Microsoft Exchange Server msExchEcpCanary CSRF / Privilege Escalation

!/usr/bin/env python3 """ Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability CVE: CVE-2021-24085 Summary This vulnerability allows remote attackers escalate privileges on affected installations of Microsoft Exchange Server. Authentication and...

Managed Service Provider? Watch This Video to Learn about Autonomous XDR

As managed security service providers, you're always on the lookout for new platforms. One that can generate further business, enables you to scale easily without investing in more human resources and provides that value immediately. In the meanwhile, your clients are constantly demanding more...

Unauthorized Access Vulnerability in 360 Smart Camera PTZ AI Edition Standard Model AP2C

360 Smart Camera PTZ AI Edition Standard Model AP2C is a device under the 360 Smart Home platform, which can help the owner to realize real-time monitoring of the home situation. 360 Smart Camera PTZ AI Edition Standard Model AP2C suffers from an unauthorized access vulnerability, which can be...

Fedora 33 : xen (2021-7785f6c616)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-7785f6c616 advisory. - IRQ vector leak on x86 XSA-360 FEDORA-2021-7785f6c616 Note that Nessus has not tested for this issue but has instead relied only on the application's...

360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11806)

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...

360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11807)

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...

360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11808)

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...

360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11809)

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...

360 Extreme Browser suffers from dll hijacking vulnerability (CNVD-2021-04835)

360 Extreme Browser is a dual-core browser. 360 Extreme Browser suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

360 Extreme Browser suffers from dll hijacking vulnerability (CNVD-2021-04833)

360 Extreme Browser is a dual-core browser. 360 Extreme Browser suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

360 Extreme Browser suffers from dll hijacking vulnerability (CNVD-2021-04836)

360 Extreme Browser is a dual-core browser. 360 Extreme Browser suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2018-14067

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces including the external Internet by default. NOTE: this may overlap CVE-2017-9980...

Command injection

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces including the external Internet by default. NOTE: this may overlap CVE-2017-9980...

CVE-2018-14067

CVE-2018-14067 affects Green Packet WiMax DV-360 devices running 2.10.14-g1.0.6.1. The issue is a command injection vulnerability causing unauthenticated remote command execution when a crafted payload is sent to the HTTPS port. The underlying cause cited is that lighttpd listens on all network i...

Green Packet WiMax DV-360 Command Injection Vulnerability

The Green Packet WiMax DV-360 is a router for the home from Green Packet USA. A security vulnerability exists in the Green Packet WiMax DV-360 2.10.14-g1.0.6.1 that allows for command injection, unauthenticated remote command execution via crafted payloads to HTTPS ports, as lighttpd listens to a...

Binary Vulnerability in Official 360 Antivirus Version

360 Antivirus is a free cloud security antivirus software from 360 Security Center. A binary vulnerability exists in the official version of 360 Antivirus, which can be exploited by attackers to execute malicious code...

Write to immutable memory region in TensorFlow

Impact The tf.rawops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor is not an integral type, the operation crashes the Python interpreter as it tries to write to the memory area: python import...

Lack of validation in data format attributes in TensorFlow

Impact The tf.rawops.DataFormatVecPermute API does not validate the srcformat and dstformat attributes. The code assumes that these two arguments define a permutation of NHWC. However, these assumptions are not checked and this can result in uninitialized memory accesses, read outside of bounds a...

360 Kids Desktop (Windows client) suffers from dll hijacking vulnerability

360 Kids Desktop is the children's version of 360 Safe Desktop, which is a safe Internet assistance software launched by Qihoo 360 specifically for kids. 360 Kids Desktop Windows client has a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute malicious code...

360 Secure Desktop suffers from dll hijacking vulnerability

360 Secure Desktop is a desktop application management software that helps you better organize your computer desktop documents and settings. 360 Secure Desktop has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...