987 matches found
Hardcoded credentials
bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but stored within the config.php file server-side as well as in clear-text on the android client device by default...
Tabnabbing via window.opener [bookwyrm.social]
Description: 1. Hello @bookwyrm-social I found a tabnabbing vulnerability. attack is possible due to taget=blank or Tab nabbing via window.opener. VISIT:- https://bookwyrm.social/ SUMMARY: 1. I was browsing the site and found a tabnabbing vulnerability . As per the observation I found that attack...
Default credentials
An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Thunderbird vulnerabilities (USN-5512-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5512-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a...
Oracle Linux 9 : thunderbird (ELSA-2022-4892)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4892 advisory. 91.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...
Malicious code in blank-ts-repo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1607 Malicious code in blank-ts-repo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blank-ts-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbbaa2da3818f952bc73b9783271c529948837dd554453a3a8ccf3eecba72706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1606 Malicious code in blank-ts-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbbaa2da3818f952bc73b9783271c529948837dd554453a3a8ccf3eecba72706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Debian DLA-3041-1 : thunderbird - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3041 advisory. Multiple security issues have been found in Thunderbird, which could potentially result in the execution of arbitrary code, information disclosure or spoofing. For...
Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird displays all spaces. This flaw allows an attacker to send an ema...
CVE-2022-1834
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird displays all spaces. This flaw allows an attacker to send an ema...
CVE-2022-1834
When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker's digital signature, that was shown...
PT-2022-3645
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.10 Description The issue arises when displaying the sender of an email, specifically if the sender name contains the Braille Pattern Blank space character multiple times. This could be exploited by an attacker ...
Mozilla Thunderbird < 91.10
The version of Thunderbird installed on the remote Windows host is prior to 91.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-22 advisory. - Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs...
Citrix Gateway and StoreFront Error After Upgrade "There are no apps or desktops available to you at this time."
Customer had upgraded ADC firmware to 13.0.71.44 from 13.0.58.30 during a change window. Post-upgrade when they authenticate and login to their Citrix Gateway URL and land on StoreFront, they get a blank screen with no applications and desktops being displayed. The issue is seen on all browsers...
AD Starter Scan - Blank passwords
Binary data adsiblankpwd.nbin...
ADM and Director Intergration missing Network HDX data: Error "No details are available" or blank page
Running Citrix ADM 13.0 latest and attempting to integrated the network function into our Citrix Director 1912. Attempted to use both HTTP and HTTPS. WIth HTTP the network tab on director is blank. With HTTPS it say no details are available. The following guide was used:...
Sifchain: Possible Database Details stored in values.yaml
The database details like username and database name are disclosed in the below mentioned file. Assuming a blank password since the password field was empty. File Location : https://github.com/Sifchain/sifnode/blob/740331dad061ee0f5a3cf3798d429f294b70f0ae/deploy/helm/block-explorer/values.yaml I...
CVE-2017-20002
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH hence bypassing PAM's nulloksecure configuration. Thi...