19 matches found
CVE-2024-34328
CVE-2024-34328 호스트 헤더를 통한 오픈 리디렉션 📝 개요 취약점 제목 : 호스트 헤더를 통한 오픈 리디렉션 제품 : Sielox AnyWare 영향을 받는 버전 : 2.1.2 CVE ID : CVE-2024-34328 심각도 : 중간 공격 벡터 : 원격 영향 : 오픈 리디렉션 / 피싱 🧨 설명 공격자는 제어하는 악성 도메인을 가리키도록 수정된Host 헤더가 포함된 URL을 조작할 수 있습니다. 사용자가 악성 링크를 클릭하면 공격자의 도메인으로 리디렉션되어 피싱 , 자격 증명 도용 또는 악성코드 유포 로 이어질 수...
CVE-2024-34327
CVE-2024-34327 SQL-Injection-Schwachstellenprüfer Dieses Skript V-24-02-001SQLiCheck.py ist ein Proof-of-Concept PoC -Tool, um das Vorhandensein einer zeitbasierten blinden SQL-Injection-Schwachstelle zu überprüfen, die den Endpunkt password-reset-token.php betrifft, identifiziert als...
CVE-2024-34328
An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...
EUVD-2024-54841
Malicious code in bioql PyPI...
EUVD-2024-54842
Malicious code in bioql PyPI...
CVE-2024-34327
Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form...
CVE-2024-34327
Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form...
CVE-2024-34327
Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form...
CVE-2024-34328
An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...
CVE-2024-34328
Sielox AnyWare v2.1.2 is affected by an open redirect vulnerability that can enable a man-in-the-middle attack via a crafted URL. The condition is a redirect flaw in the application’s flow, not necessarily authenticated user actions, leading to potential interception or manipulation of traffic. T...
Sielox AnyWare 安全漏洞
Sielox AnyWare is an access control system from Sielox USA. A security vulnerability exists in Sielox AnyWare version v2.1.2, which stems from an unvalidated email address field in the password reset form, which could lead to SQL injection...
CVE-2024-34327
Sielox AnyWare v2.1.2 is affected by CVE-2024-34327, a SQL injection through the email field in the password-reset form. The connected exploit document provides a time-based blind PoC targeting the POST endpoint /auth/password-reset-token.php, using the email parameter and a SLEEP() payload to de...
CVE-2024-34328
An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...
PT-2025-31557 · Sielox · Sielox Anyware
Name of the Vulnerable Software and Affected Versions: Sielox AnyWare version 2.1.2 Description: The software contains a SQL injection issue via the email address field of the password reset form. Recommendations: Apply input validation and sanitization to the email address field in the password...
CVE-2024-34327
Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form...
Sielox AnyWare 安全漏洞
Sielox AnyWare is an access control system from Sielox USA. A security vulnerability exists in Sielox AnyWare version v2.1.2, which stems from an open redirect and could lead to a man-in-the-middle attack...
CVE-2024-34328
An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL...
