The vulnerability of the php_wddx_pop_element function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the phpwddxpopelement function ext/wddx/wddx.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

What is XMPP ❓ — Extensible Messaging & Presence Protocol

What is XMPP ❓ — Extensible Messaging & Presence Protocol Introduction In the early 2000s, when the idea of chat applications was shaping, XMPP was allowing developers to construct interactive chat applications. Since its genesis, this protocol has come a long way and is now included in the tech...

What is a Webhook and How Does it Work ❓

If you’re amazed how a web app can converse with other apps and pass information to streamline operations then you must know about webhook. More than a mere means of communication for online services, webhook make tons of things conceivable. It’s an interesting piece of technology used for enabli...

What is API Gateway ❓ How it works ❓

In general, a gateway is a passage that acts as a connector for 2 components to make them achieve certain functionality. API Gateway is not very different. However, it is a crucial topic to understand for many of us. Well, in this article, we have got you covered. Introduction to API Gateway: A...

Arbitrary File Download Vulnerability in Goldie SMS Middleware Web Edition

Kindi SMS middleware Web Edition is designed to build a hardware device-based SMS data exchange platform. An arbitrary file download vulnerability exists in Kindi SMS Middleware Web Edition, which can be exploited by an attacker to download arbitrary files...

CVE-2021-27481

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

Hardcoded credentials

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

CVE-2021-27481

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

CVE-2021-27481

The CVE-2021-27481 entry concerns ZOLL Defibrillator Dashboard, prior to version 2.2. Affected products use a hardcoded cryptographic key in the data exchange, creating potential unauthorized access to sensitive information. Connected advisories (ICSMA-21-161-01) explicitly flag hard-coded crypto...

CVE-2021-27481

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

PT-2021-17468

Name of the Vulnerable Software and Affected Versions ZOLL Defibrillator Dashboard versions prior to 2.2 Description The affected products use a hardcoded encryption key in the data exchange process. This could allow an attacker to gain access to sensitive information. Recommendations For version...

Unisys Data Exchange Management Studio Cross-Site Scripting Vulnerability

Unisys Data Exchange Management Studio is a data exchange component from the American company Unisys. A cross-site scripting vulnerability exists in Unisys Data Exchange Management Studio version 5.0.34 and prior versions, which originates from input that is not cleared from HTML document fields,...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

Input validation

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

CVE-2020-35542

CVE-2020-35542 affects Unisys Data Exchange Management Studio prior to or up to 5.0.34. The root cause is input not being sanitized/cleared from HTML document fields, enabling a cross-site scripting (XSS) vulnerability. Affected component: HTML input handling within the product’s UI; impact is us...

CVE-2020-35542: Improper Neutralization of Input During Web Page Generation

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

PT-2021-11786

Name of the Vulnerable Software and Affected Versions: Unisys Data Exchange Management Studio versions 5.0.34 and earlier Description: The issue is related to the lack of input sanitization in a HTML document field, which could be exploited for an XSS attack. Recommendations: For versions 5.0.34...

Unisys Data Exchange Management Studio 跨站脚本漏洞

Unisys Data Exchange Management Studio is a data exchange component from the American company Unisys. A cross-site scripting vulnerability exists in Unisys Data Exchange Management Studio version 5.0.34 and prior versions, which originates from input that is not cleared from HTML document fields,...