The vulnerability of the Team Foundation Services component of the software development tool Azure DevOps Server, which allows a hacker to manipulate the content of a page.

The vulnerability of the Team Foundation Services component of the Azure DevOps Server development tool is related to a false representation of information on the user interface. Exploiting this vulnerability could allow a malicious actor to manipulate the page content remotely...

USN-4457-2 software-properties vulnerability

USN-4457-1 fixed a vulnerability in Software. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Jason A. Donenfeld discovered that Software Properties incorrectly filtered certain escape sequences when displaying PPA descriptions. If a user were tricke...

EulerOS 2.0 SP2 : tomcat (EulerOS-SA-2020-1645)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections ...

CVE-2020-10513

The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file...

Improper access control

The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file...

CVE-2020-10513 iCatch DVR - Broken Access Control

The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file...

CVE-2020-8818

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings merchant ID, secret key, etc. and therefor...

Mail.ru: [API] ICQ user's avatar can be manipulated remotely

Description: При обращении к API методу установки аватара пользователя https://ub.icq.net/files/api/v1.1/avatar/set Можно передать дополнительный GET параметр: targetSn - с установленным UIN'ом любого пользователя Тем самым можем изменить аватарку у любого пользователя Steps To Reproduce: 1...

The vulnerability of the Linux operating system’s kernel-based SMB client allows a hacker to manipulate files in the client’s directory.

The vulnerability of the Linux operating system’s kernel-based SMB client exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to remotely manipulate files within the client’s directory...

PT-2019-3608 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.293 and earlier Description: A security issue exists due to the failure to neutralize special elements in the network traffic handler. This could allow a remote attacker to intercept and modify software update...

DEF CON 2019: Delta ICS Flaw Allows Total Industrial Takeover

A serious vulnerability in a commonly used Delta industrial control system has been found that could allow malicious actors on the same network complete control of the operating system. The Delta enteliBUS Manager centralizes control for various pieces of hardware often found in corporate or...

The vulnerability of the eDocLib platform for storing and processing corporate data, related to the ability to access accounting data, allows a perpetrator to gain access to the protected system.

The vulnerability of the eDocLib platform for storing and processing corporate data is related to the possibility of manipulating accounting data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the protected system with user privileges...

The vulnerability of HP Color LaserJet Pro printer’s microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to trigger a service failure.

The vulnerability of HP Color LaserJet Pro printer microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2019-10845

An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent,...

CVE-2019-10845

An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent,...

CVE-2019-10845

CVE-2019-10845 affects Uniqkey Password Manager 1.14. The vulnerability concerns the pop-up UI for saving credentials (id="uniqkey-password-popup" and password-popup/popup.html). The pop-up window can be read and to some extent manipulated by remote servers, and it persists on every page visited ...

The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar

The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

The vulnerability of the URLFormatter component in the Google Chrome web browser allows a hacker to manipulate the content of the URL bar.

The vulnerability of the URLFormatter component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

Command injection

PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in function pgpexec phkp.php:98 that can result in It is possible to manipulate gpg-keys or execute commands remotely...

Intel® RAID Web Console 3 Cross-site Scripting Vulnerability Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console RWC may allow remote manipulation of RWC console output. Intel is releasing RAID Web Console updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3699 Description: Cross-site scripting i...