CVE-2019-20046

The CVE-2019-20046 entry concerns Synergy Systems & Solutions HUSKY RTU 6049-E70 firmware (versions 5.0 and earlier). The root cause is insufficient authentication, potentially allowing an attacker to read sensitive information or execute arbitrary code. Publicly documented impact is high-priorit...

HPESBHF03972 rev.3 - HPE ProLiant, Synergy, Edgeline and Apollo Gen10 Server Platform using TPM, Remote Disclosure of Information

Potential Security Impact: Local: Disclosure of Information; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 660 Gen10 Compute Module - Prior to 73.20 HPE ProLiant XL230k Gen10 Server - Prior to 73.20 HPE ProLiant XL190r Gen10 Server -...

CVE-2018-7120

A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy Custom SPP 2018.11.20190205, could allow local or remote unauthorized elevation of privilege...

CVE-2018-7120

A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy Custom SPP 2018.11.20190205, could allow local or remote unauthorized elevation of privilege...

CVE-2018-7120

CVE-2018-7120 affects the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50 (HP Synergy Custom SPP 2018.11.20190205). The issue enables local or remote unauthorized elevation of privilege due to the underlying vulnerability; no exploit details or mitigation...

CVE-2018-7120

A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy Custom SPP 2018.11.20190205, could allow local or remote unauthorized elevation of privilege...

Chinese Hackers Used NSA Hacking Tools Before Shadow Brokers Leaked Them

In a shocking revelation, it turns out that a hacking group believed to be sponsored by Chinese intelligence had been using some of the zero-day exploits linked to the NSA's Equation Group almost a year before the mysterious Shadow Brokers group leaked them. According to a new report published by...

HPESBHF03916 rev.1 - HPE Virtual Connect SE 16Gb Fibre Channel Module for Synergy, Local or Remote Unauthorized Elevation of Privilege

Potential Security Impact: Local: Unauthorized Elevation of Privilege; Remote: Unauthorized Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Virtual Connect SE 16Gb Fibre Channel Module for Synergy 5.00.50 firmware - Part of HPE Synergy Custom SPP...

HPESBHF03874 rev.1 - Certain HPE Products using Intel-based Processors, L1 Terminal Fault (L1TF) Speculative Side-channel Vulnerabilities, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL580 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL560 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL380 Gen10 Server - Pri...

Ranzhi Synergy is vulnerable to XSS

Ranch Collaboration System is an open source collaborative office system for small and medium-sized businesses. Ranzhi Synergy has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Security Bulletin: Critical Security Vulnerability in Rational Directory Server (Tivoli and Apache) (CVE-2014-3089)

Summary A security vulnerability impacts IBM Rational Directory Server RDS 5.2.x, 5.1.1.x and Rational Directory Administrator RDA 6.x Java Client library. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Change (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Change. Vulnerability Details | Subscribe to My Notifications to be notified of...

forsythe-synergy.com XSS vulnerability

Open Bug Bounty ID: OBB-585478 Description| Value ---|--- Affected Website:| forsythe-synergy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

synergycarcentre.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-455722 Description| Value ---|--- Affected Website:| synergycarcentre.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

HPESBHF03798 rev.1 - HPE Proliant Gen10 Servers, DL20 Gen9, ML30 Gen9 and Certain Apollo Servers Using Intel Server Platform Service (SPS) v4.0, Local Denial of Service and Execution of Arbitrary Code

Potential Security Impact: Local: Denial of Service DoS, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System ROM firmware prior to v1.26 HPE Apollo 4510 System ROM firmware prior to v1.26 HPE Apollo 6000 DLC System ROM firmware prior ...

synergy-cables.co.il XSS vulnerability

Open Bug Bounty ID: OBB-336563 Description| Value ---|--- Affected Website:| synergy-cables.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Eternal Synergy Exploit Analysis

Introduction Recently we announced a series of blog posts dissecting the exploits released by the ShadowBrokers in April 2017; specifically some of the less explored exploits. This week we are going to take a look at Eternal Synergy, an SMBv1 authenticated exploit. This one is particularly...

Eternal Synergy Exploit Analysis

Introduction Introduction Recently we announced a series of blog posts dissecting the exploits released by the ShadowBrokers in April 2017; specifically some of the less explored exploits. This week we are going to take a look at Eternal Synergy, an SMBv1 authenticated exploit. This one is...

live.citrixsynergy.com XSS vulnerability

Vulnerable URL: http://live.citrixsynergy.com/2015/player/ondemandplayer.php?presentationid=1"...

Ranzhi Synergy is vulnerable to XSS

Ranch Collaboration System is an open source collaborative office system for small and medium-sized businesses. Ranzhi Collaboration has an XSS vulnerability that can be exploited by attackers to gain administrator privileges, steal data, and so on...