PT-2023-19965 · Seiko Solutions · Seiko Solutions Skybridge Mb-A200 +2

Name of the Vulnerable Software and Affected Versions: Seiko Solutions SkyBridge MB-A200 versions 01.00.05 and earlier Seiko Solutions SkyBridge BASIC MB-A130 versions 1.4.1 and earlier Seiko Solutions SkySpider MB-R210 versions 1.01.00 and earlier Description: The issue is related to the use of...

Seiko Solutions SkyBridge 访问控制错误漏洞

Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge. A remote attacker could exploit the vulnerability to obtain or change product setting information or perform certain critical functions, such as rebooting th...

CVE-2023-25184

CVE-2023-25184 affects Seiko Solutions SkyBridge and SkySpider series. A remote unauthenticated attacker could decrypt the WebUI password due to use of weak credentials. Affected products/versions: SkyBridge MB-A200 firmware 01.00.05 and earlier; SkyBridge BASIC MB-A130 firmware 1.4.1 and earlier...

CVE-2023-22441

Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions without authentication, e.g., rebooting the product. Affected products and versio...

Seiko Solutions SkyBridge 安全漏洞

Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge MB-A200 firmware version 01.00.05 and earlier versions, which stems from improper access control...

CVE-2023-22441

CVE-2023-22441 affects Seiko Solutions SkyBridge MB‑A200 (firmware 01.00.05 and earlier) and SkyBridge BASIC MB‑A130 (firmware 1.4.1 and earlier). The root cause is missing authentication for critical function (CWE-306), enabling a remote attacker to obtain or alter product settings or perform cr...

How to Set Up a Threat Hunting and Threat Intelligence Program

Threat hunting is an essential component of your cybersecurity strategy. Whether you're getting started or in an advanced state, this article will help you ramp up your threat intelligence program. What is Threat Hunting? The cybersecurity industry is shifting from a reactive to a proactive...

CVE-2023-22683

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

CVE-2023-22683 WordPress Clio Grow Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

CVE-2023-22683 WordPress Clio Grow Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

CVE-2023-22683

CVE-2023-22683 affects the WordPress Clio Grow plugin (versions

Cross site scripting

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

CVE-2023-29836

Exelysis EUCS v1.0 has a cross-site scripting vulnerability that can allow a remote attacker to gain privileges via the eucsAdmin login URL path. Related entries CVE-2023-29836 and CVE-2023-29837 describe the same issue. Some sources (PT-2023-22437) provide temporary mitigations (restrict access ...

Exelysis Unified Communication Solutions 跨站脚本漏洞

Exelysis Unified Communication Solutions EUCS is a unified communication solution from Exelysis. A security vulnerability exists in Exelysis Unified Communication Solutions EUCS version 1.0. An attacker could exploit the vulnerability to execute arbitrary code via the Username parameter of the...

CVE-2023-23753 Extension - vi-solutions - Visforms Base Package for Joomla 3

The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query. An attacker can interact with the database and could be able to read, modify and delete data on it...

Security Bulletin: IBM i Access Client Solutions is vulnerable to an attacker obtaining sensitive information due to Java string processing in IBM Toolbox for Java (CVE-2022-43928)

Summary IBM i Access Client Solutions uses the IBM Toolbox for Java to access IBM i interfaces. IBM Toolbox for Java could allow sensitive information stored as Java strings to be obtained by an attacker as described in the vulnerability details section. IBM has addressed this CVE by providing a...

CVE-2023-30620 Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb

mindsdb is a Machine Learning platform to help developers build AI solutions. In affected versions an unsafe extraction is being performed using tarfile.extractall from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. Sometimes, the...