CVE-2021-23330 Command Injection

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

Bitovi Launchpad Command Injection Vulnerability

Bitovi Launchpad is a Javscript-based software from Bitovi Canada that provides native browser functionality for Mac Os, Windows, and Linuxlike. A command injection vulnerability exists in all versions of launchpad that allows injection via the stop command...

Android App "ELECOM File Manager" vulnerable to directory traversal

Overview Android App "ELECOM File Manager" provided by ELECOM CO.,LTD. contains a directory traversal vulnerability CWE-22 due to a flaw in the processing of the filenames when extracting the compressed files. Ryohei Koike reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

JVN#98115035: Android App "ELECOM File Manager" vulnerable to directory traversal

Android App "ELECOM File Manager" provided by ELECOM CO.,LTD. contains a directory traversal vulnerability CWE-22 due to a flaw in the processing of the filenames when extracting the compressed files. Impact A remote attacker may create an arbitrary file or overwrite an existing file in a directo...

Command Injection

Overview launchpad is a You can launch browsers! From NodeJS! Local ones! Remote ones! Browserstack ones! Affected versions of this package are vulnerable to Command Injection via stop. Remediation Upgrade launchpad to version 0.8.0 or higher. References - GitHub Commit - GitHub Issue - GitHub PR...

X (Formerly Twitter): Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking links

Summary: A chain of two open redirects on analytics.twitter.com and twitter.com, coupled with the use of an Ideographic Full Stop allows an attacker to defeat Twitter's approach to blocking links. Description: Twitter maintains a deny list of domain names and prevents users from tweeting direct o...

CVE-2020-5645

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS...

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

Siemens S7-400 PLC has an industrial control device vulnerability

The S7-400 PLCs are programmable controllers for use in the mid- to high-grade performance range. A vulnerability exists in the Siemens S7-400 PLC for industrial control devices. An attacker can exploit the vulnerability to cause the control device to stop, the RUN light to go out, the STOP light...

Split-Second ‘Phantom’ Images Can Fool Tesla’s Autopilot

Researchers found they could stop a Tesla by flashing a few frames of a stop sign for less than half a second on an internet-connected billboard...

Healthcare security update: death by ransomware, what’s next?

A recent ransomware attack which played a significant role in the death of a German woman has put into focus both the dangers and the importance of cybersecurity today. But it has also led some to point fingers as to who was responsible. As usual, playing the blame game helps no one, but it does...

Denial of Service Vulnerability in Schneider PLC-M340

The Schneider-Electric M340 PLC is a high performance and stable controller for a wide range of industrial control applications. A denial of service vulnerability exists in the Schneider PLC-M340, which can be exploited by an attacker to cause the device's CPU RUN light to go out, the CPU module,...

Denial of Service Vulnerability in CSC-830 of Beijing Sifang Relay Automation Co. Ltd (CNVD-2020-59455)

CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. Beijing Sifang Relay Automation Co., Ltd CSC-830 has a denial of service vulnerability, which can be exploited by an attacker to...

Design/Logic Flaw

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

Security Bulletin: Publicly disclosed vulnerability from Kernel affects IBM Netezza Host Management

Summary Kernel is used by IBM Netezza Host Management. This bulletin provides mitigation for the reported CVE. Vulnerability Details CVEID: CVE-2019-18806 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a memory leak in the qlalloclargebuffers function in...

Denial of Service Vulnerability in Omron Small PLC Series CP1L

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in the Omron compact PLC series CP1L, which can be exploited by an attacker to stop programs running on the device...

Mitsubishi PLC FX3U-32M suffers from a denial of service vulnerability (CNVD-2020-58825)

The FX3U series Mitsubishi PLC is the third generation of miniature programmable controllers. A denial of service vulnerability exists in the Mitsubishi PLC FX3U-32M, which can be exploited by an attacker to cause the device RUN light to go out and the output module to stop working...

Mail.ru: Наблюдатель может оставновить базу данных [mcs.mail.ru]

User with spectator role in mcs.mail.ru could request database stop operation...

CVE-2020-10049

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...