8068 matches found
Marvell QConvergeConsole Path Traversal Vulnerability
Marvell QConvergeConsole QCC is a unified adapter management software across data centers from Marvell. The software is primarily used for Ethernet and Fibre Channel adapter management, among other things. A path traversal vulnerability exists in the getFileUploadBytes method in Marvell QCC, whic...
Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry
A campaign called Operation Skeleton Key has stolen source code, software development kits, chip designs, and more...
Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability (CNVD-2020-45102)
Delta Electronics CNCSoft ScreenEditor is a set of CNC machine simulation system software from Delta Electronics Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft ScreenEditor version 1.01.23 and earlier. The vulnerability arises when a networked system or product...
rollup-plugin-serve path traversal vulnerability
rollup-plugin-serve is a module bundler package for JavaScript. A security vulnerability exists in the readFile operation of the 'readFileFromContentBase' function in rollup-plugin-server, which stems from the program's failure to clean up paths. No details of the vulnerability are available at...
EU sanctions hackers from China, Russia, North Korea who're wanted by the FBI
The Council of the European Union has imposed its first-ever sanctions against persons or entities involved in various cyber-attacks targeting European citizens, and its member states. The directive has been issued against six individuals and three entities responsible for or involved in various...
[ASA-202007-3] tcpreplay: information disclosure
Arch Linux Security Advisory ASA-202007-3 ========================================= Severity: Medium Date : 2020-07-31 CVE-ID : CVE-2020-12740 Package : tcpreplay Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1154 Summary ======= The package tcpreplay before...
Hackers Broke Into Real News Sites to Plant Fake Stories
A disinfo operation broke into the content management systems of Eastern European media outlets in a campaign to spread misinformation about NATO...
Directory traversal in rollup-plugin-server
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...
CVE-2020-7686
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...
CVE-2020-7683
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...
Path traversal
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...
Path traversal
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...
CVE-2020-7686 Directory Traversal
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...
CVE-2020-7683 Directory Traversal
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...
CVE-2020-7683
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...
Command Execution Vulnerability in Intelligent Operation Management System ITSM of Zhuhai Guojin Software Technology Co.
Zhuhai Guojin Software Technology Co., Ltd. was founded in 2009, specializing in ESM, of which ITSM is an important part. A command execution vulnerability exists in the Intelligent Operation Management System ITSM of Zhuhai Guojin Software Technology Co., Ltd. that can be exploited by an attacke...
Ransomware attack on fitness devices maker Garmin cripples operation
By Waqas Garmin ransomware attack not only disrupted its operation but... This is a post from HackRead.com Read the original post: Ransomware attack on fitness devices maker Garmin cripples operation...
The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...