CVE-2022-22828

CVE-2022-22828 Synametrics - SynaMan 버전 4.9 요약 Viden Labs는 Synametrics SynaMan에서 안전하지 않은 직접 객체 참조IDOR 취약점을 발견했습니다. 이 취약점은 4.9 및 이전 버전에 존재합니다. 이 취약점은 이후 5.0 버전에서 패치되었습니다. "안전하지 않은 직접 객체 참조IDOR는 애플리케이션이 사용자 제공 입력을 사용하여 객체에 직접 접근할 때 발생하는 액세스 제어 취약점 유형입니다." -...

EUVD-2012-2555

Malware in sbrugna...

EUVD-2015-3222

Malware in sbrugna...

EUVD-2018-2833

Malware in sbrugna...

EUVD-2018-2883

Malware in sbrugna...

EUVD-2015-3221

Malware in sbrugna...

EUVD-2022-27966

Malicious code in bioql PyPI...

CVE-2022-22828

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2022-22828

Synametrics SynaMan prior to version 5.0 is affected by CVE-2022-22828 due to an insecure direct object reference in the file-download URL. An attacker can access unshared files by modifying the base64-encoded filename string, enabling remote file disclosure. The vulnerability is exposed via the ...

CVE-2022-22828

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2022-22828: Authorization Bypass Through User-Controlled Key

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2015-3140

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

CVE-2015-3140

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

CVE-2015-3140

CVE-2015-3140 affects Synametrics products: SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567, vulnerable to cross-site request forgery (CSRF). Root cause: CSRF in multiple web app components allowing attacker to trigger actions in an authenticated use...

CVE-2015-3140: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...

CVE-2018-10814

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

CVE-2018-10763

Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...

Default credentials

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

CVE-2018-10814

SynaMan 4.0 build 1488 is affected by a vulnerability where SMTP credentials are stored in plaintext, enabling information disclosure. The root cause is cleartext password storage in the configuration file (AppConfig.xml), which local users can read, leading to potential compromise of the SMTP ac...