Siemens Siveillance Video Client User Information Disclosure Vulnerability

Siveillance Video formerly known as Siveillance VMS is an IP video management software. A security vulnerability exists in the Siemens Siveillance Video Client. An attacker could exploit the vulnerability to obtain a valid administrator login and use this information to launch further attacks...

GHSA-2563-83P7-F34P Malicious Package in requestt

All versions of requestt typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

GHSA-855M-JCHH-9QJC Malicious Package in commnader

All versions of commnader typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

Malicious Package in commnader

All versions of commnader typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

Malicious Package in exprss

All versions of exprss typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

GHSA-6QC7-JGQ7-34RF Malicious Package in exprss

All versions of exprss typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

GHSA-FPW3-X4XQ-6VXQ Malicious Package in wepack-cli

All versions of wepack-cli typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the proces...

Tracking Module in botbait

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked test, requir...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

Design/Logic Flaw

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

Advanced Access Manager < 6.6.2 - Authenticated Information Disclosure

The plugin’s aam/v1/authenticate and aam/v2/authenticate REST endpoints were set to respond to a successful login with a json-encoded copy of all metadata about the user, potentially exposing users’ information to an attacker or low-privileged user. This included items like the user’s hashed...

Cisco Webex Meetings User Email Address Information Disclosure Vulnerability

A vulnerability in the contacts feature of Cisco Webex Meetings could allow an authenticated, remote attacker with a legitimate user account to access sensitive information. The vulnerability is due to improper access restrictions on users who are added within user contacts. An attacker on one...

CVE-2020-9258

HUAWEI P30 smartphone with versions earlier than 10.1.0.135C00E135R2P11 have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment...

CVE-2020-9258

HUAWEI P30 smartphone with versions earlier than 10.1.0.135C00E135R2P11 have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment...

Input validation

HUAWEI P30 smartphone with versions earlier than 10.1.0.135C00E135R2P11 have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment...

CVE-2020-9258

Huawei P30 smartphones running versions earlier than 10.1.0.135 (C00E135R2P11) are affected by CVE-2020-9258, an improper input verification vulnerability. The issue stems from an attribution in a module not being set correctly and missing verification, allowing local attackers to inject maliciou...

Huawei P30 Information Disclosure Vulnerability (CNVD-2020-51518)

Huawei P30 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei P30 10.1.0.135 C00E135R2P11, which stems from a lack of input validation in the program. A local attacker could exploit the vulnerability to obtain user information...