1000 matches found
Centreon 19.10.5 - Database Credentials Disclosure
Exploit Title: Centreon 19.10.5 - Database Credentials Disclosure Date: 2020-01-27 Exploit Author: Fabien AUNAY, Omri Baso Vendor Homepage: https://www.centreon.com/ Software Link: https://github.com/centreon/centreon Version: 19.10.5 Tested on: CentOS 7 CVE : - Centreon 19.10.5 Database...
CVE-2019-19342
A flaw was found in Ansible Tower 3.6.1 and 3.5.3 when /websocket is requested and the password contains the '' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker...
XenMobile Server experiences a communications error with Apple Deployment Programs (formerly DEP)
XenMobile Server administrators may notice that newly added Apple devices, which are registered viaApple Deployment Programs formerly DEP, do not appear on XenMobile Server. Previously enrolled devices are not affected. Apple DEP connectivity test initiated from the XenMobile server may also fail...
CVE-2019-5247
Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash...
CVE-2019-5247
Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash...
Huawei Atlas 300 and Atlas 500 Buffer Overflow Vulnerability
Huawei Atlas 300 and Atlas 500 are both products of Huawei, a Chinese company.Atlas 300 is an AI Artificial Intelligence accelerator card. The product is suitable for AI training and reasoning scenarios. A buffer overflow vulnerability exists in Huawei Atlas 300 version 1.0.0 and Huawei Atlas 500...
Murky Details Surround Bed, Bath and Beyond Breach
Housewares and home furnishings purveyor Bed, Bath and Beyond has disclosed a data-thieving cyber attack that allowed the adversaries to access customers’ online accounts. According to a Tuesday SEC filing, the company “discovered that a third party acquired email and password information from a...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4147-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4147-1 advisory. It was discovered that the Intel Wi-Fi device driver in the Linux kernel did not properly validate certain Tunneled Direct Link Setup TDLS. A physically...
Liberapay: Full Path disclosure on 500 error
On manipulating cookie + parameter: gitHub 500 error returned with path disclosing of Python Files. Error Below: Traceback most recent call last: File "/opt/python/run/venv/local/lib/python3.6/site-packages/statechain.py", line 328, in loop newstate = functiondeps.askwargs File...
USN-4147-1 linux, linux-aws, linux-azure, linux-gcp, linux-gke-5.0, linux-hwe, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the Intel Wi-Fi device driver in the Linux kernel did not properly validate certain Tunneled Direct Link Setup TDLS. A physically proximate attacker could use this to cause a denial of service Wi-Fi disconnect. CVE-2019-0136 It was discovered that the Bluetooth UART...
Mass Spoofing Campaign Abuses Walmart Brand
An ongoing domain name spoofing campaign is taking aim at retail giant Walmart and other big fish, with more than 540 malicious domains being used to harvest consumer information. The scam domains are mimicking legitimate sites in name and appearance, in hopes of fooling visitors into entering...
Multiple AudioCodes Products Trust Management Issue Vulnerabilities
AudioCodes Mediant 500L-MSBR and so on are products of AudioCodes Israel.AudioCodes Mediant 500L-MSBR is a 500L series all-in-one SOHO/SMB router.AudioCodes Mediant 500-MSBR is a 500 The AudioCodes Mediant 500-MSBR is a 500L series all-in-one SOHO/SMB router. A trust management issue vulnerabilit...
WordPress Plugin WP Statistics Patches XSS Flaw
WordPress plugin WP Statistics has patched a cross-site scripting XSS vulnerability that could allow for full website takeover, if the website is operating under certain non-default settings. WP Statistics gives website owners a tool to analyze site statistics, such as the number of visitors on t...
Cisco Small Business 200, 300, and 500 Series Managed Switches Buffer Overflow Vulnerability
Cisco Small Business 200 Series Managed Switches and so on are the products of the American Cisco Cisco company.Cisco Small Business 200 Series Managed Switches is a 200 Series Managed Switch.Cisco?Small Business 300 Series Managed Switches is a 300 Series Managed Switch.Cisco?Small Business 500...
Rockwell SLC 500 PLC Detection
Binary data 751074.prm...
Yokogawa FCN-500 Power Supply Detection
Binary data 758192.prm...
Yokogawa FCN-500 PLC Detection
Binary data 758151.prm...
Yokogawa FCN-500 Power Supply Detection
Binary data 758191.prm...