Access Misconfiguration for Customer Support Database

Today, we concluded an investigation into a misconfiguration of an internal customer support database used for Microsoft support case analytics. While the investigation found no malicious use, and although most customers did not have personally identifiable information exposed, we want to be...

カスタマー サポート データベースのアクセス構成の誤りについて

本記事は、Microsoft Security Response Center ブログ “Access Misconfiguration for Customer Support Database” 2020 年 1 月 22 日 米国時間...

Access Misconfiguration for Customer Support Database

Today, we concluded an investigation into a misconfiguration of an internal customer support database used for Microsoft support case analytics. While the investigation found no malicious use, and although most customers did not have personally identifiable information exposed, we want to be...

Corsy v1.0 - CORS Misconfiguration Scanner

Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations. Requirements Corsy only works with Python 3 and has the following depencies: tld requests To install these dependencies, navigate to Corsy directory and execute pip3 install -r requirements.txt Usag...

Huawei CloudUSM-EUA Information Disclosure Vulnerability

Huawei CloudUSM is the core switching device of Huawei's enterprise cloud communication solution, providing a unified session and media control platform for voice, video, mobile applications, multimedia conferencing, and other services. An information disclosure vulnerability exists in Huawei...

Business in the front, party in the back: backdoors in elastic servers expose private data

It seems like every day we read another article about a data breach or leak of cloud storage exposing millions of users' data. The unfortunate truth is that the majority of these leaks require no actual "hacking" on the part of the attacker. Most of the time, this highly confidential data is just...

USN-4235-1 nginx vulnerability

Bert JW Regeer and Francisco Oca Gonzalez discovered that nginx incorrectly handled certain errorpage configurations. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks and access resources contrary to expectations...

The vulnerability of the SAP HANA database management system, related to security configuration errors, allows attackers to execute arbitrary commands with root privileges.

The vulnerability of the SAP HANA database management system is related to security configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

RICOH SP C250DN Information Disclosure Vulnerability

The RICOH SP C250DN is a printer from the Japanese company Ricoh RICOH. An information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability arises from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could...

HP DeskJet 3630 Printers CSRF Vulnerability (HPSBPI03613)

Certain HP DeskJet 3630 All-in-One Printers have a cross-site request forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

CVE-2019-6319

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6319

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

Cross site request forgery (csrf)

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6320

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6320

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

Cross site request forgery (csrf)

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6319

The CVE-2019-6319 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in HP DeskJet 3630 All-in-One Printers (models F5S43A–F5S57A, K4T93A–K4T99C, K4U00B–K4U03B, V3F21A–V3F22A) with firmware SWP1FN1912BR or higher. The vulnerability could allow a denial of service or device misconfi...

CVE-2019-6319

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...

CVE-2019-6320

The CVE-2019-6320 entry affects HP DeskJet 3630 All-in-One Printers (models F5S43A–F5S57A, K4T93A–K4T99C, K4U00B–K4U03B, V3F21A–V3F22A) with firmware SWP1FN1912BR or higher. The vulnerability is a Cross-Site Request Forgery (CSRF) that could cause denial of service or device misconfiguration. Doc...

CVE-2019-6320

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...