1921 matches found
Command execution vulnerability in TOTOLINK T10 router (CNVD-2021-44930)
TOTOLINK is a brand held by Gion Electronics Shenzhen Co., Ltd, founded in 1999, is a Hong Kong-listed high-tech foreign-funded enterprises stock code: HK.8287, one of the world's leading network equipment suppliers. A command execution vulnerability exists in the TOTOLINK T10 router. An attacker...
CVE-2020-24587
creationtimestamp| type| source ---|---|--- 2021-05-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=586 2021-05-19 08:04:54+00:00| seen| https://t.me/MikrotikNews/149 2021-05-26 09:09:57+00:00| seen| Telegram/McdHlGkeqdjc5UvLBQvY4Ib00ud0ZpTZxnWoDeCPrli8nlZ 2021-05-26...
CVE-2020-26144
creationtimestamp| type| source ---|---|--- 2021-05-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=586 2021-05-19 08:04:54+00:00| seen| https://t.me/MikrotikNews/149 2021-05-26 09:09:57+00:00| seen| Telegram/McdHlGkeqdjc5UvLBQvY4Ib00ud0ZpTZxnWoDeCPrli8nlZ 2021-05-26...
CVE-2021-27306
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT...
CVE-2021-27306
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT...
Improper access control
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT...
CVE-2021-27306
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT...
CVE-2021-27306
CVE-2021-27306 involves Kong Gateway’s JWT plugin, where an improper access control flaw lets unauthenticated users reach authenticated routes without a valid JWT. The issue affects Kong Gateway versions before 2.3.2.0 and stems from insufficient authorization checks in the JWT plugin. Impact is ...
CVE-2021-27306
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT...
CVE-2021-27306: Use of Incorrectly-Resolved Name or Reference
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT...
PT-2021-17386
Name of the Vulnerable Software and Affected Versions Kong Gateway versions prior to 2.3.2.0 Description The issue is related to an improper access control vulnerability in the JWT plugin. This vulnerability allows unauthenticated users to access authenticated routes without a valid token JWT...
Kong Gateway 访问控制错误漏洞
Kong Gateway is an API gateway from the Italian company Kong. It provides an inter-network connector. An access control error vulnerability exists in the JWT plugin in Kong Gateway prior to 2.3.0.0, which allows an unauthenticated user to access authenticated routes without a valid token...
NoxPlayer Android Emulator Supply-Chain Attack
It seems to be the season of sophisticated supply-chain attacks. This one is in the NoxPlayer Android emulator: ESET says that based on evidence its researchers gathered, a threat actor compromised one of the companys official API api.bignox.com and file-hosting servers res06.bignox.com. Using th...
A New Software Supply‑Chain Attack Targeted Millions With Spyware
Cybersecurity researchers today disclosed a new supply chain attack targeting online gamers by compromising the update mechanism of NoxPlayer, a free Android emulator for PCs and Macs. Dubbed "Operation NightScout" by Slovak cybersecurity firm ESET, the highly-targeted surveillance campaign...
Massive privacy risk as hacker sold 2 million MyFreeCams user records
By Deeba Ahmed The same hacker also sold almost 19,000 customers' records stolen from a Hong Kong-based online shop. This is a post from HackRead.com Read the original post: Massive privacy risk as hacker sold 2 million MyFreeCams user records...
Researchers Disclose Undocumented Chinese Malware Used in Recent Attacks
Cybersecurity researchers have disclosed a series of attacks by a threat actor of Chinese origin that has targeted organizations in Russia and Hong Kong with malware — including a previously undocumented backdoor. Attributing the campaign to Winnti or APT41, Positive Technologies dated the first...
ALERT: North Korean hackers targeting South Korea with RokRat Trojan
A North Korean hacking group has been found deploying the RokRat Trojan in a new spear-phishing campaign targeting the South Korean government. Attributing the attack to APT37 aka Starcruft, Ricochet Chollima, or Reaper, Malwarebytes said it identified a malicious document last December that, whe...
FTSE for Windows suffers from a DLL Hijacking Vulnerability
Futura Bull is a free software for trading Hong Kong stocks. A DLL hijacking vulnerability exists in FTNB for Windows, which can be exploited by attackers to gain control of the server...
Docker Image kong Access Control Error Vulnerability
Docker is an open source application container engine from the American company Docker. It supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment and upgrade of applications through...
CVE-2020-35189
The official kong docker images before 1.0.2-alpine Alpine specific contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...