Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7074 Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34005

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

CVE-2022-34006

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT...

CVE-2022-34005

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

Remote code execution

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

CVE-2022-34005

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

CVE-2022-34006

Titan FTP Server NextGen (pre-1.2.1050) is affected by a flaw in the installation of Microsoft SQL Express 2019 where the SQL instance runs as SYSTEM with BUILTIN\Users as sysadmin. This configuration can allow an unprivileged Windows user to execute commands locally as NT AUTHORITY\SYSTEM (NX-I6...

South River Technologies TitanFTP NextGen 安全漏洞

South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen prior to version 1.2.1050, which stems from...

CVE-2022-34005: Use of Hard-coded Credentials

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

South River Technologies TitanFTP NextGen 信任管理问题漏洞

South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen versions prior to 1.2.1050, which originates from ...

CVE-2022-34006: Improper Privilege Management

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT...

CVE-2022-31784

A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker that has network access to the management interface to conduct a buffer overflow attack due to insufficient validation of URL...

CVE-2022-31784

CVE-2022-31784 affects Mitel MiVoice Business (up to 9.3 PR1) and MiVoice Business Express (up to 8.0 SP3 PR3). The vulnerability stems from insufficient validation of URL parameters in the management interface, enabling an unauthenticated attacker with network access to perform a buffer overflow...

CVE-2022-31784: Buffer Copy without Checking Size of Input

A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker that has network access to the management interface to conduct a buffer overflow attack due to insufficient validation of URL...

PT-2022-3052

Name of the Vulnerable Software and Affected Versions Titan FTP Server NextGen versions prior to 1.2.1050 Description The issue is related to the use of hardcoded credentials for the sa account in the Microsoft SQL Express 2019 instance installed by default during Titan FTP Server NextGen...

PT-2022-20929

Name of the Vulnerable Software and Affected Versions MiVoice Business versions through 9.3 PR1 MiVoice Business Express versions through 8.0 SP3 PR3 Description A vulnerability in the management interface could allow an unauthenticated attacker with network access to conduct a buffer overflow...

Mitel MiVoice Business Express 安全漏洞

Mitel MiVoice Business Express is a real-time communications solution from Mitel Canada. A security vulnerability exists in Mitel MiVoice Business version 9.3 PR1 and earlier and MiVoice Business Express version 8.0 SP3 PR3 and earlier, which stems from insufficient validation of URL parameters. ...

PT-2022-3053 · South River Technologies +1 · Titan Ftp Server Nextgen +1

Name of the Vulnerable Software and Affected Versions: Titan FTP Server NextGen versions prior to 1.2.1050 Description: The issue is related to errors during the installation of Microsoft SQL Express 2019, which allows an attacker to execute arbitrary commands with elevated privileges. When...