usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

The vulnerability of the GMapFP extension of the Joomla! content management system allows attackers to increase their privileges.

The vulnerability of the GMapFP extension in the Joomla! content management system is related to incorrect default access settings. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings, allowing attackers to circumvent existing security restrictions.

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings, which allow attackers to bypass existing security restrictions.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

PT-2022-15421 · Kuka · Kuka Systemsoftware V/Kss

Name of the Vulnerable Software and Affected Versions: KUKA SystemSoftware V/KSS versions prior to 8.6.5 Description: The issue is related to improper access control, allowing an unauthorized attacker to directly read and write robot configurations when access control is not available or not...

The vulnerability of the Advantech DeviceOn/iService software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iService software is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

The vulnerability of the Advantech DeviceOn/iEdge Server software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iEdge Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

The vulnerability of the Advantech SQ Manager Server software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech SQ Manager Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to increase their privileges by using a specially created file...

The vulnerability of the JetBrains Kotlin programming language interpreter arises from incorrect default access rights settings, allowing attackers to exploit the system to disclose protected information.

The vulnerability of the JetBrains Kotlin programming language interpreter is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

Library Management System With QR Code 1.0 SQL Injection Vulnerability

Title: Library Management System with QR code Attendance 1.0 SQL Injection Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...

APISIX Admin API default access token RCE

Apache APISIX has a default, built-in API token edd1c9f034335f136f87ad84b625c8f1 that can be used to access all of the admin API, which leads to remote LUA code execution through the script parameter added in the 2.x version. This module also leverages another vulnerability to bypass the IP...

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to incorrect default access rights settings, allowing a perpetrator to execute arbitrary codes.

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to incorrect default access rights settings. Exploiting this vulnerability could allow an attacker to execute arbitrary code with privileges of SYSTEM...

The vulnerabilities of bdservicehost.exe and Vulnerability.Scan.exe of the Bitdefender Endpoint Security Tools for Windows (BEST) and the antivirus software Bitdefender Total Security allow attackers to enhance their privileges.

The vulnerability of the bdservicehost.exe and Vulnerability.Scan.exe processes of the Bitdefender Endpoint Security Tools for Windows BEST and the antivirus software Bitdefender Total Security systems is related to incorrect default access settings. Exploiting this vulnerability can allow...

The vulnerability in the Intel Raid Web Console 3 relates to incorrect default access settings, allowing attackers to increase their privileges.

The vulnerability of the Intel Raid Web Console 3 web console relates to incorrect default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...

SNMP – Simply Not My Problem. Or is it?

TL;DR: Use SNMPv3; long gone is default community strings, hello complex passwords! Remove from the internet, if required, implement a VPN solution to restrict access to only authorised parties. SNMP is a protocol used for the remote management of devices on a network. By remote, we mean access...

The vulnerability of the tss_invalidate_io_bitmap function in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the tssinvalidateiobitmap function in the Linux operating system is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the rsyslog configuration file in the Ansible configuration management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the rsyslog configuration file in the Ansible configuration management system is related to incorrect default access settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...