An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object ...
Continue Reading
September 15, 2022
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.Read More ...
Continue Reading
September 15, 2022
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.Read More ...
Continue Reading
September 15, 2022
An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the administration panel, to perform Stored Cross- ...
Continue Reading
September 15, 2022
Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.Read More ...
Continue Reading
September 15, 2022
Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. ...
Continue Reading
September 15, 2022
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6.Read More ...
Continue Reading
September 15, 2022
Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.Read More ...
Continue Reading
September 15, 2022
Back to Main
