42 matches found
CVE-2023-29656
An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...
Authorization
An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...
CVE-2023-29656
An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...
Darktrace mobile app 安全漏洞
The Darktrace mobile app is Darktrace's new way to experience Darktrace Threat Visualizer and benefit from Darktrace DETECT and Darktrace RESPOND technologies anytime, anywhere. A security vulnerability exists in version 6.0.15 of the Darktrace mobile app that originates from allowing disabled an...
CVE-2023-29656
An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...
CVE-2023-29656
The CVE-2023-29656 entry describes an improper authorization vulnerability in the Darktrace Mobile App (Android) prior to version 6.0.15. Affected component: antigena actions (block/unblock traffic) exposed in the mobile app. Root cause: disabled or low-privilege users can control antigena action...
LockBit 3.0 Posts Dubious Claims of Breaching Darktrace Cybersecurity Firm
By Waqas Is it a highly dubious claim by the infamous LockBit 3.0 ransomware gang? It looks like it! This is a post from HackRead.com Read the original post: LockBit 3.0 Posts Dubious Claims of Breaching Darktrace Cybersecurity Firm...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j Vulnerability --- --- --- Tutorial: https...
CVE-2019-9596
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
CVE-2019-9596
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
Cross site request forgery (csrf)
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
Cross site request forgery (csrf)
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint...
CVE-2019-9597
Darktrace Enterprise Immune System prior to 3.1 contains CSRF vulnerabilities on the management web interface: CVE-2019-9597: CSRF via the /config endpoint. CVE-2019-9596: CSRF via the /whitelisteddomains endpoint.These are described across multiple sources in the connected data set as affecting ...
CVE-2019-9596
CVE-2019-9596 affects Darktrace Enterprise Immune System prior to 3.1, enabling Cross-Site Request Forgery via the /whitelisteddomains endpoint. The description confirms a CSRF vulnerability; no specific exploit details or fixes are provided in the attached documents. Remediation/patch details ar...
CVE-2019-9596
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...
Darktrace Enterprise Immune System 3.0.9 / 3.0.10 Cross Site Request Forgery Vulnerability
Darktrace Enterprise Immune System versions 3.0.9 and 3.0.10 contain multiple cross site request forgery vulnerabilities. It is highly likely that older versions are affected as well, but this has not been confirmed. An attacker can whitelist domains and/or change core Darktrace configuration. 1 ...