7580 matches found
ASUSTOR Data Master å®å Øę¼ę“
ASUSTOR Data Master is a proprietary operating system on ASUSTOR NAS from ASUS, China, with a tablet-like graphical interface comparable to a zero learning curve, making it easy to get started. A security vulnerability exists in ASUSTOR Data Master ADM versions 4.0 through 4.2, which stems from a...
CVE-2023-29733
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...
CVE-2023-29733
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...
Design/Logic Flaw
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...
CVE-2023-1524
The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files. Upon validation, a master key is generated and exposed to the user, which may be used to download any password-protected file on the server, allowing a user to download any fil...
Default credentials
The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files. Upon validation, a master key is generated and exposed to the user, which may be used to download any password-protected file on the server, allowing a user to download any fil...
PT-2023-17052 Ā· WordPress Ā· Download Manager
Name of the Vulnerable Software and Affected Versions: Download Manager WordPress plugin versions prior to 3.2.71 Description: The issue concerns inadequate password validation for password-protected files. When a password is validated, a master key is generated and exposed to the user. This mast...
PT-2023-22384 Ā· Unknown Ā· Lock Master
Name of the Vulnerable Software and Affected Versions: The Lock Master app version 2.2.4 Description: The issue allows unauthorized apps to modify the values in the SharedPreference files of the Lock Master app. These files hold data that affects many app functions. Malicious modifications by...
DUALSPACE Lock Master å®å Øę¼ę“
DUALSPACE Lock Master is a smart and secure Android app lock from DUALSPACE. A security vulnerability exists in DUALSPACE Lock Master version 2.2.4 that stems from allowing unauthorized apps to modify values in their SharedPreference files, which contain data that affects the functionality of man...
CVE-2023-29733
The CVE-2023-29733 entry concerns the Lock Master app (Android) version 2.2.4. The vulnerability enables unauthorized apps to modify values in the appās SharedPreference storage, which holds data that governs many functions. This can lead to security issues such as functionality manipulation and ...
CVE-2023-29733
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...
CVE-2023-29733
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...
CVE-2023-2954
Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...
PT-2023-22305 Ā· Unknown Ā· Djangoblog
Name of the Vulnerable Software and Affected Versions: djangoblog versions prior to master Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository liangliangyy/djangoblog. Recommendations: For versions prior to master, update to the master...
CVE-2023-2954 Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog
Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...
Matrix Synapse č¾å „éŖčÆéčÆÆę¼ę“
Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the UK. A security vulnerability exists in Matrix Synapse that originates from the fact that a malicious user on Synapse master server X who is authorized to create certain state events can disable outbound...
Matrix Synapse äæ”ęÆę³é²ę¼ę“
Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the UK. A security vulnerability exists in Matrix Synapse that stems from the Synapse master server answering authorization event queries not adequately checking whether the requesting server should be able ...
Exploitable and unpatched KeePass vulnerability: everything you need to know
Detect and mitigate CVE-2023-32784, a vulnerability in KeePass which allows the extraction of the master password in cleartext from the application's memory...
KeePass Exploit Allows Attackers to Recover Master Passwords from Memory
A proof-of-concept PoC has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux,...
KeePass Exploit Allows Attackers to Recover Master Passwords from Memory
A proof-of-concept PoC has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux,...