Sifchain: Wrong implementation of Telegram link on the main page for PC users

Summary: I found that there is a broken link for your telegram group. When a PC user click on telegram icon on your main page he is redirected to tg://resolve?domain=sifchain instead of https://t.me/sifchain due to some errors in configurationcoding. That idea is good for mobile view not deskptop...

CVE-2021-21728

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

Design/Logic Flaw

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

CVE-2021-21728

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

CVE-2021-21728

CVE-2021-21728 affects the ZTE ZXA10 C300M (all versions up to V4.3P8). The issue is a configuration error: a port is open by default, allowing an attacker to flush a high volume of packets to that port and cause resource exhaustion, reducing system processing capability. The root cause is a reso...

The vulnerability of Windows Admin Center, related to security configuration errors, allows a hacker to circumvent existing security restrictions.

The vulnerability of the Windows Admin Center management tool is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

MISP Default Configuration Error Vulnerability

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A default configuration error vulnerability exists in MISP version 2.4.136, which stems fr...

The vulnerability of the fly-wm window manager, related to security configuration errors, allows attackers to gain access to confidential data.

The vulnerability of the fly-wm window manager is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

SAP NetWeaver-XML Toolkit for JAVA Information Disclosure Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver-XML Toolkit for JAVA ENGINEAPI. The vulnerabilit...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2020-57588)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

OPENSUSE-SU-2020:1678-1 Security update for crmsh

This update for crmsh fixes the following issues: - Fixed startdelay with start-delaybsc1176569 - fix onfail should be on-failbsc1176569 - config: Try to handle configparser.MissingSectionHeaderError while reading config file - uiconfigure: Obscure sensitive data by defaultbsc1163581 This update...

Apache HttpClient Information Disclosure Vulnerability

HttpClient is the United States Apache Apache Software Foundation of a Java written to access HTTP resources client program. The program is used to access network resources using the HTTP protocol. Apache HttpClient suffers from an information disclosure vulnerability that arises from errors such...

Design/Logic Flaw

voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuratio...

HCL Marketing Operations Information Disclosure Vulnerability

HCL Marketing Operations is a marketing management software from HCL India. The software supports streamlining of production processes, tracking of budgets and expenditures, improving team collaboration, etc. A security vulnerability exists in HCL Marketing Operations versions 9.1.2.4, 10.1.x, an...

Cybozu Mailwise for Android Information Disclosure Vulnerability

Cybozu Mailwise for Android is an e-mail client application based on the Android platform from Cybozu. An information disclosure vulnerability exists in Cybozu Mailwise versions 1.0.0 to 1.0.1 for Android. The vulnerability originates from an error such as a configuration error in the network...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress website content management system is related to a configuration error. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

CVE-2017-18867

CVE-2017-18867 concerns NETGEAR devices with incorrect configuration of security settings. Affected products and versions: D6100 before 1.0.0.55, D7800 before 1.0.1.24, R7100LG before 1.0.0.32, WNDR4300v1 before 1.0.2.90, WNDR4500v3 before 1.0.0.48. Root cause is misconfiguration of security sett...

CVE-2018-21094

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4,...

Design/Logic Flaw

NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings...

Design/Logic Flaw

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 befor...