HP Jumpstart 安全漏洞

HP Jumpstart is a multi-stage pre-installed welcome program from Hewlett-Packard HP USA for various HP products. A security vulnerability exists in HP Jumpstart. An attacker could exploit the vulnerability to escalate privileges...

PT-2022-6338 · Unknown · Mklogic-500

Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to the presence of pre-installed credentials. Exploitation of this issue may allow a remote attacker to access the contents of the FTP server. Recommendations: At t...

The default installation configuration “[webserver] secret_key” of the Airflow data processing software’s creation, monitoring, and orchestration tools makes it possible for a malicious individual to gain unauthorized access to an external web server.

The vulnerability of the default installation configuration “webserver secretkey” in software for creating, monitoring, and orchestrating Airflow data processing scenarios is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker, operating remotely...

The vulnerability of the IBM QRadar Network Security intrusion prevention system, related to the use of pre-installed credentials, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM QRadar Network Security intrusion prevention system lies in the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of Owl Labs Meeting Owl Pro’s microprogramming software, related to the use of pre-installed credentials, allows a hacker to activate the “tethering Mode” and increase their privileges.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to activate the “tethering Mode” mode and increase their privileges...

The vulnerability of Bently Nevada 3701 monitoring and protection systems, related to the use of pre-installed credentials, allows a intruder to execute arbitrary commands.

The vulnerability of Bently Nevada 3701 monitoring and protection systems lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the FTP server Titan FTP Server NextGen, related to the use of pre-installed credentials for the sa account, allows attackers to increase their privileges.

The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

June 23, 2022 Servicing stack update (KB5014798)

None None...

Android apps with millions of downloads exposed to high-severity vulnerabilities

Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...

Android apps with millions of downloads exposed to high-severity vulnerabilities

Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...

CVE-2021-41850

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located...

The vulnerability of Yokogawa’s software products, related to the use of pre-installed account data, allows a hacker to gain full access to the system.

The vulnerability of Yokogawa software products is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the system...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to the use of pre-installed credentials, allows a intruder to gain unauthorized access to protected information.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software relates to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Grafana -- Path Traversal

Grafana Labs reports: Grafana is vulnerable to directory traversal, allowing access to local files. We have confirmed this for versions v8.0.0-beta1 to v8.3.0. Thanks to our defense-in-depth approach, at no time has Grafana Cloud been vulnerable. The vulnerable URL path is: /public/plugins/ where...

The vulnerability of the /etc/passwd component in the D-Link DSR-500N router’s microprogramming system allows a hacker to gain access to the device’s basic embedded Linux operating system.

The vulnerability of the /etc/passwd component in the D-Link DSR-500N router’s microprogramming system is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to gain access to the device’s basic embedded Linux operating system...

The vulnerability of the KR C4 production automation control system and the operating system KSS, related to the use of pre-installed account data, allows a perpetrator to gain full access to the vulnerable system.

The vulnerability of the KR C4 production automation control system and the KSS operating system is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the vulnerable systems...

The vulnerability of the KR C4 production automation control system and the operating system KSS, related to the use of pre-installed account data, allows a perpetrator to gain full access to the system.

The vulnerability of the KR C4 production automation control system and the KSS operating system is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the system...

The vulnerability of the Vijeo Designer Basic and Vijeo Designer software, related to the use of pre-installed credentials, allows a perpetrator to gain unauthorized access to protected information.

It is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Custom WhatsApp Build Delivers Triada Malware

Triada malware, both pernicious and persistent, has resurfaced. Its most recent sighting is buried inside an advertising component of a modified version of the popular WhatsApp messenger called FM WhatsApp. The malware, first spotted by researchers at Kaspersky in 2016, is a type of mobile...

The vulnerability of Contrail messaging broker RabbitMQ on Juniper Networks’ Contrail Cloud platform allows a attacker to cause a service failure or gain access to protected information.

The vulnerability of the Contrail messaging broker RabbitMQ on Juniper Networks’ Contrail Cloud platform is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to sensitive information...