931 matches found
CVE-2019-15006
There was a man-in-the-middle MITM vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence...
Information disclosure
There was a man-in-the-middle MITM vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence...
CVE-2019-15006
There was a man-in-the-middle MITM vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence...
CVE-2019-15006
CVE-2019-15006 describes a MITM vulnerability in the Confluence Previews plugin used to communicate with the Atlassian Companion app via the atlassian-domain-for-localhost-connections-only.com hostname (DNS to 127.0.0.1). An attacker controlling DNS could observe or modify edited files; the certi...
Atlassian Companion CVE-2019-15006 Security Bypass Vulnerability
Description Atlassian Companion is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions or conduct man-in-the-middle attack; this may aid in launching further attacks. Technologies Affected Atlassian...
DLL Hijacking Vulnerability in Karaoke Companion PC Client Software
Karaoke Companion is a karaoke software specially designed and produced for friends who love to sing, Karaoke Companion can help you create a variety of sound effects, including electric sound, vibrato, echo and so on. Karaoke Partner pc client software has a DLL hijacking vulnerability that can ...
Racer Live Companion pc client software suffers from dll hijacking vulnerability
Racer Live Companion is a special live broadcasting tools for Racer hosts, with video beauty features, rich material, perfect video editing and other features. Racer live partner pc client software dll hijacking vulnerability, attackers can use the vulnerability to inject DLL files to execute...
Adaware Web Companion version 4.8.2078.3950 - WCAssistantService Unquoted Service Path
Adaware Web Companion version 4.8.2078.3950 - WCAssistantService Unquoted Service Path Exploit Title: Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path Date: 2019-11-06 Exploit Author: Mariela L Martínez Hdez Vendor Homepage: https://webcompanion.com/en/...
Adaware Web Companion 4.8.2078.3950 Unquoted Service Path
Exploit Title: Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path Date: 2019-11-06 Exploit Author: Mariela L Martínez Hdez Vendor Homepage: https://webcompanion.com/en/ Software Link: https://webcompanion.com/en/ Version: Adaware Web Companion version...
Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path
Exploit Title: Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path Date: 2019-11-06 Exploit Author: Mariela L Martínez Hdez Vendor Homepage: https://webcompanion.com/en/ Software Link: https://webcompanion.com/en/ Version: Adaware Web Companion version...
Adaware Web Companion version 4.8.2078.3950 - (WCAssistantService) Unquoted Service Path
Exploit Title: Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path Exploit Author: Mariela L Martínez Hdez Vendor Homepage: https://webcompanion.com/en/ Software Link: https://webcompanion.com/en/ Version: Adaware Web Companion version 4.8.2078.3950 Tested on:...
Web Companion 5.1.1035.1047 WCAssistantService Unquoted Service Path
Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path Exploit Author: Debashis Pal Date: 2019-10-17 Vendor Homepage : https://webcompanion.com Source: https://webcompanion.com Version: Web Companion versions 5.1.1035.1047 CVE : N/A Tested on: Windows 7...
Web Companion versions 5.1.1035.1047 - WCAssistantService Unquoted Service Path
Web Companion versions 5.1.1035.1047 - WCAssistantService Unquoted Service Path Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path Exploit Author: Debashis Pal Date: 2019-10-17 Vendor Homepage : https://webcompanion.com Source: https://webcompanion.co...
Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path
Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path Exploit Author: Debashis Pal Date: 2019-10-17 Vendor Homepage : https://webcompanion.com Source: https://webcompanion.com Version: Web Companion versions 5.1.1035.1047 CVE : N/A Tested on: Windows 7...
Web Companion versions 5.1.1035.1047 - (WCAssistantService) Unquoted Service Path Vulnerability
Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path Exploit Author: Debashis Pal Vendor Homepage : https://webcompanion.com Source: https://webcompanion.com Version: Web Companion versions 5.1.1035.1047 CVE : N/A Tested on: Windows 7 SP164bit 1...
WordPress Companion Auto Update Plugin < 3.2.1 Multiple Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113486";...
WordPress companion-sitemap-generator plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-sitemap-generator is a sitemap plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...
WordPress companion-auto-update plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-auto-update is a plugin used to update WordPress and related components. A cross-site request forgery vulnerability exists i...
WordPress companion-auto-update plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-auto-update is a plugin used to update WordPress and related components. WordPress companion-auto-update plugin input...