carehomeconsulting.it Cross Site Scripting vulnerability OBB-2378548

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lachstockconsulting.com.au Improper Access Control vulnerability OBB-2311435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

beyondgreenconsulting.com Improper Access Control vulnerability OBB-2269268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

Microsoft has detected exploits being used to compromise systems running the ZOHO ManageEngine ADSelfService Plus software versions vulnerable to CVE-2021-40539 in a targeted campaign. Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group...

G Data EndpointProtection Enterprise 17.08.2021 Privilege Escalation

DATA Anti-Virus: Abusing OpenSSL to get local admin Metadata =================================================== Release Date: 05-Oct-2021 Author: Florian Bogner @ https://bee-itsecurity.at Affected product: G Data’s Security Client “EndpointProtection Enterprise” Fixed in: all versions after...

[Security Nation] Brian Honan on creating Ireland's first CERT

!\Security Nation\ Brian Honan on creating Ireland's first CERThttps://blog.rapid7.com/content/images/2021/07/securitynationlogo-1.jpg In this episode of Security Nation, we’re joined by Brian Honan of BH Consulting. Jen and Tod chat with Brian about his experience as a founder of Ireland's first...

File Upload Vulnerability in Multimedia Information Distribution System of Shenzhen Inge Intelligent Technology Co.

Shenzhen Inge Intelligent Technology Co., Ltd, general business items are: research and development, sales and leasing of computer software and hardware; Internet and Internet of Things technology development, technology consulting, technical services and so on. Shenzhen Inge Intelligent Technolo...

Unauthorized Access Vulnerability in Cisco IP Phone CP-9971

Cisco Systems China Networking Technology Co., Ltd., scope of business: research and development of computer network systems and communication systems; provision of computer network systems, communication systems, installation, technical consulting and so on. An unauthorized access vulnerability...

Smoking Out a DARKSIDE Affiliate’s Supply Chain Software Compromise

Mandiant observed DARKSIDE affiliate UNC2465 accessing at least one victim through a Trojanized software installer downloaded from a legitimate website. While this victim organization detected the intrusion, engaged Mandiant for incident response, and avoided ransomware, others may be at risk. As...

Weak Password Vulnerability in C-Lodop Print Services System

Ltd. is a company whose main business is software development; information technology consulting services; information system integration services; wholesale of computers, software and auxiliary equipment; retail of computers, software and auxiliary equipment, etc. A weak password vulnerability...

RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be

A security-sensitive bug was discovered by Open Source Developer Erik Sundell of Sundell Open Source Consulting AB. The functions RandomAlphaNumericint and CryptoRandomAlphaNumericint are not as random as they should be...

NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery Vulnerability

NiceHash Miner Excavator versions 1.6.7c and below suffer from a cross site request forgery vulnerability. The issue enables any external web site to send commands to the local miner instance, and to redirect the mined coins to an arbitrary mining address. NiceHash Miner Excavator API Cross-Site...

NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery

NiceHash Miner Excavator API Cross-Site Request Forgery ======================================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/nicehash-miner-excavator-api-csrf.txt Overview -------- NiceHash Miner Excavator plugin contains a...

EdgeOSMAX Router Has Weak Password Vulnerability

Ubiquiti Networks Technology Consulting Shanghai Co. The company's business scope includes: network technology consulting, enterprise management consulting, marketing planning consulting except advertising, investment consulting, international economic information consulting, trade information...

Henan Tongchuang Enterprise Management Consulting Co., Ltd. station building system has information leakage vulnerability

Henan Tongchuang Enterprise Management Consulting Co., Ltd. was founded on May 04, 2015 Business scope includes enterprise management consulting services; corporate image planning services. Henan Tongchuang enterprise management consulting limited company station building system there is...

Directory Traversal Vulnerability in Collaborative Business Platform of Guangzhou Consulting Technology Co.

Guangzhou Consultative Technology Co., Ltd. specializes in large-scale manufacturing product development and management of collaborative business software consulting and services. A directory traversal vulnerability exists in the collaborative business platform of Guangzhou Consultative Technolog...

CVE-2020-5464

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...

Dongguan Chindo Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Dongguan Chindo Network Technology Co., Ltd. business scope is: computer hardware and software, network technology development, consulting: consulting services related to business management; computer network technology promotion services, etc.. Dongguan Chindo Network Technology Co., Ltd. statio...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-03387)

Guangzhou City Huadu District Xinhua Weichuang Advertising Design Service Department business scope includes: advertising, network information technology promotion services, network security information consulting. Waychar enrollment system has a SQL injection vulnerability, which can be exploite...

Denial of Service Vulnerability in H3C NX18 Plus

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technology services, technology consulting, results transfer, production and sales: electronic products, etc. A denial of service vulnerability exists in H3C NX18 Plus, which can be exploited by attackers t...