Exploit for Path Traversal in Microsoft

Fully Weaponized CVE-2021-40444 Malicious docx generator to e...

CVE-2020-23058

An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data...

CVE-2020-23058

An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data...

Authentication flaw

An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data...

CVE-2020-23058

An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data...

CVE-2020-23058

CVE-2020-23058 describes an authentication flaw in Nong Ge File Explorer v1.4 that allows unauthenticated access to sensitive data . The root cause, per the connected records, is a weakness in the authentication mechanism. Multiple sources (including Red Hat and NVD entries) corroborate the same ...

Security Bulletin: Vulnerabilities exist in Watson Explorer (CVE-2021-35517, CVE-2021-36090)

Summary IBM Watson Explorer has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2021-35517 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an out of memory error when allocating large amounts of memory. By persuading a victim to open ...

Security Bulletin: Vulnerabilities affect Watson Explorer Foundational Components (CVE-2021-3712, CVE-2021-3711)

Summary A critical OpenSSL buffer overflow vulnerability and possible denial of service affect IBM Watson Explorer Foundational Components. IBM Watson Explorer Foundational Components has addressed the vulnerabilities by updating the version of OpenSSL. Vulnerability Details CVEID: CVE-2021-3712...

Nong Ge File Explorer Authorization Issue Vulnerability

Nong Ge File Explorer is a privacy application by Nong Ge Personal Developer for organizing and viewing all files on your Iphone or Ipad. A security vulnerability exists in Nong Ge File Explorer that stems from an issue with the authentication mechanism that allows access to sensitive data withou...

PT-2021-10831 · Unknown · Nong Ge File Explorer

Name of the Vulnerable Software and Affected Versions: Nong Ge File Explorer version 1.4 Description: The issue is related to the authentication mechanism, allowing unauthenticated access to sensitive data. Recommendations: For Nong Ge File Explorer version 1.4, update to a newer version that...

CVE-2020-23058: Improper Authentication

An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data...

Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer

A new security weakness has been disclosed in the WinRAR trialware file archiver utility for Windows that could be abused by a remote attacker to execute arbitrary code on targeted systems, underscoring how vulnerabilities in such software could beсome a gateway for a roster of attacks. Tracked a...

October 21, 2021—KB5006746 (OS Build 22000.282) Preview

None None...

MSHTML Code Execution

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

CVE-2021-30151

A cross-site scripting vulnerability was found in sidekiq via the queue name of the live-poll feature. A potential attacker can impersonate or masquerade as the victim user using this vulnerability when Internet Explorer is used...

Internet Explorer ASLR Bypass Code Execution

The vulnerability of the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the ASLR Address Space Layout Randomization protection mechanism by using a specially crafted website and executing arbitrary code...

October 12, 2021—KB5006714 (Monthly Rollup)

None None...

Internet Explorer help

None None...

Security Updates for Internet Explorer (October 2021)

The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the MSHTML platform. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands. %NASLMINLEV...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the queuename of the live-poll feature when Internet Explorer is used. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise...