Xiongmai NBD80S09S-KLC and NBD80N32RA-KL-V3 Security Vulnerabilities

The Xiongmai NBD80S09S-KLC and Xiongmai NBD80N32RA-KL-V3 are both a web service firmware from Xiongmai Technology Xiongmai, China. A security vulnerability exists in the Xiongmai NBD80S09S-KLC and NBD80N32RA-KL-V3, which stems from the presence of a buffer overflow vulnerability. Affected product...

PT-2023-26855

Name of the Vulnerable Software and Affected Versions Apache Superset versions up to and including 2.1.0 Description The issue is related to stack traces for errors being enabled by default, resulting in the exposure of internal traces on REST API endpoints to users. This could potentially reveal...

The vulnerability in the software platform’s web service for managing security in industrial networks, MXSecurity, allows a perpetrator to increase their privileges.

The vulnerability of the software platform’s web service for managing security in industrial networks, MXSecurity, is related to insufficient entropy when assigning possible random values. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2023-39979

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

CVE-2023-39979

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

CVE-2023-39979 MXsecurity Authentication Bypass

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

CVE-2023-39979 MXsecurity Authentication Bypass

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

CVE-2023-39979: Small Space of Random Values

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

PT-2023-4653 · Unknown · Mxsecurity

Name of the Vulnerable Software and Affected Versions: MXsecurity versions prior to 1.0.1 Description: The issue is related to insufficient entropy in the web service authenticator, which can be exploited by a remote attacker to bypass authentication and potentially access the system. This is due...

e-Excellence U-Office Force 安全漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. A security vulnerability exists in e-Excellence U-Office Force, which can be exploited to obtain part of the system information from an error message returned by the web service by sending specif...

Zabbix Web Service Report Generation External Control of File Name Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Zabbix Web Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within PDF report generation. The issue results from the lack of proper validation o...

CVE-2021-35309

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks...

CVE-2021-35309

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks...

CVE-2021-35309

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks...

PT-2023-12258 · Samsung · Samsung Syncthru Web Service

Name of the Vulnerable Software and Affected Versions: Samsung SyncThru Web Service version 5.93 06-09-2014 Description: The issue allows attackers to gain escalated privileges via Man-In-The-Middle MITM attacks. MITM attacks involve intercepting communication between two parties to steal sensiti...

CVE-2021-35309: Improper Privilege Management

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks...

CVE-2021-35309

Samsung SyncThru Web Service SPL 5.93 (2014-06-09) is cited as vulnerable to MITM attacks that can enable attackers to gain escalated privileges. Affected component is the Samsung SyncThru Web Service, version 5.93 dated 06-09-2014. The root cause/attack vector is described as a Man‑In‑The‑Middle...

CVE-2021-35309

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks...

CVE-2021-35309

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks...

High Availability Setup on Amazon Web Service

This article describes the design perspective of High Availability HAon Amazon Web Service AWS environment. Background AWS does not support Gratuitous Address Resolution Protocol GARP, Virtual Local Area Network VLAN or any Layer-2 L2 functionalities like bridging. Two virtual machines belonging ...