Security Bulletin: Vulnerability in Linux Kernel affects ProtecTIER: Dirty COW vulnerability (CVE-2016-5195)

Summary A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An attacker could exploit this vulnerability to gain write access to read-only memory mappings and elevated privileges on the system...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect ProtecTIER

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by ProtecTIER. ProtecTIER has addressed the applicable CVEs including the “DROWN: Decrypting RSA with Obsolete and Weakened eNcryption" vulnerability. Vulnerability Details CVEID: CVE-2016-0800...

Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path

Exploit Title: Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path Discovery by: Luis Martinez Discovery Date: 2022-02-13 Vendor Homepage: https://www.emerson.com/en-us Software Link : https://www.opertek.com/descargar-software/?prc=326 Tested Version: 9.80 Build 869...

Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site Scripting

The plugin does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a result, attacker could make a logged in admin create or edit arbitrary quote, and put Cross-Site Scripting payloads in them PoC...

CVE-2021-42714

Splashtop Remote Client Business Edition through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42714

Splashtop Remote Client Business Edition through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

CVE-2021-42713 affects Splashtop Remote Client (Personal Edition) up to version 3.4.6.1. The vulnerability stems from the creation of a Temporary File in a directory with insecure permissions, enabling potential local impact. PT-2022-11668 documents this issue and provides a remediation path: upg...

CVE-2021-42714

Summary (CVE-2021-42714) : The vulnerability affects Splashtop Remote Client (Business Edition) , specifically versions 3.4.8.3 and earlier . The root issue is that the software creates a temporary file in a directory with insecure permissions, which could allow inappropriate access to the file c...

CVE-2021-43049

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

CVE-2021-43049

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

CVE-2021-43050

The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affected system. Affected releases are TIBCO...

Privilege escalation

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

CVE-2021-43050

The CVE-2021-43050 issue affects the Auth Server component of TIBCO BusinessConnect Container Edition. A local, unauthenticated attacker could obtain administrative usernames and passwords from affected systems (versions 1.1.0 and below) due to a privileged access/credential leakage vulnerability...

CVE-2021-43050 TIBCO BusinessConnect Container Edition administrative username and passwords leakage

The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affected system. Affected releases are TIBCO...

CVE-2021-43049 TIBCO BusinessConnect Container Edition username and password leakage

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

CVE-2021-43049

CVE-2021-43049 affects TIBCO BusinessConnect Container Edition (Database component) and allows an unauthenticated attacker with network access to obtain usernames and passwords. Affected releases: 1.1.0 and below. According to TIBCO advisories, an update to 1.1.1 or later mitigates this issue. CV...

PT-2022-11669 · Splashtop · Splashtop Remote Client

Name of the Vulnerable Software and Affected Versions: Splashtop Remote Client Business Edition versions 3.4.8.3 and earlier Description: The issue is related to the creation of a temporary file in a directory with insecure permissions. This could potentially lead to security issues, but specific...

CVE-2021-43050: Undefined Security Weakness

The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affected system. Affected releases are TIBCO...