Data analytics firm Polecat data breach – 30TB of data exposed

By Waqas Polecat exposed an Elasticsearch server that wasn't protected with any authentication measures or any form of encryption. This is a post from HackRead.com Read the original post: Data analytics firm Polecat data breach - 30TB of data exposed...

The vulnerability of Dollibarr’s software lies in its lack of protection for SQL query structures, allowing attackers to execute arbitrary SQL commands.

The vulnerability of Dollibarr’s software lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the J-Web web interface of the Junos operating system, which allows a hacker to increase their privileges

The vulnerability of the J-Web web interface of the Junos operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information from a remote location...

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

The vulnerability of Microsoft Exchange Server is related to the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

ant: insecure temporary file

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

The vulnerability of the Local Print Spooler Service in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Local Print Spooler Service in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Apache CXF web services lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Apache CXF web services is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the styleSheetPath parameter...

The vulnerability of the library for working with relational DBMSs like SQLAlchemy lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the library for working with relational DBMSs like SQLAlchemy is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect its web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the user’s browser by creating a...

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect its web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the user’s browser by creating a...

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect its web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the user’s browser by creating a...

CVE-2020-25036

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

The vulnerability of the check_community.php file in the Mikrotik Router Monitoring System allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkcommunity.php file of the Mikrotik Router Monitoring System is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Oracle Application Express Survey Builder component of the Oracle Database Server database management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Oracle Application Express Survey Builder component of the Oracle Database Server database management system is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance lies in the lack of protection for operational data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the device driver for the trusted platform module (TPM) of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the device driver for the trusted platform module TPM of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2021-03528)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.2. The vulnerability stems from the product...