79 matches found
Medius’ small IT team supports distributed workforce with Azure Active Directory
In today’s Voice of the Customer blog post, IT Manager Jacob Andersson and IT Systems Architect Fredrik Frööjd of Medius share how Azure Active Directory Azure AD has inspired employees to live by the cloud commitment the company encourages from customers and helped their small team support a...
CVE-2020-23160
Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices...
CVE-2020-23161
Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance Logs menu and manipulating the file-path in the URL...
CVE-2020-23160
Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices...
Remote code execution
Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices...
Pyrescom Termod4 time management access control error
A security vulnerability exists in Pyrescom Termod4 time management devices that stems from the inclusion of local files in the devices allowing an authenticated, remote attacker to traverse directories and read sensitive files via the Maintenance Log menu and manipulate file paths in URLs...
Pyrescom Termod4 time management access control error vulnerability
A security vulnerability in Pyrescom Termod4 time management devices before 10.04k allows an authenticated, remote attacker to access arbitrary commands on the device as root...
Pyrescom Termod4 time management encryption issue vulnerability
A security vulnerability in Pyrescom Termod4 time management devices allows remote attackers to read session files and obtain explicit user credentials...
CVE-2020-23162
CVE-2020-23162 affects Pyrescom Termod4 time management devices pre-10.04k. The issue is sensitive information disclosure due to weak encryption, allowing remote attackers to read a session-file and obtain plain-text credentials. Impact is partial confidentiality loss per CVSS2, with high impact ...
CVE-2020-23161
CVE-2020-23161 describes a local file inclusion in Pyrescom Termod4 time management devices prior to 10.04k. The issue allows an authenticated remote attacker to traverse the device’s filesystem and read sensitive files by tampering with the file-path parameter in the Maintenance > Logs URL. T...
CVE-2020-23160
CVE-2020-23160 affects Pyrescom Termod4 time management devices prior to firmware 10.04k. The issue permits authenticated remote attackers to execute arbitrary commands as root on the device. A Proof-of-Concept exploit exists for PoC usage, highlighting web server component vulnerabilities that c...
CVE-2020-23160
Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices...
[SECURITY] Fedora 26 Update: kdepim4-4.14.10-31.fc26
KDE4 PIM Personal Information Manager applications, including: knode: newsreader ktimetracker: Time and task management...
Operation Technology ETAP 14.1.0 - Multiple Stack Buffer Overrun Vulnerabilities
Operation Technology ETAP 14.1.0 Multiple Stack Buffer Overrun Vulnerabilities Vendor: Operation Technology, Inc. Product web page: http://www.etap.com Affected version: 14.1.0.0 Summary: Enterprise Software Solution for Electrical Power Systems. ETAP is the most comprehensive electrical...
Operation Technology ETAP 14.1.0 - Local Privilege Escalation
Operation Technology ETAP 14.1.0 Local Privilege Escalation Vendor: Operation Technology, Inc. Product web page: http://www.etap.com Affected version: 14.1.0.0 Summary: Enterprise Software Solution for Electrical Power Systems. ETAP is the most comprehensive electrical engineering software...
Joomla HD FLV 2.1.0.1 Arbitrary File Download
!/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/...
openSUSE Security Update : kdepim3 (kdepim3-770)
This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...
openSUSE Security Update : kdepim3 (kdepim3-770)
This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...