177 matches found
sme.go.th Cross Site Scripting vulnerability OBB-1233981
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-3177
Cisco UCS CUCM and SME TAPS path traversal (CVE-2020-3177) is due to insufficient validation of input to the TAPS interface, enabling an unauthenticated attacker to trigger directory traversal and read arbitrary files. Affected components include the Tool for Auto-Registered Phones Support (TAPS)...
RHEL 6 : kernel (RHSA-2020:0790)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0790 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in...
4 Best Free Online Security Tools for SMEs in 2020
Cyberattacks on small and midsized companies in 2019 cost $200,000 per company on average, mercilessly putting many of them out of business, says CNBC in its analysis of a recent Accenture report. In light of the global cybersecurity skills shortage, the number is set to soar in 2020. Solely in t...
CVE-2019-17133
In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow...
CVE-2019-17133
In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow...
CVE-2019-15272
CVE-2019-15272 affects Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME). The root cause is improper handling of malformed HTTP methods in the web-based interface, allowing an unauthenticated, remote attacker to bypass security restrict...
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the...
Google Android Qualcomm sme driver elevation of privilege vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Qualcomm sme driver is a part. A Qualcomm sme driver. The Qualcomm sme driver in Android on Google Pixel a...
Buffer overflow
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, possible buffer overflow or information leak in the functions "smesetfties" and "csrroamissueftpreauthreq" due to incorrect initialization of WEXT callbacks and lack of the checks for...
RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password) Vulnerability
Exploit for hardware platform in category web applications /...
RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password)
form action=http:...
July 26, 2017 – Morning Cyber Coffee Headlines – “Wright Brothers” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 26, 2017 - Headlines Carbon Black in the News: Security expert shares tips...
CVE-2017-1000027
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...
CVE-2017-1000027
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...
Open redirect
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...
CVE-2017-1000027
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...
CVE-2017-1000027
CVE-2017-1000027 concerns Koozali Foundation SME Server (versions 8.x–10.x). The vulnerability is an open URL redirect in the user web login function, enabling unauthorized account access. The available connected documents confirm the affected product family and the open redirect flaw as the root...
Agora-Project 3.2.2 Cross Site Scripting
Exploit Title: XSS Vulnerability on Agora-Project 3.2.2 Google Dork: no Date: 23-02-2017 Exploit Author: @runggareksya, @AdyWikradinata, @yokoacc Vendor Homepage: https://www.agora-project.net Software Link: https://www.agora-project.net/?ctrl=offline&action=download Software Link Mirror:...