Lucene search
+L

3180 matches found

zdt
zdt
added 2024/01/31 12:00 a.m.246 views

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vulnerability

TELSAT marKoni FM Transmitter version 1.9.5 has a hidden super administrative account factory that has the hardcoded password inokram25 that allows full access to the web management interface configuration. TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vendor: TELSAT Srl Product web page:...

7.5AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2024/01/31 12:00 a.m.334 views

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account

Summary Professional FM transmitters. Description The transmitter has a hidden super administrative account 'factory' that has the hardcoded password 'inokram25' that allows full access to the web management interface configuration. The factory account is not visible in the users page of the...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2024/01/30 1:25 p.m.14 views

curl: information disclosure by exploiting a mixed case flaw

A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...

6.5CVSS6.7AI score0.01685EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/01/30 12:00 a.m.43 views

RHEL 8 : curl (RHSA-2024:0585)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0585 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

6.5CVSS6.7AI score0.02211EPSS
SaveExploits2References8
OpenVAS
OpenVAS
added 2024/01/29 12:00 a.m.35 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1117)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.01685EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/01/29 12:00 a.m.31 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1102)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.01685EPSS
SaveExploits1References2
OSV
OSV
added 2024/01/28 12:15 p.m.7 views

DEBIAN-CVE-2024-0841

A null pointer dereference flaw was found in the hugetlbfsfillsuper function in the Linux kernel hugetlbfs HugeTLB pages functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system...

7.8CVSS6.2AI score0.00298EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/01/26 12:00 a.m.42 views

EulerOS 2.0 SP11 : curl (EulerOS-SA-2024-1102)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This flaw allows a malicious HTTP server to set 'super cookies' in curl that are then passed back to more origins than what is otherwise allowed o...

6.5CVSS6.4AI score0.01685EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/26 12:00 a.m.38 views

EulerOS 2.0 SP11 : curl (EulerOS-SA-2024-1117)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This flaw allows a malicious HTTP server to set 'super cookies' in curl that are then passed back to more origins than what is otherwise allowed o...

6.5CVSS6.4AI score0.01685EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2024/01/25 11:15 a.m.10 views

curl: information disclosure by exploiting a mixed case flaw

A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...

6.5CVSS6.7AI score0.01685EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2024/01/25 9:01 a.m.13 views

curl: information disclosure by exploiting a mixed case flaw

A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...

6.5CVSS6.7AI score0.01685EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2024/01/25 8:12 a.m.14 views

curl: information disclosure by exploiting a mixed case flaw

A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set "super cookies" in curl that are passed back to more origins than what is otherwise allowed or possible...

6.5CVSS6.7AI score0.01685EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:00 a.m.35 views

RHEL 9 : curl (RHSA-2024:0452)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0452 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, a...

6.5CVSS6.5AI score0.01685EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:00 a.m.44 views

RHEL 9 : curl (RHSA-2024:0434)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0434 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, a...

6.5CVSS6.5AI score0.01685EPSS
SaveExploits1References5
OSV
OSV
added 2024/01/24 12:15 a.m.19 views

PYSEC-2024-128

Label Studio, an open source data labeling tool had a remote import feature allowed users to import data from a remote web source, that was downloaded and could be viewed on the website. Prior to version 1.10.1, this feature could had been abused to download a HTML file that executed malicious...

6.1CVSS6.3AI score0.00592EPSS
SaveExploits0References4
OSV
OSV
added 2024/01/23 11:15 p.m.37 views

CVE-2024-23633 Label Studio XSS Vulnerability on Data Import

Label Studio, an open source data labeling tool had a remote import feature allowed users to import data from a remote web source, that was downloaded and could be viewed on the website. Prior to version 1.10.1, this feature could had been abused to download a HTML file that executed malicious...

4.7CVSS6.3AI score
SaveExploits0References6
Prion
Prion
added 2024/01/23 11:15 p.m.42 views

Cross site scripting

Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. Executing arbitrary...

4.9CVSS5.6AI score0.01448EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2024/01/16 4:15 p.m.34 views

CVE-2022-0402

The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bobczypanstwasprawazostalarozwiazana parameter before outputting it back in an attribute via the superlanguageswitcher AJAX action, leading to a Reflected Cross-Site Scripting. The action is also lacking...

6.1CVSS6.3AI score0.00313EPSS
SaveExploits2References2
Prion
Prion
added 2024/01/16 4:15 p.m.29 views

Cross site scripting

The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bobczypanstwasprawazostalarozwiazana parameter before outputting it back in an attribute via the superlanguageswitcher AJAX action, leading to a Reflected Cross-Site Scripting. The action is also lacking...

5.8CVSS6.9AI score0.00313EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2024/01/16 3:51 p.m.77 views

CVE-2022-0402

CVE-2022-0402 affects the WordPress plugin Super Forms – Drag & Drop Form Builder prior to 6.0.4. The vulnerability arises because the parameter named in the description (bob_czy_panstwa_sprawa_zostala_rozwiazana) is not escaped before being echoed back in an attribute via the super_language_swit...

6.1CVSS6.2AI score0.00313EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder