The vulnerability of Oracle WebLogic Server’s application server core components allows a hacker to gain full control over the application.

The vulnerability of Oracle WebLogic Server’s application server components is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to gain full control over the application through network protocols such as IIOP and T3...

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain full control over the application.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

CVE-2020-28999

An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library...

CVE-2020-28998: Use of Hard-coded Credentials

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that allows a remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password...

CVE-2020-29000: Undefined Security Weakness

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. An...

PT-2021-11619

Name of the Vulnerable Software and Affected Versions: Geeni GNC-CW013 doorbell version 1.8.1 Description: A vulnerability exists in the RTSP service of the device, allowing a remote attacker to take full control with a high-privileged account. By sending a crafted message, an attacker can remote...

Geeni GNC-CW013 Access Control Error Vulnerability

The Geeni GNC-CW013 is a webcam from Geeni USA. A security vulnerability exists in the Geeni GNC-CW013 doorbell 1.8.1 devices that allows a remote attacker to take full control of the device with a highly privileged account...

Geeni GNC-CW013 Trust Management Issues Vulnerability

The Geeni GNC-CW013 is a webcam from Geeni USA. The Geeni GNC-CW013 doorbell 1.8.1 devices suffers from a trust management issue vulnerability that stems from a system account with a default and static password, which can be exploited by a remote attacker to take full control of a device with a...

PT-2021-11617

Name of the Vulnerable Software and Affected Versions: Geeni GNC-CW013 doorbell version 1.8.1 Description: A remote attacker can take full control of the device with a high-privileged account due to a vulnerability in the Telnet service. This issue arises because a system account has a default an...

CVE-2020-28999: Use of Hard-coded Credentials

An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library...

CVE-2020-36154

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application...

CVE-2020-36154

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application...

CVE-2020-36154

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application...

PT-2021-11935

Name of the Vulnerable Software and Affected Versions: Pearson VUE VTS Installer version 2.3.1911 Description: The issue concerns the Application Wrapper in Pearson VUE VTS Installer, which has Full Control permissions for Everyone in the "%SYSTEMDRIVE%Pearson VUE" directory. This allows local...

CVE-2020-36154: Incorrect Permission Assignment for Critical Resource

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application...

CVE-2020-25228: Missing Authentication for Critical Function

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access...

Privilege escalation

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4...

CVE-2020-12594: Undefined Security Weakness

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the parse_user_name() function in the libpam library of the Pluggable Authentication Module of the Solaris operating system allows a perpetrator to gain full control over the application.

The vulnerability of the parseusername function in the libpam library, a plugin for the Pluggable Authentication Module of the Solaris operating system, is related to an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor, operating remotel...