CVE-2019-19556: Undefined Security Weakness

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information...

CVE-2019-19562: Improper Authentication

An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information...

CVE-2019-19561: Insecure Storage of Sensitive Information

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19557: Insecure Storage of Sensitive Information

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19560: Improper Authentication

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information...

PT-2020-10186

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1 Description An authentication bypass in the debug interface allows an attacker with physical access to device hardware to obtain system information. Recommendations For Mercedes-Benz HERMES version 1, consider...

PT-2020-10188

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1.5 Description The issue is related to an authentication bypass in the debug interface, allowing an attacker with physical access to the device hardware to obtain system information. This could also involve a...

PT-2020-10191

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 2.1 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 2.1...

PT-2020-10187

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 1,...

PT-2020-10190

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 2.1 Description An authentication bypass in the debug interface allows an attacker with physical access to device hardware to obtain system information. Recommendations For Mercedes-Benz HERMES version 2.1, conside...

CVE-2019-19563: Undefined Security Weakness

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

PT-2020-10189

Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1.5 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 1.5...

Mail.ru: Django Debug=True Leaks admin email addresss and serval system information

Domain, site, application weblate.ucs.ru Steps to reproduce For getting all Url Patterns 1.Open https://weblate.ucs.ru / 2.now after / enter any random string 3.It will open 404 page which contains all the Url Patterns of Website For getting all debug info 1.Open https://weblate.ucs.ru 2. Now go ...

Silver Peak Unity Orchestrator Path Traversal Vulnerability (CNVD-2020-63950)

Silver Peak Systems Silver Peak Unity Orchestrator is Silver Peak Systems' software for network management across WAN environments. The software provides a centralized way to orchestrate the network and visualize and manage network status. A path traversal vulnerability exists in Silver Peak Unit...

ShowStopper - Anti-Debug tricks exploration tool

The ShowStopper project is a tool to help malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods. With this tool, you can attach a debugger to its process and research the debugger’s behavior for the...

CVE-2020-12146

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API...

kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c

A use-after-free flaw was found in the Linux kernel’s ext4 file system functionality when the user mount ext4 partition, with the usage of an additional debug parameter is defining an extra inode size. If this parameter has a non zero value, this flaw allows a local user to crash the system when...

Trend Micro Antivirus for Mac Information Disclosure Vulnerability

Trend Micro Antivirus for Mac is a set of antivirus software based on Mac platform from Trend Micro. A security vulnerability exists in Trend Micro Antivirus for Mac 2020 Consumer that stems from an error message information disclosure vulnerability, which can be exploited by an attacker to cause...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2020:1819-1 Rating: important References: 1173902 1173994 1177613 Cross-References: CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...

openSUSE Security Update : binutils (openSUSE-2020-1790)

This update for binutils fixes the following issues : binutils was updated to version 2.35. jscECO-2373 Update to binutils 2.35 : - The assembler can now produce DWARF-5 format line number tables. - Readelf now has a 'lint' mode to enable extra checks of the files it is processing. - Readelf will...