2833 matches found
CVE-2023-35071
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection.This issue affects Logging Administration Panel: before 20230915...
CVE-2023-35071 SQLi in MRV Tech's Logging Administration Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
CVE-2023-35071
CVE-2023-35071 is an SQL injection vulnerability in MRV Tech’s Logging Administration Panel, arising from improper neutralization of special elements in SQL commands. Affected: Logging Administration Panel prior to 20230915. Root cause reported as SQL injection flaw; exploitation details are not ...
CVE-2023-35071 SQLi in MRV Tech's Logging Administration Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
CVE-2023-35071: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
PT-2023-25128
Name of the Vulnerable Software and Affected Versions MRV Tech Logging Administration Panel versions prior to 20230915 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attack...
Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX
How To Use This Report Enhance situational awareness of techniques used by threat actors Identify potential attacks targeting your industry Gain insights to help improve and accelerate your organization's threat response Summary of Findings The Network Effect Threat Report offers insights based o...
Hive Pro Partners with Tech Titan to Fortify Cybersecurity Landscape in Southeast Asia
HERNDON, VA., Sept. 26, 2023 - Hive Pro®, a pioneer vendor in Threat Exposure Management, is thrilled to announce a strategic partnership with Tech Titan Group, a leading IT Solutions Provider renowned for its innovation-driven approach and dedication to addressing evolving customer needs across...
dieselgeneratortech.com Cross Site Scripting vulnerability OBB-3705689
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The US Congress Has Trust Issues. Generative AI Is Making It Worse
Senators are meeting with Silicon Valley's elite to learn how to deal with AI. But can Congress tackle the rapidly emerging tech before working on itself?...
How China Demands Tech Firms Reveal Hackable Flaws in Their Products
Some foreign companies may be complying—potentially offering China’s spies hints for hacking their customers...
CVE-2023-37222
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
Cross site scripting
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
CVE-2023-37222
CVE-2023-37222 affects Farsight Tech Nordic AB ProVide 14.5. The vulnerability is multiple Cross-Site Scripting (CWE-79) in the web interface that can be exploited by a user with administrator privileges, with user interaction required. CVSS details from NVD indicate a low/moderate overall impact...
CVE-2023-37222 Farsight Tech Nordic AB ProVide
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
CVE-2023-37222 Farsight Tech Nordic AB ProVide
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
PT-2023-25841 · Farsight Tech Nordic Ab · Provide
Name of the Vulnerable Software and Affected Versions: Farsight Tech Nordic AB ProVide version 14.5 Description: Multiple XSS vulnerabilities can be exploited by a user with administrator privilege. Recommendations: For version 14.5, consider disabling access to administrator privileges until a...
Earth Estries Targets Government, Tech for Cyberespionage
We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures TTPs employed, we observed overlaps with the advanced persistent threat APT group FamousSparrow as Earth Estries targets governments and...
