539 matches found
CVE-2019-13547
CVE-2019-13547 affects Advantech WISE-PaaS/RMM, versions 3.3.29 and prior. The root cause is an unsecured function that allows anyone who can reach the device IP to use the function without authentication (missing authorization). The vulnerability is corroborated by multiple sources (e.g., ZDI-19...
CVE-2019-13551
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator...
CVE-2019-13551
Advantech WISE-PaaS/RMM, versions 3.3.29 and earlier, contain a path traversal vulnerability caused by insufficient validation of a user-supplied path before file operations. This can enable remote code execution and administrator-level compromise. The issue has been documented in multiple adviso...
CVE-2019-18229: Improper Neutralization of Special Elements used in an SQL Command
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can leverage these vulnerabilities to disclose information...
Advantech WISE-PaaS/RMM Multiple Security Vulnerabilities
...
CVE-2019-13551: Improper Limitation of a Pathname to a Restricted Directory
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator...
PT-2019-15289
Name of the Vulnerable Software and Affected Versions Advantech WISE-PaaS/RMM versions 3.3.29 and prior Description The issue concerns XML External Entity XXE vulnerabilities that may allow the disclosure of sensitive data. Multiple components within Advantech WISE-PaaS/RMM are affected, includin...
CVE-2019-13547: Missing Authorization
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without authentication...
PT-2019-13410
Name of the Vulnerable Software and Affected Versions Advantech WISE-PaaS/RMM versions 3.3.29 and prior Description The issue concerns an unsecured function in Advantech WISE-PaaS/RMM that allows unauthorized access. Specifically, it enables anyone who can access the IP address to use the functio...
PT-2019-15291
Name of the Vulnerable Software and Affected Versions Advantech WISE-PaaS/RMM versions 3.3.29 and prior Description The issue is caused by a lack of sanitization of user-supplied input, leading to SQL injection vulnerabilities. This allows an attacker to disclose information. The vulnerabilities...
PT-2019-13414
Name of the Vulnerable Software and Affected Versions Advantech WISE-PaaS/RMM versions 3.3.29 and prior Description The issue is caused by a lack of proper validation of a user-supplied path prior to use in file operations, leading to path traversal vulnerabilities. An attacker can leverage these...
CVE-2019-18227: Improper Restriction of XML External Entity Reference
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data...
Advantech WISE-PaaS/RMM
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WISE-PaaS/RMM Vulnerabilities: Path Traversal, Missing Authorization, Improper Restriction of XML External Entity Reference, SQL Injection 2. RISK EVALUATION Successful...
Advantech WISE-PaaS Dashboard Detection (Windows SMB Login)
Detects the installed version of Advantech WISE-PaaS Dashboard for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Wise Chat Plugin < 2.7 Mashandling of External Links Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
WordPress Wise Chat Plugin Has Unspecified Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Wise Chat plugin is used in one of the live chat plugin. An unspecified vulnerability exists in the WordPress Wis...
Wise Chat <= 2.6.3 - Reverse Tabnabbing
The Wise Chat WordPress plugin was affected by a Reverse Tabnabbing security vulnerability...
WordPress Wisechat 2.6.3 Forced Redirect / Phishing
Exploit Title: Wordpress Plugin Wisechat if window.opener window.opener.parent.location.replace'http://mtk911.cf/'; if window.parent != window window.parent.location.replace'http://mtk911.cf/'; Open Redirect TEST when you click on that user. This opens in a new tab, and the parent tab is silently...
WordPress Wise Chat plugin <= 2.6.3 - Reverse Tabnabbing vulnerability
Reverse Tabnabbing vulnerability found by MTK in WordPress Wise Chat plugin versions = 2.6.3. Solution Update the WordPress Wise Chat plugin to the latest available version at least 2.7...
