Trojan.Win32.Inject.adwas Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/acfce60da9031e00c22818f2616d6424.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Inject.adwas Vulnerability: Insecure Permissions Description: The malware creates a dir...

CVE-2021-0275

The CVE-2021-0275 entry identifies a Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web that can hijack another active user session and potentially grant full device control if the compromised user has root privileges. Affected are Junos OS versions across multiple series...

CVE-2021-0275 Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.

A Cross-site Scripting XSS vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to the users session. The other user session must be active for the attack to succeed. Once successful, the attacker has the same privileges as...

SUSE: Security Advisory (SUSE-SU-2018:0275-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos OS Vulnerability (JSA11166)

The version of Junos OS installed on the remote host is affected by a vulnerability XSS in J-Web as referenced in the JSA11166 advisory. Note: Nessus found J-Web enabled set system services web-management https on this device. TRUSTED...

CVE-2020-0275

creationtimestamp| type| source ---|---|--- 2020-09-18 00:55:20+00:00| seen| https://t.me/cibsecurity/14751...

CVE-2020-0275

CVE-2020-0275 is a local elevation-of-privilege issue in Android 11 related to the MediaProvider. The root cause is a permissions bypass that allows an app to access ContentResolver and MediaStore entries it should not reach. Impact is a local elevation of privilege with no extra execution privil...

Important Photon OS Security Update - PHSA-2020-0275

Updates of 'runc' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1524)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-0275

CVE-2019-0275 affects the SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS). Versions 7.10–7.11, 7.20, 7.30, 7.31, 7.40 and 7.50 are impacted. The root cause is insufficient encoding of user-controlled inputs, resulting in a cross-site scripting (XSS) vulnerabilit...

CVE-2018-0275

Cisco Identity Services Engine (ISE) contains a local, authenticated-exploit vulnerability in the support tunnel feature. Improper configuration can let an attacker unlock the support user account and access the tunnel password and device serial number, enabling execution of arbitrary commands wi...

CVE-2018-0275

A vulnerability in the support tunnel feature of Cisco Identity Services Engine ISE could allow an authenticated, local attacker to access the device's shell. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this vulnerability by tricking...

CVE-2016-0275

CVE-2016-0275 affects IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services on Multi-Platform versions 2.1.1.2 and 3.0.0.x before fp0013. The issue enables local attackers to obtain sensitive information via cacheable HTTPS responses stored on the...

Microsoft Windows SMBv1 Multiple Vulnerabilities

The remote Windows host has Microsoft Server Message Block 1.0 SMBv1 enabled. It is, therefore, affected by multiple vulnerabilities : - Multiple information disclosure vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of SMBv1 packets. An unauthenticated,...

CVE-2017-0275

CVE-2017-0275 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB server handling of certain requests. The initial description lists affected products as Windows platforms including Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and ...

Microsoft Windows Multiple Vulnerabilities (KB4019472)

This host is missing a critical/important security update according to Microsoft KB4019472. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CentOS 7 : kernel (CESA-2015:1778)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2015-0275

The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service BUG via a crafted fallocate zero-range request...

CVE-2015-0275

CVE-2015-0275 affects the Linux kernel ext4 subsystem: the ext4_zero_range function in fs/ext4/extents.c allows local users to trigger a denial of service via a crafted fallocate zero-range request. The linked MiracleLinux/Unity Linux Nessus entries reproduce this: the vulnerability is described ...

Oracle: Security Advisory (ELSA-2008-0275)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...