ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence AI pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early...

Most Common Issues with Salesforce Connected App in Veeam Data Cloud for Salesforce

Purpose This article documents the changes to Connected App usage in Veeam Data Cloud for Salesforce resulting from Salesforce's restriction of uninstalled connected apps, effective Autumn 2025. It provides guidance on authorization requirements, common connection errors, and necessary permission...

EUVD-2020-11044

Malware in sbrugna...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1=10"...

ballanautumnfestival.com.au Improper Access Control vulnerability OBB-3757472

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cn.jiangzeyin.fast-boot:common-boot (>=1.2.24, <=1.2.27), cn.jiangzeyin.fast-boot:common-redis (>=1.2.24, <=1.2.27) +3 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.4.5)

cn.hutool:hutool-all MAVEN version 4.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.2.24, =1.2.24, =1.0.2-rc.7, =1.0.0, =0.0.1, =1.0.2 Source cves: CVE-2023-24163...

malvernautumn.co.uk Cross Site Scripting vulnerability OBB-2935064

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

File Upload Vulnerability in Heartland OA 2021 Autumn Solid Edition (CNVD-2021-89119)

Mindtone OA is an oa office tool equipped with AI artificial intelligence. A file upload vulnerability exists in Heartland OA 2021 Autumn Edition, which can be exploited by attackers to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88667)

HeartTone OA is an oa office tool equipped with AI artificial intelligence. Heart to OA 2021 Autumn real version there is a file upload vulnerability, attackers can use the vulnerability to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-86865)

HeartTone OA is a multifunctional intelligent office application. Heart to Heart OA 2021 Autumn Real Edition has a file upload vulnerability, which can be exploited by attackers to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88619)

HeartTone OA is an oa office tool equipped with AI artificial intelligence. Heart to OA 2021 Autumn real version there is a file upload vulnerability, attackers can use the vulnerability to gain control of the server...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

Improper access control

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

CVE-2020-19137

CVE-2020-19137 affects Autumn v1.0.4 and earlier. The root cause is incorrect access control in the Autumn CMS, enabling remote attackers to obtain clear-text login credentials via the endpoint autumn-cms/user/getAllUser/?page=1&limit=10. Provided connected documents confirm the specific vulnerab...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

CVE-2020-19137: Cleartext Storage of Sensitive Information

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

PT-2021-10287

Name of the Vulnerable Software and Affected Versions: Autumn versions 1.0.4 and earlier Description: The issue allows remote attackers to obtain clear-text login credentials. This is achieved via the component "autumn-cms/user/getAllUser/?page=1&limit=10". Recommendations: For Autumn versions...

Autumn security vulnerabilities

Autumn is a collection of Web subsystems designed to provide general purpose Web system solutions. A security vulnerability exists in Autumn v1.0.4 and earlier versions that stems from incorrect access control. The vulnerability allows remote attackers to obtain plaintext login credentials via th...