Cisco Data Center Network Manager 11.2.1 Command Injection

!/usr/bin/python """ Cisco Data Center Network Manager LanFabricImpl createLanFabric Command Injection Remote Code Execution Vulnerability Tested on: Cisco DCNM 11.2.1 ISO Virtual Appliance for VMWare, KVM and Bare-metal servers - Release: 11.21 - Release Date: 05-Jun-2019 - FileName:...

Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection

!/usr/bin/python """ Cisco Data Center Network Manager LanFabricImpl createLanFabric Command Injection Remote Code Execution Vulnerability Tested on: Cisco DCNM 11.2.1 ISO Virtual Appliance for VMWare, KVM and Bare-metal servers - Release: 11.21 - Release Date: 05-Jun-2019 - FileName:...

Cisco Data Center Network Manager 11.2 - Remote Code Execution Exploit

Exploit for java platform in category web applications !/usr/bin/python """ Cisco Data Center Network Manager SanWS importTS Command Injection Remote Code Execution Vulnerability Tested on: Cisco DCNM 11.2.1 Installer for Windows 64-bit - Release: 11.21 - Release Date: 18-Jun-2019 - FileName:...

Cisco Data Center Network Manager 11.2.1 - (LanFabricImpl) Command Injection Exploit

Exploit for java platform in category web applications !/usr/bin/python """ Cisco Data Center Network Manager LanFabricImpl createLanFabric Command Injection Remote Code Execution Vulnerability Tested on: Cisco DCNM 11.2.1 ISO Virtual Appliance for VMWare, KVM and Bare-metal servers - Release:...

Announcing the Xbox Bounty program

We are pleased to announce the launch of the Xbox Bounty program today. The Xbox bounty program invites gamers, security researchers, and technologists around the world to help identify security vulnerabilities in the Xbox network and services, and share them with the Microsoft Xbox team through...

FreeBSD : pkg -- vulnerability in libfetch (2af10639-4299-11ea-aab1-98fa9bfec35a)

A programming error allows an attacker who can specify a URL with a username and/or password components to overflow libfetch3 buffers. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacqu...

FreeBSD-SA-20:01.libfetch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:01.libfetch Security Advisory The FreeBSD Project Topic: libfetch buffer overflow Category: core Module: libfetch Announced: 2020-01-28 Credits: Duncan...

CVE-2020-1840

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175C00E70R3P8 have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the...

CVE-2020-1840

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175C00E70R3P8 have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the...

Authentication flaw

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175C00E70R3P8 have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the...

CVE-2020-1840

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175C00E70R3P8 have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the...

CVE-2020-1840

CVE-2020-1840 affects Huawei Mate 20 smartphones with versions earlier than 10.0.0.175 (C00E70R3P8). The issue is an insufficient authentication vulnerability that allows a local, high-privilege attacker to execute a specific command, leading to potential information leakage and degraded device a...

CVE-2020-7215

creationtimestamp| type| source ---|---|--- 2020-01-20 13:37:37+00:00| seen| https://t.me/cveNotify/338...

CVE-2019-20381

creationtimestamp| type| source ---|---|--- 2020-01-20 13:37:36+00:00| seen| https://t.me/cveNotify/337...

CVE-2020-7236

creationtimestamp| type| source ---|---|--- 2020-01-20 01:37:38+00:00| seen| https://t.me/cveNotify/335...

Huawei Mate 20 has an unspecified vulnerability

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. A security vulnerability in previous versions of Huawei Mate 20 10.0.0.175 C00E70R3P8, which stems from the program's failure to perform adequate authentication, can be exploited by a local attacker to disclose information and...

Siemens TIA Portal (Update F)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: TIA Portal Vulnerability: Path Traversal 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-20-014-05 Siemens TIA Portal Update E that was published June...

Solaris 10 (x86) : 144675-02

SunOS 5.10x86: GNU patch patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132900; scriptversion"1.1"; scriptcvsdate"Date:...

Solaris 10 (sparc) : 145069-02

X11 6.6.2: xlock patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132894; scriptversion"1.3";...

Huawei Mate 20 Pro Insufficient Authentication Vulnerability

Huawei Mate 20 Pro is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in versions prior to Huawei Mate 20 Pro 10.0.0.175 C00E69R3P8, which stems from the system not adequately checking package names in some cases. An attacker can exploit the...