CVE-2019-19215: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...

CVE-2019-19220: Improper Neutralization of Special Elements used in an OS Command

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

CVE-2019-19216: Improper Privilege Management

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...

CVE-2019-19217: Improper Neutralization of Special Elements used in an OS Command

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

CVE-2019-19218: Insufficiently Protected Credentials

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...

CVE-2019-19219: Undefined Security Weakness

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2020-8472

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M versions 6.0 and earlier and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl version 6.1 and earlier allow low privileged users to read, modify, add and...

CVE-2020-8472

CVE-2020-8472 affects ABB System 800xA components: OPCServer for AC800M (v6.0 and earlier), Control Builder M Professional, MMS Server for AC800M, and Base Software for SoftControl (v6.1 and earlier). Root cause is insufficient/weak default folder permissions (CWE-276) allowing low-privileged use...

m-zone.pl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1152237 Security Researcher Papix2020 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges Received 2 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-zone.pl website and its...

CVE-2020-8472: Incorrect Permission Assignment for Critical Resource

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M versions 6.0 and earlier and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl version 6.1 and earlier allow low privileged users to read, modify, add and...

l-m-r.se Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149893 Security Researcher m00nr4c00n Helped patch 192 vulnerabilities Received 2 Coordinated Disclosure badges Received 2 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting l-m-r.se website and its...

CVE-2020-7487

The CVE-2020-7487 entry concerns Schneider Electric Modicon M218, M241, M251, and M258 controllers affected by CWE-345: Insufficient Verification of Data Authenticity. The Red Hat/NVD-related and Tenable/NASL data in connected documents corroborate that this is a data-authenticity issue allowing ...

M-Shield & kingof - Fake Malware Backdoor Plugins

Sucuri Labs found that the M-Shield & kingof fake WordPress plugins were used as malware droppers, with the initial compromise likely coming from another legitimate vulnerable WordPress plugin security vulnerability...

WordPress M-Shield plugin - Fake plugin/backdoor

Fake plugin/backdoor discovered by Sucuri under the name M-Shield. Solution Delete asap + look up for possible additional malicious files on the server...

m-poweredmedia.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144449 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-poweredmedia.com website...

m-trade.pro Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141402 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-trade.pro website and it...

m-ansari.ir Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141053 Security Researcher geeknik Helped patch 8899 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-ansari.ir website and it...

m-trade.pro Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138935 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-trade.pro website and it...

CVE-2018-21077

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x software. There is a Clipboard content disclosure in the locked state because the keyboard may be used during an emergency call. The Samsung ID is SVE-2017-11107 April 2018...

CVE-2018-21054

An issue was discovered on Samsung mobile devices with M6.0, N7.x and O8.x except exynos9610/9820 in all Platforms, M6.0 except MSM8909 SC77xx/9830 exynos3470/5420, N7.0 except MSM8939, N7.1 except MSM8996 SDM6xx/M6737T software. There is an integer underflow with a resultant buffer overflow in...