15075 matches found
SAntivirus IC 10.0.21.61 - (SAntivirusIC) Unquoted Service Path Vulnerability
Exploit Title: SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path Discovery by: Mara Ramirez Vendor Homepage: https://www.segurazo.com/download.html Software Links : https://www.segurazo.com/download.html Tested Version: 10.0.21.61 Vulnerability Type: Unquoted Service Path Tested on...
Adobe Digital Editions Buffer Overflow Information Disclosure
The vulnerability of the Adobe Digital Editions e-book reading software relates to reading outside the buffer boundaries. Exploiting this vulnerability could allow an intruder to disclose protected information...
2021 Detection and Response Planning, Part 4: Planning for Success with a Cloud SIEM
This is the fourth and final installment of our series around 2021 security planning. Through this series, we talked to a previous CISO about how to tackle annual security planning, looked at driving more efficient threat detections, and also explored the benefits of greater SOC automation. In th...
Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448
The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. h3. Affected versions: version 6.13.18 6.14.0 ≤ version 7.4....
The Origin Is No More
Over the last 15 years, there's been a paradigm shift. Long gone are the days when you built and managed your own data center, were responsible for the physical hardware and the management overhead, and endured the high capital investment of the build and maintenance. As soon as central cloud...
Denial of Service Vulnerability in Rexchip Chips
Rexchip, a company mainly focusing on digital audio/video and broadcasting, provides total solutions from chips to system SoC software for consumer product manufacturers. A denial of service vulnerability exists in the Rexchip chip, which can be exploited by attackers to cause a denial of service...
GovRAT 2.0 - FUD unknown RAT with special functions
This RAT was written by me and cannot be blocked. FUD tested with the strictest firewall policies. You are buying the source code + digital certificate to sign your files. I can also host the C&C for you for extra Functions: Access C&C with any browser. Compile C&C for Linux OR Windows. VALID...
digital-target.com Improper Access Control vulnerability OBB-1489021
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
HCL Technologies Digital Experience Cross-Site Scripting Vulnerability
HCL Technologies Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies India. HCL Digital Experience versions 8.5, 9.0, 9.5 have a cross-site scripting vulnerability where a sub-component is susceptible to an XSS attack where in the...
CVE-2020-14222
HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...
CVE-2020-14222
HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...
Cross site scripting
HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...
CVE-2020-14222
HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...
CVE-2020-14222
The CVE-2020-14222 entry affects HCL Digital Experience versions 8.5, 9.0, and 9.5. A subcomponent is susceptible to reflected Cross-Site Scripting (XSS); exploitation requires the victim to click a crafted URL delivered via email or another site. The vulnerability’s impact is reflected XSS with ...
iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation
iDS6 DSSPro Digital Signage System 6.2 Improper Access Control Privilege Escalation Vendor: Guangzhou Yeroo Tech Co., Ltd. Product web page: http://www.yerootech.com Affected version: V6.2 B2014.12.12.1220 V5.6 B2017.07.12.1757 V4.3 Summary: iDS6 Software's DSSPro network digital signage manageme...
Western Digital My Cloud Buffer Overflow Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. A buffer overflow vulnerability exists in Western Digital My Cloud devices prior to version 5.04.114, which can be exploited by an attacker to perform a privileged escalation on the device via unauthorized remote co...
PT-2020-13941
Name of the Vulnerable Software and Affected Versions HCL Digital Experience versions 8.5 through 9.5 Description The issue concerns cross site scripting XSS, specifically reflected XSS, where an attacker must induce a victim to click on a crafted URL from some delivery mechanism, such as email o...
iDS6 DSSPro Digital Signage System 6.2 Cross Site Request Forgery
iDS6 DSSPro Digital Signage System 6.2 Cross-Site Request Forgery CSRF Vendor: Guangzhou Yeroo Tech Co., Ltd. Product web page: http://www.yerootech.com Affected version: V6.2 B2014.12.12.1220 V5.6 B2017.07.12.1757 V4.3 Summary: iDS6 Software's DSSPro network digital signage management system is ...
CVE-2020-14222: Improper Neutralization of Input During Web Page Generation
HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...
iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation
Exploit Title: iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation Date: 2020-07-16 Exploit Author: LiquidWorm Vendor Homepage: http://www.yerootech.com Version: 6.2 iDS6 DSSPro Digital Signage System 6.2 Improper Access Control Privilege Escalation Vendor:...