1941 matches found
PT-2023-23194 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.2 Description: The issue allows a local attacker to obtain confidential information or rewrite sensitive files due to incorrect default permissions. Recommendations: For OpenHarmony versions prior to 3.2.2,...
CVE-2023-3116: Incorrect Default Permissions
in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file through incorrect default permissions...
Hardcoded credentials
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. ...
C-First DVR Security Breach
C-First DVR is a digital video recorder from C-First. A security vulnerability exists in C-First DVR that stems from a critical functionality flaw in the lack of authentication, allowing an unauthenticated, remote attacker to rewrite or obtain configuration information about the affected device...
CVE-2023-47674: Missing Authentication for Critical Function
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB...
CVE-2023-47213: Use of Hard-coded Credentials
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. ...
Description of the security update for SharePoint Server 2019: November 14, 2023 (KB5002526)
None None...
The vulnerability of the Red Hat Ansible configuration management system lies in the incorrect handling of references before accessing files. This allows attackers to re-write any files they desire.
The vulnerability of the Red Hat Ansible configuration management system is related to an incorrect definition of the reference before accessing a file. Exploiting this vulnerability could allow an attacker to re-write any files at will...
How to write an AppExpert Rewrite policy for EULA/Header on AAA/GW vserver
Demonstrate how a rewrite action can be used to add a footnote or a header above the logon page of a AAA vserver...
How to Remove the ETag Field from the HTTP Response Header Using a Rewrite Policy
This article contains information about removing the ETag field from the HTTP response header using a rewrite policy and action on a NetScaler appliance. Background The rewrite policy and action are created using the Graphical User Interface GUI. Note : Disabling a feature on a NetScaler applianc...
How to block specific URL request with rewrite policy in NetScaler
This article describes how to configure rewrite policy to drop specific URL request to NetScaler Load Balancing Virtual Server traffic...
-pattern parameter in the rewrite action was removed in 13.1
When user configure rewrite action with pattern param in GUI or CLI in NS 13.1, below error may prompt:"ERRO: No such argument -pattern" e.g add rewrite action rwainsertintracaptchaag insertbeforeall "HTTP.RES.BODY8000.SETTEXTMODEIGNORECASE" q" " + "" -pattern "" ERROR: No such argument -pattern...
How to remove HTTP Header with rewrite policy in NetScaler
This article describes how to deletespecific HTTP Request Header with rewrite policy in NetScaler...
Rewrite policy fail to honored when binding to NetScaler Gateway Virtual Server
When you're trying to insert some promptsto NetScaler Gateway logon page via Rewrite policy, you may find the prompts strings are not displayed even if you refresh the web page or clear all browser cache. The Rewrite policy is not honored as expected...
The vulnerability of the key-delete function in Moxa’s TN-4900 and TN-5900 series microprogrammable router software allows for the creation or re-write of arbitrary files within the system.
The vulnerability of the key-delete function in Moxa’s TN-4900 and TN-5900 series microprogrammable router software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to create or re-record arbitrary files within the system remotely...
OESA-2023-1544 yasm security update
Yasm is a complete rewrite of the NASM assembler under the “new” BSD License. Security Fixes: yasm v1.3.0 was discovered to contain a memory leak via the function yasmintnumcopy at /libyasm/intnum.c.CVE-2023-31975...
How to create a Rewrite policy that will change characters in URL to lowercase
How to create a Rewrite policy that will change characters in URL to lowercase...
OESA-2023-1482 pcre2 security update
PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Security Fixes: Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.CVE-2022-41409...
How to use the CLI to disable HTTP OPTIONS Method for virtual server
Some security scanning reports suggest to disable the OPTIONS HTTP Method on web server. The article provides the use of a rewrite policy to avoid processing the OPTIONS HTTP Method...