Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from an input validation...

PT-2024-38990 · Linksys · Linksys Wrt54G

Name of the Vulnerable Software and Affected Versions: Linksys WRT54G version 4.21.5 Description: A critical issue affects the function validate services port of the file /apply.cgi in the component POST Parameter Handler. The manipulation of the argument services array leads to a stack-based...

CVE-2024-4259

Missing Authorization vulnerability in SAMPAŞ Holding AKOS AkosCepVatandasService, SAMPAŞ Holding AKOS TahsilatService allows Collect Data as Provided by Users. This issue affects AKOS AkosCepVatandasService: before V2.0; AKOS TahsilatService: before V1.0.7...

Avoiding security incidents due to request collapsing

This feature of caching services can result in unexpected behavior. Here's how to prevent sensitive data from being accidentally exposed...

Unspecified Vulnerability in IBM Sterling Connect:Direct Web Services (CNVD-2024-43190)

IBM Sterling Connect:Direct Web Services is a file-based, peer-to-peer file transfer solution from International Business Machines IBM. A security vulnerability exists in IBM Sterling Connect:Direct Web Services that stems from the use of default credentials. No details of the vulnerability are...

CVE-2024-38402 Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info...

CVE-2024-38402 Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info...

Security Bulletin: IBM Jazz Reporting Services is vulnerable to a to cross-site scripting (CVE-2020-4051)

Summary Cross-site scripting has been identified in dojo library shipped with IBM Jazz Reporting Services JRS. JRS has addressed the issues by releasing a fix Vulnerability Details CVEID:CVE-2020-4051 DESCRIPTION: Dijit is vulnerable to cross-site scripting, caused by improper validation of...

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure in the Hitachi Ops Center Common Services lies in its ability to bypass authentication procedures, allowing attackers to circumvent the authentication process.

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure of Hitachi Ops Center Common Services is related to the ability to bypass the authentication process. Exploiting this vulnerability can allow attackers to circumvent the authentication...

The vulnerability in the web interface of the Cisco Identity Services Engine, a platform for managing network policies, allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface of the Cisco Identity Services Engine management platform for network policies relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with the help of speciall...

Adobe XML External Entity Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Adobe XML External Entity Injection', 'Description' = %q Multiple Adobe Products -- XML External Entity Injection. Affected Software: BlazeDS 3.2...

FTP Bounce Port Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FTP Bounce Port Scanner', 'Description' = %q Enumerate TCP services via the FTP bounce PORT/LIST method. , 'Author' = 'kris katterjohn', 'License...

TCP SYN Port Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TCP SYN Port Scanner', 'Description' = %q Enumerate open TCP services using a raw SYN scan. , 'Author' = 'kris katterjohn', 'License' = MSFLICENS...

CVE-2024-39747

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality...

CVE-2024-39747

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality...

CVE-2024-39747 IBM Sterling Connect:Direct Web Services information disclosure

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality...

CVE-2024-39747

IBM Sterling Connect:Direct Web Services versions 6.0–6.3 are affected by CVE-2024-39747 due to the use of default credentials for potentially critical functionality. The Red Hat and IBM advisory entries corroborate the same issue and specify remediation paths: Affected products: IBM Sterling Con...

CVE-2024-39747 IBM Sterling Connect:Direct Web Services information disclosure

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality...

MS10-065 Microsoft IIS 5 NTFS Stream Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS10-065 Microsoft IIS 5 NTFS Stream Authentication Bypass', 'Description' = %q This module bypasses basic authentication for Internet Informatio...

Microsoft Windows Deployment Services Unattend Retrieval

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows Deployment Services Unattend Retrieval', 'Description' = %q This module retrieves the client unattend file from Windows...