9085 matches found
CVE-2023-29064
The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts...
Hardcoded credentials
The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts...
CVE-2023-29064 Hardcoded Secrets
The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts...
CVE-2023-29064 Hardcoded Secrets
The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts...
CVE-2023-29064
The CVE-2023-29064 issue affects BD FACSChorus software (versions v5.0/v5.1 and v3.0/v3.1) where sensitive information is stored in plaintext, enabling a threat actor to obtain hardcoded secrets such as tokens and passwords for administrative accounts. Root cause: use of plaintext storage for cre...
Ethyrial: Echoes of Yore Hit by Ransomware, Player Accounts Deleted
By Deeba Ahmed The victim company, Gellyberry Studios, an independent game studio, developed Ethyrial: Echoes of Yore. This is a post from HackRead.com Read the original post: Ethyrial: Echoes of Yore Hit by Ransomware, Player Accounts Deleted...
BD FACSChorus Security Breach
BD FACSChorus is a multichannel flow cytometry system from BD Medical BD. A security vulnerability exists in the BD FACSChorus that arises from the software not properly assigning data access rights to operating system user accounts...
PT-2023-22123 · Unknown · Facschorus
Name of the Vulnerable Software and Affected Versions: FACSChorus affected versions not specified Description: The issue concerns improper assignment of data access privileges for operating system user accounts in the FACSChorus software. This allows a non-administrative OS account to modify...
CVE-2022-22808
creationtimestamp| type| source ---|---|--- 2023-11-24 23:37:16+00:00| seen| https://t.me/arpsyndicate/551 2023-12-10 16:15:46+00:00| seen| https://t.me/arpsyndicate/1652...
OESA-2023-1852 shadow security update
Tools for managing accounts and shadow password files. Security Fixes: shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory treesCVE-2013-4235...
CVE-2023-26246
creationtimestamp| type| source ---|---|--- 2023-11-24 07:35:40+00:00| seen| https://t.me/arpsyndicate/520 2023-12-10 13:06:47+00:00| seen| https://t.me/arpsyndicate/1624...
Information disclosure
A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system...
Autodesk Customer Portal Security Vulnerability
Autodesk Customer Portal is a customer portal component of Autodesk USA. A security vulnerability exists in Autodesk Customer Portal that stems from cases where Autodesk users who no longer have a valid license for an account can still access that account...
The vulnerability of the software for automated, cloud-based, and on-premise administration of IBM Security Verify Privilege accounts lies in the lack of data encryption measures. This allows attackers to carry out “man-in-the-middle” attacks.
The vulnerability of the software for automated, cloud-based, and on-premise administration of IBM Security Verify Privilege accounts is related to the lack of data encryption measures. Exploiting this vulnerability could allow a malicious actor to carry out “man-in-the-middle” attacks...
CVE-2023-21418
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. The impact...
Path traversal
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw can only be exploited after authenticating with an operator- or administrator- privileged service...
Cross Site Scripting (XSS)
openCRX is vulnerable to Cross Site Scripting XSS attack. The vulnerability is due to a lack of validation in the name field under an accounts group. An attacker can potentially use this vulnerability for phishing attacks, website defacement or DoS...
PT-2023-7484 · Axis · Axis Os
Name of the Vulnerable Software and Affected Versions: AXIS OS versions prior to the patched version Description: The issue is related to the VAPIX API in the AXIS OS, specifically with the manageoverlayimage.cgi endpoint. It allows for path traversal attacks, enabling an attacker to delete...
