9868 matches found
Giant health insurer struck by ransomware didn't have antivirus protection
The Philippine Health Insurance Corporation PhilHealth, has confirmed that it was unprotected by antivirus software when it was attacked by the Medusa ransomware group in September. Antivirus software--or more correctly, its modern descendents endpoint security and Endpoint Detection and Response...
Zephyr Security Breach
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from the fact that when built with CONFIGCANAUTOBUSOFFRECOVERY=y, the backend of the SJA1000 CAN controller driver...
Delegation transfer might become temporarily unavailable due to input format in _delegateMulti
Lines of code Vulnerability details Impact A user might mint a valid delegation token to a target delegate which cannot be transferred to another target delegate through processDelegation due to delegateMulti's extension of address type of data into the space of uint256. Proof of Concept As...
CVE-2023-36127
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-36127
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-36127
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
Design/Logic Flaw
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-36127
CVE-2023-36127 concerns PHPJabbers Appointment Scheduler version 3.0, where during password recovery a discrepancy in response messages can reveal whether a username exists. This user enumeration enables an attacker to identify valid accounts and potentially perform brute-force attempts against t...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its uncontrolled search path, which allows attackers to exploit their privileges.
The vulnerability of backup and data recovery software on computers and servers is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
CVE-2023-36127
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in errors during link processing, which allows attackers to exploit their privileges.
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to errors in handling links. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-36127
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
PT-2023-25439 · Phpjabbers · Phpjabbers Appointment Scheduler
Name of the Vulnerable Software and Affected Versions: PHPJabbers Appointment Scheduler version 3.0 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or not,...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in the insufficient protection of registration data, allowing attackers to obtain confidential information.
The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain confidential information...
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...