GHSA-RF92-3VJR-W628 Improper Authentication in Jenkins Active Directory Plugin

Jenkins Active Directory Plugin implements two separate modes: Integration with ADSI on Windows, and an OS agnostic LDAP-based mode. The LDAP-based mode in Active Directory Plugin starting in version 1.44 and prior to versions 2.16.1 and 2.20 shares code between user lookup and user authenticatio...

Huawei Emui and Magic UI third-party pop-up overlay vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI third-party pop-up override vulnerability can be exploited by attackers to cause system pop-ups to be overridden, thereby misleading users into...

HUAWEI EMUI/Magic UI security vulnerabilities

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI third-party pop-up override vulnerability can be exploited by attackers to cause system pop-ups to be overridden, thereby misleading users into...

Apple Magic Bluetooth Mouse 2 (A1657) on iPad can't be recognized by Windows VDA

Apple Magic Bluetooth Mouse 2 A1657 connected via Bluetooth on iPad can't be recognized by Windows VDA...

CVE-2021-41942

The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database...

CVE-2021-41942

The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database...

CVE-2021-41942

The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database...

Sql injection

The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database...

CVE-2021-41942

The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database...

CVE-2021-41942

CVE-2021-41942 affects the Magic CMS MSVOD v10 video system. The connected documents consistently describe an SQL injection vulnerability in this product, enabling attackers to obtain sensitive information from the database. The sources do not provide exploitation details, affected subsystems bey...

CVE-2021-41942: Improper Neutralization of Special Elements used in an SQL Command

The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database...

Magic CMS SQL injection vulnerability

Magic CMS is a CMS system. A security vulnerability exists in the Magic CMS MSVOD v10 version that stems from an SQL injection issue in the video system. An attacker can exploit this vulnerability to obtain sensitive information in the database...

PT-2022-11512

Name of the Vulnerable Software and Affected Versions The Magic CMS MSVOD version 10 Description The issue is related to a SQL injection vulnerability. Attackers can exploit this to obtain sensitive information in the database. Recommendations For The Magic CMS MSVOD version 10, at the moment,...

ZoneMinder Language Settings Remote Code Execution

This module exploits arbitrary file write in debug log file option chained with a path traversal in language settings that leads to a remote code execution in ZoneMinder surveillance software versions before 1.36.13 and before 1.37.11 Module Options msf use exploit/unix/webapp/zoneminder/langexec...

PT-2022-36938

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a heap-double-free crash. The crash occurs in the following functions: cli extract xlm macros and images, cli ole2 scan tempdir, a...

build-magic (>=0.4.1rc0, <=0.5.1rc0), lemur (>=1.1.0, <=1.2.0) +10 more potentially affected by CVE-2022-24302 via paramiko (>=2.9.1, <=2.9.2)

paramiko PYPI version =2.9.1, =0.4.1rc0, =1.1.0, =0.10.10, =1.0.0, =0.10.3, =0.2.0.1, =0.0.0.dev0, =1.27.0, =1.34.0 - wizardwebssh 1.9.0 Source cves: CVE-2022-24302 Source advisory: OSV:GHSA-F8Q4-JWWW-X3WV...

A Leader in multiple Zero Trust security categories: Industry analysts weigh in

The massive shift toward remote and hybrid work over the last two years has prompted many security professionals to reassess where siloed security may create vulnerabilities.1 For that reason, Zero Trust has become the gold standard for enterprise security. An effective Zero Trust approach requir...

Hikvision IP Camera - Backdoor Vulnerability

Exploit Title: Hikvision IP Camera - Backdoor Exploit Author: Sobhan Mahmoodi Reference: https://ipvm.com/reports/hik-exploit GitHub: https://github.com/bp2008/HikPasswordHelper/ Hikvision included a magic string that allowed instant access to any camera, regardless of what the admin password was...

Huawei Emui and Magic UI video framework stack buffer overflow vulnerability

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI video framework are vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to impact usability...

Huawei Emui and Magic UI man-in-the-middle attack vulnerability

Huawei Emui is a mobile operating system developed on Android.Magic Ui is a mobile operating system developed on Android.Huawei Emui and Magic UI are vulnerable to a man-in-the-middle attack, which can be exploited by attackers to compromise the integrity...