ZSQL: SSL Status

To ensure transmission security of sensitive data on the Internet, you can use SSL to encrypt the communication between GaussDB 100 servers and clients. Note: This script checks the HAVESSL parameter in DVPARAMETERS table. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be...

RIPS Scores a Perfect 100% at OWASP Benchmark

Comparing different SAST solutions with one another is no trivial task. Indeed, beyond some straightforward criteria such as a tools speed, usability, or integration options, the quintessential question is: How well does it perform in detecting actual vulnerabilities in your code? Benchmark Metri...

How an Elaborate North Korean Crypto Heist Fell Apart

Two Chinese citizens have been accused of running an intricate money-laundering scheme—involving more than $100 million in cryptocurrency...

SUSE SLES12 Security Update : mariadb-100 (SUSE-SU-2020:0523-1)

This update for mariadb-100 fixes the following issues : MariaDB was updated to version 10.0.40-3 bsc1162388. Security issue fixed : CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. Note that Tenable Network Security has extracted...

Design/Logic Flaw

The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers after using root access to make a copy of the local database to discover login credentials and voting history via an offline brute-force approach...

url.hqhl.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1087920 Security Researcher g0bl1nsec Helped patch 3735 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting url.hqhl.net website and...

Cisco Data Center Network Manager 11.2 - Remote Code Execution Exploit

Exploit for java platform in category web applications !/usr/bin/python """ Cisco Data Center Network Manager SanWS importTS Command Injection Remote Code Execution Vulnerability Tested on: Cisco DCNM 11.2.1 Installer for Windows 64-bit - Release: 11.21 - Release Date: 18-Jun-2019 - FileName:...

CVE-2013-7055

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

CVE-2013-7054

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-7051

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

CVE-2013-7053

D-Link DIR-100 4.03B07: cli.cgi CSRF...

Authorization

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

Cross site request forgery (csrf)

D-Link DIR-100 4.03B07: cli.cgi CSRF...

Information disclosure

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

Security feature bypass

D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...

Cross site scripting

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-7055

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

CVE-2013-7055

D-Link DIR-100 vulnerable on firmware 4.03B07 (hardware rev D1) to an information disclosure issue affecting PPTP and PoE data (CVE-2013-7055). This vulnerability is network-facing with risk of exposing sensitive information; vendor released a patched firmware (4.03B13) addressing the information...

CVE-2013-7054

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-7054

CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...