2515 matches found
Input validation
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory...
CVE-2021-34597 Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory...
CVE-2021-34597
CVE-2021-34597 affects Phoenix Contact PC Worx Automation Suite (up to version 1.88). The root cause is improper input validation in project files, enabling a manipulated project to unpack arbitrary files outside the selected directory. NVD reports CVSS v2 base score 6.8 (NETWORK, partial impact)...
pc-internet-telefon-dienstleistung.de Improper Access Control vulnerability OBB-2225318
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-37124
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...
CVE-2021-37124
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...
Path traversal
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...
CVE-2021-37124
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...
CVE-2021-37124
CVE-2021-37124 describes a path traversal vulnerability in Huawei PC Smart Full Scene (and PCManager) where unfiltered directory traversal sequences allow a remote attacker to transfer files to a specified path. Affected: Huawei PC Smart Full Scene v11.1 and PCManager v11.1.1.97. Root cause: impr...
Windows 11 is out. Is it any good for security?
Windows 11, the latest operating system OS from Microsoft, launches today, and organizations have begun asking themselves when and if they should upgrade from Windows 10 or older versions. The requirements and considerations of each organization will be different, and many things will inform the...
BloodyStealer and gaming assets for sale
Earlier this year, we covered the threats related to gaming, and looked at the changes from 2020 and the first half of 2021 in mobile and PC games as well as various phishing schemes that capitalize on video games. Many of the threats faced by gamers are associated with loss of personal data, and...
stockton-warks-pc.gov.uk Cross Site Scripting vulnerability OBB-2149882
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
How to Go Passwordless on Your Microsoft Account
You no longer need an ungainly string of characters to access your Windows PC or Xbox...
stockton-warks-pc.gov.uk Cross Site Scripting vulnerability OBB-2147910
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pc-shop-dresden.de Cross Site Scripting vulnerability OBB-2142144
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pc-ohsen.de Cross Site Scripting vulnerability OBB-2140249
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PC Wireless Wi-Fi Adapter Driver Security Updates August 2021
Wireless Wi-Fi vendors have informed HP of potential security vulnerabilities identified in some of their wireless PC adapters which may allow escalation of privilege and information disclosure. These industry-wide vulnerabilities are known as FragAttacks fragmentation and aggregation attacks...
Razer software bug lets anyone gain admin rights on Windows PC
By Deeba Ahmed A vulnerability in Razer Synapse software lets anyone possessing Razer peripherals obtain administration rights on a Windows PC. This is a post from HackRead.com Read the original post: Razer software bug lets anyone gain admin rights on Windows PC...
Gaming-related cyberthreats in 2020 and 2021
The video game industry is soaring, not in the least thanks to the lockdowns, which forced people to look for new ways to entertain themselves and socialize. Even with things going back to normal, gaming is expected to have a very bright future. Newzoo estimates the industry to gross 175.8 billio...
ALBA-2021:3050 samba bug fix and enhancement update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fixes and Enhancements: /sbin/ldconfig: /lib64/libsmbldap.so.2 is no...