eldar marcussen vulnerabilities and exploits

(subscribe to this query)

NA

SQL injection vulnerability in confirm.php in the mPAY24 payment module prior to 1.6 for PrestaShop allows remote malicious users to execute arbitrary SQL commands via the TID parameter.

Mpay24 Project Mpay24 1.4.3 Mpay24 Project Mpay24 1.4.4 Mpay24 Project Mpay24 1.4.0 Mpay24 Project Mpay24 1.4.8 Mpay24 Project Mpay24 1.4.9 Mpay24 Project Mpay24 1.4.1 Mpay24 Project Mpay24 1.4.2 Mpay24 Project Mpay24 1.5.0 Mpay24 Project Mpay24 Mpay24 Project Mpay24 1.4.5 Mpay24 Project Mpay24 1.4.6 Mpay24 Project Mpay24 1.4.7

1 EDB exploit

NA

The mPAY24 payment module prior to 1.6 for PrestaShop allows remote malicious users to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log.

Mpay24 Project Mpay24 1.4.3 Mpay24 Project Mpay24 1.4.4 Mpay24 Project Mpay24 Mpay24 Project Mpay24 1.4.5 Mpay24 Project Mpay24 1.4.6 Mpay24 Project Mpay24 1.4.0 Mpay24 Project Mpay24 1.4.7 Mpay24 Project Mpay24 1.4.8 Mpay24 Project Mpay24 1.4.1 Mpay24 Project Mpay24 1.4.2 Mpay24 Project Mpay24 1.4.9 Mpay24 Project Mpay24 1.5.0

1 EDB exploit

4.6

CVSSv3

If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive.

Hp Thinpro Linux 6.2 Hp Thinpro Linux 6.2.1 Hp Thinpro Linux 7.0 Hp Thinpro Linux 7.1

8

CVSSv3

The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an malicious user to inject commands that will execute with root privileges.

Hp Thinpro 6.2 Hp Thinpro 6.2.1 Hp Thinpro 7.0 Hp Thinpro 7.1

6.8

CVSSv3

The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an malicious user to inject commands that will execute with local user privileges.

Hp Thinpro 6.2 Hp Thinpro 6.2.1 Hp Thinpro 7.0 Hp Thinpro 7.1

8.8

CVSSv3

The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated malicious user to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along w...

Abb Pb610 Panel Builder 600 Firmware

8.8

CVSSv3

The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.

Abb Pb610 Panel Builder 600 Firmware

5.7

CVSSv3

The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an ...

Abb Pb610 Panel Builder 600 Firmware

9.8

CVSSv3

Sabberworm PHP CSS Parser prior to 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called with input from an attacker.

Sabberworm Php Css Parser

7.3

CVSSv3

In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An unauthenticated attacker can take advantage of the hardcoded or default...

Abb Pb610 Panel Builder 600 Firmware

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook