672 matches found
Mozilla Thunderbird Information Disclosure Vulnerability (CNVD-2020-72718)
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. An information disclosure vulnerability exists in Thunderbird versions prior to 68.10.0,...
New Twitter phishing scam inspired from Twitter’s latest security response
By Sudais Asif Crooks are using the July 15th's cyberattack on Twitter to carry out phishing scam designed to steal the login credentials of unsuspected users. This is a post from HackRead.com Read the original post: New Twitter phishing scam inspired from Twitters latest security response...
CVE-2020-23831
A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...
CVE-2020-23831
A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...
CVE-2020-23839
A Reflected Cross-Site Scripting XSS vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the logi...
CVE-2020-23839
A Reflected Cross-Site Scripting XSS vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the logi...
Cross site scripting
A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...
Cross site scripting
A Reflected Cross-Site Scripting XSS vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the logi...
CVE-2020-23831
A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...
CVE-2020-23839
CVE-2020-23839 affects GetSimple CMS v3.3.16, specifically the admin/index.php login portal. The issue is a reflected XSS caused by improper input validation, enabling an attacker to cause JavaScript execution in an admin user’s browser and potentially harvest credentials after interacting with a...
CVE-2020-23839
A Reflected Cross-Site Scripting XSS vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the logi...
CVE-2020-6653
Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...
CVE-2020-6653
Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...
CVE-2020-6653
The CVE-2020-6653 issue affects Eaton’s Secure Connect mobile app (v1.7.3 and earlier). The underlying flaw is that the app stores user login credentials in logcat files during account creation/registration, enabling a malicious app or unauthorized user to harvest those credentials and potentiall...
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface...
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface...
CVE-2019-20033
Affected hardware/software : Aspire-derived NEC PBXes, including all versions of SV8100 devices. Vulnerability : A set of documented, static login credentials may be used to access the DIM interface. Root cause / scope : Credentials are static and documented for DIM access. Impact : Potential una...
Schneider Electric Easergy Builder Sensitive Information Plaintext Storage Vulnerability (CNVD-2020-46566)
The Schneider Electric Easergy Builder is used by expert engineering teams to configure the T300 grid automation platform. Schneider Electric Easergy Builder 1.4.7.2 and earlier versions contain a sensitive information plaintext storage vulnerability that can be exploited by an attacker to access...
CVE-2020-7516
A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker access to login credentials...
Information disclosure
A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker access to login credentials...