2858 matches found
The vulnerability of the Loway QueueMetrics software for analyzing call center efficiency metrics lies in its lack of proper HTTP request processing capabilities. This allows attackers to circumvent existing security restrictions.
The vulnerability of the Loway QueueMetrics performance analysis software relates to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and carry out an “HTTP request hijacking” attack...
cups-browsed: cups-filters: cups-browsed vulnerable to DDoS amplification attack
A flaw was found in cups-browsed. This vulnerability allows an attacker to launch DDoS amplification attacks via an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added...
DATAGERRY 安全漏洞
DATAGERRY is an open source CMDB and asset management tool from DATAGerry Open Source. A security vulnerability exists in DATAGERRY version 2.2 that stems from the presence of an incorrect privilege modification that allows an attacker to execute arbitrary commands via a crafted web request...
SUSE CVE-2024-47220
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
The vulnerability of the functional web frameworks WebMvc.fn and WebFlux.fn of the Spring Framework arises from incorrect path name restrictions for restricted directories. This allows attackers to gain access to any file in the file system.
The vulnerability of the functional web frameworks WebMvc.fn and WebFlux.fn of the Spring Framework is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to any file in t...
PT-2024-39150 · Unknown · Netcat Cms
Name of the Vulnerable Software and Affected Versions: NetCat CMS versions 6.4.0.24126.2 through 6.4.0.24247 Description: A vulnerability in NetCat CMS allows an attacker to send a specially crafted HTTP request to check whether a user exists in the system. This issue could be a basis for further...
Loway QueueMetrics 环境问题漏洞
Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. An environmental issue vulnerability exists in Loway QueueMetrics version 22.11.6 that stems from HTTP request/response smuggling...
CVE-2024-6343
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN series firmware versions from V4.16 through...
CVE-2024-5412
A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50ABOM.8C0 could allow an unauthenticated attacker to cause denial of service DoS conditions by sending a crafted HTTP request to a vulnerable device...
PT-2024-6627 · Loway · Queuemetrics
Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to inconsistent interpretation of HTTP requests, which can be exploited by a remote attacker to bypass existing security restrictions and perform an HTTP...
PT-2024-8730 · Beckhoff · Twincat/Bsd
Name of the Vulnerable Software and Affected Versions: TwinCAT/BSD affected versions not specified Description: The issue is related to a buffer overflow in the MPD package of TwinCAT/BSD, which can be exploited by an authenticated, low-privileged local attacker. This can lead to a...
Beckhoff TwinCAT/BSD 安全漏洞
Beckhoff TwinCAT/BSD is a new operating system from Beckhoff. A security vulnerability exists in Beckhoff TwinCAT/BSD, which stems from an MPD package that allows an authenticated, low-privileged local attacker to induce a denial of service state in the daemon via a carefully constructed HTTP...
The vulnerability of the microprogramming software in routers like Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters allows a hacker to read arbitrary files within the system.
The vulnerability of the Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters exists due to a validation error in processing directory traversal sequences. Exploiting this vulnerability allows an attacker to read arbitrary files in the system using a specially created HTTP request...
UBUNTU-CVE-2024-7954
The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request...
CVE-2024-43032
autMan v2.9.6 allows attackers to bypass authentication via a crafted web request...
SPIP 安全漏洞
SPIP is a free software for creating Internet sites from the SPIP open source. A security vulnerability exists in SPIP that stems from vulnerability to arbitrary code execution vulnerability, where a remote, unauthenticated attacker can execute arbitrary PHP as a SPIP user by sending a crafted HT...
autMan 安全漏洞
autMan is a powerful automation software system from autMan, Inc. A security vulnerability exists in autMan version v2.9.6, which stems from a vulnerability that allows an attacker to bypass authentication via a crafted Web request...
PT-2024-30263 · Autman · Autman
Name of the Vulnerable Software and Affected Versions: autMan version 2.9.6 Description: The issue allows attackers to bypass authentication via a crafted web request. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents whe...
