PT-2022-21383 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A double-free issue exists in the web interface /action/ipcamSetParamPost functionality. This can be triggered by a specially-crafted HTTP request, leading t...

PT-2022-19642 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: An authentication bypass issue exists in the web interface, specifically in the /action/factory functionality. This can be triggered by a specially-crafted...

The vulnerability in the web interface for managing the Cisco Unified Intelligence Center reporting tool and the Cisco Unified Contact Center Express operator automation tool allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

ASUS System Control Interface 安全漏洞

ASUS System Control Interface is a computer system control interface from ASUS, China. privilege to delete another, more privileged file...

ASUS System Control Interface 安全漏洞

ASUS System Control Interface is a computer system control interface from ASUS, a Chinese company. A security vulnerability exists in ASUS System Control Interface versions prior to 3.1.5.0 and AsusSwitch.exe versions prior to 1.0.10.0, which stems from weak file permissions and results in elevat...

The vulnerability in the user interfaces of Google Chrome and Microsoft Edge allows attackers to carry out spear-phishing attacks.

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge is related to information representation errors in the user interfaces. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created web page...

The vulnerability in the HTTP web interface of the software for high-voltage distribution device monitoring systems from Hitachi Modular Switchgear Monitoring (MSM) allows a attacker to perform a CSRF attack.

The vulnerability of the HTTP web interface of the performance measurement software for Hitachi Modular Switchgear Monitoring systems is related to the falsification of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

The vulnerability in the web interface of the configuration software for TP-Link M7350 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface for configuring microprogramming software on TP-Link M7350 routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2022-7071 · Tionix · Tionix Virtual Security

Name of the Vulnerable Software and Affected Versions: TIONIX Virtual Security affected versions not specified Description: The issue is related to a lack of protection for service data in the web interface for remote administration of TIONIX Virtual Security, a virtualization information securit...

PT-2022-5297 · Cisco · Cisco Smart Software Manager On-Prem

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager On-Prem affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to elevate privileges on an affected system. This issue is d...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based distributed operating system. A denial-of-service vulnerability exists in the Huawei HarmonyOS DFX Deployment Stack module interface calls, which can be exploited by attackers to launch denial-of-service...

PT-2022-16203 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.6 and below Aruba ClearPass Policy Manager versions 6.9.11 and below Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remo...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

CVE-2022-36778

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

The vulnerability in the web interface of the Cisco Webex App, a software platform for collaborative work, allows a perpetrator to compromise data integrity.

The vulnerability of the Cisco Webex App’s web interface is related to errors in processing images of various symbols. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

CVE-2022-23690

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W arises from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W arises from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

The vulnerability of the REST API interface of the Apache Geode data management platform allows a hacker to execute arbitrary code.

The vulnerability of the REST API interface of the Apache Geode data management platform involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2022-23497 · Eclipse · Eclipse Tcf

Name of the Vulnerable Software and Affected Versions: JasMiner-X4-Server versions 20220621-090907 and below Description: The Eclipse TCF debug interface is open on port 1534, allowing unauthenticated attackers to gain root privileges on the affected device, access sensitive data, or execute...