2622 matches found
Information disclosure
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...
CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...
CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...
Unauthorized Access Vulnerability in Kodak Multimedia Recording and Playback System
Ltd. is a provider of video and security products and solutions, dedicated to video conferencing, video surveillance and video application solutions to help various government and enterprise customers to solve visual communication and management challenges. An unauthorized access vulnerability...
360 P0 and F5C Licensing Issues Vulnerabilities
The Qihoo 360 P0 and 360 F5C are both wireless routers from the Chinese company Qihoo Technologies. An authorization issue vulnerability exists in the interfaces of the 360 P0 and F5C, which can be exploited by an attacker to obtain some of the user's information, cause the user to be unable to u...
Logic flaws in the Shen Yueh Housing Provident Fund business system
Shen Yue Software is a company that provides housing fund management software. A logic flaw vulnerability exists in the Shen Yue housing fund business system, which can be exploited by attackers to reset user information and view sensitive user information...
Microsoft Office Excel Information Disclosure (CVE-2019-1110)
An information disclosure vulnerability exists in Microsoft Office Excel. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...
SOPlanning 1.45 - 'by' SQL Injection
Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali Rolling The SOPlanning application i...
Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Exploit
Exploit for java platform in category web applications Exploit Title: Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Discovered by: Elwood Buck & Nolan B. Kennedy of Mindpoint Group Exploit Author: Nolan B. Kennedy nxkennedy Discovery date: 2019-09-20 Vendor Homepage:...
Welp – Google sent your photos & videos to strangers
By Uzair Amir Not a Good news for Google Takeout users. Were you photos or videos were also shared by Google with strangers? This is a post from HackRead.com Read the original post: Welp - Google sent your photos & videos to strangers...
Topcoder: PII of Users Disclosure using "/members/invite/" endpoint
Hello! I found PII Disclosue at https://connect.topcoder.com/projects/ Steps to Reproduce. 1 Go to https://connect.topcoder.com/projects 2 Select an existing project, or create a new one. 3 Select the "Manage Invitations" option. on the left sidebar. 4 Enter the Username/Email of the user you wan...
Centreon 19.10.5 - Pollers Remote Command Execution
Centreon 19.10.5 - Pollers Remote Command Execution Exploit Title: Centreon 19.10.5 - 'Pollers' Remote Command Execution Date: 2020-01-27 Exploit Author: Omri Baso, Fabien Aunay Vendor Homepage: https://www.centreon.com/ Software Link: https://github.com/centreon/centreon Version: 19.10.5 Tested...
Linux: Read /etc/passwd (KB)
The password file stores information about users such like username, UID, GID, etc. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Logic flaw vulnerability in ejucms frontend Us***.php file
EJU real estate system ejucms is a set of localized O2O real estate website platform system. There is a logic flaw vulnerability in the ejucms front-end Us.php file. Attackers can use the vulnerability to modify any user information...
TikTok's First Transparency Report Doesn't Tell the Full Story
The app says it didn’t receive any requests for user information from China during the first half of 2019. That might not reassure skeptics...
CVE-2019-19985
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...
Information disclosure
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...
CVE-2019-19985
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...
CVE-2019-19985
CVE-2019-19985 concerns the WordPress plugin Email Subscribers & Newsletters (before 4.2.3). The issue allows unauthenticated arbitrary file retrieval, enabling file download and user information disclosure. Connections in the provided documents confirm the vulnerability affects versions prior to...
CVE-2019-15006
There was a man-in-the-middle MITM vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence...