4578 matches found
Binary Vulnerability in Magic R365 of Xinhua San Technologies Limited (CNVD-2023-63799)
The Magic R365 Router is a wireless router manufactured by Xinhua San Technology Company Limited H3C. A binary vulnerability exists in the H3C Magic R365 that can be exploited by an attacker to gain control of the server...
Number withdrawal
Tiny Technologies TinyMCE is a rich text editor from Tiny Technologies, USA. This CVE number has been withdrawn...
Key Network Questions
I wrote this on 7 December 2018 but never published it until today. The following are the "key network questions" which "would answer many key questions about a network, without having to access a third party log repository. This data is derived from mining Zeek log data as it is created, rather...
PT-2023-25021 · Microworld Technologies · Escan Management Console
Name of the Vulnerable Software and Affected Versions: Microworld Technologies eScan Management console version 14.0.1400.2281 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary JavaScript code via a vulnerable delete file parameter. This enables the attacker ...
HCL Technologies BigFix Insights Security Vulnerabilities
HCL Technologies BigFix Insights is HCL Technologies' accelerates risk identification and decision making through elevated views of endpoint queue data, rich reporting, and integration with existing business intelligence tools. A security vulnerability exists in HCL Technologies BigFix Insights...
HCL Technologies BigFix OSD security vulnerability
HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. It is used for the deployment of operating systems. A security vulnerability exists in HCL BigFix OSD Bare Metal Server version 311.12 and earlier. An attacker exploits the vulnerability to use a...
HCL Technologies BigFix OSD encryption vulnerability
HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. for operating system deployment. A security vulnerability exists in the HCL Technologies BigFix OSD that stems from the server using an insecure encryption algorithm...
Cross site scripting
Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...
PT-2023-21138 · Teplitsa Of Social Technologies · Leyka Plugin
Name of the Vulnerable Software and Affected Versions: Teplitsa of social technologies Leyka plugin versions = 3.29.2 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected device...
CVE-2023-24420
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
CVE-2023-24420
CVE-2023-24420 affects the WordPress plugin Admin side data storage for Contact Form 7 (<= 1.1.1). The vulnerability is unauthenticated, allows reflected XSS in the admin-side data storage feature. Root cause is an unauthenticated input handling flaw leading to cross-site scripting. Affected p...
CVE-2023-24420 WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
Exploit for Path Traversal in Thruk
Thruk-CVE-2023-34096 Thruk Monitoring Web Interface versions...
CVE-2023-33553
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...
CVE-2023-33553
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...
Authentication flaw
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...
CVE-2023-33553
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...
Hitron Technologies CODA-5310 Remote Command Execution Vulnerability
Hitron Technologies CODA-5310 is a wireless router. The Hitron Technologies CODA-5310 suffers from a remote command execution vulnerability that can be exploited by an attacker to perform a command injection attack using the administration page to execute arbitrary system commands, manipulate the...