Iocharger 安全漏洞

Iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. Iocharger has a security vulnerability that stems from improper neutralization of specific elements...

iocharger 安全漏洞

iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. A security vulnerability exists in iocharger that stems from improper neutralization of specific elements...

iocharger 安全漏洞

iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. A security vulnerability exists in iocharger. An attacker exploiting this vulnerability could upload arbitrary files to /tmp/upload/ or /tmp/...

ROS-20250109-06

The ungetbyte and ungetc methods of StringIO string handler for Ruby programming language are vulnerable to with an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of protected information...

iocharger 安全漏洞

iocharger is an electric vehicle charging and smart energy management solution from the Chinese company Galaxy Zhangtan iocharger. A security vulnerability exists in iocharger versions prior to 24120701, which stems from an unsatisfactory neutralization of a special element used in a command, whi...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a privilege extraction vulnerability in the Account module. An attacker could exploit t...

CVE-2024-10527

The Spacer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the motechspacercallback function in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view...

AIMS eCrew 安全漏洞

AIMS eCrew is an AIMS native mobile application for Google devices from AIMS. AIMS eCrew has a security vulnerability that originates from improper access control...

Dental group lied through teeth about data breach, fined $350,000

A US chain of dental offices known as Westend Dental LLC denied a 2020 ransomware attack and its associated data breach, instead telling their customers that data was lost due to an “accidentally formatted hard drive.” Unfortunately for the organization, the truth was found out. Westend Dental...

India Proposes Digital Data Rules with Tough Penalties and Cybersecurity Requirements

The Indian government has published a draft version of the Digital Personal Data Protection DPDP Rules for public consultation. "Data fiduciaries must provide clear and accessible information about how personal data is processed, enabling informed consent," India's Press Information Bureau PIB sa...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8 that stems from a large BPF filter file provided to Suricata at startup that could cause a buffer overflow when Suricata starts...

PNETLab 安全漏洞

PNETLab is a platform from PNETLab Inc. that allows labs to be downloaded and shared with the community. A security vulnerability exists in PNETLab version 5.3.11, which stems from the presence of a cross-site scripting attack vulnerability that allows an attacker to inject malicious script into ...

Campcodes School Faculty Scheduling System 安全漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes, Inc. A security vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter page in the file /admin/index.php that causes the file to include...

Imperva’s Wildest 2025 AppSec Predictions

Humans are spectacularly bad at predicting the future. Which is why, when someone appears to be able to do it on a regular basis, they are hailed as visionaries, luminaries and celebrated with cool names like Nostradamus and The Amazing Kreskin. Nostradamus made his fame on predictions about the...

BREACH Attack

Varnish VCL templates are vulnerable to the BREACH vulnerability. The vulnerability is due to improper handling of HTTP compression, allowing secrets to be extracted through carefully crafted requests...

BREACH Attack

ibexa/post-install is vulnerable to the BREACH attack. The vulnerability is due to improper handling of HTTP compression, allowing secrets to be extracted through carefully crafted requests...

BREACH Attack

ibexa/http-cache is vulnerable to the BREACH Attack. The vulnerability is due to improper handling of HTTP compression, allowing secrets to be extracted through carefully crafted requests...

Apple iPhone OS and iPadOS Privacy Breach Vulnerability

iPhone OS is the operating system developed by Apple for the iPhone and iPod touch. iPadOS is Apple's mobile operating system for iPad devices, which is based on iOS and optimized for iPad. A privacy disclosure vulnerability exists in Apple iPhone OS and iPadOS, which stems from the fact that use...

Karmada 安全漏洞

Karmada is a Kubernete management system open-sourced by Karmada. A security vulnerability exists in Karmada versions prior to 1.12.0 that stems from allowing users to run cloud-native applications across multiple Kubernetes clusters and clouds...

Kentico 安全漏洞

Kentico is an ASP.NET-based content management system CMS from Kentico, Inc. A security vulnerability exists in Kentico version 7, which stems from the ability to send certain GET request parameters to the /CMSMMessages/AccessDenied.aspx endpoint, which can lead to a reflective cross-site scripti...