10183 matches found
CVE-2020-13472: Exposure of Resource to Wrong Sphere
The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module...
CVE-2020-13467: Improper Handling of Exceptional Conditions
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...
CVE-2020-13463: Improper Handling of Exceptional Conditions
The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...
Security update for apache2 (moderate)
openSUSE Security Update: Security update for apache2 Announcement ID: openSUSE-SU-2020:1285-1 Rating: moderate References: 1174052 1175070 1175071 1175074 Cross-References: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 Affected Products: openSUSE Leap 15.2 An update that solves three vulnerabiliti...
CVE-2019-4701
IBM Security Guardium Data Encryption GDE 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936...
CVE-2020-15483
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...
Default credentials
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...
CVE-2020-15483
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...
CVE-2020-15483
CVE-2020-15483 affects Nescomed Multipara Monitor M1000 devices. The issue is a passwordless, full-access shell via the physical UART debug port, granting local/physical access with high impact on confidentiality, integrity, and availability. Public documentation in NVD/Red Hat confirms the UART ...
PT-2020-14450 · Nescomed · Nescomed Multipara Monitor M1000
Name of the Vulnerable Software and Affected Versions: Nescomed Multipara Monitor M1000 devices affected versions not specified Description: An issue was discovered where the physical UART debug port on the devices provides a shell without requiring a password, giving complete access...
CVE-2020-15483: Missing Authentication for Critical Function
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...
Popular iOS SDK Accused of Spying on Billions of Users and Committing Ad Fraud
A popular iOS software development kit SDK used by over 1,200 apps—with a total of more than a billion mobile users—is said to contain malicious code with the goal of perpetrating mobile ad-click fraud and capturing sensitive information. According to a report published by cybersecurity firm Snyk...
debug-thai.com Cross Site Scripting vulnerability OBB-1275180
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-7705 Malicious Package
This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the...
CVE-2020-7705
The CVE-2020-7705 entry concerns MintegralAdSDK (iOS) with malicious functionality that tracks every opened URL and reports it to an external server, performing ad-attribution fraud even if ads are not served. It can remotely activate hooks on UIKit components (UIApplication, openURL, SKStoreProd...
Dropcontact: Information Disclosure through DEBUG at Subscription [https://app.dropcontact.io/app/subscription?connector=salesforce](CRITICAL)
We were displaying some sytem information in case of app crashing...
Dropcontact: Django should not have debug mode enabled
We were displaying sensitive information...
Dropcontact: Registering with email [ +70 Chars ] Lead to Disclose some informations [Django Debug Mode ]
We were displaying / leaking sytems information in case of app crash...
Dropcontact: Django DEBUG mode enabled and leaked system information.
We were leaking / showing system information. Django DEBUG mode was enabled and showing some information on some errors.I just follow the errors and finally got some sensitive system information such as configuation ,API keys ,Database users ,System Directories,etc...