5022 matches found
Workspace ONE Intelligent Hub 20.3.8.0 - (VMware Hub Health Monitoring Service) Unquoted Service Pat
Exploit Title: Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path Discovery by: Ismael Nava Vendor Homepage: https://www.vmware.com/mx/products/workspace-one/intelligent-hub.html Software Links : https://getwsone.com/ Tested Version: 20.3.8.0...
Workspace ONE Intelligent Hub 20.3.8.0 Unquoted Service Path
Exploit Title: Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path Discovery by: Ismael Nava Discovery Date: 06-16-2021 Vendor Homepage: https://www.vmware.com/mx/products/workspace-one/intelligent-hub.html Software Links : https://getwsone.com/...
NFT Hub implementation deviates from ERC721 for transfer functions
Handle 0xRajeev Vulnerability details Impact ERC721 standard and implementation allows the use of approved addresses to affect transfers besides the token owners. However, the L2 NFT Hub implementation deviates from ERC721 by ignoring the presence of any approvers in the overriding function...
SmartThings 安全漏洞
Samsung SmartThings Hub STH-ETH-250 is a smart home management device from Samsung South Korea. A security vulnerability exists in versions prior to SmartThings 1.7.64.21 that allows an attacker to access user information via logs...
Secure Hub shows an error and fails to connect after upgrading to a fixed firmware build to address CVE-2020-8299/ CVE-2020-8300
Secure Hub shows an error and fails to connect after upgrading to a fixed firmware build to addressCVE-2020-8299/ CVE-2020-8300. Users can no longer log in to Secure Hub or if already logged in cannot refresh policies...
Crypto-Mining Attacks Targeting Kubernetes Clusters via Kubeflow Instances
Cybersecurity researchers on Tuesday disclosed a new large-scale campaign targeting Kubeflow deployments to run malicious cryptocurrency mining containers. The campaign involved deploying TensorFlow pods on Kubernetes clusters, with the pods running legitimate TensorFlow images from the official...
PayloadsAllTheThings
It is an offensive tool for general-purpose exploitation. The repository contains a list of supported funding platforms, including GitHub Sponsors, Ko-fi, and Buy Me a Coffee. The primary funding platform is GitHub Sponsors, with the username swisskyrepo. No specific exploits or tools are present...
systemd security, bug fix, and enhancement update
239-45.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate...
Pega Infinity patches authentication vulnerability
Security researchers came across a Pega Infinity vulnerability through participation in Apple’s bug bounty program, after focusing on vendors that supplied technology to Apple. By using Burp Suite—an integrated platform for performing security testing of web applications—the security researchers...
The vulnerability of the Sites sub-component of the Oracle Site Hub component in the Oracle E-Business Suite system, which allows a malicious individual to gain unauthorized access to the device.
The vulnerability of the Sites sub-component of the Oracle Site Hub component in the Oracle E-Business Suite system for enterprise automation activities is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device...
The vulnerability of the Template and GTIN search components in the Oracle Product Hub system, a business automation solution from Oracle E-Business Suite, allows unauthorized access to devices by attackers.
The vulnerability of the Template sub-component and the GTIN search component of the Oracle Product Hub system, a business automation system within the Oracle E-Business Suite, is related to errors in the code. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
Unspecified vulnerability in JetBrains Hub (CNVD-2021-35235)
JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A security vulnerability exists in JetBrains Hub versions prior to 2021.1.13079. The vulnerability stems from "two-factor authentication"...
CVE-2021-31901
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...
CVE-2021-31901
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...
CVE-2021-31901
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...
Design/Logic Flaw
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...
CVE-2021-31901
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...
CVE-2021-31901
CVE-2021-31901 affects JetBrains Hub prior to version 2021.1.13079. The root cause is that two-factor authentication was not properly enabled for the All Users group, which could allow access issues related to authentication configuration. Public details across connected documents confirm the vul...
JetBrains Hub 安全漏洞
JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A security vulnerability exists in JetBrains Hub versions prior to 2021.1.13079. The vulnerability stems from "two-factor authentication"...
Imperva® Opens the first dedicated DDoS scrubbing center in Santiago, Chile
Imperva is excited to be further expanding our presence in Latin America by launching a new Point of Presence PoP in Santiago, Chile, in partnership with leading Chilean Telecommunications provider Entel Corporations. Located within Entel’s gold-standard Ciudad de Los Valles datacenter, which has...