CVE-2020-13658

In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privileges within the application...

Cross site request forgery (csrf)

In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privileges within the application...

Lansweeper Cross-Site Request Forgery Vulnerability

Lansweeper is an IT asset management system from Lansweeper Belgium. The system includes features such as IT asset discovery and network settings scanning. A cross-site request forgery vulnerability exists in Lansweeper version 8.0.130.17. The vulnerability stems from the vulnerability of the web...

CVE-2020-13658

CVE-2020-13658 affects Lansweeper 8.0.130.17 where the web console is vulnerable to a CSRF attack that enables a low-privilege user to elevate privileges within the application. The vulnerability arises from insufficient CSRF protection in the web interface, leading to unauthorized privilege esca...

CVE-2020-13658: Cross-Site Request Forgery (CSRF)

In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privileges within the application...

PT-2020-13645

Name of the Vulnerable Software and Affected Versions Lansweeper version 8.0.130.17 Description The issue allows a low-level Lansweeper user to elevate their privileges within the application through a CSRF attack on the web console. Recommendations For Lansweeper version 8.0.130.17, consider...

CVE-2020-25045

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system...

CVE-2020-25045

CVE-2020-25045 affects Kaspersky Security Center and Kaspersky Security Center Web Console installers; the issue is DLL hijacking that enables local privilege escalation. Affected versions are before 12 and before 12 Patch A. Red Hat and NCSC advisories reference fixes in Kaspersky Security Cente...

CVE-2020-25045: Uncontrolled Search Path Element

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system...

CVE-2020-24572

An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...

Code injection

An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...

CVE-2020-24572

An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...

PT-2020-15746

Name of the Vulnerable Software and Affected Versions RaspAP version 2.5 Description An issue in the includes/webconsole.php file allows an attacker with authenticated access to exploit a misconfigured web console. This can lead to attacks on the underlying OS, which is typically a Raspberry Pi...

Exploit for OS Command Injection in Raspap

CVE-2020-24572 An issue was discovered in includes/webconsole...

CVE-2020-8688

Improper input validation in the IntelR RAID Web Console 3 for Windows may allow an unauthenticated user to potentially enable denial of service via network access...

Input validation

Improper input validation in the IntelR RAID Web Console 3 for Windows may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2020-8688

Improper input validation in the IntelR RAID Web Console 3 for Windows may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2020-8688

Intel RAID Web Console 3 for Windows* contains an input validation flaw in its web API that may allow an unauthenticated attacker to trigger a denial of service over the network. Multiple sources describe the vulnerability as a remote DoS caused by improper input validation, potentially crashing ...

CVE-2020-8688: Improper Input Validation

Improper input validation in the IntelR RAID Web Console 3 for Windows may allow an unauthenticated user to potentially enable denial of service via network access...

Intel® RAID Web Console 3 for Windows* Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console 3 for Windows may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8688 Description: Improper input validation in the IntelR RAID...