4180 matches found
4-ecorp.com Cross Site Scripting vulnerability
Security Researcher DerCraig Helped patch 24 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting 4-ecorp.com website and its users. Following coordinated and responsible vulnerability...
agencenumerique.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-954562 Security Researcher DerCraig Helped patch 24 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting agencenumerique.com website and its users. Following...
Mozilla Firefox ESR < 68.0.2
The version of Firefox ESR installed on the remote Windows host is prior to 68.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-24 advisory. - When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved...
Mozilla Firefox < 68.0.2
The version of Firefox installed on the remote Windows host is prior to 68.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-24 advisory. - When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins...
Mozilla Firefox ESR Security Advisories (MFSA2019-24, MFSA2019-24) - Mac OS X
Mozilla Firefox ESR is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Mozilla Firefox Security Advisories (MFSA2019-24, MFSA2019-24) - Windows
Mozilla Firefox is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
KLA11540 OSI vulnerability in Mozilla Firefox
A bypass security vulnerability in Mozilla Firefox can be exploited to obtain sensitive information. Original advisories mfsa2019-24 Related products Mozilla-Firefox CVE list CVE-2019-11733 warning Solution Update to the latest version Download Mozilla Firefox Impacts OSI Obtain sensitive...
Customer Perspective: Catching the thief lurking in the shadows with EDR and MDR
A guest blog by Ian Loe, Senior Vice President, Cybersecurity, NTUC Enterprise Co-operative Limited News flash: aided by time, persistence and smarts, advanced cybersecurity felons are leapfrogging traditional security systems to compromise confidential data. Realising this, we at NTUC Enterprise...
CVE-2019-8624
creationtimestamp| type| source ---|---|--- 2019-07-23 22:00:25+00:00| published-proof-of-concept| https://t.me/N0iSeBit/305 2019-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47158 2019-08-01 17:26:31+00:00| published-proof-of-concept| https://t.me/N0iSeBit/307...
Default credentials
An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address...
CVE-2019-13240
An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address...
CVE-2018-15557
An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. An attacker can statically set his/her IP to anything on the 169.254.1.0/24 subnet, and obtain root access by connecting to 169.254.1.2 port 23 with telnet/netcat...
SAPIDO RB-1732 Remote Command Execution
Exploit Title: SAPIDO RB-1732 command line execution Date: 2019-6-24 Exploit Author: k1nm3n.aotoi Vendor Homepage: http://www.sapido.com.tw/ Software Link: http://www.sapido.com.tw/CH/data/Download/firmware/rb1732/tc/RB-1732TCv2.0.43.bin Version: RB-1732 V2.0.43 Tested on: linux import requests...
CVE-2017-17945
creationtimestamp| type| source ---|---|--- 2019-06-24 22:29:39+00:00| seen| https://t.me/cibsecurity/5098...
Authentication flaw
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. Furthermore, the user account that controls the web...
CVE-2019-12777
CVE-2019-12777 affects ENTTEC Datagate Mk2, Storm 24, Pixelator, and E-Streamer Mk2 firmware 70044_update_05032019-482, where startup scripts replace secure directory permissions with permissive rwxrwxrwx on /usr, /usr/local, /usr/local/dmxis, and /usr/local/bin. This is an Incorrect Permission A...
CVE-2019-12776
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They include a hard-coded SSH backdoor for remote SSH and SCP access as the root user. A command in the relocate and relocaterevB scripts copies the hardcoded key to...
CVE-2019-12775
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. Furthermore, the user account that controls the web...
CVE-2019-12775
CVE-2019-12775 affects ENTTEC Datagate Mk2, Storm 24, Pixelator (firmware 70044_update_05032019-482 and prior). The issue enables high-privileged root access via sudo for the www-data/web-app user without proper access control, potentially allowing execution of high-privilege binaries/assets pres...