Exploit for Path Traversal in Apache Http_Server

It is an exploit module targeting Apache Log4j. The target produ...

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

CVE-2022-40306

CVE-2022-40306 affects ECi Printanista Hub (formerly FMAudit Printscout). The /Login form processes expensive RSA key-generation operations, enabling DoS via repeated requests on versions prior to 5.5.2. Remediation: upgrade to 5.5.2+ (or later); as a temporary measure, restrict access to the /Lo...

ECi Software Solutions Printanista Hub 安全漏洞

ECi Software Solutions Printanista Hub is a hosted print service software from ECi Software Solutions. A security vulnerability exists in ECi Software Solutions Printanista Hub versions prior to 2022-06-27 that stems from the login form/Login performing an expensive RSA key generation operation,...

PT-2022-25339 · Eci · Eci Printanista Hub

Name of the Vulnerable Software and Affected Versions: ECi Printanista Hub formerly FMAudit Printscout versions prior to 5.5.2 Description: The login form "/Login" performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form...

CVE-2022-39206

Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. When using Docker-based job executors, the Docker socket e.g. /var/run/docker.sock on Linux is mounted into each Docker step. Users that can define and trigger CI/CD jobs on a project could use this to control the Docker daem...

Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Hitachi Energy Equipment: TXpert Hub CoreTec 4 Vulnerability: Off-by-one Error 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information...

Hitachi Energy TXpert Hub CoreTec 4

1. EXECUTIVE SUMMARY CVSS v3 6.0 Vendor: Hitachi Energy Equipment: TXpert Hub CoreTec 4 Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Improper Input Validation, Download of Code Without Integrity Check 2. RISK EVALUATION Successful exploitation of these...

Exploit for Server-Side Request Forgery in Jetbrains Hub

CVE-2022-25260 JetBrains Hub pre-auth semi-blind server-side r...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the EditWlanMacList method...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the EnableIpv6 method...

H3C H200 缓冲区错误漏洞

The H3C H200 is a type of full gigabit home smart hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version that stems from a stack overflow in the UpdateIpv6Params method...

H3C H200 缓冲区错误漏洞

The H3C H200 is a kind of full gigabit home intelligent hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the SetAP5GWifiById method...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the UpdateSnat method...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the AddWlanMacList method...

worcestershire.wellbeinghub.org.uk Cross Site Scripting vulnerability OBB-2846439

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The Humble Hub

Over the weekend I organized some old computing equipment. I found this beauty in one of my boxes. It's a Netgear EN104TP hub. I've mentioned this device before, in this blog and my books. This sort of device was the last of the true hubs. In an age where cables seem reserved for data centers or...

Fedora: Security Advisory for golang-github-hub (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-hub (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

covid-congress-hub.org Cross Site Scripting vulnerability OBB-2801913

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...