6443 matches found
Prototype Pollution in steveukx/properties
Description properties-reader is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC and INI files: // poc.js var propertiesReader = require'properties-reader'; console.log"Before : " + .polluted console.log"Before : " + .polluted1 var properties =...
Prototype Pollution in evangelion1204/multi-ini
Description multi-ini is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC and INI files: // poc.js const ini = require'multi-ini'; console.log"Before : " + .polluted; var content = ini.read'./payload.ini'; console.log"After : " + .polluted; //payload.ini constructor...
PT-2020-17310
Name of the Vulnerable Software and Affected Versions Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server versions 20.2.8 and earlier Description The Web Administrative Interface in the affected software has a default account with a password of pokon. Recommendations For versions 20.2...
Security Issues in PoS Terminals Open Consumers to Fraud
Researchers are detailing widespread security issues in point-of-sale PoS terminals – specifically, three terminal device families manufactured by vendors Verifone and Ingenico. Click to register. The issues, which have been disclosed to the vendors and since patched, open several popular PoS...
Information Disclosure
aptdaemon is vulnerable to information disclosure. An attacker is able to view file existence by setting Terminal/DebconfSocket properties...
Huawei Multiple Products Command Injection Vulnerability
Huawei B2368-22 and others are a high-performance outdoor CPE terminal from Huawei China. a command injection vulnerability exists in several Huawei products, which can be exploited by attackers to inject commands on the target device...
[SECURITY] [DLA 2483-1] linux-4.19 security update
Debian LTS Advisory DLA-2483-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings December 05, 2020 https://wiki.debian.org/LTS Package : linux-4.19 Version : 4.19.160-2deb9u1 CVE ID : CVE-2019-19039 CVE-2019-19377 CVE-2019-19770 CVE-2019-19816 CVE-2020-0423...
CVE-2020-16128
The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5...
CVE-2020-16128
The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5...
PT-2020-14764
Name of the Vulnerable Software and Affected Versions aptdaemon versions prior to 1.1.1+bzr982-0ubuntu34.1 Description The aptdaemon DBus interface disclosed file existence by setting Terminal/DebconfSocket properties. Recommendations For versions prior to 1.1.1+bzr982-0ubuntu34.1, update to...
SIEMENS SICAM A8000 RTUs SSL Configuration Insecurity Vulnerability
The SIEMENS SICAM A8000 RTUs Remote Terminal Units series is a modular device family for remote control and automation applications in all areas of energy supply. A security vulnerability exists in the SIEMENS SICAM A8000 RTUs. An attacker could exploit the vulnerability to decrypt communications...
Multiple Siemens products have security vulnerabilities
The SIEMENS SICAM A8000 RTUs Remote Terminal Units series is a modular device family for remote control and automation applications in all areas of energy supply. A security vulnerability exists in the SIEMENS SICAM A8000 RTUs. An attacker could exploit the vulnerability to decrypt communications...
UBUNTU-CVE-2020-16128
The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5...
Siemens SICAM A8000 RTUs
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SICAM A8000 Remote Terminal Unit Series Vulnerability: Protection Mechanism Failure 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
Attention Client is vulnerable to dll hijacking
Attention Client is a high-definition video communication cloud terminal launched by Suirui Technology for government, enterprises and other industrial customers. There is a dll hijacking vulnerability in Attention Client. An attacker can use this vulnerability to load a malicious dll and execute...
Command Execution Vulnerability in Kingsoft V8+ Terminal Security System
Kingsoft V8+ Terminal Security is a security software for enterprise-level users. A command execution vulnerability exists in Kingsoft V8+ Terminal Security System, which can be exploited by attackers to gain control of a server...
Unauthorized Access
snapd is vulnerable to unauthorized access. The vulnerability exists due to the library allows a strict mode snap to insert characters into a terminal on a 64-bit host but the Linux kernel only uses the lower 32 bits to determine which ioctl2 commands to run. A malicious snap could exploit this t...
CVE-2020-23727
There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash BSOD...
