CVE-2022-41204

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack...

SAMSUNG Mobile devices account component access control error vulnerability

SAMSUNG Mobile devices is a series of Samsung mobile devices from South Korea's Samsung SAMSUNG, including cell phones, tablets, etc. SAMSUNG Mobile devices versions prior to 13.5.01.3 contain an access control error vulnerability that stems from improper protection of components in Samsung...

LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data

Multiple campaigns that distributed trojanized and typosquatted packages on the NPM open source repository have been identified as the work of a single threat actor dubbed LofyGang. Checkmarx said it discovered 199 rogue packages totaling thousands of installations, with the group operating for...

Meta Says It Has Busted More Than 400 Login-Stealing Apps This Year

The company plans to alert 1 million Facebook users that their account credentials may have been compromised by malicious software...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices is a series of Samsung mobile devices from South Korea's Samsung SAMSUNG, including cell phones, tablets, etc. SAMSUNG Mobile devices versions prior to 13.5.01.3 contain an access control error vulnerability that stems from improper protection of components in Samsung...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 13.5.01.3, which stems from an intent redirection vulnerability in Samsung accounts. ...

The vulnerability of the PowerScale OneFS operating systems, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PowerScale OneFS operating system is related to deficiencies in the authentication process when using an expired account. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Zyxel CloudCNM SecuManager SQL注入漏洞

Zyxel CloudCNM SecuManager is a set of network management software from Taiwan, China-based Zyxel. The software supports centralized control, device management and intelligent monitoring. A SQL injection vulnerability exists in Zyxel CloudCNM SecuManager version 3.1.0 and 3.1.1. An attacker can...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

Cross site scripting

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

Ukraine Busts Pro-Russia Hackers Who Stole 30M Accounts of EU Citizens

By Waqas According to the Ukraine Security Service SSU, the hackers were selling the hacked accounts to "Russian propagandists" through the dark web. This is a post from HackRead.com Read the original post: Ukraine Busts Pro-Russia Hackers Who Stole 30M Accounts of EU Citizens...

Online Banking System SQL Injection Vulnerability (CNVD-2022-68370)

Online Banking System is a simple banking system project. It is used to manage bank customer accounts and process basic customer transactions.Online Banking System SQL injection vulnerability, which stems from a SQL injection issue in the custid parameter in the /net-banking/editcustomeraction.ph...

Security Bulletin: IBM XIV Storage System (MTM 2810-A14, 2812-A14, MTM 2810-114, 2812-114) Fixed Passwords for Maintenance Accounts (CVE-2012-2166)

Abstract IBM XIV Storage Systems have maintenance accounts with fixed passwords. A fix is available to manage access to these accounts. Content VULNERABILITY DETAILS: DESCRIPTION: The XIV Storage Systems have preconfigured user accounts that are used for maintenance purposes. These accounts have...

Security Bulletin: TS3310 Tape Library contains pre-configured default accounts (CVE-2012-1844)

Abstract Security Vulnerability in the TS3310 Tape Library. The tape library ships with certain pre-configured default accounts that have fixed passwords. A remote unauthorized user with knowledge of these accounts/passwords could use them to gain unauthorized access to the tape library. Content...

CVE-2022-41352

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

CVE-2022-41352

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

Security Bulletin: Unspecified vulnerability in InfoSphere Guardium allows remote unauthenticated attackers to create unprivileged user accounts (CVE-2012-3338)

Abstract Unspecified vulnerability in InfoSphere Guardium allows remote unauthenticated attackers to create unprivileged user accounts. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3338 DESCRIPTION: There is a way for an attacker to login to the InfoSphere Guardium User Interface with the know...