Unspecified Vulnerability in Schneider Electric Easergy T300

Easergy T300 is a new generation intelligent terminal for distribution network automation, which is designed with the concept of "Modularity, Flexibility, and Application Oriented", and can be widely used in medium voltage distribution network management, fault location, isolation, and restoratio...

NewStart CGSL CORE 5.04 / MAIN 5.04 : httpd Multiple Vulnerabilities (NS-SA-2020-0066)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has httpd packages installed that are affected by multiple vulnerabilities: - A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is...

RUSTSEC-2020-0085 crate has been renamed to `sn_node`

This crate has been renamed from safevault to snnode. The new repository location is:...

crate has been superseded by `sn_client`

This crate has been superseded by snclient. The new repository location is:...

RUSTSEC-2020-0086 crate has been renamed to `sn_client`

This crate has been renamed from safecore to snclient. The new repository location is:...

Norweigian researcher exposes how a US firm collected his location data

By Sudais Asif The researcher identified over 75000 data points of his phone being tracked. Here's how he found and exposed the firm behind the scenes. This is a post from HackRead.com Read the original post: Norweigian researcher exposes how a US firm collected his location data...

SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73322)

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to inject arbitrary web script or HTML via a "location name"...

CVE-2019-16958

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

CVE-2019-16958

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

Cross site scripting

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

CVE-2019-16958

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

Desk 跨站脚本漏洞

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to inject arbitrary web script or HTML via a "location name"...

ASB-A-158484422

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

WPJobBoard < 5.7.0 - Unauthenticated Reflected XSS & XFS

Unauthenticated Reflected XSS & XFS vulnerabilities were discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: query, location. PoC Payloads: " " PoC Unauthenticated Reflected XSS:...

The vulnerability of Visual Studio Code’s source editor arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. The vulnerability exists repeated API calls to the history and location interfaces...

CVE-2020-28209

A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agen...

The US Military Buys Commercial Location Data

Vice has a long article about how the US military buys commercial location data worldwide. The U.S. military is buying the granular movement data of people around the world, harvested from innocuous-seeming apps, Motherboard has learned. The most popular app among a group Motherboard analyzed...

RHEL 8 : exiv2 (RHSA-2020:1577)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1577 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The...

KLA12010 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, gain privileges, perform cross-site scripting attack, spoof user interface, execute arbitrary code, bypass security restrictions. Bel...