4208 matches found
How to remove the File Transfer Tab in a Full VPN NetScaler Gateway
How to remove the "File Transfer" Tab to prevent users from downloading files when accessing the environment through the NetScaler Gateway...
The vulnerability of the module for creating and editing user-form templates of the “LOCMAN Designer Form” in the LOCMAN Product Lifecycle Management system lies in its ability to download files of a dangerous type indefinitely, allowing a perpetrator to execute arbitrary code.
The vulnerability of the module responsible for creating and editing user-form templates in the “LOZMAN Designer Form” component of the LOZMAN Product Lifecycle Management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow an attacker to execu...
Google Chrome to Help Users Identify Untrusted Extensions Before Installation
Google on Thursday said it's rolling out new security features to Chrome browser aimed at detecting suspicious downloads and extensions via its Enhanced Safe Browsing feature, which it launched a year ago. To this end, the search giant said it will now offer additional protections when users...
Google PPC Ads Used to Deliver Infostealers
Researchers have tracked down the origins of several increasingly prevalent info-stealers – including Redline, Taurus, Tesla and Amadey – that threat actors are delivering via pay-per-click PPC ads in Google’s search results. On Wednesday, breach prevention firm Morphisec posted an advisory in...
github firefox-ios 信息泄露漏洞
github firefox-ios is a github open source application. Firefox for iOS is provided. An information disclosure vulnerability exists in github firefox-ios, which stems from the application outputting too much data during private browsing. When a client initiates a download, it does not check wheth...
PT-2021-16927 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.26 Description: A missing token check causes a CSRF issue in data download endpoints in com banners and com sysinfo. This allows for potential exploitation. Recommendations: For Joomla! versions 3.0.0 throug...
InvoicePlane Path Traversal Vulnerability
InvoicePlane is a software application. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. InvoicePlane version 1.5.11 suffers from a path traversal vulnerability that originates from a misconfigured web server that allows unauthenticated...
Opennms Group OpenNMS 跨站脚本漏洞
Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the US-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon, which can be exploited by an attacker to inject arbitrary scripts and trick...
Microsoft Exchange 2019 Unauthenticated Email Download
Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download Date: 03-11-2021 Exploit Author: Gonzalo Villegas a.k.a Cl34r Vendor Homepage: https://www.microsoft.com/ Version: OWA Exchange 2013 - 2019 Tested on: OWA 2016 CVE : CVE-2021-26855 Details: checking users mailboxes and...
Microsoft Exchange 2019 - Unauthenticated Email Download Exploit
Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download Exploit Author: Gonzalo Villegas a.k.a Cl34r Vendor Homepage: https://www.microsoft.com/ Version: OWA Exchange 2013 - 2019 Tested on: OWA 2016 CVE : CVE-2021-26855 Details: checking users mailboxes and automated downloads of...
Design/Logic Flaw
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround,...
[SECURITY] Fedora 34 Update: djvulibre-3.5.27-28.fc34
DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...
PT-2021-5203 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a lack of integrity check in Microsoft SharePoint Server packages. This can be exploited by a remote attacker to gain unauthorized access to...
Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35888)
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...
KLA12184 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A data validation vulnerability in V8 can be exploited to bypass security...
The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security allow for unlimited downloading of malicious files, enabling attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software lies in their ability to allow unlimited download of malicious files. Exploiting this vulnerability can enable a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
Domain Spoofing
chromium is vulnerable to domain spoofing. The vulnerability exists due to Incorrect security UI in downloads in Google Chrome on Android...
DEBIAN-CVE-2021-21229
Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
