Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.Read More ...
Continue Reading
November 17, 2022
D-Link â G integrated Access Device4 Information Disclosure & Authorization Bypass. *Information Disclosure â file contains a URL with private IP at line 15 "login.asp" A. The window.loc ...
Continue Reading
November 17, 2022
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration P ...
Continue Reading
November 17, 2022
Elsight â Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINAT ...
Continue Reading
November 17, 2022
SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via NetworkRead More ...
Continue Reading
November 17, 2022
WithSecure through 2022-08-10 allows attackers to cause a denial of service (issue 4 of 5).Read More ...
Continue Reading
November 17, 2022
Webvendome - Webvendome Internal Server IP Disclosure. Send GET Request to the request which is shown in the picture. Internal Server IP and Full path disclosure.Read More ...
Continue Reading
November 17, 2022
SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via NetworkRead More ...
Continue Reading
November 17, 2022
Back to Main
