3296 matches found
FRIDA-DEXDump - Fast Search And Dump Dex On Memory
Features 1. support fuzzy search broken header dex. 2. fix struct data of dex-header. 3. compatible with all android versionfrida supported. 4. support loading as objection plugin 5. pypi package has been released Requires frida: pip install frida optional click pip install click Installation Fro...
1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3197 more potentially affected by CVE-2021-32014 via xlsx (>=0.3.10, <=0.16.9)
xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...
CLICK PLC CPU Modules 授权问题漏洞
CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to 8 I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that stems fr...
Automation Direct CLICK PLC CPU Modules
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Automation Direct Equipment: CLICK PLC CPU modules Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Cleartext Transmission of Sensitive Information, Unprotected Storage of...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jun 2021)
This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
SUSE: Security Advisory (SUSE-SU-2013:0325-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:0326-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-22337
There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...
CVE-2021-22337
There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...
CVE-2021-22337
There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...
HuaWei 华为智能手机安全漏洞
Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has an information leakage vulnerability that can be exploited by attackers to cause a single-click data leak to users...
CVE-2021-22337: Undefined Security Weakness
There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...
PT-2021-14971
Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to an Information Disclosure problem. It may lead to the leaking of user click data if successfully exploited. Recommendations: At the moment, there is no...
CVE-2021-24334: Improper Neutralization of Input During Web Page Generation
The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored...
PT-2021-3638
Name of the Vulnerable Software and Affected Versions Instant Images – One Click Unsplash Uploads WordPress plugin versions prior to 4.4.0.1 Description The issue is related to the improper validation and sanitization of the unsplash download w and unsplash download h parameter settings in the...
CVE-2021-24188
Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...
PT-2021-15734 · WordPress · Wp Content Copy Protection & No Right Click
Name of the Vulnerable Software and Affected Versions: WP Content Copy Protection & No Right Click WordPress plugin versions prior to 3.1.5 Description: The issue allows low-privileged users to exploit the AJAX action 'cp plugins do button job later callback' to install any plugin, including...
CVE-2021-24188: Improper Authorization
Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...
Tesla Remotely Hacked from a Drone
This is an impressive hack: Security researchers Ralf-Philipp Weinmann of Kunnamon, Inc. and Benedikt Schmotzle of Comsecuris GmbH have found remote zero-click security vulnerabilities in an open-source software component ConnMan used in Tesla automobiles that allowed them to compromise parked ca...
Passwordstate Warns of Ongoing Phishing Attacks Following Data Breach
Click Studios, the Australian software firm which confirmed a supply chain attack affecting its Passwordstate password management application, has warned customers of an ongoing phishing attack by an unknown threat actor. "We have been advised a bad actor has commenced a phishing attack with a...