418 matches found
Input validation
This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...
CVE-2021-26639 WISA Smart Wing CMS File Download Vulnerability
This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...
CVE-2021-26639
CVE-2021-26639 affects WISA Smart Wing CMS. The vulnerability arises from insufficient input validation in specific functions, allowing remote attackers to leak all files on the server without authentication. Reported details consistently describe unauthorized file disclosure as the impact. No co...
WISA Smart Wing CMS 安全漏洞
WISA Smart Wing CMS is a content management system from the Korean company WISA. A security vulnerability exists in WISA Smart Wing CMS that stems from a lack of validation of input values for specific functions. A remote attacker could exploit the vulnerability to disclose all files in the serve...
Wing FTP Server 4.3.8 Remote Code Execution
Exploit Title: Wing FTP Server 4.3.8 - Remote Code Execution RCE Authenticated Date: 02/06/2022 Exploit Author: notcos Credit: Credit goes to the initial discoverer of this exploit, Alex Haynes. Vendor Homepage: https://www.wftpserver.com/ Software Link:...
Wing FTP Server 4.3.8 - Remote Code Execution (Authenticated) Exploit
Exploit Title: Wing FTP Server 4.3.8 - Remote Code Execution RCE Authenticated Exploit Author: notcos Credit: Credit goes to the initial discoverer of this exploit, Alex Haynes. Vendor Homepage: https://www.wftpserver.com/ Software Link: https://www.wftpserver.com/download/WingFtpServer.exe...
Epik Confirms Hack, Gigabytes of Data on Offer
Epik, the domain registrar known for hosting several large right-wing organizations, has confirmed a hack of its systems, a week after attackers branding themselves part of the Anonymous hacktivist collective said that they had obtained and leaked gigabits of data from the hosting company,...
Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform has information leakage vulnerability
Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management platform there is an information leakage...
Unauthorized Access Vulnerability in Electronic Evidence Management Platform of Shenzhen Police Wing Intelligent Technology Co.
hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...
Police Wing Law Enforcement Recorder Electronic Evidence Management Software has Information Leakage Vulnerability
hereinafter referred to as the police wing is China's law enforcement recorder industry leader, set R & D, manufacturing, sales, service in one, focusing on law enforcement departments to provide law enforcement recorder as the core, including the police wing of the mobile law enforcement...
EFB Tampering 3. Take-off pt2
Take-off Performance Part 2: Flap, Trim, Database and Sources of Data Target: FLAP SETTING There are various forms of flaps and slats. The difference between the two and the technicalities of how they work is outside the scope of this blog. As a general rule flaps extend from the rear/trailing ed...
CVE-2021-26688
An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...
CVE-2021-26688
An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...
Code injection
An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...
CVE-2021-26688
An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...
CVE-2021-26688
Technical details about CVE-2021-26688 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2021-26688
An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...
Wing FTP Cross-Site Scripting Vulnerability
Wing FTP Server is a cross-platform FTP server software. A cross-site scripting vulnerability exists in Wing FTP version 6.4.4, where an arbitrary IFRAME element can be included in a help page via a specially crafted link, which can be exploited by an attacker to execute sandbox arbitrary HTML an...
CVE-2020-27735
An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of sandboxed arbitrary HTML and JavaScript in the user's browser...
CVE-2020-27735
An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of sandboxed arbitrary HTML and JavaScript in the user's browser...