Authentication flaw

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...

Stack overflow

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

CVE-2021-45917

CVE-2021-45917 describes an improper authentication vulnerability in the server-request receiver function of the Shockwall system by Sun & Moon Rise. An authenticated attacker on an agent computer in the local network can use local registry information to perform a server-side request forgery (SS...

CVE-2021-45916

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

CVE-2021-44161

Changing MOTP Mobile One Time Password system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication...

Sql injection

Changing MOTP Mobile One Time Password system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication...

CVE-2021-44161

The CVE-2021-44161 entry concerns panorama Mobile One Time Password (MOTP) from China Panorama. The issue: a specific function parameter is not properly validated, enabling SQL injection from an attacker on the same local network to read, modify, or delete the backend database. Connected sources ...

CVE-2021-44161 Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection

Changing MOTP Mobile One Time Password system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication...

The vulnerability of Google Chrome’s autonomous mode, related to the activation of functions from an unreliable controlled area, allows a perpetrator to circumvent existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s autonomous mode is related to the activation of functions from an unreliable and uncontrolled area. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created HTML page...

The vulnerability of the emergency recovery function of the Cisco SD-WAN vManage centralized system allows a intruder to gain unauthorized access to the device.

The vulnerability of the emergency recovery function of the Cisco SD-WAN vManage centralized system management platform is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the...

The vulnerability of the software for centralized device management in Fortinet’s FortiManager system lies in the ability to disclose information in the erroneous data area, allowing an intruder to expose the protected information.

The vulnerability of the software for centralized device management in Fortinet FortiManager relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to disclose the protected information...

lakeareapediatrics.com Cross Site Scripting vulnerability OBB-2302377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

FatPipe 安全漏洞

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover due to a WAN component or service failure that results in a data line connection outage.A security vulnerability exists in FatPipe WARP, IPVPN and MPVPN that stems from a lack of...

PT-2021-6253 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Microsoft Local Security Authority Subsystem Service LSASS of the Microsoft...

PT-2021-6326 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area...

PT-2021-6190 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to an information disclosure in the error data area of Microsoft Message Queuing MSMQ in the Microsoft Windows operating system. It may allow a...

PT-2021-6313 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area...

Mozilla: JavaScript unexpectedly enabled for the composition area

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird...

Mozilla: JavaScript unexpectedly enabled for the composition area

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird...

Mozilla: JavaScript unexpectedly enabled for the composition area

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird...