PT-2022-11513 · Logrhythm · Logrhythm Web Console

Name of the Vulnerable Software and Affected Versions: Logrhythm Web Console version 7.4.9 Description: The issue allows for HTML tag injection through the Contextualize Action feature by creating a new Contextualize Action and injecting an HTML tag in the name field. Recommendations: For Logrhyt...

CVE-2021-41943

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action - Create a new Contextualize Action - Inject your HTML tag in the name field...

CVE-2021-41943

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action - Create a new Contextualize Action - Inject your HTML tag in the name field...

nodau SQL注入漏洞

nodau is a simple console-based note-taking program by the individual developer TicklishHoneyBee. A security vulnerability exists in nodau, which stems from the fact that incorrect manipulation of the parameter value/name can lead to sql injection...

Buffalo network devices 操作系统命令注入漏洞

Buffalo network devices are a family of network devices from the Japanese company Buffalo. Buffalo network devices are vulnerable to an operating system command injection vulnerability that can be exploited by an authenticated attacker to execute arbitrary system commands or access the management...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty may affect IBM Spectrum Protect for Workstations Central Administration Console (CVE-2022-34165)

Summary IBM Spectrum Protect for Workstations Central Administration Console requires the dependent product IBM WebSphere Application Server Liberty. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. Refer to t...

OSEC-2022-01 Infinite loop in console output on xen

Background MirageOS is a library operating system using cooperative multitasking, which can be executed as a guest of the Xen hypervisor. Output on the console is performed via the Xen console protocol. Problem Description Since MirageOS moved from PV mode to PVH, and thus replacing Mini-OS with...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics Installed WebSphere Application Server traditional is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336)

Summary The security issue described in CVE-2022-34336 has been identified in the WebSphere Application Server traditional included as part of IBM Tivoli Composite Application Manager for Application Diagnostics Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Behind The Success Of Phenomenon Game Fortnite

By Owais Sultan Did you know Fortnite was the first game to break through on a variety of console platforms, including XBOX/PS/Switch? This is a post from HackRead.com Read the original post: Behind The Success Of Phenomenon Game Fortnite...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

Design/Logic Flaw

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

PT-2022-26920 · Fs040U · Fs040U

Name of the Vulnerable Software and Affected Versions: +F FS040U versions v2.3.4 and earlier Description: A plaintext storage of a password issue exists, which may allow an attacker to obtain the login password and log in to the management console. Recommendations: For versions v2.3.4 and earlier...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation

The plugin does not validate user input before using it in fileexist functions via various AJAX actions available to any authenticated users, which could allow users with a role as low as subscriber to perform PHAR deserialisation when they can upload a file and a suitable gadget chain is present...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

FUJISOFT +F FS040U 安全漏洞

FUJISOFT +F FS040U is a LTE USB converter from FUJISOFT. A security vulnerability exists in FUJISOFT +F FS040U v2.3.4 and earlier versions, which stems from the presence of passwords stored in clear text, and can be exploited by an attacker to gain access to the login password of +F FS040U and lo...

Capsule Console 安全漏洞

Capsule Console is a web interface for Capsule8 from Capsule USA, Inc. for event management, sensor configuration, and system analysis. A security vulnerability exists in versions of Capsule prior to 0.1.3, which stems from the fact that an attacker can detach namespaces from tenants that are...

GHSA-755V-R4X4-QF7M Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown

Summary A Stored XSS vulnerability was reported in the Keycloak Security mailing list, affecting all the versions of Keycloak, including the latest release 16.0.1. The vulnerability allows a privileged attacker to execute malicious scripts in the admin console, abusing of the groups' dropdown...

Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown

Summary A Stored XSS vulnerability was reported in the Keycloak Security mailing list, affecting all the versions of Keycloak, including the latest release 16.0.1. The vulnerability allows a privileged attacker to execute malicious scripts in the admin console, abusing of the groups' dropdown...