CVE-2020-15873

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php deviceid POST parameter to ajaxform.php...

CVE-2020-15873: Improper Neutralization of Special Elements used in an SQL Command

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php deviceid POST parameter to ajaxform.php...

CVE-2020-13637: Cleartext Storage of Sensitive Information

An issue was discovered in the stashcat app through 3.9.2 for macOS, Windows, Android, iOS, and possibly other platforms. It stores the clientkey, the deviceid, and the public key for end-to-end encryption in cleartext, enabling an attacker by copying or having access to the local storage databas...

CVE-2020-13129

Stashcat app (versions up to 3.9.1 on macOS/Windows/Android/iOS) is affected by a information-disclosure flaw where a GET request includes client_key and device_id in the query string, allowing an observer with access to web server logs to read sensitive data. CVSSv3.1 base score 7.2 ( HIGH ) wit...

CVE-2020-13129: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with clientkey and deviceid data in the query string, which allows attackers to obtain sensitive information by reading web-server logs...

ERROR_NO_DEVICE_ID is thrown while trying to load a driver using Veeam Agent Recovery Media

Challenge When performing a Bare Metal Recovery, storage or network devices are not visible in the system, and when attempting to load device drivers, the following error occurs: Failed to install driver from INF file Failed to install driver. Error code: ERRORNODEVICEID Solution Verify Correct...