CVE-2013-3023

IBM Tivoli Application Dependency Discovery Manager TADDM 7.1.2 and 7.2.0 through 7.2.1.4 might allow remote attackers to obtain sensitive information about Tomcat credentials by sniffing the network for a session in which HTTP is used. IBM X-Force ID: 84361...

CVE-2013-3023

IBM TADDM (Tivoli Application Dependency Discovery Manager) versions 7.1.2 and 7.2.0 up to 7.2.1.4 are affected by CVE-2013-3023, which could allow remote attackers to obtain Tomcat credentials by sniffing HTTP sessions. The IBM Security Bulletin confirms the vulnerability in the Tomcat interface...

Passit: X-Content-Type-Options has not been set at app.passit.io

Hi The Http Header X-Content-Type-Options is missing. Impact Your website http://app.passit.io/ doesn't have a header settings for X-Content-Type Options which means it is vulnerable to MIME sniffing. The only defined value, 'nosniff', prevents Internet Explorer and Google Chrome from MIME-sniffi...

CVE-2017-9637

Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attacker may be able to sniff details from the connection string. Schneider Electric recommends that...

CVE-2017-9637

CVE-2017-9637 affects Schneider Electric Ampla MES 6.4 and earlier. The vulnerability allows sniffing of the connection string when third-party database connectivity uses SQL credentials (cleartext transmission of sensitive information). Root cause is transmission of credentials in cleartext; Win...

Nigerian BEC Scammers Growing Smarter, More Dangerous

Nigerian business email compromise scams are growing more dangerous and sophisticated as cybercriminals add new tools and techniques to their arsenal such as remote access trojans RATs and advanced information stealers, researchers found. Palo Alto Networks’ Unit 42 said in a report released...

Information disclosure

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

SWAP Information Disclosure Vulnerability in Multiple Comforte Products

Comforte SecurCS and others are products of the German company Comforte.Comforte SecurCS is a TCP/IP-based SSL encryption tool.SecurFTP is a tool that provides file transfer capabilities between NonStop systems and other platforms.SWAP is one of the Simple Object Access Protocols. A security...

Command injection

comforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 as used in SSLOBJ on HPE NonStop SSL T0910, and in the comforte SecurCS, SecurFTP, SecurLib/SSL-AT, and SecurTN products, after executing the RELOAD CERTIFICATES command, does not ensure that clients use a strong TLS cipher suite, which...

CVE-2018-6653

comforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 as used in SSLOBJ on HPE NonStop SSL T0910, and in the comforte SecurCS, SecurFTP, SecurLib/SSL-AT, and SecurTN products, after executing the RELOAD CERTIFICATES command, does not ensure that clients use a strong TLS cipher suite, which...

CVE-2018-7259

The CVE-2018-7259 entry concerns the FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X, which, when a pirated serial number is entered, sent a user’s Google account credentials to http://installLog.flightsimlabs.com/LogHandler3.ashx over HTTP, enabling potential credential exposure. This...

NAT32 2.2 Build 22284 - Cross-Site Request Forgery Vulnerability

Exploit for windows platform in category web applications + Credits: hyp3rlinx Vendor: ============= www.nat32.com Product: =========== NAT32 Build 22284 NAT32® is a versatile IP Router implemented as a WIN32 application. Vulnerability Type: =================== Remote Command Execution CSRF CVE...

NAT32 2.2 Build 22284 - Remote Command Execution Vulnerability

Exploit for windows platform in category web applications + Credits: hyp3rlinx Vendor: ============= www.nat32.com Product: ================= NAT32 Build 22284 NAT32 is a versatile IP Router implemented as a WIN32 application. Vulnerability Type: =================== Remote Command Execution CVE...

Match Group Tinder iOS app and Tinder Android app information disclosure vulnerability

Match Group Tinder iOS app and Tinder Android app are both products of Match Group, Inc.Tinder iOS app is an online dating app based on iOS platform.Tinder Android app is an online dating app based on Android. A security vulnerability exists in the Match Group Tinder iOS app and Tinder Android ap...

Match Group Tinder iOS app and Tinder Android app information disclosure vulnerability (CNVD-2018-03079)

Match Group Tinder iOS app and Tinder Android app are both products of Match Group, Inc.Tinder iOS app is an online dating app based on iOS platform.Tinder Android app is an online dating app based on Android. A security vulnerability exists in the Match Group Tinder iOS app and Tinder Android ap...

Code injection

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic...

Code injection

Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensitive information by sniffing network traffic...

CVE-2018-6017

Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensitive information by sniffing network traffic...

NEC Univerge SV9100/SV8100 WebPro 10.0 Remote Configuration Download

NEC Univerge SV9100/SV8100 WebPro 10.0 Remote Configuration Download Vendor: NEC Corporation Product web page: http://www.nec.com Affected version: WebPro =10.00 DSP Firmware Version: 12.11.00.02 Summary: NEC's UNIVERGEAr SV9100 is the unified communications UC solution of choice for small and...