12346 matches found
CVE-2023-30146
Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...
CVE-2023-30146
Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...
CVE-2023-30146
Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...
Command injection
Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
ASSMANN Electronic Digitus Plug&View IP Camera Security Breach
ASSMANN Electronic Digitus Plug&View IP Camera is a plug-and-play camera from ASSMANN Electronic. A security vulnerability exists in the ASSMANN Electronic Digitus Plug&View IP Camera that originates from allowing an unauthenticated attacker to download a copy of the camera settings and...
Diebold Nixdorf Vynamic View Console 5.3.1 DLL Hijacking
Exploit Title: DLL Hijacking in Diebold Nixdorf Vynamic View Console 5.3.1 Banking Software Date: 2023-08-04 Exploit Author: Matei Josephs Vendor Homepage:https://www.dieboldnixdorf.com/ Version: Diebold Nixdorf Vynamic View Console 5.3.1 CVE : CVE-2023-36344 Introduction ================= An iss...
CVE-2023-30146
CVE-2023-30146 affects the Assmann Digitus Plug&View IP Camera HT-IP211HDP (firmware 2.000.022). The vulnerability allows unauthenticated remote retrieval of the device settings and administrator credentials via a backup/restore mechanism. Related evidence in public sources describes a plaintext-...
CVE-2023-2754
The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP client did not assign loopback IPv6 addresses...
django-sspanel Command Injection Vulnerability
django-sspanel is a new shadowsocks web panel developed with diango by Ehco Personal Developers. A security vulnerability exists in django-sspanel version v2022.2.2, which stems from a Remote Command Execution RCE vulnerability in the GoodsCreateView.post method of sspanel/adminview.py...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
PT-2023-26698
Name of the Vulnerable Software and Affected Versions django-sspanel version 2022.2.2 Description The software contains a remote command execution RCE issue through the GoodsCreateView. post component within sspanel/admin view.py. The software is used in proxy services, potentially leading to...
PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting
Exploit Title: PHPJabbers Availability Booking Calendar 5.0 - Reflected XSS Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/ Tested on: Windows 10 Pro Impact: Manipulat...
CVE-2022-46484
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...
‘Call of Duty: Modern Warfare 2’ Players Hit With Worm Malware
Plus: Russia tightens social media censorship, new cyberattack reporting rules for US companies, and Google Street View returns to Germany...
CVE-2023-31932
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...
CVE-2023-31932
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...
CVE-2023-31936
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...