422 matches found
Default credentials
Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 -D/-K/-S/-DK/-DKS/-M/-W firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communicati...
CVE-2023-45194
The CVE-2023-45194 vulnerability affects MR-GM2 firmware versions 3.00.03 and earlier and MR-GM3 firmware versions 1.03.45 and earlier, arising from default credentials. An adjacent, unauthenticated attacker could intercept wireless LAN traffic when the device uses the factory-default pre-shared ...
CVE-2023-45194
Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 -D/-K/-S/-DK/-DKS/-M/-W firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communicati...
CVE-2023-45194
Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 -D/-K/-S/-DK/-DKS/-M/-W firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communicati...
Micro Research MR-GM Series Trust Management Issues Vulnerabilities
The Micro Research MR-GM Series is a line of USB-based mobile data communication cards from Micro Research. A security vulnerability exists in Micro Research MR-GM Series version 3.00.03 and earlier, which stems from a Use of Default Credentials vulnerability that could allow an unauthenticated...
mr-fogger.com Cross Site Scripting vulnerability OBB-3644134
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Denial Of Service (DoS)
gitlab is vulnerable to Denial Of Service DoS. The vulnerability exists due to the infinite loop when an authenticated user with specific rights access a MR having source and target branch pointing to each other, leading to crash the application...
CVE-2023-3102 Insertion of Sensitive Information Into Sent Data in GitLab
A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR...
CVE-2023-22672
Cross-Site Request Forgery CSRF vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin = 4.1.2 versions...
CVE-2023-36144
An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration...
CVE-2023-36144
An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration...
CVE-2023-36144
Intelbras Switch SG 2404 MR (firmware 1.00.54) is affected by an authentication bypass that lets an unauthenticated attacker download the device backup file, exposing configuration data (credentials, network settings). The vulnerability is documented across multiple sources (CVE-2023-36144) with ...
GitLab 16.0 < 16.0.6 / 16.1 < 16.1.1 (CVE-2023-3102)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to title...
mr-tuote.fi Cross Site Scripting vulnerability OBB-3420859
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mr-tuote.fi Cross Site Scripting vulnerability OBB-3388578
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
FLEX 1080 < 1085 Web 1.6.0 - Denial of Service
Exploit Title: FLEX 1080 1085 Web 1.6.0 - Denial of Service Date: 2023-05-06 Exploit Author: Mr Empy Vendor Homepage: https://www.tem.ind.br/ Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94 Version: 1.6.0 Tested on: Android CVE ID: CVE-2022-2591 !/usr/bin/env python3 import request...
CVE-2023-25797
Auth. Stored Cross-Site Scripting XSS vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin = 4.1.2 versions...
CVE-2023-1167
Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...
