192 matches found
The vulnerability of the SAP Plug-In Basis plugin of the SAP Business Warehouse system, related to deficiencies in the authentication process, allows an intruder to gain unauthorized access to protected information.
The vulnerability of the SAP Plug-In Basis component of the SAP Business Warehouse system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2025-42983
Affected product: SAP Business Warehouse and SAP Plug-In Basis. vulnerability: missing authorization checks allow an authenticated attacker to drop arbitrary SAP database tables and delete entries, potentially causing data loss and system unavailability; no data reading is possible. root cause: l...
SAP Business Warehouse和SAP Plug-In Basis 安全漏洞
SAP Business Warehouse and SAP Plug-In Basis are both products of SAP, Germany.SAP Business Warehouse is a key component for executing business processes that allows users to design, implement, and manage business processes, ensure process compliance, and reduce the need for manual operations...
Quantum Secure Key Exchange with Position-Based Credentials
Quantum key distribution QKD provides an information-theoretic way of securely exchanging secret keys, and typically relies on pre-shared keys or public keys for message authentication. To lift the requirement of pre-shared or public keys, Buhrman et. al. SIAM J. Comput. 43, 150 2014 proposed...
CVE-2014-8663
SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Compile-Time Fully Homomorphic Encryption of Vectors: Eliminating Online Encryption Via Algebraic Basis Synthesis
Whitepaper called Compile-Time Fully Homomorphic Encryption Of Vectors: Eliminating Online Encryption Via Algebraic Basis Synthesis...
CVE-2025-43011
Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availabili...
CVE-2025-43011 Missing Authorization Check in SAP Landscape Transformation (PCL Basis)
Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availabili...
CVE-2025-43011 Missing Authorization Check in SAP Landscape Transformation (PCL Basis)
Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availabili...
CVE-2022-41264
Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an authenticated non-administrator attacker to access a system class and execute any of its public methods with parameters provided by the attacke...
Upcoming changes for Citrix DaaS to remote hypervisor communication
Citrix DaaS service is migrating the communication channel used to access some Hypervisors. This migration will result in a more stable and higher performing connection. This transition will be performed on a rolling basis starting in Q1 2025...
South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers
Meta has been fined 21.62 billion won $15.67 million by South Korea's data privacy watchdog for illegally collecting sensitive personal information from Facebook users, including data about their political views and sexual orientation, and sharing it with advertisers without their consent. The...
Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks
On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function CWE-306 in the FortiManager...
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...
gnark's Groth16 commitment extension unsound for more than one commitment
Description The summary is that the proof of knowledge associated to a commitment is crucial to bind the commitment to the actual circuit variables that were supposed to be committed. However, the same σ is used for all proofs of knowledge for the commitments, which allows mixing between them,...
GHSA-Q3HW-3GM4-W5CR gnark's Groth16 commitment extension unsound for more than one commitment
Description The summary is that the proof of knowledge associated to a commitment is crucial to bind the commitment to the actual circuit variables that were supposed to be committed. However, the same σ is used for all proofs of knowledge for the commitments, which allows mixing between them,...
Malicious code in Be.Vlaanderen.Bаsisregisters.StreetNameRegistry.Api.BackOffice.Abstractioոs (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaandereո.Basisregistеrs.EventHаndliոg (NuGet)
--- -= Per source details. Do not edit below this line.=-...