to the we...
PT-2023-6358 · Connectize · Connectize Ac21000 G6
Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: A client-side rate limit issue in Connectize AC21000 G6 allows attackers to gain escalated privileges via brute force style attacks. This issue is related to a overly restrictive...
g6.fr Cross Site Scripting vulnerability OBB-3493480
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-20545
Cross-Site Scripting XSS vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'...
CVE-2020-20545
Cross-Site Scripting XSS vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'...
Cross site scripting
Cross-Site Scripting XSS vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'...
CVE-2020-20545
CVE-2020-20545 describes a Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, triggered by the method parameter to seeyon/hrSalary.do . Multiple sources (NVD, CVE lists, CNNVD) confirm the affected product and entry, with the issue rooted in user input...