Design/Logic Flaw

A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files...

Samsung Wear Os Access Control Error Vulnerability

Samsung Wear Os is a version of the Android operating system from Samsung South Korea, designed for wearable computer devices such as smartwatches. Designed for wearable computer devices such as smartwatches, an access control error vulnerability exists in StRetailModeReceiver in Samsung Wear Os ...

Deploying Zero Trust Network Access for Secure Application Access? Don’t Forget to Secure Your Employees

Secure your workforce with the help of multi-factor authentication and Akamai's Zero Trust Network Access application in place of a virtual private network VPN...

Hospitals Patient Records Management System 1.0 - Account TakeOver Vulnerability

Exploit Title: Hospitals Patient Records Management System 1.0 - Account TakeOver Exploit Author: twseptian Vendor Homepage: https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html Software Link:...

Akamai Enterprise Application Access Client 代码问题漏洞

Akamai Enterprise Application Access Client Akamai Eaa Client is an enterprise application access program from Akamai, Inc. It is used to provide fast, secure access. A security vulnerability exists in Akamai EAA, which stems from an unquoted path that could allow an attacker to hijack the...

in getgrav/grav

✍️ Description Developers often set cookies to be accessible from the root context path "/". Doing so exposes the cookie to all web applications on the domain. Since cookies often carry sensitive information such as session identifiers, sharing cookies across applications can lead a vulnerability...

Zero Trust Network Access Is an Oxymoron

Though Zero Trust is really quite simple and should be viewed as a very strong form of the age-old principle of least privilege, that does not mean that it is the same thing. In fact, one of the most significant differences from what came before is that when it comes to access, Zero Trust is base...

Zero Trust Network Access Is an Oxymoron

Though Zero Trust is really quite simple and should be viewed as a very strong form of the age-old principle of least privilege, that does not mean that it is the same thing. In fact, one of the most significant differences from what came before is that when it comes to access, Zero Trust is base...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2021-52345)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Media Framework component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker...

New Admin Portal for Akamai Enterprise Application Access

The definition of a user has evolved to comprise much more than an employee, making secure access to the right application, for the right user, at the right time difficult and complex...

Akamai EAA Impersonation Vulnerability - A Deep Dive

In this post, we cover the technical details of CVE-2021-28091, the vulnerability impacting Akamai's Enterprise Application Access EAA platform...

Authentication Bypass

pulsar-broker-common is vulnerable to authentication bypass. The JSON Web Token JWT is not validated when authenticating clients using JWT and allows an attacker to authenticate and access the application as any user...

Amazon Cosori Smart Code Execution Vulnerability

amazon COSORI Smart is a hardware device from amazon. Smart WiFi Air Fryer. A security vulnerability exists in Cosori Smart 5.8-Quart, which can be exploited by an attacker to gain full access to an application and compromise an affected system...

Phish-Proof Multi-Factor Authentication with Akamai MFA

Today, Akamai announced Akamai MFA, a phish-proof multi-factor authentication MFA service for the workforce that delivers all of the security benefits of FIDO2 with the frictionless end-user experience of a mobile push on a smartphone. Why has Akamai introduced this new service? When an employee...

Sql injection

FUEL CMS 1.4.8 allows SQL injection via the 'fuelreplaceid' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

HCL Client Application Access Buffer Overflow Vulnerability

HCL Client Application Access is an integrated HCL Notes and HCL Domino application from HCL India. A buffer overflow vulnerability exists in HCL Client Application Access version v9, which stems from a vulnerability in the handling of input parameters could be exploited by an authenticated...

CVE-2020-14231

A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the...

CVE-2020-14231

A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the...

CVE-2020-14231

CVE-2020-14231 describes a buffer overflow vulnerability in the input parameter handling of HCL Client Application Access v9 . The underlying issue is in handling of input parameters, leading to a stack buffer overflow. It could be exploited by an authenticated attacker (network-facing) to crash ...

HCL Client Application Access 缓冲区错误漏洞

HCL Client Application Access is an integrated HCL Notes and HCL Domino application from HCL India. A buffer overflow vulnerability exists in HCL Client Application Access version v9, which stems from a vulnerability in the handling of input parameters could be exploited by an authenticated...