Design/Logic Flaw

An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function...

Design/Logic Flaw

In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions...

Design/Logic Flaw

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

Design/Logic Flaw

Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=deleteimg...

Design/Logic Flaw

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

Is CSS Really Necessary for Responsive Web Design?

By Owais Sultan Is CSS a necessity for responsive web design? This article will help you find out if it really… This is a post from HackRead.com Read the original post: Is CSS Really Necessary for Responsive Web Design?...

MAL-2022-200 Malicious code in @design-components/customer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2666e2e1994e04e2770cc4ad18bf2c0538aaca1cf1b0889dcea405c50b632e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker who is able to obtain the meeting identifier for a meeting on a server can find information related to an external video being shared, like the current timestamp...

ABB e-Design 安全漏洞

ABB e-Design is a tool from ABB Switzerland for designing electrical systems using ABB hardware. A security vulnerability exists in ABB e-Design that stems from an incorrect default privileges vulnerability in ABB e-Design. An attacker could use this vulnerability to install malware that executes...

The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software relates to the writing beyond buffer boundaries in memory during DWG file syntax analysis. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context o...

ABB e-Design 安全漏洞

ABB e-Design is a tool from ABB Switzerland for designing electrical systems using ABB hardware. A security vulnerability exists in ABB e-Design that stems from an incorrect default privileges vulnerability in ABB e-Design. An attacker could use this vulnerability to install malware that executes...

Design/Logic Flaw

Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3...

This Week in Spring - May 31st, 2022

Hi, Spring fans! And welcome to another installment of This Week in Spring! Ive just returned from three wonderful weeks overseas and now, Im pleased as punch to convey, that Im home! And hopefully, COVID-19 free! Who knows what sort of nonsense I caught on the flight home, anyway. Some things, I...

CVE-2022-29483

ABB e-Design contains an Incorrect Default Permissions vulnerability in the installer that can allow a local attacker to install malware and execute with SYSTEM privileges. The issue arises from the installer’s handling of permissions and a symbolic link abuse path, enabling privilege escalation ...

CVE-2022-29483 e-Design - Multiple vulnerabilities

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

CVE-2022-28702

ABB e-Design vulnerability CVE-2022-28702 involves incorrect default permissions that allow a local attacker to install malicious software with SYSTEM permissions, affecting affected ABB e-Design installations. The issue stems from permissions handling in the installer, enabling privilege escalat...

CVE-2022-28702 e-Design - Multiple vulnerabilities

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

Design/Logic Flaw

Use After Free in GitHub repository mruby/mruby prior to 3.2...

Design/Logic Flaw

Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3...

Design/Logic Flaw

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...