Kingspan TMS 300 CS 授权问题漏洞

Kingspan TMS 300 CS is a water tank management system from Kingspan. Kingspan TMS 300 CS has an authorization issue vulnerability that stems from its lack of adequate access control rules, which allows an attacker to view and modify application settings by accessing a specific Uniform Resource...

MAL-2022-221 Malicious code in @e-finance/e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699d70f7539e2ca2a7c611b3efdf3a3476cf035fcb60c860b581acb445e290fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-222 Malicious code in @e-finance/e-finance-tms-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d138592e7b0a8144ae81a749be39c4091cbb2b5f0a56f81bd5dd3e9b5e96795e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2639 Malicious code in e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc86d38fb345a59766dbd667acd1232dad2d6a729e29bba3d06833e5d7d2aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc86d38fb345a59766dbd667acd1232dad2d6a729e29bba3d06833e5d7d2aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29432

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

Cross site scripting

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

CVE-2022-29432

CVE-2022-29432 covers multiple authenticated persistent XSS vulnerabilities in the WordPress plugin wpDataTables (versions

CVE-2022-29432 WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

tms-rsa.focus-pluto.co.uk Cross Site Scripting vulnerability OBB-2481373

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

Authorization

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

Cross site scripting

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

CVE-2022-26247

CVE-2022-26247 pertains to TMS v2.28.0, where an insecure permission on the component /TMS/admin/user/Update2 allows an attacker to modify the administrator account and password. The vulnerability is documented across multiple sources (NVD, Red Hat, OSV, CVELIST, etc.). The available descriptions...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26246

CVE-2022-26246 describes an XSS vulnerability in TMS v2.28.0, specifically in the component /TMS/admin/setting/mail/createorupdate. The initial entry attributes a cross-site scripting flaw to this component, with CVSS metrics indicating both a Network vector and user interaction requirements depe...