EUVD-2021-13276

Malware in sbrugna...

EUVD-2021-13277

Malware in sbrugna...

EUVD-2021-30391

Malicious code in bioql PyPI...

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

Design/Logic Flaw

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

CVE-2021-43458

CVE-2021-43458 describes an Unquoted Service Path vulnerability in Vembu BDR 4.2.0.1 . The issue arises via a specially crafted file in the service paths for (1) hsflowd, (2) VembuBDR360Agent, or (3) VembuOffice365Agent. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE l...

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

PT-2022-11845

Name of the Vulnerable Software and Affected Versions Vembu BDR version 4.2.0.1 Description An Unquoted Service Path issue exists in Vembu BDR via a specially crafted file in the hsflowd, VembuBDR360Agent, or VembuOffice365Agent service paths. Recommendations For version 4.2.0.1, consider updatin...

CVE-2021-43458: Unquoted Search Path or Element

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

Vembu BDR Suite Code Issue Vulnerability

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite that stems from allowing unauthenticated SSRF via a GET request that specifies a hostname and port number.No detailed vulnerability details are available at this time...

Vembu BDR Suite Command Injection Vulnerability (CNVD-2021-40767)

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that originates from allowing unauthenticated remote code execution by placing a command in a GET request. No detailed vulnerability details are provided at this time...

Vembu BDR Suite Code Issue Vulnerability (CNVD-2021-50574)

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite, which can be exploited by an attacker to write an unauthenticated file via a GET request that specifies the name and content of the file...

Vembu BDR Suite Command Injection Vulnerability

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that arises from a network system or product that does not properly filter specific elements of externally entered data during the construction of an executable command. An attacker...

CVE-2021-26472

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges...

CVE-2021-26472

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges...

PT-2021-17020

Name of the Vulnerable Software and Affected Versions Vembu BDR Suite versions prior to 4.2.0 Vembu products affected versions not specified Description The issue allows an attacker to execute a Cross Site Request Forgery CSRF attack. Additionally, Vembu BDR Suite is affected by an Unauthenticate...

Vembu BDR Suite code-related vulnerabilities

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite, which can be exploited by an attacker to write an unauthenticated file via a GET request that specifies the name and content of the file...

Vembu BDR Suite command injection vulnerability

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that originates from allowing unauthenticated remote code execution by placing a command in a GET request. No detailed vulnerability details are provided at this time...