CVE-2023-22620

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to the administrative interface...

SUSE CVE-2015-6709

The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...

SUSE CVE-2020-6441

Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page...

Dell BIOSConnect feature 缓冲区错误漏洞

Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via HTTP methods. A buffer overflow vulnerability exists in the Dell BIOSConnect feature that can be exploited by an attacker to run arbitrary code and bypass UEFI...

CVE-2020-9148

An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete user SMS messages...

Design/Logic Flaw

An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete user SMS messages...

CVE-2020-9148

An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete user SMS messages...

IBM Content Navigator Input Validation Error Vulnerability (CNVD-2020-47545)

IBM Content Navigator is a Web client from IBM USA. The product supports searching and processing documents stored in content servers from a Web browser. An input validation error vulnerability exists in IBM Content Navigator version 3.0CD. An attacker can exploit this vulnerability to bypass the...

Google Chrome Security Bypass Vulnerability (CNVD-2020-49878)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the installer in versions prior to Google Chrome 84.0.4147.125 that stems from a failure to properly secure the user interface. An attacker can exploit the vulnerability to bypass security...

CVE-2019-3910

Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device...

CVE-2018-11060

RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges...

CVE-2018-10573

interface/fax/faxdispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter...

The vulnerability of the TrustZone component in the Android operating system allows a hacker to perform actions that are not intended by the browser interface.

The vulnerability of the TrustZone component in the Android operating system is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to perform actions that were not intended by the browser interface...

EMC RecoverPoint and EMC RecoverPoint for Virtual Machines Command Injection Vulnerability

EMC RecoverPoint and EMC RecoverPoint for Virtual Machines VMs are both products of EMC Corporation. The former is a set of disaster recovery and data protection software, and the latter is a disaster recovery solution for VMware environments. A command injection vulnerability exists in EMC...

CVE-2016-6649

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...

CVE-2016-1117

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerabili...

Camtron CMNC-200 IP Camera Authentication Bypass

No description provided by source. Finding 3: Web Based Administration Interface Bypass CVE: CVE-2010-4232 The CMNC-200 IP Camera has an administrative web interface that does not handle authentication properly. Using a properly formatted request, an attacker can bypass the authentication...

CVE-2013-6026

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlsetroodkcableoj28840ybtide...

WEBSHELL box system V1. 0 Inbox sub-code vulnerability-vulnerability warning-the black bar safety net

/admin/check. asp The detection of the background of the landing place !-- Include File="../conn. asp" - !-- Include File="../inc/checkstr. asp" - % If TrimRequest. Cookies"YBCookies" = "" Then response. Redirect "login. asp" response. End else dim Rs,SQL SQL = "SELECT FROM YBAdmin where...