CVE-2021-44109

A buffer overflow in lib/sbi/message.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request...

CVE-2021-44108

A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf...

Open5GS 缓冲区错误漏洞

Open5GS is an open source C implementation of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS version 2.3.6 and earlier versions, which originates from a buffer overflow in lib/sbi/message.c. The vulnerability is caused by a buffer overflow in...

IDA2Obj - Static Binary Instrumentation

IDA2Obj is a tool to implement SBI StaticBinary Instrumentation. The working flow is simple: Dump object files COFF directly from one executable binary. Link the object files into a new binary, almost the same as the old one. During the dumping process, you can insert any data/code at any locatio...

CVE-2021-30058

Knowage Suite before 7.4 is vulnerable to cross-site scripting XSS. An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBIHOST' parameter...

CVE-2019-14715

Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation...

Design/Logic Flaw

Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation...

CVE-2019-14715

Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation...

CVE-2019-14715

CVE-2019-14715 affects Verifone Pinpad Payment Terminals. The root cause is an undocumented physical access path via an SBI bootloader memory write operation, enabling local access that can impact confidentiality, integrity, and availability as reflected by CVSS metrics (CVSSv3.1: AV=Physical, AC...

sbi-recruitment.in Improper Access Control vulnerability

Open Bug Bounty ID: OBB-628568 Description| Value ---|--- Affected Website:| sbi-recruitment.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CVE-2017-10885

Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10885

Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10885

CVE-2017-10885 affects HYPER SBI, where the installer has an insecure DLL search path (CWE-427) in Ver. 2.2 and earlier. This can allow arbitrary code execution with the invoking user’s privileges during installation. Affected component: the HYPER SBI installer; root cause: insecure DLL search or...

CVE-2017-10885

Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

HYPER SBI Untrustworthy Search Path Vulnerability

SBI SECURITIES HYPER SBI is an online trading tool for stock securities provided by SBI SECURITIES in Japan. An untrustworthy search path vulnerability exists in SBI SECURITIES HYPER SBI 2.2 and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a...

Installer of HYPER SBI may insecurely load Dynamic Link Libraries

Overview HYPER SBI provided by SBI SECURITIES Co.,Ltd. is a trading tool. Installer of HYPER SBI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuto Iso of NTT Security Japan KK reported this vulnerability to IPA. JPCERT/CC...

JVN#71284826: Installer of HYPER SBI may insecurely load Dynamic Link Libraries

HYPER SBI provided by SBI SECURITIES Co.,Ltd. is a trading tool. Installer of HYPER SBI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2017-5901

The CVE-2017-5901 entry concerns the State Bank of India State Bank Anywhere app for iOS (version 5.1.0). The connected documents confirm a root cause in which the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and potentially obtain sensiti...

Massive ATM Hack Hits 3.2 Million Indian Debit Cards — Change Your PIN Now!

India is undergoing the biggest data breaches to date with as many as 3.2 Million debit card details reportedly stolen from multiple banks and financial platforms. The massive financial breach has hit India's biggest banks including State Bank of India SBI, HDFC Bank, Yes Bank, ICICI Bank and Axi...