CVE-2021-33691

The CVE-2021-33691 issue affects SAP NetWeaver Development Infrastructure (NWDI) Notification Service, specifically versions 7.31, 7.40, and 7.50. The root cause is insufficient encoding of user-supplied inputs, which enables Cross-Site Scripting (XSS). A threat actor could send crafted scripts t...

CVE-2021-33690

SAP NetWeaver Development Infrastructure Component Build Service (NWDI Build Service) versions 7.11–7.50 are affected by a Server-Side Request Forgery (SSRF) vulnerability. The issue allows an attacker with server access to perform proxy requests, potentially exposing sensitive data and affecting...

Attackers Impersonate DoT in Two-Day Phishing Scam

Threat actors impersonated the U.S. Department of Transportation USDOT in a two-day phishing campaign that used a combination of tactics – including creating new domains that mimic federal sites so as to appear to be legitimate – to evade security detections. Between Aug. 16-18, researchers at...

CVE-2021-38648

Open Management Infrastructure Elevation of Privilege Vulnerability...

CVE-2021-38648

Open Management Infrastructure Elevation of Privilege Vulnerability...

CVE-2021-38647

Open Management Infrastructure OMI Remote Code Execution Vulnerability...

CVE-2021-38649

Open Management Infrastructure Elevation of Privilege Vulnerability...

CVE-2021-38645

Open Management Infrastructure Elevation of Privilege Vulnerability...

CVE-2021-38645

Open Management Infrastructure Elevation of Privilege Vulnerability...

Remote code execution

Open Management Infrastructure Remote Code Execution Vulnerability...

Privilege escalation

Open Management Infrastructure Elevation of Privilege Vulnerability...

Privilege escalation

Open Management Infrastructure Elevation of Privilege Vulnerability...

Privilege escalation

Open Management Infrastructure Elevation of Privilege Vulnerability...

Security Bulletin: Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX (CVE-2016-6038)

Summary A directory traversal vulnerability in the Eclipse Help component shipped by the Tivoli Lightweight Infrastructure LWI allows remote attackers to read arbitrary files via a crafted URL. This vulnerability affects IBM System Director Console for AIX pConsole and Web Based System Management...

CVE-2021-38649 Open Management Infrastructure Elevation of Privilege Vulnerability

...

CVE-2021-38649

CVE-2021-38649 is part of the OMIGOD family affecting Open Management Infrastructure (OMI) used by Azure VM Management Extensions. The vulnerability is an Elevation of Privilege flaw in OMI that can permit a local attacker to escalate privileges on Linux-based Azure VMs where OMI is exposed. Expl...

CVE-2021-38648 Open Management Infrastructure Elevation of Privilege Vulnerability

...

CVE-2021-38648 Open Management Infrastructure Elevation of Privilege Vulnerability

...

CVE-2021-38647 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

...

CVE-2021-38647

CVE-2021-38647 (OMIGOD) is an unauthenticated remote code execution vulnerability in Microsoft Open Management Infrastructure (OMI) commonly deployed on Azure Linux VMs. Exploitation is achieved by sending a crafted HTTP request without the Authorization header, enabling code execution with the O...