69 matches found
MAL-2022-2483 Malicious code in discord-js-v13 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa16d135ce14e2cecb4cc4203b19a8ea5dde2ad02b34a62403aa10036938d20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Siemens SIMATIC S7-1200 Improper Authentication (CVE-2021-37172)
A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants V4.5.0. Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication an...
Authentication flaw
A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants V4.5.0. Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication an...
CVE-2021-37172
A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants V4.5.0. Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication an...
CVE-2021-37172
The CVE-2021-37172 vulnerability affects the SIMATIC S7-1200 CPU family (including SIPLUS variants) version 4.5.0. It arises from improper authentication when devices are provisioned with TIA Portal V13, allowing an attacker to bypass authentication and download arbitrary programs to the PLC; the...
CVE-2021-37172: Improper Authentication
A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants V4.5.0. Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication an...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Host On-Demand
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK and Runtime Environment updates in July 2020. Vulnerability Details CVEID:...
CVE-2020-35576
CVE-2020-35576 is a command-injection vulnerability in the traceroute feature of TP-Link TL-WR841N (V13, JP) firmware prior to 201216. Authenticated users can execute arbitrary code as root via shell metacharacters. Affected firmware versions include V13 with build 161028, and vendor guidance fix...
PT-2021-11804 · Tp Link · Tp-Link Tl-Wr841N
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841N V13 JP versions prior to 201216 Description: A Command Injection issue in the traceroute feature allows authenticated users to execute arbitrary code as root via shell metacharacters. Recommendations: For versions prior to...
CVE-2020-35576: Improper Neutralization of Special Elements used in an OS Command
A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...
Security Bulletin: Vulnerability in IBM Java Runtime affects Host On-Demand
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in Oracle April 2020 Critical Patch Update. Vulnerability Detai...
Security Bulletin: Vulnerability in IBM Java Runtime affects Host On-Demand
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in January 2020. Vulnerability Details CVEID: CVE-2019-4732...
Apple iOS v13.x (AirDrop) - (AirDoS) Denial of Service PoC
Document Title: =============== Apple iOS v13.x AirDrop - AirDoS Denial of Service PoC References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2192 Video: https://www.youtube.com/watch?v=pLpJIo-GcbQ Apple Acknowledgements: https://support.apple.com/en-us/HT210785...
Apple iOS v13.x Webkit - Denial of Service Vulnerability
Document Title: =============== Apple iOS v13.x Webkit - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...
Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability
Document Title: =============== Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...
CVE-2018-5403
Imperva SecureSphere gateway GW running v13, for both pre-First Time Login or post-First Time Login FTL, if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface...
CVE-2018-5403
CVE-2018-5403 affects Imperva SecureSphere gateway (GW) running v13. The vulnerability allows remote code execution via specially crafted requests to the web access management interface, applicable for both pre-First Time Login and post-First Time Login (FTL) when an attacker knows the basic auth...
CVE-2018-5403: Improper Neutralization of Special Elements used in a Command
Imperva SecureSphere gateway GW running v13, for both pre-First Time Login or post-First Time Login FTL, if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface...