An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelection.asp.

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.

Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file.

A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

An unauthenticated attacker can obtain EV charger energy consumption information of other users.

An unauthenticated attacker can obtain a list of smart devices by knowing a valid username.

An unauthenticated attacker can check the existence of usernames in the system by querying an API.

An authenticated attacker can obtain any plant name by knowing the plant ID.

An unauthenticated attacker can obtain a user's plant list by knowing the username.

Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "scenes").

An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username.

An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request.

An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs.

An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.

An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID.

Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").

Unauthenticated attackers can query an API endpoint and get device details.

A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.3.5u.6698_B20230810 is able to address this issue. It is recommended to upgrade the affected component.

An attacker can get information about the groups of the smart home devices for arbitrary users (i.e., "rooms").

An unauthenticated attacker can obtain other users' charger information.

Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users.

Unauthenticated attackers can retrieve serial number of smart meters associated to a specific user account.

Unauthenticated attackers can retrieve full list of users associated with arbitrary accounts.

An attacker can change registered email addresses of other users and take over arbitrary accounts.

Unauthenticated attackers can rename arbitrary devices of arbitrary users (i.e., EV chargers).

An attacker can export other users' plant information.

An unauthenticated attacker can infer the existence of usernames in the system by querying an API.

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720 is able to address this issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component.