Description
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
CVE-2022-31447 : MAGICPIN 3.4 SVG FILE XML EXTERNAL ENTITY REFERENCE
- cybersecurity insights
- June 14, 2022
- 3:57 pm
Contact us to get started
CVE-2022-2641 : HORNER AUTOMATION RCC 972 15.40 HARD-CODED KEY
Description Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow
CVE-2022-3270 : FESTO VTEM-S1 INSUFFICIENT TECHNICAL DOCUMENTATION
Description In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead
CVE-2022-4221 : ASUS NAS-M25 UP TO 1.0.1.7 COOKIE OS COMMAND INJECTION
Description Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Asus NAS-M25 allows an