CVE-2024-7460 OSWAPP Warehouse Inventory System change_password.php cross-site request forgery

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /changepassword.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2024-7460 OSWAPP Warehouse Inventory System change_password.php cross-site request forgery

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /changepassword.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2024-7459 OSWAPP Warehouse Inventory System edit_account.php cross-site request forgery

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /editaccount.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-7459 OSWAPP Warehouse Inventory System edit_account.php cross-site request forgery

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /editaccount.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-7459

The CVE-2024-7459 entry concerns OSWAPP Warehouse Inventory System versions 1.0–2.0. The affected area is an unknown function in /edit_account.php, with the issue described as cross-site request forgery (CSRF). Documents consistently indicate the vulnerability can be exploited remotely and that t...

Warehouse Inventory System 跨站请求伪造漏洞

Warehouse Inventory System is a warehouse inventory management system for the OSWAPP community. A cross-site request forgery vulnerability exists in Warehouse Inventory System versions 1.0 and 2.0, which stems from the /changepassword.php file containing a cross-site request forgery vulnerability...

Warehouse Inventory System 跨站请求伪造漏洞

Warehouse Inventory System is a warehouse inventory management system for the OSWAPP community. A cross-site request forgery vulnerability exists in Warehouse Inventory System versions 1.0 and 2.0, which can be exploited by an attacker to cause cross-site request forgery...

CVE-2024-42348

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 and 1.6.0-beta.1395...

CVE-2024-42348

CVE-2024-42348 concerns FOGServer in the FOGProject suite. The vulnerability in version 1.5.10.41.2 allows leakage of AD usernames and passwords when registering a computer, affecting confidentiality. The issue is fixed in 1.5.10.41.3 and in 1.6.0-beta.1395. There are no details about exploit vec...

Dell Inventory Collector Path Traversal Vulnerability

Dell Inventory Collector is a driver from Dell USA. A path traversal vulnerability exists in Dell Inventory Collector versions prior to 12.3.0.6, which can be exploited by a locally authenticated attacker to execute arbitrary code on the system...

CVE-2024-41108 FOG Sensitive Information Disclosure

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improper access control since only the host's mac address is required to obtain the configuration information. This data can only be retrieved if a task is pending on that...

CVE-2024-41108 FOG Sensitive Information Disclosure

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improper access control since only the host's mac address is required to obtain the configuration information. This data can only be retrieved if a task is pending on that...

CVE-2024-41108

CVE-2024-41108 (FOG) affects the hostinfo page in FOG, where missing/improper access control allows configuration data to be retrieved using only the host’s MAC address, but only if a task is pending on that host; otherwise an error "Invalid tasking!" is returned. The domain password in the hosti...

CVE-2024-40645

CVE-2024-40645 concerns the FOGProject cloning/imaging/rescue suite. The vulnerability stems from an improperly restricted file upload in the Rebranding feature: authenticated users can bypass checks (client banner image must be 650x120, but no extension checks) and abuse the upload to execute ar...

CVE-2024-37129

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system...

CVE-2024-37129

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system...

CVE-2024-37129

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system...

CVE-2024-37129

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system...

CVE-2024-37129

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system...

CVE-2024-37129

Dell Inventory Collector exposes a Path Traversal vulnerability in versions prior to 12.3.0.6. A locally authenticated attacker could exploit an inadequate directory-path restriction to achieve arbitrary code execution on the affected host. Affected component is the Dell Inventory Collector (Wind...