CVE-2021-45418

Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet =1.3.0.0.6 - Fixed: 1.3.0.0.9 and Titan 180 Premium =1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0...

PT-2021-24235 · Starcharge · Starcharge Nova 360 Cabinet +1

Name of the Vulnerable Software and Affected Versions: Starcharge Nova 360 Cabinet versions 1.3.0.0.7b102 and earlier Starcharge Titan 180 Premium versions 1.3.0.0.6 and earlier Description: The issue is related to Improper Input Validation, affecting certain Starcharge products. Recommendations:...

Star Charge Nova 360 Cabinet和Titan 180 Premium 路径遍历漏洞

Star Charge Nova 360 Cabinet and Titan 180 Premium are both products of Star Charge, a Chinese company.Nova 360 Cabinet is a charger cabinet.Titan 180 Premium is a commercial high power charging station. A path traversal vulnerability exists in the Star Charge Nova 360 Cabinet and Titan 180...

Star Charge Nova 360 Cabinet和Titan 180 Premium 数据伪造问题漏洞

Star Charge Nova 360 Cabinet and Titan 180 Premium are both products of Star Charge, a Chinese company.The Nova 360 Cabinet is a charger cabinet.The Titan 180 Premium is a commercial high power charging station. The Star Charge Nova 360 Cabinet and Titan 180 Premium are vulnerable to a data forge...

Unspecified Vulnerability in Sitel CAP/PRX

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. A security vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to gain access to the device's local network to obtain...

accuinsight (>=1.0.47 <=1.0.61), adapt-diagnostics (=1.2.0) +171 more potentially affected by CVE-2021-29543 via tensorflow (>=2.2.0 <=2.3.0)

tensorflow PYPI version =2.2.0, =1.0.47, =0.1.0, =0.10.0, =0.5.0, =0.0.1, =0.0.2 and more Source cves: CVE-2021-29543 Source advisory: OSV:PYSEC-2021-180...

CVE-2016-10780

cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

Cross site scripting

cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...

CVE-2016-10781

CVE-2016-10781 affects cPanel prior to 60.0.25, where the UI_confirm API is vulnerable to self-XSS due to insufficient validation of client-side data. The vulnerability can allow an attacker to execute client-side code via the UI_confirm interface, as described in the public records (SEC-180). Th...

North Korean Cyberwar Capabilities

Reuters has an article on North Korea's cyberwar capabilities, specifically "Unit 180." They're still not in the same league as the US, UK, Russia, China, and Israel. But they're getting better...

[SECURITY] [DLA 571-1] xen security update

Package : xen Version : 4.1.6.lts1-1 CVE ID : CVE-2014-3672 CVE-2016-3158 CVE-2016-3159 CVE-2016-3710 CVE-2016-3712 CVE-2016-3960 CVE-2016-4480 CVE-2016-6258 Debian Bug : Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifi...

Fedora 22 : xen (2016-4edd58a3b5)

cleaner way to set kernel module load list Unrestricted qemu logging XSA-180, CVE-2014-3672 1339125 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in espregwrite CVE-2016-4439 1337502 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in getcmd CVE-2016-4441 1337505 Qemu: scsi: megasa...

Fedora 24 : xen (2016-cfea37952b)

cleaner way to set kernel module load list Unrestricted qemu logging XSA-180, CVE-2014-3672 1339125 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in espregwrite CVE-2016-4439 1337502 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in getcmd CVE-2016-4441 1337505 Qemu: scsi: megasa...

Amazon Linux: Security Advisory (ALAS-2013-180)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHPYUN无视GPC(可注入全站信息)

简要描述： PHPYUN无视GPC可注入全站信息 180个字符的注入，等于没有限制，什么都能注入出来 详细说明： 首先我们看这个文件： api/locoy/model/news.class.php: class newscontroller extends common function addnewsaction//新闻添加 include"locoyconfig.php"; if$locoyinfo'locoyonline'!=1 echo 4;die; if$locoyinfo'locoykey'!=trim$GET'key' echo 5;die; if!$POST'title'...

DDoS attack from Browser-based Botnets that lasted for 150 hours

Browser-based botnets are the T-1000s of the DDoS world. Just like the iconic villain of the old Judgment Day movie, they too are designed for adaptive infiltration. This is what makes them so dangerous. Where other more primitive bots would try to brute-force your defenses, these bots can simply...

Slackware Advisory SSA:2008-180-01 gnutls

The remote host is missing an update as announced via advisory SSA:2008-180-01. OpenVAS Vulnerability Test $Id: esoftslkssa200818001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2010-180-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nikjju Mass injection campaign target more than 2 Millions Urls

Nikjju Mass injection campaign target more than 2 Millions Urls Daniel Cid an open source developer and information security professional reported on Sucuri blog that their team tracked a new mass SQL injection campaign that started early this month and till now more than 180,000 URLs have been...