81 matches found
CVE-2024-32369
HSC Cybersecurity HC Mailinspector versions 5.2.17-3 through 5.2.18 are vulnerable to a SQL Injection vulnerability in the mliWhiteList.php component. A remote attacker can exploit the start and limit parameters by sending a crafted payload, such as exec=fetch&start=0&limit=30', to obtain sensiti...
CVE-2024-32369
SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component...
CVE-2024-32371: Improper Input Validation
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0...
hc-perl.de Cross Site Scripting vulnerability OBB-3456280
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PuneethReddyHc Online Shopping System Advanced 授权问题漏洞
PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. An authorization issue vulnerability exists in PuneethReddyHC Online Shopping System Advanced version 1.0 due to unknown functionality in...
Rorschach Ransomware Emerges: Experts Warn of Advanced Evasion Strategies
Cybersecurity researchers have taken the wraps off a previously undocumented ransomware strain called Rorschach that's both sophisticated and fast. "What makes Rorschach stand out from other ransomware strains is its high level of customization and its technically unique features that have not be...
SUSE CVE-2018-5750
The acpismbushcadd function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call...
hc-hearts.com Cross Site Scripting vulnerability OBB-3145800
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
HC Mingham-Smith 安全漏洞
HC Mingham-Smith is an application from HC Mingham-Smith, Inc. dedicated to helping PCs integrate into TCP/IP-based networks. A security vulnerability exists in HC Mingham-Smith Tardis 2000 version 1.6 that stems from the presence of a privilege escalation issue, which could allow a malicious act...
Hitachi Kokusai Electric ISnex HC-IP9100HD 路径遍历漏洞
The Hitachi Kokusai Electric ISnex HC-IP9100HD is a network camera from Hitachi, Japan. A path traversal vulnerability exists in Hitachi Kokusai Electric ISnex HC-IP9100HD version 1.07 and earlier. An attacker exploits this vulnerability to perform directory traversal via a specially crafted GET...
Hitachi Kokusai Electric ISnex HC-IP9100HD 访问控制错误漏洞
The Hitachi Kokusai Electric ISnex HC-IP9100HD is a network camera from Hitachi, Japan. A security vulnerability exists in Hitachi Kokusai Electric ISnex HC-IP9100HD version 1.07 and earlier versions, which stems from an access control issue. An attacker exploiting this vulnerability could remote...
hc-si.com Cross Site Scripting vulnerability OBB-2775881
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-1594
The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, allowing them to change the login URL...
CVE-2022-1595
The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request...
CVE-2022-1595
CVE-2022-1595 affects the WordPress HC Custom WP-Admin URL plugin up to version 1.4. The issue is unauthenticated information disclosure: a crafted request leaks the secret admin login URL, enabling potential brute‑force targeting of the admin panel. Affected: HC Custom WP-Admin URL WordPress plu...
CVE-2022-1594
CVE-2022-1594 concerns the WordPress plugin HC Custom WP-Admin URL (versions ≤ 1.4). The vulnerability is a lack of CSRF protection when updating settings, enabling a logged-in administrator to be coerced into changing the login URL via a CSRF attack. Impact aligns with Arbitrary Settings Update ...
PT-2022-13992 · WordPress · Hc Custom Wp-Admin Url
Name of the Vulnerable Software and Affected Versions: HC Custom WP-Admin URL WordPress plugin versions 1.4 and earlier Description: The issue allows the secret login URL to be leaked when a specific crafted request is sent. Recommendations: For HC Custom WP-Admin URL WordPress plugin versions 1....
CVE-2022-1595: Exposure of Sensitive Information to an Unauthorized Actor
The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request...
CVE-2022-1594: Cross-Site Request Forgery (CSRF)
The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, allowing them to change the login URL...
WordPress HC Custom WP-Admin URL plugin <= 1.4 - Unauthenticated Secret URL Disclosure vulnerability
Unauthenticated Secret URL Disclosure vulnerability discovered by Daniel Ruf in WordPress HC Custom WP-Admin URL plugin versions = 1.4. Solution Deactivate and delete. This plugin has been closed as of May 5, 2022 and is not available for download. This closure is temporary, pending a full review...