Microsoft Kernel Memory Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for personal devices from the U.S. Microsoft Kernel Memory has an information disclosure vulnerability that stems from inadequate protection of sensitive information on network systems or products, which can be exploited by attackers to obtain...

Microsoft Windows Web Account Manager Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.Microsoft Windows Web Account Manager is vulnerable to an information disclosure vulnerability that stems from inadequate protection of sensitive information on network systems or products, which...

Microsoft Windows USB Serial Driver 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.Microsoft Windows USB Serial Driver is vulnerable to information disclosure, which stems from insufficient protection of sensitive information on network systems or products, and can be exploited b...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

IBM Security Verify Information Disclosure Vulnerability

IBM Security Verify Access is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls, identity...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple, Inc USA. A vulnerability exists in Apple macOS Big Sur with privilege permission and access control issues. The vulnerability arises from a lack of effective privilege-granting and access-control measures in a networked system or product...

Apple macOS Big Sur输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. An input validation error vulnerability exists in Apple macOS Big Sur. The vulnerability originates from a network system or product that does not properly validate input data...

New Trickbot attack setup fake 1Password installer to extract data

By Waqas The fake 1Password installer is used to launch Cobalt Strike helping the attackers collect information about multiple systems in the network. This is a post from HackRead.com Read the original post: New Trickbot attack setup fake 1Password installer to extract data...

Oracle Java SE 输入验证错误漏洞

Oracle Java SE is an Oracle Corporation USA Java application for developing and deploying Java applications on desktops, servers, and embedded devices and real-time environments. An input validation error vulnerability exists in Oracle Java SE that arises from a network system or product that doe...

Cyber espionage by Chinese hackers in neighbouring nations is on the rise

A string of cyber espionage campaigns dating all the way back to 2014 and likely focused on gathering defense information from neighbouring countries have been linked to a Chinese military-intelligence apparatus. In a wide-ranging report published by Massachusetts-headquartered Recorded Future th...

Unauthorized Access Vulnerability in Cisco IP Phone CP-9971

Cisco Systems China Networking Technology Co., Ltd., scope of business: research and development of computer network systems and communication systems; provision of computer network systems, communication systems, installation, technical consulting and so on. An unauthorized access vulnerability...

Intel EPID SDK Input Validation Error Vulnerability

An input validation error vulnerability exists in the Intel EPID SDK that arises from a network system or product that does not properly validate incoming data...

PyYAML Input Validation Error Vulnerability

PyYAML is a Python based YAML parser and generator. An input validation error vulnerability exists in PyYAML that arises from a network system or product that does not properly validate input data...

Server-Side Request Forgery (SSRF)

phpbb/phpbb is vulnerable to server-side request forgery SSRF. A remote attacker is able to send requests on behalf of the server via the remote avatar upload function. This allows for the discovery of and access to services running on the host, resulting in bypass of firewall rules or potentiall...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2018-20235)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the Open Shortest Path First version 3 OSPFv3 implementation in Cisco IOS Software and IOS XE Software. An attacker in close physical proximity...

Hughes Broadband Satellite Modems Remote Detection

Detection of presence of Hughes Broadband Satellite Modem. The script attempts to determine if the remote host runs Hughes Broadband Satellite Modem from the telnet banner response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

DIGISOL DG-HR1400 1.00.02 Privilege Escalation

Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896 https://vuldb.com/sv/?id.97954...

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation Vulnerability

Exploit for hardware platform in category web applications Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896...

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896...

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation

Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896 https://vuldb.com/sv/?id.97954...