Palo Alto Software: Subdomain takeover of www2.growasyouplan.com

Summary www2.growasyouplan.com points to an AWS EC2 instance at 67.202.62.93 that no longer exists. I was able to take control of this IP address and run my own EC2 instance. I can now serve content on this domain, obtain a TLS certificate for this domain, etc. If any customers or servers are...

Renqiu Zhengzhong Network Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-34199)

Renqiu Zhengzhong Network Technology Co., Ltd. business scope includes: network technology services, software development and so on. Renqiu Zhengzhong Network Technology Co., Ltd. station building system there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain...

GitLab 跨站脚本漏洞

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab version 12.9 and later, which stems from scop...

Linux kernel resource management error vulnerability (CNVD-2021-30592)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in versions of Linux kernel prior to 5.7, which stems from the KVM subsystem allowing out-of-scope access after deletion. No...

Lenovo XClarity Controller (XCC) Information Disclosure Vulnerability - Lenovo Support US

No description provided...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in versions of Linux kernel prior to 5.7, which stems from the KVM subsystem allowing out-of-scope access after deletion. No...

NetApp Clustered Data ONTAP Vulnerabilities - Lenovo Support US

No description provided...

Vulnerability fixed in Cisco Webex Meetings

A vulnerability has been fixed in Cisco Webex Meetings. The vulnerability allows a malicious party to make changes to make changes to the distribution list of Cisco Webex Meetings belonging to another other user within the same organization. Cisco has released updates to fix the vulnerability. Mo...

CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

Design/Logic Flaw

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

CVE-2020-35681

Technical details about CVE-2020-35681 are not publicly available in the provided connected documents. The sources repeat the vulnerability description but do not expose affected versions, exploitation specifics, mitigations, or patch availability. Monitor for updates.

Django Channels Information Disclosure Vulnerability

Carlton Gibson Django Channels is an application framework from the Carlton Gibson community in Spain. Providing WebSocket, Long Polling HTTP, Task Sharing and other asynchronous support, the framework not only allows you to customize the behavior, but also to write support for your own protocols...

NetApp OnCommand System Manager 9.x Vulnerability - Lenovo Support US

No description provided...

Intel® PROSet and Killer™ Wireless WiFi Driver Advisory - Lenovo Support US

No description provided...

Combodo iTop Access Control Error Vulnerability

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. Combodo iTop 2.8.0 version of the previous security...

CVE-2020-4079 Information disclosure vulnerability in iTop

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 2.8.0, when the ajax endpoint for the "excel export" portal functionality is called directly it allows getting data without scope filtering. This allows a user to access data they which they should not have...

Combodo iTop 信息泄露漏洞

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. Combodo iTop 2.8.0 version of the previous security...

Qualcomm WIN TZ FW Security Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. A security vulnerability exists in Qualcomm WIN TZ FW, which arises from an image address being dereferenced prior to validation of its scope, and affects the following products and versions: AR7420, AR9580,...