CVE-2021-45419

Certain Starcharge products are affected by Improper Input Validation. The affected products include: Nova 360 Cabinet = 1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0 and Titan 180 Premium = 1.3.0.0.6 - Fixed: 1.3.0.0.9...

Input validation

Certain Starcharge products are affected by Improper Input Validation. The affected products include: Nova 360 Cabinet = 1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0 and Titan 180 Premium = 1.3.0.0.6 - Fixed: 1.3.0.0.9...

CVE-2021-45419

Certain Starcharge products are affected by Improper Input Validation. The affected products include: Nova 360 Cabinet = 1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0 and Titan 180 Premium = 1.3.0.0.6 - Fixed: 1.3.0.0.9...

CVE-2021-45419

The CVE-2021-45419 entry applies to Starcharge products affected by Improper Input Validation. Affected: Starcharge Nova 360 Cabinet versions ≤ 1.3.0.0.7b102 (remediated by Beta1.3.0.1.0) and Starcharge Titan 180 Premium versions ≤ 1.3.0.0.6 (remediated by 1.3.0.0.9). Root cause: improper input v...

CVE-2021-45418

Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet =1.3.0.0.6 - Fixed: 1.3.0.0.9 and Titan 180 Premium =1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0...

Directory traversal

Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet =1.3.0.0.6 - Fixed: 1.3.0.0.9 and Titan 180 Premium =1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0...

CVE-2021-45418

Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet =1.3.0.0.6 - Fixed: 1.3.0.0.9 and Titan 180 Premium =1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0...

Star Charge Nova 360 Cabinet和Titan 180 Premium 数据伪造问题漏洞

Star Charge Nova 360 Cabinet and Titan 180 Premium are both products of Star Charge, a Chinese company.The Nova 360 Cabinet is a charger cabinet.The Titan 180 Premium is a commercial high power charging station. The Star Charge Nova 360 Cabinet and Titan 180 Premium are vulnerable to a data forge...

PT-2021-24235 · Starcharge · Starcharge Nova 360 Cabinet +1

Name of the Vulnerable Software and Affected Versions: Starcharge Nova 360 Cabinet versions 1.3.0.0.7b102 and earlier Starcharge Titan 180 Premium versions 1.3.0.0.6 and earlier Description: The issue is related to Improper Input Validation, affecting certain Starcharge products. Recommendations:...

Star Charge Nova 360 Cabinet和Titan 180 Premium 路径遍历漏洞

Star Charge Nova 360 Cabinet and Titan 180 Premium are both products of Star Charge, a Chinese company.Nova 360 Cabinet is a charger cabinet.Titan 180 Premium is a commercial high power charging station. A path traversal vulnerability exists in the Star Charge Nova 360 Cabinet and Titan 180...

azure-ad allows bypassing CSRF protection for any URL

An extension point in Jenkins allows selectively disabling cross-site request forgery CSRF protection for specific URLs. azure-ad implements this extension point for URLs used by a JavaScript component. In azure-ad 179.vf6841393099e and earlier this implementation is too permissive, allowing...

Unspecified Vulnerability in Sitel CAP/PRX

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. A security vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to gain access to the device's local network to obtain...

CVE-2016-10780

cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

Cross site scripting

cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...

CVE-2016-10781

CVE-2016-10781 affects cPanel prior to 60.0.25, where the UI_confirm API is vulnerable to self-XSS due to insufficient validation of client-side data. The vulnerability can allow an attacker to execute client-side code via the UI_confirm interface, as described in the public records (SEC-180). Th...

North Korean Cyberwar Capabilities

Reuters has an article on North Korea's cyberwar capabilities, specifically "Unit 180." They're still not in the same league as the US, UK, Russia, China, and Israel. But they're getting better...

[SECURITY] [DLA 571-1] xen security update

Package : xen Version : 4.1.6.lts1-1 CVE ID : CVE-2014-3672 CVE-2016-3158 CVE-2016-3159 CVE-2016-3710 CVE-2016-3712 CVE-2016-3960 CVE-2016-4480 CVE-2016-6258 Debian Bug : Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifi...

Fedora 22 : xen (2016-4edd58a3b5)

cleaner way to set kernel module load list Unrestricted qemu logging XSA-180, CVE-2014-3672 1339125 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in espregwrite CVE-2016-4439 1337502 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in getcmd CVE-2016-4441 1337505 Qemu: scsi: megasa...

Fedora 24 : xen (2016-cfea37952b)

cleaner way to set kernel module load list Unrestricted qemu logging XSA-180, CVE-2014-3672 1339125 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in espregwrite CVE-2016-4439 1337502 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in getcmd CVE-2016-4441 1337505 Qemu: scsi: megasa...