4247 matches found
Sielco Radio Link 2.06 Cross-Site Request Forgery (Add Admin)
Summary Sielco develops and produces radio links for all transmission and reception needs, thanks to innovative units and excellent performances, accompanied by a high reliability and low consumption. Description The application interface allows users to perform certain actions via HTTP requests...
Sielco Analog FM Transmitter 2.12 'id' Cookie Brute Force Session Hijacking
Summary Sielco designs and produces FM radio transmitters for professional broadcasting. The in-house laboratory develops standard and customised solutions to meet all needs. Whether digital or analogue, each product is studied to ensure reliability, resistance over time and a high standard of...
Sielco Analog FM Transmitter 2.12 Cross-Site Request Forgery
Summary Sielco designs and produces FM radio transmitters for professional broadcasting. The in-house laboratory develops standard and customised solutions to meet all needs. Whether digital or analogue, each product is studied to ensure reliability, resistance over time and a high standard of...
Sielco Analog FM Transmitter 2.12 Remote Privilege Escalation
Summary Sielco designs and produces FM radio transmitters for professional broadcasting. The in-house laboratory develops standard and customised solutions to meet all needs. Whether digital or analogue, each product is studied to ensure reliability, resistance over time and a high standard of...
About the security content of Studio Display Firmware Update 16.4
About the security content of Studio Display Firmware Update 16.4 This document describes the security content of Studio Display Firmware Update 16.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...
CVE-2023-26802
An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...
Authentication flaw
An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! information disclosure - CVE-2023-23752 exploit Explo...
CVE-2023-26802
An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...
PT-2023-20802 · Digital China Networks · Dcbi-Netlog-Lab
Name of the Vulnerable Software and Affected Versions: DCBI-Netlog-LAB version 1.0 Description: The issue allows attackers to bypass authentication and execute arbitrary commands via a crafted request to the "/network config/nsg masq.cgi" API endpoint. This is due to a problem in the component...
Digital China Networks DCBI-Netlog-LAB 路径遍历漏洞
Digital China Networks DCBI-Netlog-LAB DCN DCBI-Netlog-LAB is an Internet Behavior Logging System from Digital China Networks DCN. A security vulnerability exists in Digital China Networks DCBI-Netlog-LAB v1.0. An attacker could exploit the vulnerability to bypass authentication and execute...
CVE-2023-26802
An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...
Online Diagnostic Lab Management System v1.0 - Remote Code Execution (RCE) (Unauthenticated)
Exploit Title: Online Diagnostic Lab Management System v1.0 - Remote Code Execution RCE Unauthenticated Google Dork: N/A Date: 2022-9-23 Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage:...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! information disclosure - CVE-2023-23752 exploit Joo...
GitHub Security Lab: [ruby]: ZipSlip/TarSlip vulnerability detection
Vulnerability description not provided...
New Cyber Platform Lab 1 Decodes Dark Web Data to Uncover Hidden Supply Chain Breaches
2022 was the year when inflation hit world economies, except in one corner of the global marketplace – stolen data. Ransomware payments fell by over 40% in 2022 compared to 2021. More organisations chose not to pay ransom demands, according to findings by blockchain firm Chainalysis. Nonetheless,...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-102.9.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
GitHub Security Lab: [Python] Unsafe unpacking using shutil.unpack_archive() query and tests
Vulnerability description not provided...
