Lucene search
+L

26 matches found

OSV
OSV
•added 2022/11/29 9:15 p.m.•15 views

CVE-2022-3995

The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient validation of the user-controlled key on the lockunlockterawallet AJAX action. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00604EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/11/29 9:15 p.m.•5 views

CVE-2022-3995

The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient validation of the user-controlled key on the lockunlockterawallet AJAX action. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00604EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/08/18 12:00 a.m.•13 views

The vulnerability of the compile_lock_unlock() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compilelockunlock function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.5AI score0.00569EPSS
SaveExploits1References8Affected Software3
OSV
OSV
•added 2019/05/31 12:29 p.m.•15 views

CVE-2019-12500

The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking...

6.5CVSS6.7AI score0.0084EPSS
SaveExploits1References1
OSV
OSV
•added 2017/12/10 1:29 a.m.•13 views

CVE-2017-16241

Incorrect access control in AMAG Symmetry Door Edge Network Controllers EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and STD App 2461 01.00 enables remote attackers to execute door controller commands e.g., lock, unlock, add ID card value by sending...

7.5CVSS5.9AI score0.01997EPSS
SaveExploits1References3
Metasploit
Metasploit
•added 2013/01/02 12:00 a.m.•421 views

Windows Service for User (S4U) Scheduled Task Persistence - Logon Trigger

Creates a scheduled task that will run using service-for-user S4U. This allows the scheduled task to run even as an unprivileged user that is not logged into the device. This will result in lower security context, allowing access to local resources only. The module requires 'Logon as a batch job'...

5.8AI score
SaveExploits0
Rows per page
Query Builder