Vulnz

3 exploits Active since Jun 2022
CVE-2021-40903 NOMISEC CRITICAL WORKING POC
antminer_monitor 0.50.0 - Use of Hard-coded Credentials in Flask Settings File
A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static.
1 stars
CVSS 9.8
CVE-2022-50908 EXPLOITDB HIGH text WORKING POC
Mailhog 1.0.1 - Stored Cross-Site Scripting via Email Attachment
Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.
CVSS 7.2
CVE-2021-40903 EXPLOITDB CRITICAL text WORKING POC
antminer_monitor 0.50.0 - Use of Hard-coded Credentials in Flask Settings File
A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static.
CVSS 9.8