1885 matches found
CVE-2024-39342
Entrust Instant Financial Issuance formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library i.e. DCG.Security.dll with a custom AES encryption process that relies on static hard-coded key values. These keys are not uniquely generated per installation of t...
CVE-2024-39341
Entrust Instant Financial Issuance On Premise Software formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier leaves behind a configuration file i.e. WebAPI.cfg.xml after the installation process. This file can be accessed without authentication on HTTP port 80 by guessin...
CVE-2024-39341
Entrust Instant Financial Issuance On Premise Software formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier leaves behind a configuration file i.e. WebAPI.cfg.xml after the installation process. This file can be accessed without authentication on HTTP port 80 by guessin...
CVE-2024-39341
CVE-2024-39341 affects Entrust Instant Financial Issuance (On Premise) software (6.10.0, 6.9.x, 6.8.x and earlier). A configuration file WebAPI.cfg.xml is left behind after installation and can be accessed without authentication via HTTP port 80, exposing system configuration parameter names and ...
AitSar (=0.1.1), Boa (>=0.11.0 <=0.13.1) +9727 more potentially affected by unknown CVE via instant (>=0.1.13 <=0.1.9)
instant CARGO version =0.1.13, =0.11.0, =0.1.0-beta.1, =0.1.1, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0384...
`instant` is unmaintained
This crate is no longer maintained, and the author recommends using the maintained web-time crate instead. web-time: https://crates.io/crates/web-time...
The vulnerability of the SIP call processing function of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) allows a perpetrator to trigger a service failure.
The vulnerability of the SIP call processing function of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by...
Friendica 安全漏洞
Friendica is an application of the German Friendica community. It provides decentralized social networking. A security vulnerability exists in Friendica version 2024.03, which stems from susceptibility to cross-site scripting attacks in settings/configuration files via homepage, xmpp and matrix...
New Android Spyware LianSpy Evades Detection Using Yandex Cloud
Users in Russia have been the target of a previously undocumented Android post-compromise spyware called LianSpy since at least 2021. Cybersecurity vendor Kaspersky, which discovered the malware in March 2024, noted its use of Yandex Cloud, a Russian cloud service, for command-and-control C2...
MAL-2024-2526 Malicious code in instant-plugin (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2525 Malicious code in instant-cash-app-money-generator-2023-code-ujalo (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2524 Malicious code in instant-cash-app-money-generator-2023-code-poaq3 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2523 Malicious code in instant-cash-app-money-generator-2023-code-nakjd (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2522 Malicious code in instant-cash-app-money-generator-2023-code-jyerw (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2521 Malicious code in instant-cash-app-money-generator-2023-code-jwopq (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2519 Malicious code in instant-cash-app-money-generator-2023-code-balpw (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2520 Malicious code in instant-cash-app-money-generator-2023-code-hqiuy (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2518 Malicious code in instant-cash-app-money-generator-2023-code-bakaq (npm)
--- -= Per source details. Do not edit below this line.=-...
Exploit for CVE-2022-21500
Badges !MIT Licensehttps://img.shields.io/badge/Licens...
Fedora: Security Advisory (FEDORA-2024-d408b654d6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...