2214 matches found
How to configure EPA with one-to-one correspondence between usernames and mac addresses
This article address a configuration sample toconfigure EPA with one-to-one correspondence between usernames and mac addresses...
MTN Group: Wordpress users Disclosure [ /wp-json/wp/v2/users/ ]
Summary: Using REST API, we can see all the WordPress users/author with some of their information. Which can even be Personal information of employees/author. The file v2/users at: https://www.mtn.com/wp-json/wp/v2/users/ is enabled and this give the attacker many users names like: Amogelang...
MimiPenguin
This searches process memory for needles that indicate where cleartext passwords may be located. If any needles are discovered in the target process memory, collected strings in adjacent memory will be hashed and compared with password hashes found in /etc/shadow. Module Options msf use...
SuiteCRM authenticated SQL injection in export functionality
This module exploits an authenticated SQL injection in SuiteCRM in versions before 7.12.6. The vulnerability allows an authenticated attacker to send specially crafted requests to the export entry point of the application in order to retrieve all the usernames and their associated password from t...
Appwrite Vulnerable to Cross-site Scripting
Appwrite is vulnerable to stored cross-site scripting in usernames, function names, storage bucket names, and database collection names...
GHSA-5FFJ-MPH5-C5HV Appwrite Vulnerable to Cross-site Scripting
Appwrite is vulnerable to stored cross-site scripting in usernames, function names, storage bucket names, and database collection names...
CVE-2022-2462
The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tphistory' AJAX action and insufficient restriction on the data...
CVE-2022-2462 Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure
The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tphistory' AJAX action and insufficient restriction on the data...
CVE-2022-34379
Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...
CVE-2022-37062
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains the path of the SQLite users database and...
PT-2022-16766 · WordPress · Transposh Wordpress Translation Plugin
Name of the Vulnerable Software and Affected Versions: Transposh WordPress Translation plugin versions up to, and including, 1.0.8.1 Description: The issue is related to insufficient permissions checking on the 'tp history' AJAX action and insufficient restriction on the data returned in the...
Transposh WordPress Translation <= 1.0.8 - Usernames Disclosure
The plugin does not have any authorisation in its tphistory AJAX action, allowing unauthenticated users to call it and retrieve a list of usernames which translated text...
CVE-2022-34046
An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...
Design/Logic Flaw
An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...
CVE-2022-34047
CVE-2022-34047 affects WAVLINK WN530HG4 (M30HG4.V5030.191116). The issue is an improper access control in the set_safety.shtml?r=52300 endpoint, where an attacker can view the page source (view-source:) and search for var syspasswd to obtain usernames and passwords. Evidence in connected docs not...
WAVLINK WN530HG4 安全漏洞
The WAVLINK WN530HG4 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in the WAVLINK WN530HG4 M30HG4.V5030.191116 version, which stems from a vulnerability that allows an attacker to view usernames and passwords...
PT-2022-21983 · Wavlink · Wavlink Wn533A8
Name of the Vulnerable Software and Affected Versions: Wavlink WN533A8 version M33A8.V5030.190716 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/sysinit.shtml?r=52300" by searching for logincheckuser. Recommendations...
PT-2022-21984 · Wavlink · Wavlink Wn530H4
Name of the Vulnerable Software and Affected Versions: Wavlink WN530HG4 version M30HG4.V5030.191116 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/set safety.shtml?r=52300" by searching for the variable syspasswd...
Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54741)
Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an input validation error that could be exploited by an attacker to trigger a software abort via One Touch Joi...