Atlassian Bugs Could Have Led to 1-Click Takeover

Atlassian, a platform used by 180,000 customers to engineer software and manage projects, could have been hijacked with a single click due to security flaws, researchers have disclosed. On Thursday, Check Point Research CPR published a report PDF outlining how an attacker could have exploited the...

Unauthorized Access Vulnerability in CLX-9301 at Samsung (China) Investment Co.

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An unauthorized access vulnerability...

Unauthorized Access Vulnerability in C480W at Samsung (China) Investment Co.

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An unauthorized access vulnerability...

Cisco Firepower Threat Defense Software Web Services Interface Multiple Vulnerabilities (cisco-sa-asaftd-xss-multiple-FCB3vPZe)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Unauthorized Access Vulnerability in M2085FW at Samsung (China) Investment Co.

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An unauthorized access vulnerability...

Plugin archive directory traversal in Helm

The Helm core maintainers have identified an information disclosure vulnerability in Helm 3.0.0-3.2.3. Impact A traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author to inject a relative path into a plugin archive, and...

SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day Attacks

A critical vulnerability in SonicWall VPN appliances that was believed to have been patched last year has been now found to be "botched," with the company leaving a memory leak flaw unaddressed, until now, that could permit a remote attacker to gain access to sensitive information. The shortcomin...

Unauthorized Access Vulnerability in SWW-3100BG of Samsung (China) Investment Co.

SWW-3100BG is a router from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SWW-3100BG, which can be exploited by attackers to obtain sensitive information...

CVE-2021-0533

creationtimestamp| type| source ---|---|--- 2021-06-22 02:48:29+00:00| exploited| Telegram/oUtqgOwJm3PWppe6M28qQQEAlZ2nJ-elPtm3CWDUSwcoNWQ...

Unauthorized Access Vulnerability in MX-2314N at Sharp Trading (China) Co.

The MX-2314N is a printer from Sharp Trading China Co. An unauthorized access vulnerability exists in the Sharp Trading China Ltd MX-2314N, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Pacom 8501 Input/Output Module

Pacom is a Swedish company. A weak password vulnerability exists in the Pacom 8501 Input/Output Module, which can be exploited by an attacker to gain access to the backend and obtain sensitive information...

Unauthorized Access Vulnerability in Tenda Roteador Multilaser 1200AC Devices

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. An unauthorized access vulnerability exists in the Tenda Roteador Multilaser 1200AC device, which can be exploited by attackers to...

CVE-2021-32305

creationtimestamp| type| source ---|---|--- 2021-06-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50042 2021-09-02 09:56:23+00:00| seen| MISP/2e8cebbe-4ab2-4eb0-bd6e-e8193972cf4e 2021-09-21 04:42:27+00:00| seen| https://t.me/pwnwikizhchannel/691 2023-04-27 09:58:59+00:00|...

SQL Injection Vulnerability in TPCMS

TPCMS is an open source cms written by thinkphp. TPCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Unauthorized Access Vulnerability in Network Camera WV-ST162 at Panasonic (China) Co.

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network Camera WV-ST162 of Panasonic China Co. which c...

Command Execution Vulnerability in IceWarp Mail Server

IceWarp Mail Server is an enterprise-grade email, collaboration and mobile solution for organizations of all sizes. A command execution vulnerability exists in IceWarp Mail Server, which can be exploited by an attacker to perform command execution by constructing malicious statements...

CVE-2021-30544

creationtimestamp| type| source ---|---|--- 2021-06-18 14:37:24+00:00| exploited| https://t.me/truesecator/1826...

Unauthorized access vulnerability in Isha's back-office management system

Isha Backend Management System is a .NET Core Web-based development system. An unauthorized access vulnerability exists in Yisha Backend Management System, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Polycom Device Management System

Founded in 1990, Polycom China is a global integrated collaborative communications company. It is a leading provider of high-quality audio and video conferencing systems and solutions. A weak password vulnerability exists in the Polycom device management system, which can be exploited by an...

PageKit Cross-Site Scripting Vulnerability

Pagekit is a modular, lightweight CMS content management system. pageKit has a cross-site scripting vulnerability, which stems from the fact that SVG files may contain malicious scripts that can be exploited by attackers to trigger XSS attacks...