6232 matches found
The vulnerability of the General component of the Oracle REST Data Services service allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the General component of the Oracle REST Data Services is related to security mechanism failures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...
Huawei GaussDB Kernel Detection (Linux/Unix SSH Login)
SSH login-based detection of Huawei GaussDB Kernel. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for librepo (FEDORA-2020-b40fc174b5)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
COVID-19 Vaccine-Maker Hit with Cyberattack, Data Breach
COVID-19 vaccine manufacturer Dr. Reddy’s Laboratories has shut down its plants in Brazil, India, Russia, the U.K. and the U.S. following a cyberattack, according to reports. The Indian company is the contractor for Russia’s “Sputinik V” COVID-19 vaccine, which is about to enter Phase 2 human...
CVE-2020-14744
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...
Fedora: Security Advisory for livecd-tools (FEDORA-2020-5d9f0ce2b3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Denial of Service Vulnerability in GE PACSystems Rx3i
PACSystems Rx3i is a programmable automation controller from General Electric. A denial of service vulnerability exists in GE PACSystems Rx3i, which can be exploited by an attacker to cause the device to crash...
Fedora: Security Advisory for kernel (FEDORA-2020-e288acda9a)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
US Cyber Command and Microsoft Are Both Disrupting TrickBot
Earlier this month, we learned that someone is disrupting the TrickBot botnet network. Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt Trickbot, an enormous collection of more than two million malware-infected Windows PCs that are constantly...
The Man Who Speaks Softly—and Commands a Big Cyber Army
Meet General Paul Nakasone. He reined in chaos at the NSA and taught the US military how to launch pervasive cyberattacks. And he did it all without you noticing...
familyhearthgeneralstore.com Cross Site Scripting vulnerability OBB-1377257
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Industrial Control Device Vulnerability in American General PACsystem RX3i
General Electric GE is the world's largest multinational corporation in the business of providing technology and services, headquartered in Boston, USA. An industrial control device vulnerability exists in the American General PACsystem RX3i, which can be exploited by an attacker to cause a denia...
GE Reason S20 Ethernet Switch Cross-Site Scripting Vulnerability
The GE Reason S20 Ethernet Switch is a General Electric switch from General Electric GE. A cross-site scripting vulnerability exists in the Reason S20 managed Ethernet switches, which stems from a lack of proper validation of client data by a WEB application. An attacker can exploit this...
GE Reason S20 Ethernet Switch
1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: General Electric Equipment: Reason S20 Ethernet Switch Vulnerabilities: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow unauthorized accounts...
The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
2 Hackers Charged for Defacing Sites after U.S. Airstrike Killed Iranian General
The US Department of Justice DoJ on Tuesday indicted two hackers for their alleged involvement in defacing several websites in the country following the assassination of Iranian major general Qasem Soleimani earlier this January. Behzad Mohammadzadeh aka Mrb3hz4d, 19, and Marwan Abusrour aka...
PayloadsAllTheThings
It is an offensive tool for general-purpose payloads. The repository contains a collection of payloads for various purposes, but no specific exploit or vulnerability is mentioned. The provided code snippet is a funding model configuration for GitHub Sponsors and Ko-fi, indicating that the...
Fedora: Security Advisory for java-1.8.0-openjdk-aarch32 (FEDORA-2020-43901402db)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-6318
A Remote Code Execution vulnerability exists in the SAP NetWeaver ABAP Server, up to release 7.40 and ABAP Platform release 7.40.Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products, including viewing,...
PayloadsAllTheThings
It is an offensive tool for general-purpose payloads. The repository contains a collection of payloads for various purposes, but no specific exploit or vulnerability is identified. The provided code snippet is a funding model configuration for GitHub Sponsors and Ko-fi, indicating that the...