15099 matches found
CVE-2020-4101
"HCL Digital Experience is susceptible to Server Side Request Forgery."...
Server side request forgery (ssrf)
"HCL Digital Experience is susceptible to Server Side Request Forgery."...
CVE-2020-4101
"HCL Digital Experience is susceptible to Server Side Request Forgery."...
CVE-2020-4101
CVE-2020-4101 concerns HCL Digital Experience and is described in multiple connected records as a Server Side Request Forgery (SSRF) vulnerability. The documents corroborate the issue but do not provide concrete details on affected versions, root cause specifics, or available remediations within ...
CVE-2020-4101: Server-Side Request Forgery (SSRF)
"HCL Digital Experience is susceptible to Server Side Request Forgery."...
PT-2020-17877
Name of the Vulnerable Software and Affected Versions HCL Digital Experience affected versions not specified Description The issue affects HCL Digital Experience, making it susceptible to Server Side Request Forgery. Recommendations At the moment, there is no information about a newer version tha...
11 security tips to help stay safe in the COVID-19 era
The COVID-19 pandemic has changed our daily routines, the ways we work, and our reliance on technology. Many of us are now working remotely, students are attending classes virtually, and we’re relying more on social media and social networks to stay connected as we define what our new normal look...
CVE-2020-8323
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...
Magecart Targets Emergency Services-related Sites via Insecure S3 Buckets
Hacking groups are continuing to leverage misconfigured AWS S3 data storage buckets to insert malicious code into websites in an attempt to swipe credit card information and carry out malvertising campaigns. In a new report shared with The Hacker News, cybersecurity firm RiskIQ said it identified...
ropdigital.ciccp.es Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1189376 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
SQL Injection Vulnerability in the Website Building System of National Digital Learning Resource Center (CNVD-2020-40611)
The National Center for Digital Learning Resources NCDLR is a business unit specializing in the research, development, promotion and service of digital learning resources and education informatization software. There is a SQL injection vulnerability in the National Digital Learning Resource...
Cisco IOS XE Software Digital Signature Verification Bypass (cisco-sa-iosxe-digsig-bypass-FYQ3bmVq)
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability due to an improper check on the area of code that manages the verification of the digital signatures of system image files during the initial boot process. An attacker could exploit this vulnerability by...
Adobe SDK Buffer Overflow Code Execution
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Adobe SDK Buffer Overflow Code Execution
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Adobe SDK Buffer Overflow Code Execution
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Security Challenges in FinTech – Discussion with Vandana Verma, OWASP
In the digital era, financial institutions serve an increasing number of customers through web and mobile applications. Fintech maintains online security, and OWASP offers pieces of the puzzle to address the challenges. We CAN solve these challenges by leveraging the OWASP community knowledge bas...
Cayin Signage Media Player 3.0 Root Remote Command Injection
Summary CAYIN Technology provides Digital Signage solutions, including media players, servers, and software designed for the DOOH Digital Out-of-home networks. We develop industrial-grade digital signage appliances and tailored services so you don't have to do the hard work. Description CAYIN...
Cayin Content Management Server 11.0 Root Remote Command Injection
Cayin Content Management Server 11.0 Root Remote Command Injection Vendor: CAYIN Technology Co., Ltd. Product web page: https://www.cayintech.com Affected version: CMS-SE v11.0 Build 19179 CMS-SE v11.0 Build 19025 CMS-SE v11.0 Build 18325 CMS Station CMS-SE-LXC CMS-60 v11.0 Build 19025 CMS-40 v9....
Cayin Digital Signage System xPost 2.5 - Remote Command Injection Exploit
Exploit for multiple platform in category web applications Title: Cayin Digital Signage System xPost 2.5 - Remote Command Injection Author:LiquidWorm Vendor: https://www.cayintech.com CVE: N/A !/usr/bin/env python3 Cayin Digital Signage System xPost 2.5 Pre-Auth SQLi Remote Code Execution Vendor:...
Cayin Signage Media Player 3.0 - Remote Command Injection (root) Exploit
Exploit for multiple platform in category web applications Title: Cayin Signage Media Player 3.0 - Remote Command Injection root Author:LiquidWorm Vendor: https://www.cayintech.com CVE: N/A !/usr/bin/env python3 Cayin Signage Media Player 3.0 Root Remote Command Injection Vendor: CAYIN Technology...