CVE-2022-32269

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages displayed by Internet Explorer core. This leads to arbitrary code execution...

CVE-2022-32269

Real Player 20.0.8.310’s G2 Control allows injection of unsafe javascript: URIs into local HTTP error pages (displayed by the IE core), enabling arbitrary code execution. This is consistently described across CVE sources (NVD, RH Red Hat, CNNVD, PRION, etc.). A practical remediation noted in PT-2...

PT-2022-21194 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Real Player version 20.0.8.310 Description: The G2 Control in Real Player allows injection of unsafe javascript: URIs in local HTTP error pages, which are displayed by the Internet Explorer core. This leads to arbitrary code execution...

WAGO Cross-Site Request Forgery Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in the WAGO 750-8212 PFC200 G2 2ETH RS that originates fr...

编号撤回

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in the WAGO 750-8212 PFC200 G2 2ETH RS that originates fr...

WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation Vulnerability

Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation Exploit Author: Momen Eldawakhly Cyber Guy at Cypro AB Vendor Homepage: https://www.wago.com Version: Firmware version 03.05.1017 Tested on: PopOS! Linux CVE : CVE-2021-46388 ======================================== = The ordinar...

WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation

Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation Date: 02/16/2022 Exploit Author: Momen Eldawakhly Cyber Guy at Cypro AB Vendor Homepage: https://www.wago.com Version: Firmware version 03.05.1017 Tested on: PopOS! Linux CVE : CVE-2021-46388...

WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation

Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation Date: 02/16/2022 Exploit Author: Momen Eldawakhly Cyber Guy at Cypro AB Vendor Homepage: https://www.wago.com Version: Firmware version 03.05.1017 Tested on: PopOS! Linux ======================================== = The ordinary us...

Fixed vulnerabilities in the Lexmark Universal Printer Driver

Lexmark has fixed vulnerabilities in the Universal Printer Driver. A local malicious person with rights to install/activate new printers could install/activate, could exploit the vulnerabilities to execute arbitrary code with SYSTEM privileges. Lexmark has released updates to fix the...

Lexmark Printer Software G2 Installation Package 1.8.0.0 - (LM__bdsvc) Unquoted Service Path

Exploit Title: Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LMbdsvc' Unquoted Service Path Exploit Author: Julio Aviña Vendor Homepage: https://www.lexmark.com/ Software Link: https://downloads.lexmark.com/downloads/drivers/LexmarkPrinterSoftwareG2InstallationPackage01292021.exe...

Lexmark Printer Software G2 Installation Package 1.8.0.0 Unquoted Service Path

Exploit Title: Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LMbdsvc' Unquoted Service Path Date: 2021-06-20 Exploit Author: Julio Aviña Vendor Homepage: https://www.lexmark.com/ Software Link:...

openSUSE Security Update : python-httplib2 (openSUSE-2021-772)

This update for python-httplib2 contains the following fixes : Security fixes included in this update : - CVE-2021-21240: Fixed a regular expression denial of service via malicious header bsc1182053. - CVE-2020-11078: Fixed an issue where an attacker could change request headers and body...

Security update for python-httplib2 (moderate)

openSUSE Security Update: Security update for python-httplib2 Announcement ID: openSUSE-SU-2021:0772-1 Rating: moderate References: 1171998 1182053 Cross-References: CVE-2020-11078 CVE-2021-21240 CVSS scores: CVE-2020-11078 NVD : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2020-11078 SUS...

Wallarm NG WAF is ranked as a “High Performer” by G2, Spring 2021!

We are proud to announce that Wallarm NG WAF was ranked as a “High performer” by G2 in the Web Application Firewall category. This award from the G2 platform confirms that our solution is highly rated by current verified Wallarm WAF users, who left unbiased reviews and answers to WAF-related...

Command Execution Vulnerability in H3C ER G2 Series Routers

H3C ER G2 series is a new generation of enterprise-grade Gigabit high-performance routers launched by Hangzhou Huasan Communication Technology Co. It is targeted at the SMB market of Ethernet/fiber/xDSL access, which mainly includes network environments of government agencies, small and...

Binary Vulnerability in H3C ER G2 Series Routers

H3C ER G2 series is a new generation of enterprise-class Gigabit high-performance routers launched by Hangzhou Huasan Communication Technology Co. A binary vulnerability exists in the H3C ER G2 series routers, which can be exploited by attackers to cause a denial of service...

Weak Password Vulnerability in H3C SecPath F1000-C-G2

The H3C SecPath F1000-C-G2 is a firewall from Xinhua San Technologies Co. A weak password vulnerability exists in the H3C SecPath F1000-C-G2, which can be exploited by an attacker to obtain sensitive information...

CVE-2020-7201

A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. The vulnerability could be remotely exploited to allow Cross-site Request Forgery CSRF...

Cross site request forgery (csrf)

A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. The vulnerability could be remotely exploited to allow Cross-site Request Forgery CSRF...

CVE-2020-7201

Technical details about CVE-2020-7201 (affected products, vulnerable components, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.