172 matches found
AXIS License Plate Verifier Security Vulnerability
AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Suitable for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and earlier versions,...
PT-2023-7486 · Axis · Axis License Plate Verifier
Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue concerns the "search.cgi" file in the AXIS License Plate Verifier, where user-provided input is not properly sanitized, allowing for SQL injections. This could...
PT-2023-7485 · Axis · Axis License Plate Verifier
Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue arises from insufficient input validation in the "api.cgi" file of the License Plate Verifier software, allowing for arbitrary code execution. This can be...
PT-2023-18179 · Axis · Axis License Plate Verifier
Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue concerns unsanitized user-provided input on the "search.cgi" endpoint, allowing for SQL injections. Recommendations: At the moment, there is no information abo...
Cross Site Scripting (XSS)
@udecode/plate-link is vulnerable to Cross Site Scripting XSS. The vulnerability exists because it does not properly validate url's, which allows an attacker to inject malicious JavaScript script into the system...
@antv/narrative-text-editor (>=0.1.1 <=0.2.20), @archbee/utils (>=1.0.103 <=1.1.41) +37 more potentially affected by CVE-2023-34245 via @udecode/plate-link (>=10.0.0 <=1.1.6)
@udecode/plate-link NPM version =10.0.0, =0.1.1, =1.0.103, =1.3.0, =2.19.0, =0.1.49, =1.0.99, =9.6.2, =0.0.6-alpha.0, =2.0.0-beta.9, =2.0.0-alpha.0, =1.0.0, =1.0.0, =1.2.14 and more Source cves: CVE-2023-34245 Source advisory: OSV:GHSA-4882-HXPR-HRVM...
CVE-2023-34245
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...
CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...
CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...
CVE-2023-34245
The CVE-2023-34245 issue affects @udecode/plate-link, the link handler for the Plate editor (Slate/React). Affected versions allow JavaScript: URLs to be rendered into the DOM due to inadequate URL sanitization, enabling potential XSS through links inserted by various means. The patch in plate-li...
Plate 跨站脚本漏洞
Plate is an open source plugin system for Udecode that makes it easier to build full-featured editors. Plate suffers from a cross-site scripting vulnerability that stems from the link plugin and link UI component not cleaning up URLs to prevent the use of the javascript: header...
license-plate-look-up.net Cross Site Scripting vulnerability OBB-2825438
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The Danger of License Plate Readers in Post-Roe America
Known as ALPRs, this surveillance tech is pervasive across the US—and could soon be used by police and anti-abortion groups alike...
Ltd. T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera with Weak Password Vulnerability
Ltd. is China's leading R&D and manufacturer of intelligent terminal equipment for intelligent parking. Shenzhen Qianhai Huaxia Zhixin Data Technology Co., Ltd T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera has a weak password vulnerability, which can be...
National Surveillance Camera Rollout Roils Privacy Activists
While controversy over the potential overreach of neighborhood and law-enforcement video surveillance has focused mainly on Ring, an Atlanta-based startup has quietly rolled out its own network of smart surveillance cameras across the country that is again raising questions of privacy and the ire...
There Are Spying Eyes Everywhere—and Now They Share a Brain
Security cameras. License plate readers. Smartphone trackers. Drones. We’re being watched 24/7. What happens when all those data streams fuse into one?...
Selea Targa IP OCR-ANPR Camera - CSRF Add Admin
Exploit Title: Selea Targa IP OCR-ANPR Camera - CSRF Add Admin Date: 07.11.2020 Exploit Author: LiquidWorm Vendor Homepage: https://www.selea.com Selea Targa IP OCR-ANPR Camera CSRF Add Admin Exploit Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: Model: iZero Targa...
Unauthorized Access Vulnerability in Jetwing's Intelligent Terminal Operation Platform
JetWise Intelligent Terminal Operation Platform is a full-featured intelligent recognition tool for license plate images. Unauthorized access vulnerability exists in JWT Intelligent Terminal Operation Platform, which can be exploited by attackers to obtain sensitive information...
File Upload Vulnerability in Smart Garage License Plate Recognition Machines
Shenzhen Fuji Intelligent System Co., Ltd. is a supplier of intelligent entrance/exit management equipment and a professional supplier of intelligent eco-environmental solutions. There is a file upload vulnerability in the Smart Parking License Plate Recognition Machine, which can be exploited by...