Historic data being requested as a part of MochiVault.withdraw and borrow functions can be outdated, so a user can avoid historic data update with sending old piece of _data

Handle hyh Vulnerability details Impact Asking to provide historic data proof doesn't imply that pricing is current, a malicious user can wait for market volatility and do deposit/borrow sequence with outdated price, borrowing more than current market value of supplied assets for example, suppose...

The vulnerability of the MPLS Operation, Administration, and Maintenance (OAM) function of the Cisco NX-OS operating system allows a attacker to cause maintenance failures.

The vulnerability of the MPLS Operation, Administration, and Maintenance OAM function in the Cisco NX-OS operating system is related to the lack of checks on buffer length and reading beyond the memory boundary. Exploiting this vulnerability can allow a malicious actor to cause service...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

CVE-2021-34860

The CVE-2021-34860 issue affects D-Link DAP-2020 routers (version 1.01rc001) and is a directory traversal flaw in the webproc getpage endpoint. The vulnerability arises from insufficient validation of a user-supplied path used in file operations, enabling network-adjacent attackers to disclose se...

CVE-2021-22034

Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability...

CVE-2021-22034

Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability...

Information disclosure

Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability...

CVE-2021-22034

CVE-2021-22034 affects VMware vRealize Operations Tenant App prior to version 8.6. The issue is an information-disclosure vulnerability exposed over the network (port 443) that could allow an attacker with network access to read system environment variables, as described in the VMware advisory. T...

CVE-2021-22034

Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability...

CVE-2021-21745

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click...

Authentication flaw

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click...

CVE-2021-21745

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click...

Russian-speaking cybercrime evolution: What changed from 2016 to 2021

Experts at Kaspersky have been investigating various computer incidents on a daily basis for over a decade. Having been in the field for so long, we have witnessed some major changes in the cybercrime worlds modus operandi. This report shares our insights into the Russian-speaking cybercrime worl...

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2484

CVE-2021-2484 affects Oracle E-Business Suite Operations Intelligence (component BIS Operations Intelligence) in versions 12.1.1–12.1.3. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise data integrity and confidentiality, enabling unauthorized creation, ...

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Modern-Async 资源管理错误漏洞

Modern-Async is a modern JavaScript tool library for asynchronous operations using Async/Await and Promise. A resource management error vulnerability exists in modern-async that arises from improper design or implementation during code development for a networked system or product...