246 matches found
CVE-2020-29669
Macally WIFISD2-2A82 CVE-2020-29669 분석 Maximilian Barz Silky 및 Daniel Schwendner code-byter 작성 ========================== 이 문서는 Macally WIFISD2-2A82 여행용 라우터펌웨어 버전: 2.000.010를 익스플로잇하는 방법에 대한 분석입니다. 게스트 사용자는 자신의 비밀번호를 재설정할 수 있습니다. 이 과정에는 관리자 계정을 탈취하고 셸 액세스를 획득할 수 있는 취약점이 존재합니다. 관리자 사용자는 /etc/shadow...
EUVD-2026-75126
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...
CVE-2026-73789
HPE CPPM guest account management services is affected by an unauthenticated insecure parameter manipulation vulnerability in its web-based management interface. An unauthenticated remote attacker can tamper with account settings, potentially extending network access beyond policy limits and lead...
CVE-2026-9597
Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional session via a magic-link token issued prior to deactivation...
JetBrains IntelliJ IDEA < 2026.1.1 Multiple Vulnerabilities
The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion CVE-2026-49366 - In JetBrains IntelliJ IDEA before...
CVE-2026-25861 QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php
QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by exploiting the use of MD5 for password hashing in the Tools::encrypt function within classes/Tools.php, which concatenates a static cookie...
CVE-2026-30225
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run. RestartAction constructs a new...
CVE-2026-30225 OliveTin: RestartAction always runs actions as guest
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run. RestartAction constructs a new...
CVE-2026-30225 OliveTin: RestartAction always runs actions as guest
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run. RestartAction constructs a new...
CVE-2026-30225 OliveTin: RestartAction always runs actions as guest
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run. RestartAction constructs a new...
CVE-1999-0200
Windows NT FTP server WFTP with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password...
CVE-2025-52599
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered Inadequate of permission management for camera guest account. The manufacturer has released patch firmware for the flaw, please refer to the...
EUVD-2025-205422
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered Inadequate of permission management for camera guest account. The manufacturer has released patch firmware for the flaw, please refer to the...
PT-2025-53445
Name of the Vulnerable Software and Affected Versions Nozomi Networks affected versions not specified Description Inadequate permission management exists for the camera guest account. The issue affects Industrial Control Systems ICS and OT/IoT security. The manufacturer has released a patch...
Hanwha Vision Camera 安全漏洞
Hanwha Vision Camera is a series of cameras from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision Camera that stems from insufficient management of camera guest account privileges...
EUVD-2021-26164
Malware in sbrugna...
EUVD-2006-3994
Malware in sbrugna...
EUVD-1999-0537
Malware in sbrugna...