19065 matches found
Xxe
HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
CVE-2023-28009 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection
HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
CVE-2023-28009 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection
HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
CVE-2023-28009
CVE-2023-28009 affects HCL Workload Automation. The vulnerability is an XML External Entity (XXE) injection in the XML processing path. Impact stated in sources: potential exposure of sensitive information and/or memory/resource exhaustion. Exploitation details are not provided in the documents; ...
Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Golang Go is used by IBM Robotic Process Automation as part of the operator CVE-2022-2879, CVE-2022-2880, CVE-2022-41715, CVE-2022-41716, CVE-2022-41721. Python is used by IBM Robotic Process...
CVE-2023-28008 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection
HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
CVE-2023-28008
CVE-2023-28008 affects HCL Workload Automation versions 9.4, 9.5, and 10.1 where XML data is processed. The root cause is XML External Entity (XXE) injection in the XML processing path, enabling a remote attacker to access sensitive information or exhaust memory resources as described across mult...
CVE-2023-28008 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection
HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
PT-2023-14789 · Visam · Visam Vbase Automation Base
Name of the Vulnerable Software and Affected Versions: VISAM VBASE Automation Base versions prior to 11.7.5 Description: The issue may disclose information if a valid user opens a specially crafted file. Recommendations: For versions prior to 11.7.5, update to version 11.7.5 or later to resolve t...
PT-2023-21476 · Hcl · Hcl Workload Automation
Name of the Vulnerable Software and Affected Versions: HCL Workload Automation affected versions not specified Description: HCL Workload Automation is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this issue to expose sensitive...
PT-2023-21475 · Hcl · Hcl Workload Automation
Name of the Vulnerable Software and Affected Versions: HCL Workload Automation versions 9.4 through 10.1 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memor...
HCL Technologies Workload Automation 代码问题漏洞
HCL Technologies Workload Automation is a workload automation software from HCL Technologies India. It refers to the use of software to schedule, manage and execute various business tasks and processes with minimal human intervention. A security vulnerability exists in HCL Technologies Workload...
HCL Technologies Workload Automation 代码问题漏洞
HCL Technologies Workload Automation is a workload automation software from HCL Technologies India. It refers to the use of software to schedule, manage and execute various business tasks and processes with minimal human intervention. HCL Technologies Workload Automation suffers from a security...
inDrive: Rider can forcefully get passenger's order accepted resulting in multiple impacts including PII reveal and more mentioned in the report.
A vulnerability was found in the customer order flow that allowed a driver to forcefully accept an order on behalf of a passenger, bypassing the normal negotiation process. This allowed the driver to set the ride price without following the built-in fare calculation algorithm...
WordPress Customer Support Software, Live Chat, & Marketing Automation Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Customer Support Software, Live Chat, & Marketing Automation Type Plugin Vulnerable versions = 1.0 Fixed in 1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 90abc4c14cb3...
The vulnerability of Rockwell Automation’s Modbus TCP Server AO lies in the lack of protection for service data, which allows attackers to disclose the protected information.
The vulnerability of Rockwell Automation’s Modbus TCP Server AOI lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
Simplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation
The last couple of years have been difficult, with many organizations operating in a response mode. From a global pandemic to an economic downturn to increasing security risks, teams are under more pressure than ever to deliver greater cyber security and do more with less. This responsive approac...
Simplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation
The last couple of years have been difficult, with many organizations operating in a response mode. From a global pandemic to an economic downturn to increasing security risks, teams are under more pressure than ever to deliver greater cyber security and do more with less. This responsive approac...
Automating Qakbot Detection at Scale With Velociraptor
In this blog, you will learn a practical methodology to extract configuration data from recent Qakbot samples. I will provide some background on Qakbot, then walk through decode themes in an easy to visualize manner. Additionally, I'll share a Velociraptor artifact to detect and automate the deco...
