11120 matches found
Yachtcontrol 2019-10-06 Remote Code Execution Exploit #RCE
Exploit for windows platform in category remote exploits Exploit Title: Yachtcontrol Webapplication - Unauthenticated Remote Code Execution Exploit Author: Hodorsec Vendor Homepage: http://www.yachtcontrol.nl/en/ Software Link: http://download.yachtcontrol.nl/klant/Software/ &...
Fronius Solar Inverter Series Insecure Communication / Path Traversal
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilites product: Fronius Solar Inverter Series vulnerable version: SW Version =3.14.1 vuln 2: 3.12.5 - HM 1.10.5, see solution section below CVE number:...
SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery
SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery Exploit Title: SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery Discovery by: LiquidWorm Date: 2019-12-02 Vendor Homepage: Tested Version: 6.5.33.17072501 CVE: N/A Advisory ID: ZSL-2019-5543 Advisory URL:...
DNCI - Dot Net Code Injector
DNCI allows the injection of .Net code .exe or .dll remotely in unmanaged processes in windows. 1. Project Structure The project is structured in: DNCI.Injector.Library - Injection library. Contains all injection components and logic; DNCI.Injector.Runner - Command line utility for injection;...
Authentication flaw
Huawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41SP2C00E41R3P2 have an improper authentication vulnerability. Successful exploitation may cause the attacker to access specific components...
org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (9.5.0)
org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...
org.opencms:opencms-components (9.0.1), org.opencms:opencms-gwt (9.0.1) +19 more potentially affected by CVE-2019-13235 via org.opencms:opencms-core (9.0.1)
org.opencms:opencms-core MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.0.1 - org.opencms:opencms-gwt 9.0.1 - org.opencms:opencms-setup 9.0.1 -...
de.eonas.portal:opencmsinstaller (9.5.2.0), de.eonas.portal:opencmsportaldriver (9.5.2.0) +21 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (9.5.2)
org.opencms:opencms-core MAVEN version 9.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.2.0 - de.eonas.portal:opencmsportaldriver 9.5.2.0 -...
org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (9.5.0)
org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...
org.opencms:opencms-components (9.5.3), org.opencms:opencms-gwt (9.5.3) +19 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (9.5.3)
org.opencms:opencms-core MAVEN version 9.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.3 - org.opencms:opencms-gwt 9.5.3 - org.opencms:opencms-setup 9.5.3 -...
org.opencms:opencms-components (9.5.3), org.opencms:opencms-gwt (9.5.3) +19 more potentially affected by CVE-2019-13234 via org.opencms:opencms-core (9.5.3)
org.opencms:opencms-core MAVEN version 9.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.3 - org.opencms:opencms-gwt 9.5.3 - org.opencms:opencms-setup 9.5.3 -...
org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2019-13234 via org.opencms:opencms-core (9.5.0)
org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...
September 10, 2019âKB4516033 (Security-only update)
September 10, 2019âKB4516033 Security-only update Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Note IMPORTANT Verify that you have installed the required updates listed in the How to get this update section before installing this update. Improvements and fixes This...
PT-2019-17522
Name of the Vulnerable Software and Affected Versions Huawei smartphones versions prior to Taurus-AL00B 10.0.0.41SP2C00E41R3P2 Description The issue is related to improper authentication, which could allow an attacker to access specific components if successfully exploited. Recommendations For...
CVE-2019-5233: Improper Authentication
Huawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41SP2C00E41R3P2 have an improper authentication vulnerability. Successful exploitation may cause the attacker to access specific components...
[SECURITY] Fedora 31 Update: unbound-1.9.4-1.fc31
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...
Rockwellautomation Connected Uncontrolled Search Path Element
A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench CCW. The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVES...
EulerOS 2.0 SP5 : libcroco (EulerOS-SA-2019-2203)
According to the versions of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buff...