PT-2021-21662

Name of the Vulnerable Software and Affected Versions NCH IVM Attendant versions 5.12 and earlier Description Cross Site Scripting XSS exists via the "/ogmlist?folder=" endpoint, which is reflected. This issue allows for malicious scripts to be injected into the webpage, potentially leading to...

NCH IVM Attendant 代码问题漏洞

NCH IVM Attendant is a complete voicemail, call attendant, and IVR solution for Windows.A security vulnerability exists in NCH IVM Attendant, which stems from the fact that if the pathname of a ZIP element is set to the Windows startup folder, a file with a built-in Out-Going Message function, or...

CVE-2021-37449: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...

SUSE-SU-2021:2458-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.12 fixed: Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links fixed: Folder Pane display theme fixes for macOS fixed: Chat account settings did not always save as...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:2458-1 Rating: important References: 1188275 Cross-References: CVE-2021-29969 CVE-2021-29970 CVE-2021-29976 CVE-2021-30547 CVSS scores: CVE-2021-29969 SUSE: 7.5...

Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr

✍️ Description In this directory "https://demo.dolibarr.org/ecm/index.php?mainmenu=ecm&leftmenu=ecm&idmenu=167162" The attacker Can Perform a CSRF attack to Remove any folders. In this Directory application take a parameter named "token" and I set "token" parameter value to nothings like...

CVE-2020-25593

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-25593

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

Privilege escalation

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-15496

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

Privilege escalation

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

CVE-2020-25593

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-15496

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

CVE-2020-15496

Affected product: Acronis True Image for Mac prior to 2021 Update 4. Issue: local privilege escalation caused by insecure folder permissions in the product. Root cause: insecure permissions enabling a local attacker with low privileges to elevate to higher privileges. Impact: per CVSS metrics, hi...

CVE-2020-15496: Improper Preservation of Permissions

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

PT-2021-11162

Name of the Vulnerable Software and Affected Versions: Acronis True Image through 2021 on macOS Description: The issue allows local privilege escalation from admin to root due to insecure folder permissions. Recommendations: For Acronis True Image through 2021 on macOS, update to a version later...

PT-2021-9798

Name of the Vulnerable Software and Affected Versions Acronis True Image for Mac versions prior to 2021 Update 4 Description The issue allows local privilege escalation due to insecure folder permissions. Recommendations For versions prior to 2021 Update 4, update to 2021 Update 4 or later to...

MagicMotion Flamingo 安全漏洞

MagicMotion Flamingo is a wearable vibrator from the Chinese company MagicMotion. The MagicMotion Flamingo 2 suffers from a security vulnerability that originates when the MagicMotion Flamingo 2 app for Android stores data on the sdcard under com.vt.magicmotion/files/Pictures. An attacker can...

Acronis True Image 安全漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from insecure folder...

CVE-2020-25593: Incorrect Default Permissions

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...