Tenda AC1200 Default Credentials Disclosure Vulnerability

The Tenda AC1200 is a wireless router from the Chinese company Tenda. A default credential disclosure vulnerability exists in the Tenda AC1200 Model AC6 15.03.06.51multi, which stems from the fact that admin, support, user, and nobody has a default password of 1234, which can be exploited by an...

CVE-2020-26766: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

PT-2020-16488

Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System With Admin Panel version 2.1 Description A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page. This issue allows an attacker to trick a user into...

CVE-2020-35252: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...

PT-2020-17303

Name of the Vulnerable Software and Affected Versions User Registration & Login System with Admin Panel version 1.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. This vulnerability can be exploited via the Full Name parameter in the User Registration section...

Lennyniu Tlslite-ng Encryption Problem Vulnerability

Lennyniu Tlslite-ng is a Python-based codebase used to provide SSLv3.0, TLS 1.0, TLS 1.1 and TLS 1.2 by the individual developer Lennyniu. A cryptographically problematic vulnerability previously existed in tlslite-ng 0.7.6 and 0.8.0-alpha39, which stemmed from code that relied on data to perform...

CVE-2020-35273: Cross-Site Request Forgery (CSRF)

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

PT-2020-6905

Name of the Vulnerable Software and Affected Versions golang.org/x/crypto/ssh versions through v0.0.0-20201203163018-be400aefbc4c Description A nil pointer dereference in the golang.org/x/crypto/ssh component for Go allows remote attackers to cause a denial of service against SSH servers. An...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3764-1)

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-15436: Fixed a use after free vulnerability in fs/blockdev.c which could have allowed local users to gain privileges or cause a denial of service...

Defending the Intelligent Edge from Evolving Attacks

Cybercriminals keep their fingers on the pulse of potential new attack vectors at all times, looking for their next opportunity. They are currently moving significant resources to target and exploit emerging network-edge environments, such as the cloud and remote workers, rather than just targeti...

PT-2020-22180

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. Technical details about the crash include the blosc run decompression with context, blosc2 decompress ctx, and fra...

CVE-2020-26254

omniauth-apple is the OmniAuth strategy for "Sign In with Apple" RubyGem omniauth-apple. In omniauth-apple before version 1.0.1 attackers can fake their email address during authentication. This vulnerability impacts applications using the omniauth-apple strategy of OmniAuth and using the...

CVE-2020-26254

omniauth-apple is the OmniAuth strategy for "Sign In with Apple" RubyGem omniauth-apple. In omniauth-apple before version 1.0.1 attackers can fake their email address during authentication. This vulnerability impacts applications using the omniauth-apple strategy of OmniAuth and using the...

CVE-2020-26254

The CVE concerns the RubyGem omniauth-apple, used as an OmniAuth strategy for Sign In with Apple. In affected versions prior to 1.0.1, an attacker can set the value of info.email in OmniAuth's Auth Hash Schema to an arbitrary email (including others’ addresses). This can enable spoofed identities...

CVE-2020-26254 omniauth-apple allows attacker to fake their email address during authentication

omniauth-apple is the OmniAuth strategy for "Sign In with Apple" RubyGem omniauth-apple. In omniauth-apple before version 1.0.1 attackers can fake their email address during authentication. This vulnerability impacts applications using the omniauth-apple strategy of OmniAuth and using the...

Fedora 33 : pacemaker (2020-3d0e38b9e7)

Wed Nov 18 2020 Klaus Wenninger - 2.0.5-0.7.rc3 - a little more syncing with upstream spec-file Tue Nov 17 2020 Klaus Wenninger - 2.0.5-0.6.rc3 - Update for new upstream tarball for release candidate: Pacemaker-2.0.5-rc3 for full details, see included ChangeLog file or...

Hotfix XS82E008 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX284874 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

CVE-2020-24723: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1...

CVE-2020-25952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

2020.2 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0590 Description: Improper input...