Logic Flaw Vulnerability in Wave's Government Services Platform

Wave government service platform is a tooling platform product for administrative approval informatization. There is a logic flaw vulnerability in the Wave Government Service Platform that can be exploited by an attacker to modify the password of any account and obtain account-related privileges...

CVE-2018-7793

A Credential Management vulnerability exists in FoxView HMI SCADA All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 CCS 9.4 and FoxView 10.5. which could cause unauthorized disclosure, modification, or disruption in service when the password is...

CVE-2018-7793

A credential management vulnerability exists in FoxView HMI SCADA across Foxboro DCS, Foxboro Evo, and IA Series. Affects versions prior to CCS 9.4 (DCS Core Services) and FoxView 10.5. The issue could allow unauthorized disclosure, modification, or disruption in service when the password is modi...

SQL Injection Vulnerability in Dreamline Enterprise Website Building System

Dream line business enterprise station building system is to use PHP + MySQL way to run the open source station building system. Dreamline enterprise website builder system SQL injection vulnerability, attackers can use the vulnerability to modify the administrator account password...

Logic Design Vulnerability in LeShang Mall System v2.2.0

LeShang mall system is a based on THINKPHP5.0 as the core development of a free open source professional mall system. LeShang Mall System v2.2.0 has a logical design vulnerability. Attackers can overstep their authority to modify other users' personal information, including user passwords, by...

CVE-2018-7951

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to...

CVE-2018-7950: Improper Control of Generation of Code

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to...

CVE-2018-7951: Improper Control of Generation of Code

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to...

CVE-2018-7949: Improper Authentication

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users ...

Design/Logic Flaw

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7904

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7902

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

Design/Logic Flaw

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903

CVE-2018-7903 affects Huawei 1288H V5 and 2288H V5 with software V100R005C00. The vulnerability arises from insufficient input validation in the iBMC JSON handling, allowing an authenticated, remote attacker to perform a JSON injection to change the administrator password and potentially gain man...

CVE-2018-7902: Undefined Security Weakness

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7903: Undefined Security Weakness

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-7904: Undefined Security Weakness

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management...

CVE-2018-8898

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...

PT-2018-3906 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version V100R001B012 Description: A flaw in the authentication mechanism of the Login Panel allows unauthenticated attackers to perform arbitrary modification to passwords and configurations while an administrator is logged in...