CVE-2022-26591

FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request...

EUVD-2022-32596

Malicious code in bioql PyPI...

CVE-2022-28113

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie...

CVE-2022-28113

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie...

CVE-2022-28113

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie...

Code injection

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie...

CVE-2022-28113

Vulnerability summary: CVE-2022-28113 affects FANTEC GmbH MWiD25-DS Firmware v2.000.030. The issue is in the upload.csp component and allows attackers to write files and reset user passwords without a valid session cookie. Impact: potential unauthorized file writes and password resets; exploitati...

PT-2022-18818 · Fantec Gmbh · Fantec Mwid25-Ds Firmware

Name of the Vulnerable Software and Affected Versions: FANTEC GmbH MWiD25-DS Firmware version 2.000.030 Description: The issue allows attackers to write files and reset user passwords without having a valid session cookie. This is due to a problem in the upload.csp of the firmware. Recommendation...

FANTEC MWiD25-DS 安全漏洞

The FANTEC MWiD25-DS is a wireless extender from FANTEC Germany. A security vulnerability exists in the FANTEC MWiD25-DS that allows an attacker to write to a file and reset a user's password without a valid session cookie...

CVE-2022-26591

FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request...

Cross site request forgery (csrf)

FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request...

CVE-2022-26591

FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request...

CVE-2022-26591

Affected product: FANTEC GmbH MWiD25-DS firmware 2.000.030. Vulnerability: unauthenticated attackers can access and download arbitrary files via a crafted GET request. This is supported by multiple sources (Red Hat, NVD entries, CNNVD) describing the same issue. Impact (as stated): potential expo...

FANTEC MWiD25-DS 授权问题漏洞

The FANTEC MWiD25-DS is a wireless extender from FANTEC Germany. An authorization issue vulnerability exists in FANTEC MWiD25-DS Firmware version 2.000.030, which can be exploited by an attacker to access and download arbitrary files via a specially crafted GET request...

PT-2022-17945 · Fantec Gmbh · Mwid25-Ds

Name of the Vulnerable Software and Affected Versions: FANTEC GmbH MWiD25-DS Firmware version 2.000.030 Description: The issue allows unauthenticated attackers to access and download arbitrary files via a crafted GET request. Recommendations: For FANTEC GmbH MWiD25-DS Firmware version 2.000.030, ...

Exploit for Reliance on Cookies without Validation and Integrity Checking in Fantec Mwid25-Ds_Firmware

PoC exploit for CVE-2022-28113, an unauthenticated remote code e...