Vulnerabilidades

KodExplorer 4.52 contiene una vulnerabilidad de redirección abierta en la página de inicio de sesión del usuario que permite a los atacantes manipular el parámetro 'link'. Los atacantes pueden crear URLs maliciosas en el parámetro link para redirigir a los usuarios a sitios web externos arbitrarios después de la…

1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality. The affected endpoint does not implement CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a panel-name…

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a port-change request; when…

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel). The endpoint does not implement CSRF protections such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious…

A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from agent-level to project-level,…

Una vulnerabilidad de ejecución remota de código (RCE) existe en Google Cloud Data Fusion. Un usuario con permisos para cargar artefactos a una instancia de Data Fusion puede ejecutar código arbitrario dentro del componente central de AppFabric. Esto podría permitir al atacante obtener control sobre la instancia de…

Las versiones 6.4.0.361 y anteriores de Creative Cloud Desktop se ven afectadas por una vulnerabilidad de creación de archivo temporal en directorio con permisos incorrectos que podría conducir a una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para interrumpir la…

Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('Inyección de comandos del sistema operativo') vulnerabilidad [CWE-78] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.2, FortiSandbox 4.4.0 hasta 4.4.7, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0…

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies (TrustedProxies = 0.0.0.0/0), allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls (AllowIPs, API…

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow an unauthenticated attacker to disable CAPTCHA verification by abusing a client-controlled parameter. Because the server previously trusted this value without proper validation, CAPTCHA protections can be…

Vulnerabilidad de autorización faltante en QuantumCloud Simple Link Directory simple-link-directory permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Simple Link Directory: desde n/a hasta menor o igual que 8.8.3.

Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en QuantumCloud Simple Link Directory simple-link-directory permite la falsificación de petición en sitios cruzados. Este problema afecta a Simple Link Directory: desde n/a hasta menor o igual que 8.8.3.

Debido a una vulnerabilidad de Falta de Verificación de Autorización en SAP S/4 HANA Private Cloud (Contabilidad General Financiera), un atacante autenticado con autorización limitada a un único código de sociedad podría leer datos sensibles y publicar o modificar documentos en todos los códigos de sociedad. La…

Se descubrió un problema de seguridad en DataMosaix Private Cloud, permitiendo a usuarios con bajos privilegios realizar operaciones sensibles en la base de datos a través de puntos finales de API expuestos.

Una vulnerabilidad fue identificada en Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. El elemento afectado es una función desconocida del archivo nc/pubitf/erm/mobile/appservice/AppServletService.class. Dicha manipulación del argumento usercode conduce a inyección SQL. El ataque puede ser lanzado remotamente. El exploit está…

A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond…

Dell CloudBoost Virtual Appliance, versiones 19.13.0.0 y anteriores, contiene una vulnerabilidad de Restricción Inadecuada de Intentos Excesivos de Autenticación. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a un acceso no autorizado.

Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attack to take-away a 2FA webauthn device when correctly guessing a 80-128 character long random string of letters, numbers and symbols. The victim would then be prompted to…

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a malicious user was able to modify their organisation and title field to load additional CSS files. Javascript and other options were correctly blocked by the content…

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated users were able to view meta data of columns in other tables of the Tables app by modifying the numeric ID in a request. This vulnerability is fixed in 0.8.7 and 0.9.4.

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the path of the file was sent to the server unencrypted, making it possible for administrators to see it in log files. This vulnerability is fixed in 3.16.5.

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.12.7, 1.14.4, and 1.15.1, file extension can be spoofed by using RTLO characters, tricking users into download files with a different extension than what is displayed.…

Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin. This vulnerability is fixed in 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8,…

The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerability is fixed in 1.3.1…