Command Execution Vulnerability in N-Speed Gigabit Multi-Network Wireless Broadband Sharer

Founded in 2006 in Tainan, Sapido is a brand name of internet communication products and IoT that has obtained the Taiwan Manufacturing Smile Seal. A command execution vulnerability exists in the N-Speed Gigabit Multi-Network Wireless Broadband Sharer, which can be exploited by an attacker to gai...

SAP Releases April 2021 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the SAP Security Notes for April 2021 and apply the necessary...

Buffer Overflow Vulnerability in TP-Link Routers

TL-WDR8500 is a TP-LINK router product. The TP-Link router suffers from a buffer overflow vulnerability that can be exploited by an attacker to gain control of the server...

GE MU320E Hardcoded Password Vulnerability

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. A hard-coded password vulnerability exists in GE MU320E firmware prior to version 04A00.1. An attacker could exploit this vulnerability to take control of the Merge Unit...

Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

CVE-2021-21619

Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers who are able to control the display names of Jenkins users, either via the security realm, or directly inside Jenkins...

DLL Hijacking Vulnerability in Sogou High Speed Browser

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

GLSA-202101-09 : VirtualBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-09 VirtualBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details. Impact : An attacker could take control of VirtualBox...

DLL Hijacking Vulnerability in Zoom Conference Client (CNVD-2021-03513)

Zoom is the leader in modern enterprise video communications, providing a platform for video/audio conferencing, collaboration, chat and webinars across mobile devices, desktops and conference room systems. A DLL hijacking vulnerability exists in the Zoom conferencing client, which can be exploit...

CVE-2020-26977

By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 84...

DLL Hijacking Vulnerability in Zoom Conference Client

Zoom is the leader in modern enterprise video communications, providing a platform for video/audio conferencing, collaboration, chat and webinars across mobile devices, desktops and conference room systems. A DLL hijacking vulnerability exists in the Zoom conferencing client, which can be exploit...

Lovecraft client suffers from dll hijacking vulnerability

Aiki is an online video site. A dll hijacking vulnerability exists in the AikiYi client, which can be exploited by an attacker to gain control of the server...

Design/Logic Flaw

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinuxaddr which allows an attacker to write memory values from within the enclave. We recommend upgrading past commi...

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

KOFFEE - Kia OFFensivE Exploit

This module exploits CVE-2020-8539, which is an arbitrary code execution vulnerability that allows an to attacker execute the micomd binary file on the head unit of Kia Motors. This module has been tested on SOP.003.30.18.0703, SOP.005.7.181019 and SOP.007.1.191209 head unit software versions. Th...

Bugventure Jsen Security Breach

Bugventure Jsen is a Js package for verifying Json objects from the Bugventure personal developer. A security vulnerability exists in jsen that can be exploited by an attacker to take control of a schema file, which can then be used to run arbitrary JavaScript code on the victim machine...

CVE-2020-13995

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable sBuffer leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DESinfo or imageinfo...

Medium: python-httplib2

Issue Overview: In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string...

Unspecified Vulnerability in Oracle Database Server Java VM Component (CNVD-2020-44296)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. A security vulnerability exists in the Java VM...

Server-Side Request Forgery

Web applications often rely on network requests to query external resources and retrieve data in order to process it. A Server-Side Request Forgery SSRF vulnerability exists when an attacker is able to control these outbound requests and send it to a resource he owns, to the localhost itself, or ...