3132 matches found
CVE-2021-33831
api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with tracing of infection chains by creating 500 random users within 2500 seconds...
CVE-2021-33831
api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with tracing of infection chains by creating 500 random users within 2500 seconds...
CVE-2021-33831
The CVE-2021-33831 entry concerns the TH Wildau COVID-19 Contact Tracing web app. The issue is Incorrect Access Control in the registration API (registration endpoint) that allows automated, unprotected creation of many guest users (e.g., 500 users within 2500 seconds). An attacker can exploit th...
CVE-2021-33831
api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with tracing of infection chains by creating 500 random users within 2500 seconds...
TH Wildau COVID-19 Contact Tracing 授权问题漏洞
TH Wildau COVID-19 Contact Tracing is a web application used for contact tracing in the event of a SARS Cov2 infection. An authorization issue vulnerability exists in TH Wildau COVID-19 Contact Tracing that stems from the product's registration API not validating input. An attacker could use this...
The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.
The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
COVID-19 Contact Tracing System With QR Code Scanning 1.0 SQL Injection
Exploit Title: Covid-19 Contact Tracing System Web App with QR Code Scanning CTS-QR by: oretnom23 v1.0 remote SQL-Injection-Bypass-Authentication in /ctsqr/classes/Login.php + XSS-Stored PWNED PHPSESSID Vulnerable parameter "code" in applicatoin State/Province List. Author: nu11secur1ty Testing a...
COVID-19 Contact Tracing System With QR Code Scanning 1.0 SQL Injection Exploit
COVID-19 Contact Tracing System web app with QR Code Scanning version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Covid-19 Contact Tracing System Web App with QR Code Scanning CTS-QR by: oretnom23 v1.0 remote...
Covid-19 Contact Tracing System Web App with QR Code Scanning - SQL-Injection-Bypass-Authentication
The Covid-19 Contact Tracing System Web App with QR Code Scanning is vulnerable in the application /ctsqr/classes/Login.php from SQL-Injection-Bypass-Authentication m0re info: . The parameter username from the login form is not protected correctly and there is no security and escaping from...
38M Records Exposed Online—Including Contact-Tracing Info
Misconfigured Power Apps from Microsoft led to more than a thousand web apps accessible to anyone who found them...
OESA-2021-1318 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users with CAPSYSADMIN capability cou...
The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.
The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.
The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
COVID-19 Contact-Tracing Data Exposed, Fake Vax Cards Circulate
This week, the Indiana Department of Health issued a notice that the state’s COVID-19 contact-tracing system had been exposed via a cloud misconfiguration, revealing names, emails, gender, ethnicity, race and dates of birth of more than 750,000 people. The incident shows that COVID-19 data could ...
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.
...
CVE-2021-34487
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-34486
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-34487
Windows Event Tracing Elevation of Privilege Vulnerability...