21791 matches found
Denial Of Service (DoS)
Spring Expression is vulnerable to denial of service. The vulnerability exists due to the creation of large array in a SpEL and sending meaningless error messages to the user which allows an attacker to send crafted SpEL expressions that leads to an out ouf bound error causing an application cras...
SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps
As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. "SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with T...
The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, allows a intruder to trigger a service failure.
The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a...
The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, allows a perpetrator to increase their privileges.
The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, stems from the use of rigidly encoded user credentials. Exploiting this vulnerability could all...
CVE-2021-32593
A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...
CVE-2022-23441
A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...
Hardcoded credentials
A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...
CVE-2022-26909
creationtimestamp| type| source ---|---|--- 2022-04-06 00:29:04+00:00| seen| https://t.me/cibsecurity/40202 2022-04-06 00:29:20+00:00| seen| https://t.me/cibsecurity/40215...
CVE-2022-26891
creationtimestamp| type| source ---|---|--- 2022-04-06 00:29:04+00:00| seen| https://t.me/cibsecurity/40202 2022-04-06 00:29:20+00:00| seen| https://t.me/cibsecurity/40215...
CVE-2022-26894
creationtimestamp| type| source ---|---|--- 2022-04-06 00:29:04+00:00| seen| https://t.me/cibsecurity/40202 2022-04-06 00:29:20+00:00| seen| https://t.me/cibsecurity/40215...
The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to gain access to confidential data.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the display of an email address in error messages. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...
Fortinet FortiEDR 信任管理问题漏洞
Fortinet FortiEDR is a scratch-built endpoint security solution from Fortinet, U.S.A. Fortinet FortiEDR is vulnerable to a trust management issue that could be exploited by an unauthenticated attacker to disguise and spoof messages from other collectors...
CVE-2022-23699
creationtimestamp| type| source ---|---|--- 2022-04-05 00:28:22+00:00| seen| https://t.me/cibsecurity/40138 2022-04-11 13:12:18+00:00| seen| https://t.me/cKure/9325 2022-04-11 13:42:01+00:00| seen| https://t.me/ptswarm/120...
FortiEDR - Insecure RSA key transport
A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, China. A denial-of-service vulnerability exists in the Huawei HarmonyOS application framework, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a failure to properly handle incoming...
WordPress plugin Amelia安全漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Amelia plugin is vulnerable to a...
PT-2022-13670 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 14.7.7 GitLab CE/EE versions 14.8 prior to 14.8.5 GitLab CE/EE versions 14.9 prior to 14.9.2 Description: The issue concerns missing filtering in an error message, which exposes sensitive information when an...
CVE-2021-27493
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...
CVE-2021-27493
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...
Design/Logic Flaw
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...