4012 matches found
The vulnerability of the Bluetooth SDP analyzer service in computer networks, Wireshark, allows a hacker to cause a service failure.
The vulnerability of the Bluetooth SDP analyzer in Wireshark’s computer network traffic analysis service is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to cause a service failure by injecting specially created packets...
PT-2021-30941
Уязвимость программного обеспечение для SIEM EventLog Analyzer существует из-за непринятия мер по нейтрализации специальных элементов, используемых в команде операционной системы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды целевой...
zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::AYIYA::AYIYAAnalyzer::DetectProtocol
Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5513195373068288 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-packet-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400160a38...
Cross-site Scripting Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
Overview A Cross-site Scripting vulnerability was found in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...
SolarWinds Database Performance Analyzer Cross-Site Scripting Vulnerability
Solarwinds SolarWinds Database Performance Analyzer is a database performance analyzer from SolarWinds, Inc. The product is used for SQL query performance monitoring, analysis, tuning, etc. A security vulnerability exists in SolarWinds Database Performance Analyzer v2021.3.7388, which stems from ...
Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 1
This year, Rapid7 participated at the IoT Village during DefCon29 by running a hands-on hardware hacking exercise, with the goal of exposing attendees to concepts and methods for IoT hacking. Over the years, these exercises have covered several different embedded device topics, including how to u...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88241)
ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
Sql injection
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
CVE-2021-41075
The CVE-2021-41075 affects Zoho ManageEngine OpManager’s NetFlow Analyzer prior to build 125455. The vulnerability is a SQL Injection in the Attacks Module API, enabling an attacker to execute arbitrary SQL commands. The issue is confirmed across multiple sources (including Red Hat and CNVD) and ...
ZOHO ManageEngine OpManager SQL注入漏洞
ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...
PT-2021-23068
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManger versions prior to 125455 Description The issue concerns a SQL Injection vulnerability in the Attacks Module API of the NetFlow Analyzer. This vulnerability can be exploited to inject malicious SQL code. Recommendatio...
Shisho - Lightweight Static Analyzer For Several Programming Languages
Shisho is a lightweight static analyzer for developers. Please seethe usage documentation for further information. Try at Playground You can try Shisho at our playground. Try with Docker You can try shisho in your machine as follows: echo "func testv string int return lenv + 1; " | docker run -i...
Information Disclosure Vulnerability in Hitachi Tuning Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
Overview Hitachi Tuning Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer contains information disclosure vulnerability. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section...
ManageEngine EventLog Analyzer < Build 12201 REST API Restriction Bypass RCE
Binary data manageengineeventloganalyzercve-2021-40539.nbin...
FreeBSD : zeek -- several vulnerabilities (d4d21998-bdc4-4a09-9849-2898d9b41459)
Tim Wojtulewicz of Corelight reports : Paths from log stream make it into system unchecked, potentially leading to commands being run on the system unintentionally. This requires either bad scripting or a malicious package to be installed, and is considered low severity. Fix potential unbounded...
Supercharge your C++ analysis with SonarLint for CLion
Earlier this year we launched the support for C and C++ in SonarLint for CLion to address quality and security issues for your C/C++ projects. Since then, the team has continued to bring even greater value to the C and C++ users, continuing our mission to empower the community to deliver code tha...