253 matches found
WordPress plugin WP Sessions Time Monitoring Full Automatic Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2023-51387
Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a...
Design/Logic Flaw
Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue...
Design/Logic Flaw
Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a...
CVE-2023-51387 Expression Injection Vulnerability in Hertzbeat
Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a...
CVE-2023-51387
CVE-2023-51387 affects Hertzbeat before v1.4.1, where improper sanitization of alert expressions in the aviatorscript evaluation path allows a user with access to the alert define function to execute arbitrary commands on the Hertzbeat server. The root cause is input sanitization in alert express...
CVE-2022-39337 Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat
Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1.20 and prior have a permission bypass vulnerability. System authentication can be bypassed and invoke interfaces without authorization...
Hertzbeat Security Vulnerabilities
Hertzbeat is an open source real-time monitoring system from the dromara organization. A security vulnerability exists in Hertzbeat version 1.20 and earlier versions, which stems from the ability to bypass privilege authentication...
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data in memory, allowing an attacker to execute commands with local administrator privileges.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute code with local administrator privileges...
The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time arises from an incorrect limitation on the path name to the restricted access catalog. This allows a perpetrator to write to any file anywhere within the file system.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to write to any file anywhere within the file syst...
The vulnerability of the Delta Electronics InfraSuite Device Master software in real-time monitoring of devices, related to the use of dangerous methods or functions, allows a perpetrator to execute arbitrary codes.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the use of dangerous methods or functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted UDP packet...
What is a Cloud Native Application Protection Platform CNAPP ?
Revealing the Secrets of the Cloud-specific Application Safety Platform CSASP In the landscape of online safety, the notion of the Cloud-specific Application Safety Platform CSASP is something relatively unheard of, but rapidly gaining popularity. Intuitively from its name, CSASP is a system...
Make API Management Less Scary for Your Organization
While application development has evolved rapidly, the API management suites used to access these services remain a spooky reminder of a different era. Introducing new API management infrastructure with these legacy models still poses challenges for organizations as they modernize. Transitioning...
WordPress WP Sessions Time Monitoring Full Automatic Plugin < 1.0.6 is vulnerable to Cross Site Scripting (XSS)
Software WP Sessions Time Monitoring Full Automatic Type Plugin Vulnerable versions 1.0.6 Fixed in 1.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 61dc602b36d2 Credits Rafie...
The vulnerability of the Delta Electronics InfraSuite Device Master software in real-time monitoring of devices allows a hacker to exploit this vulnerability to increase their privileges.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the possibility of bypassing security measures. Exploiting this vulnerability allows a remote attacker to gain unauthorized access...
The vulnerability of the Device-Gateway service of the Delta Electronics InfraSuite Device Master software for real-time device monitoring allows a perpetrator to increase their privileges.
The vulnerability of the Device-Gateway service of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by utilizi...
The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to insufficient validation of input data, allows attackers to exploit their privileges.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring, due to deficiencies in access control, allows unauthorized access by attackers to configuration files.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to configuration files...
The vulnerability of the Delta Electronics InfraSuite Device Master software in real-time device monitoring, related to errors in code generation, allows a perpetrator to execute arbitrary codes.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by running Lua-based scripts...
The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary codes.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...