20014 matches found
NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery Vulnerability
NiceHash Miner Excavator versions 1.6.7c and below suffer from a cross site request forgery vulnerability. The issue enables any external web site to send commands to the local miner instance, and to redirect the mined coins to an arbitrary mining address. NiceHash Miner Excavator API Cross-Site...
NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery
NiceHash Miner Excavator API Cross-Site Request Forgery ======================================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/nicehash-miner-excavator-api-csrf.txt Overview -------- NiceHash Miner Excavator plugin contains a...
Cisco Hosted Collaboration Mediation Fulfillment Denial of Service Vulnerability
A vulnerability in the Java Management Extensions JMX component of Cisco Hosted Collaboration Mediation Fulfillment HCM-F could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An...
Privilege escalation
Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...
Unspecified vulnerability in the Diego F. Aranha relic
Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2021-04-03, which can be exploited by an attacker PKCS suffers from a buffer overflow...
Diego F. Aranha relic input validation error vulnerability
Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2020-08-01, which stems from an invalid RSA PKCS.No detailed vulnerability details are provided ...
Diego F.Aranha relic 安全漏洞
Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2021-04-03, which can be exploited by an attacker PKCS suffers from a buffer overflow...
Weak Password Vulnerability in HUAWEI Secoway USG2110-F
Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in HUAWEI Secoway USG2110-F. An attacker can exploit the vulnerability to obtain sensitive information...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
Cross site scripting
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
The CVE-2021-30003 entry concerns Nokia G-120W-F devices (model 3FE46606AGAB91) with a Stored XSS vulnerability in the administrative interface, exploitable via the URL filter page parameter urlfilter.cgi?add url_address. The issue is rooted in an XSS flaw that could affect authenticated admins a...
Nokia G-120W-F 跨站脚本漏洞
The Nokia G-120W-F is a router from Nokia Finland. It provides network connectivity. A security vulnerability exists in Nokia G-120W-F that originates from XSS stored in the management interface via urlfilter.cgi...
Information Disclosure Vulnerability in CR16018-F Core Router of Xinhua San Technologies Co.
The CR16018-F Core Router is a router from Xinhua San Technologies Co. An information disclosure vulnerability exists in the CR16018-F Core Router from Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...
CVE-2021-28031
An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The moveelements function can have a double-free upon a panic in a user-provided f function...
SharpSphere - .NET Project For Attacking vCenter
SharpSphere gives red teamers the ability to easily interact with the guest operating systems of virtual machines managed by vCenter. It uses the vSphere Web Services API and exposes the following functions: Command & Control - In combination with F-Secure's C3, SharpSphere provides C&C into VMs...
The vulnerability in the implementation of IPSec protocols for the HiLCOS operating system in wireless access points OpenBAT and BAT450-F allows a hacker to circumvent firewall policies.
The vulnerability of the implementation of IPSec protocols in the HiLCOS operating system for wireless access points OpenBAT and BAT450-F is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent firewall policies from a remote...
The vulnerability of the f_midi_set_alt function in Linux operating system kernels, which allows a hacker to trigger a service failure
The vulnerability of the fmidisetalt function in the drivers/usb/gadget/function/fmidi.c file in Linux operating systems is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...