CVE-2022-31784

A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker that has network access to the management interface to conduct a buffer overflow attack due to insufficient validation of URL...

CVE-2022-31784

CVE-2022-31784 affects Mitel MiVoice Business (up to 9.3 PR1) and MiVoice Business Express (up to 8.0 SP3 PR3). The vulnerability stems from insufficient validation of URL parameters in the management interface, enabling an unauthenticated attacker with network access to perform a buffer overflow...

PT-2022-3053 · South River Technologies +1 · Titan Ftp Server Nextgen +1

Name of the Vulnerable Software and Affected Versions: Titan FTP Server NextGen versions prior to 1.2.1050 Description: The issue is related to errors during the installation of Microsoft SQL Express 2019, which allows an attacker to execute arbitrary commands with elevated privileges. When...

Mitel MiVoice Business Express 安全漏洞

Mitel MiVoice Business Express is a real-time communications solution from Mitel Canada. A security vulnerability exists in Mitel MiVoice Business version 9.3 PR1 and earlier and MiVoice Business Express version 8.0 SP3 PR3 and earlier, which stems from insufficient validation of URL parameters. ...

MAL-2022-6389 Malicious code in sync-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4acb1678e3420191321cd1a4385ce0b4bee92a3428a42666620c96fc28a35eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sync-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4acb1678e3420191321cd1a4385ce0b4bee92a3428a42666620c96fc28a35eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-lastest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c78f4997e4b378d63d24061f7eba2438ea82aec52c6b7f1860c3c2de9beeaed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2927 Malicious code in express-lastest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c78f4997e4b378d63d24061f7eba2438ea82aec52c6b7f1860c3c2de9beeaed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors_express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28bc2843a87b773e6b16104c1ee4c2e68f2b7e8eb4ec84476a844b5f2fb6bec9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HCL Technologies VersionVault Express Information Disclosure Vulnerability

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies India.A security vulnerability exists in HCL Technologies VersionVault Express, which stems from the application exposing sensitive information about server communications. An attacker could...

CVE-2021-27779

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

CVE-2021-27779

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

Code injection

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

CVE-2021-27779 A Security Misconfiguration vulnerability affects HCL VersionVault Express

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

CVE-2021-27779

CVE-2021-27779 affects HCL VersionVault Express. Connected sources describe the vulnerability as an information disclosure that allows an attacker to impersonate the server or eavesdrop on communications with the server. No concrete exploit details or patch/version information are provided in the...

HCL Technologies VersionVault Express 安全漏洞

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies India.A security vulnerability exists in HCL Technologies VersionVault Express, which stems from the application exposing sensitive information about server communications. An attacker could...

GHSA-4V96-M8XV-X83V Broken Authentication in Atlassian Connect Express

Broken Authentication in Atlassian Connect Express ACE from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express app occurs with a server-to-server JWT or...

@nexus-switchboard/nexus-conn-jira (>=0.1.0, <=0.2.2), @nexus-switchboard/nexus-mod-service (>=0.4.1, <=0.6.3) +1 more potentially affected by CVE-2021-26073 via atlassian-connect-express (>=3.5.2, <=4.4.1)

atlassian-connect-express NPM version =3.5.2, =0.1.0, =0.4.1, =0.0.1, =2.0.5 Source cves: CVE-2021-26073 Source advisory: OSV:GHSA-4V96-M8XV-X83V...

Broken Authentication in Atlassian Connect Express

Broken Authentication in Atlassian Connect Express ACE from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express app occurs with a server-to-server JWT or...

How iPhones can run malware even when they’re off

Most people think that turning off their iPhone - or letting the battery die - means that the phone is, well, off. The thing is, this isnt quite true. In reality, most of the phones functionality has ended, but there are components that mindlessly continue a zombie-like existence, for the most pa...