82 matches found
ICT Protege GX和ICT Protege WX 跨站脚本漏洞
ICT Protege GX and ICT Protege WX are both products of ICT Corporation.ICT Protege GX is an enterprise-grade integrated access control, intruder detection, and building automation solution with an easy-to-operate, easy-to-integrate, and easy-to-scalable feature set.ICT Protege WX is a game-changi...
CVE-2022-29734
A cross-site scripting XSS vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
CVE-2022-29734
CVE-2022-29734 affects ICT Protege GX/WX version 2.08. The vulnerability is an XSS issue where an authenticated attacker can inject a crafted payload into the Name parameter to execute arbitrary web scripts/HTML in the victim’s browser. Multiple connected sources corroborate an authenticated XSS ...
CVE-2022-29731
An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users...
CVE-2022-29731
CVE-2022-29731 affects ICT Protege GX/WX version 2.08. The issue is an improper access control that allows an authenticated operator to disclose SHA-1 password hashes of other users (client-side hashes). The vulnerability has been documented in ZSL-2022-5700 with a PoC and vendor notifications; p...
suntel-ict-biz-sel.com Cross Site Scripting vulnerability OBB-2627267
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Protecting Against Cyber Threats to Managed Service Providers and their Customers
Summary Tactical actions for MSPs and their customers to take today: • Identify and disable accounts that are no longer in use. • Enforce MFA on MSP accounts that access the customer environment and monitor for unexplained failed authentication. • Ensure MSP-customer contracts transparently...
CISA Joins Partners to Release Advisory on Protecting MSPs and their Customers
The cybersecurity authorities of the United Kingdom, Australia, Canada, New Zealand, and the United States have released joint Cybersecurity Advisory CSA, Protecting Against Cyber Threats to Managed Service Providers and their Customers, to provide guidance on how to protect against malicious cyb...
Indian Govt Orders Organizations to Report Security Breaches Within 6 Hours to CERT-In
India's computer and emergency response team, CERT-In, on Thursday published new guidelines that require service providers, intermediaries, data centers, and government entities to compulsorily report cybersecurity incidents, including data breaches, within six hours. "Any service provider,...
ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting (XSS)
Exploit Title: ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting XSS Exploit Author: LiquidWorm Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App:...
ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting Vulnerability
Exploit Title: ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting XSS Exploit Author: LiquidWorm Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App:...
ICT Protege GX/WX 2.08 Client-Side SHA1 Password Hash Disclosure
Summary Protege GX is an enterprise level integrated access control, intrusion detection and building automation solution with a feature set that is easy to operate, simple to integrate and effortless to extend. Protege WX is an all-in-one, web-based, cross-platform system that gives you a fully...
An Inside Look at CISA’s Supply Chain Task Force
When one mentions supply chains these days, we tend to think of microchips from China causing delays in automobile manufacturing or toilet paper disappearing from store shelves. Sure, there are some chips in the communications infrastructure, but the cyber supply chain is mostly about virtual...
Attackers Can Crash Cisco Email Security Appliances by Sending Malicious Emails
Cisco has released security updates to contain three vulnerabilities affecting its products, including one high-severity flaw in its Email Security Appliance ESA that could result in a denial-of-service DoS condition on an affected device. The weakness, assigned the identifier CVE-2022-20653 CVSS...
Auerswald COMpact 5500R Path Traversal Vulnerability
The Auerswald Compact Series is an Ict solution from Auerswald Germany. file system...
Auerswald COMpact 5500R Elevation of Privilege Vulnerability
Auerswald Compact Series is an Ict solution from Auerswald Germany. an elevation of privilege vulnerability exists in Auerswald COMpact 5500R, which can be exploited by attackers to obtain administrator account passwords for elevation of privilege...
ict-atelier.ch Cross Site Scripting vulnerability OBB-2136710
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Weak password vulnerability in SRG3260 of Huawei Technologies Co.
Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider specializing in ICT. A weak password vulnerability exists in Huawei Technologies SRG3260, which can be exploited by attackers to obtain sensitive information...
Weak password vulnerability in SRG3250 of Huawei Technologies Co.
Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider. A weak password vulnerability exists in the Huawei Technologies SRG3250, which can be exploited by attackers to obtain sensitive information...
Weak password vulnerability in SRG3230 of Huawei Technologies Co.
Huawei Technologies Co. Ltd. is an ICT information and communications infrastructure and smart terminal provider. A weak password vulnerability exists in Huawei Technologies Co Ltd SRG3230, which can be exploited by attackers to obtain sensitive information...