Design/Logic Flaw

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

CVE-2021-44453 mySCADA myPRO

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

CVE-2021-44453

Affected product: mySCADA myPRO (versions 8.20.0 and prior). Vulnerability: OS command injection via a vulnerable debug interface that includes a ping utility, allowing an attacker to inject arbitrary operating system commands through the interface. Impact (as stated): Remote code execution with ...

PT-2021-24111

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions 8.20.0 and prior Description: The issue concerns a vulnerable debug interface in mySCADA myPRO, which includes a ping utility. This vulnerability may allow an attacker to inject arbitrary operating system commands...

CVE-2021-44453: Improper Neutralization of Special Elements used in an OS Command

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

MTN Group: Information disclosure through django debug mode

Summary: Your domain https://szezvzorilla.mtn.co.sz was disclosing information throught django debug mode enable. Steps To Reproduce: Visit https://szezvzorilla.mtn.co.sz/NONEXISTINGPATH/ You will the information of debugging Supporting Material/References: F1555934 attachment / reference Impact...

PT-2021-8228

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.15.0-01d0625 Description The vulnerability is related to a use-after-free issue in the resp mode select function of the scsi debug component. This issue can be exploited to potentially elevate privileges in the system. T...

CVE-2021-44453

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

DEBIAN-CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

UBUNTU-CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

PT-2021-23313

Name of the Vulnerable Software and Affected Versions Pyo versions prior to 1.03 Description A Buffer Overflow issue exists in the Server debug function, allowing remote attackers to conduct Denial of Service DoS attacks by passing an overlong audio file name. Recommendations For versions prior t...

CVE-2021-39653

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

CVE-2021-39653

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

Privilege escalation

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

CVE-2021-39653

CVE-2021-39653 describes a local elevation of privilege in the Android boot path, enabling boot with a hidden debug policy due to a missing user warning. The vulnerability is associated with the Android kernel/Bootloader surface (as reflected in Pixel bulletin categorization), and iled by the des...

CVE-2021-39653

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

Rizin buffer overflow vulnerability

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a command-line hex editor that can open disk files that can be scripted, etc. Rizin 0.3.1 and earlier versions have a...

CVE-2021-39653: Undefined Security Weakness

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

Diagnostic data to collect for Citrix Tech Support when a Citrix Browser App fails to launch

To find out what is going wrong when a Citrix browser app fails to launch, tech support needs: Decrypted Fiddler traces, the output from the terminal window, and Citrix Browser debug logs...

CVE-2021-43814

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parsedie when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin ma...