April 2021 Patch Tuesday – 108 Vulnerabilities, 19 Critical, Adobe

This month’s Microsoft Patch Tuesday addresses 108 vulnerabilities, of which 19 are rated critical severity and 88 are rated high severity. Adobe released patches for its Photoshop, Digital Editions, and Bridge products. CVE-2021-28310: Win32k Elevation of Privilege Vulnerability Microsoft releas...

Digital Crime Report Management System 1.0 SQL Injection

Exploit Title: Digital Crime Report Management System 1.0 - SQL Injection Authentication Bypass Date: 13 April 2021 Exploit Author: Galuh Muhammad Iman Akbar GaluhID Vendor Homepage: https://iwantsourcecodes.com/digital-crime-report-management-system-in-php-with-source-code/ Software Link:...

PT-2021-11427

Name of the Vulnerable Software and Affected Versions: dex versions prior to 2.27.0 Description: A flaw in the SAML connector of the dex library allows an attacker to bypass SAML authentication, posing a threat to confidentiality, integrity, and system availability. This issue arises due to the...

PT-2021-24482

Name of the Vulnerable Software and Affected Versions: encoding/xml affected versions not specified Description: A crafted XML document can cause XML Digital Signature validation to be entirely bypassed, making an unsigned document appear signed. Recommendations: At the moment, there is no...

Adobe Digital Editions Elevation of Privilege Vulnerability

Adobe Digital Editions DE is a set of e-book reading management software from the American company Audobee Adobe. The software supports open, read and manage PDF, XML, Flash and other formats. An elevation of privilege vulnerability exists in Adobe Digital Editions. An attacker can exploit this...

PT-2021-12657 · Goxmldsig +1 · Goxmldsig +1

Name of the Vulnerable Software and Affected Versions: gosaml2 versions prior to 0.7.0 goxmldsig versions prior to 1.1.1 Description: The issue is caused by a nil-pointer dereference when validating malformed XML Digital Signatures, leading to a crash or panic. This can be used as a denial of...

Adobe Patches Slew of Critical Security Bugs in Bridge, Photoshop

Adobe has released security patches tackling four critical vulnerabilities in Adobe Bridge, along with other critical and important-rated updates for bugs in Adobe Digital Editions, Adobe Photoshop and RoboHelp. In all, Adobe fixed 10 security holes in its products during its scheduled April...

Adobe Digital Editions 安全漏洞

Adobe Digital Editions DE is a set of e-book reading management software from the American company Audobee Adobe. The software supports open, read and manage PDF, XML, Flash and other formats. An elevation of privilege vulnerability exists in Adobe Digital Editions. An attacker can exploit this...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. Adobe Bridge suffers from an out-of-bounds write vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

File Upload Vulnerability in Integrated Digital Campus Management System

Founded in 2009, Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to the research, development, promotion and service of industry software. A file upload vulnerability exists in the Digital Campus Integrated Management System DCIMS, which can be...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. Adobe Bridge inherently suffers from an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to obtain sensitive information...

PT-2021-2958

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.11.187245 and earlier Description The issue is related to a Privilege Escalation vulnerability during installation, allowing an unauthenticated attacker to achieve arbitrary file system write in the context ...

APSB21-26 Security update available for Adobe Digital Editions

Adobe has released a security update for Adobe Digital Editions. This update resolves a critical vulnerability that could result in arbitrary file system write...

Man Arrested for AWS Bomb Plot

A Texas man has been charged with plotting a bombing of Amazon Web Services in a quest to allegedly “kill off the internet.” Seth Aaron Pendley was arrested in Ft. Worth after allegedly attempting to get an explosive device from an undercover FBI employee in a sting. The feds were alerted to...

Weak password vulnerability in Network Video Recorder of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A weak password vulnerability exists in Network Video Recorder of Hangzhou Hikvision Digital Technology Co. Ltd, which can ...

Skyworth Digital Technology RN510 Access Control Error Vulnerability

The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. An access control error vulnerability exists in /cgi-bin/testversion.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker can exploit the vulnerability to obtain the SSID password and We...

Skyworth Digital Technology RN510 Buffer Overflow Vulnerability

The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. A buffer overflow vulnerability exists in /cgi-bin/app-staticIP.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker could exploit this vulnerability by sending a specially crafted reque...

Skyworth Digital Technology RN510 Cross-Site Request Forgery Vulnerability

The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. A cross-site request forgery vulnerability exists in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. No detailed vulnerability details are...

CVE-2021-25327

Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery CSRF vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting XSS...