1883 matches found
Design/Logic Flaw
Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data...
CVE-2020-8482
The ABB Device Library Wizard vulnerability, CVE-2020-8482, affects Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2. It is an insecure storage issue where an unauthenticated, low-privilege user can read files containing confidential data. Impact is high on confidentiality and potential ...
CVE-2020-8482 ABB Device Library Wizard Information Disclosure Vulnerability
Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data...
CVE-2020-8482: Insecure Storage of Sensitive Information
Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data...
PT-2020-20166
Name of the Vulnerable Software and Affected Versions ABB Device Library Wizard versions 6.0.X through 6.0.3.2 Description The issue concerns insecure storage of sensitive information, allowing an unauthenticated low-privilege user to read a file containing confidential data. Recommendations For...
Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH) Exploit
Exploit Title: Remote Desktop Audit 2.3.0.157 - Buffer Overflow SEH Exploit Author: gurbanli Vulnerable Software: Remote Desktop Audit 2.3.0.157 Vendor Homepage: https://lizardsystems.com Version: 2.3.0.157 Software Link: https://lizardsystems.com/download/rdauditsetup.exe Tested on: Windows 7 x8...
LanSend 3.2 - Buffer Overflow (SEH) Exploit
Exploit Title: LanSend 3.2 - Buffer Overflow SEH Exploit Author: gurbanli Vulnerable Software: LanSend 3.2 Vendor Homepage: https://lizardsystems.com Version: 3.2 Software Link: https://lizardsystems.com/download/lansendsetup.exe Tested on: Windows 7 x86 f = file'payload.txt','w' """ PoC 1. Run...
LanSend 3.2 - Buffer Overflow (SEH)
Exploit Title: LanSend 3.2 - Buffer Overflow SEH Exploit Author: gurbanli Date: 2020-05-12 Vulnerable Software: LanSend 3.2 Vendor Homepage: https://lizardsystems.com Version: 3.2 Software Link: https://lizardsystems.com/download/lansendsetup.exe Tested on: Windows 7 x86 f = file'payload.txt','w'...
DLL Hijacking Vulnerability in Driver Wizard
Driver Wizard is a set of driver management and hardware detection in one, professional-grade driver management and maintenance tools. Driver Wizard suffers from a DLL hijacking vulnerability, which can be exploited by attackers to load untrusted dynamic link libraries for command execution...
CVE-2018-21047
An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...
CVE-2018-21047
An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...
PT-2020-8691
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Description An issue allows for a Factory Reset Protection FRP bypass via the voice assistant on affected devices. This occurs because Internet access is granted before the Setup Wizard is completed...
CVE-2018-21047: Missing Authorization
An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...
AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)
Exploit Title: AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow SEH Date: 2020-04-02 Exploit Author: Hodorsec Version: v6.20.5300 Software Link: http://download.aida64.com/aida64engineer620.exe Vendor Homepage: https://www.aida64.com/products/aida64-engineer Tested on: Win7 x86...
Unspecified Vulnerability in Ubiquiti Networks UniFi Video Controller
Ubiquiti Networks UniFi Video Controller is a web application for controlling and managing UniFi video devices from Ubiquiti Networks, Inc. A security vulnerability exists in Ubiquiti Networks UniFi Video Controller v3.9.3 and earlier versions for Windows 7/8/10 x64, which originates in the...
CVE-2020-8145
The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...
PT-2020-19981
Name of the Vulnerable Software and Affected Versions UniFi Video Controller versions prior to 3.9.6 Description The UniFi Video Server web interface configuration restore functionality at the "backup" and "wizard" endpoints does not implement sufficient privilege checks. Low privileged users,...
Unable to map printers using Citrix policies from the cloud hosted Citrix Studio
Steps to reproduce the error: 1. Login to Citrix cloud portal and launch the Studio. 2. Select the Policies Tab in the cloud hosted Studio. 3. Navigate to Session printers and add new printer. 4. Browse the Print server using the UNC path and click browse. 5. It times out 6. If the server and the...
WP Security Audit Log < 4.0.2 - Broken Access Control in First-Time Install Wizard
Broken access control vulnerability affecting version 4.0.1 and below that could lead to privilege escalation, sensitive data exposure and insecure deserialisation. To exploit the vulnerability, the wizard must not have been completed, otherwise it won’t work...