2 June 2023

15 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-3000

  SQLi in Erikoglu Technology's ErMon

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602.

  Erikoglu Technology ErMon
  Jun 2, 2023
• Critical 9.8
  CVE-2023-34362 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023…

  Jun 2, 2023

  KEV Jun 2, 2023
• Critical 9.8
  CVE-2023-33675

  Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_l…

  Jun 2, 2023
• Critical 9.8
  CVE-2023-33670

  Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function.

  Jun 2, 2023
• Critical 9.8
  CVE-2023-33762

  eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a SQL injection vulnerability via the Activit…

  Jun 2, 2023
• Critical 9.8
  CVE-2023-33671

  Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentContr…

  Jun 2, 2023
• Critical 9.8
  CVE-2023-33673

  Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewa…

  Jun 2, 2023
• Critical 9.8
  CVE-2023-33669 Public exploit

  Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c func…

  Jun 2, 2023
• Critical 9.8
  CVE-2023-33476 Public exploit

  ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by…

  minidlna minidlna Debian Ubuntu
  Jun 2, 2023
• Critical 9.8
  CVE-2023-28701

  ELITE Web Fax - SQL Injection

  ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service.

  ELITE Web Fax
  Jun 2, 2023
• Critical 9.8
  CVE-2023-28698

  WADE DIGITAL DESIGN CO, LTD. FANTSY - Broken Acesss Control

  Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt ser…

  WADE DIGITAL DESIGN CO FANTSY
  Jun 2, 2023
• Critical 9.8
  CVE-2023-29746

  An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulati…

  Jun 2, 2023
• Critical 9.8
  CVE-2023-30149 EPSS 17%

  SQL injection vulnerability in the City Autocomplete (cityautocomplete) module from ebewe.net for PrestaShop, prior to …

  Jun 2, 2023
• Critical 9.8
  CVE-2023-30604

  Hitron Technologies Inc. CODA-5310 - Broken Access Control

  It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in perfo…

  Hitron Technologies Hitron CODA-5310
  Jun 2, 2023
• Critical 9.8
  CVE-2023-30603

  Hitron Technologies Inc. CODA-5310 - Using default credentials

  Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the ad…

  Hitron Technologies Hitron CODA-5310
  Jun 2, 2023