7230 matches found
CVE-2021-43779
GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of...
Remote code execution
GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of...
CVE-2021-43779
CVE-2021-43779 affects GLPI with the addressing plugin in versions
Apple AirTags Are Being Used to Track People and Cars
This development suprises no one who has been paying attention: Researchers now believe AirTags, which are equipped with Bluetooth technology, could be revealing a more widespread problem of tech-enabled tracking. They emit a digital signal that can be detected by devices running Apples mobile...
What is a Botnet ❓ Definition, Types, Example Attack
Professionals, who make system security arrangements, are well-aware of the term ‘botnet’. Often used for the chain of hijacked computers/systems, the term ‘botnet’ should be well understood if a restorative and robust system is instructed as their wrong usage can lead to tremendous chaos. Botnet...
Wyse Management Suite Deserialization Vulnerability
Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell USA. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.A deserialization vulnerability exists in Wyse Management Suite versions 3.3.1 and...
macOS 12.x < 12.1 Multiple Vulnerabilities (HT212978)
The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.1. It is, therefore, affected by multiple vulnerabilities: - An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked via BSSIDs...
Enalean Tuleap Injection Vulnerability
Enalean Tuleap is a set of open source software development and project management tools from the French company Enalean. The tool provides enterprise application lifecycle management, as well as project tracking, source code management, and team collaboration.Enalean Tuleap suffers from an...
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Description CSRF to disrupt request tracking Proof of Concept Open the HTML file as a logged-in user Impact Unauthenticated attackers situated outside of the organization can disrupt request tracking by sending the malicious HTML to a user which will cause them to request an asset...
Volatile and Adaptable: Tracking the Movements of Modern Ransomware
Trend Micro's tracking of modern ransomware, as well as of older families, shows which attacks are gaining momentum and which families are particularly dangerous for enterprises and private users...
Cross-Site Request Forgery (CSRF)
kevinpapst/kimai2 is vulnerable to cross-site request forgery. The vulnerability exists in createInvoiceAction of InvoiceController.php which allows a malicious attacker to trick users to modify status of invoices and disrupt the tracking of invoices...
GitLab Access Control Error Vulnerability (CNVD-2021-99768)
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features.GitLab CE/EE is vulnerable to an access control error that stems from the...
GitLab Information Disclosure Vulnerability (CNVD-2021-99767)
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, etc. An information disclosure vulnerability exists in GitLab CE/EE, which stems from an informati...
Trend Micro Security 后置链接漏洞
Trend Micro Security is a suite of computer security software from Trend Micro, Inc. Trend Micro Security has a backlink vulnerability that stems from a link tracking issue in the PC Health Check feature. An attacker could exploit the vulnerability to cause a denial of service attack...
CVE-2021-44529
creationtimestamp| type| source ---|---|--- 2021-12-09 00:24:21+00:00| seen| https://t.me/cibsecurity/33664 2022-04-16 15:24:17+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1962 2023-01-13 11:04:04+00:00| seen| https://t.me/poxek/2655 2023-01-17 19:33:02+00:00| seen|...
How to Opt Out of Verizon’s Custom Experience Tracking
Unless you manually opt out of the program, Verizon will store personal information and create user interest profiles...
CVE-2021-25516
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...
CVE-2021-25516
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...