CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

Masa CMS Default Credentials

The scanner successfully authenticated on the Masa CMS web application by using predictable credentials on its login form. No source data...

Masa CMS < 7.2.5 / 7.3.x < 7.3.10 Authentication Bypass

Masa CMS versions prior to 7.2.5 and 7.3.x 7.3.10 suffers from an authentication bypass vulnerability via a specially forged request. No source data...

Masa CMS < 7.2.1 Path Traversal

Masa CMS versions prior to 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/. No source data...

Mura/Masa CMS SQL Injection

Mura and Masa CMS Open-source fork suffer from a SQL injection vulnerability on the JSON API. By crafting a specific HTTP request, a remote and unauthenticated attacker can exploit the vulnerability to gain access to the database and perform arbitrary operations. No source data...

The vulnerability of the Mura/Masa CMS system, related to the lack of measures taken to protect the SQL query structure, allows attackers to access the protected information.

The vulnerability of the Mura/Masa CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...

Exploit for CVE-2024-32640

And exploited SQL injection vulnerabilities in Mura/Masa C...

Exploit for CVE-2024-32640

Muraider - Automating the detection & Exploitation of CVE-2024...

VulnCheck KEV: CVE-2024-32640

Mura/Masa CMS is vulnerable to a SQL injection vulnerability...

PT-2024-4567

Name of the Vulnerable Software and Affected Versions: MASA CMS versions prior to 7.4.6 MASA CMS versions prior to 7.3.13 MASA CMS versions prior to 7.2.8 Description: MASA CMS, an Enterprise Content Management platform, contains a SQL injection vulnerability in the processAsyncObject method...

Masa Network Integrates with LayerZero to Power Its Cross-chain AI Data Network

By Waqas Masa Network’s AI Data Marketplace will be an interoperable network for the world’s personal data, launching across multiple blockchains from day one. This is a post from HackRead.com Read the original post: Masa Network Integrates with LayerZero to Power Its Cross-chain AI Data Network...

masa-admini.com Improper Access Control vulnerability OBB-3804825

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Play Store Highlights 'Independent Security Review' Badge for VPN Apps

Google is rolling out a new banner to highlight the "Independent security review" badge in the Play Store's Data safety section for Android VPN apps that have undergone a Mobile Application Security Assessment MASA audit. "We've launched this banner beginning with VPN apps due to the sensitive an...

CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

Authentication flaw

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

CVE-2022-47002

Masa CMS versions 7.2, 7.3, and 7.4-beta are vulnerable to an authentication bypass in the Remember Me function. A crafted web request can bypass login, potentially exposing sensitive data and allowing unauthorized administrative actions. The issue is labeled CRITICAL (CVSS v3.1: AV:N/AC:L/PR:N/U...

CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

PT-2023-15129 · Masacms · Masacms

Name of the Vulnerable Software and Affected Versions: Masa CMS versions 7.2 through 7.4-beta Description: A vulnerability in the Remember Me function of Masa CMS allows attackers to bypass authentication via a crafted web request. Recommendations: For versions 7.2 through 7.4-beta, consider...