Shopware Cross-Site Scripting Vulnerability (CNVD-2021-103572)

Shopware is a suite of open source e-commerce software from the German company Shopware.Shopware in versions prior to 5.7.6 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

SquirrelWaffle Loader Malspams, Packs Qakbot, Cobalt Strike

SquirrelWaffle, a new malware loader, is mal-spamming malicious Microsoft Office documents to deliver Qakbot malware and the penetration-testing tool Cobalt Strike – two of the most common threats regularly observed targeting organizations around the world. Cisco Talos researchers said on Tuesday...

genuinegerman.de Improper Access Control vulnerability OBB-2195355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AUVESY Versiondog has an unspecified vulnerability (CNVD-2021-82927)

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog that could be exploited by an attacker to cause the manipulation and/or deletion of files...

AUVESY Versiondog has an unspecified vulnerability (CNVD-2021-82939)

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog that could be exploited by attackers to extract keys from binaries...

AUVESY Versiondog Resource Management Error Vulnerability

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A resource management error vulnerability exists in AUVESY Versiondog, which could be exploited by an attacker to cause a post-release usage condition...

AUVESY Versiondog has an unspecified vulnerability

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog, which could be exploited by attackers to gain SYSDBA privileges...

TA505 Gang Is Back With Newly Polished FlawedGrace RAT

The TA505 cybercrime group is whirring its financial rip-off machinery back up, pelting malware at a range of industries in what was initially low-volume waves that researchers saw spiral up late last month. They do bad things, but they’re so tricky that tracking them is a ton of fun, said Sherro...

SAP Business One CSV注入漏洞

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One version 10.0 is vulnerable to CSV injection, which can be exploited by attackers to execute arbitrary commands on a victim's computer...

Sap Internet Communication Framework 访问控制错误漏洞

Sap Internet Communication Framework is an Internet communication framework from Sap, a German company. A security vulnerability exists in SAP Internet Communication framework, which arises from a configuration or other error in the operation of a network system or product. An unauthorized attack...

SAP Business One SQL Injection Vulnerability

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One version 10.0 has a SQL injection vulnerability that stems from the lack of effective validation and escaping of SQL statements, which can be exploited by an attacker with business privileges...

Nextcloud has an unspecified vulnerability (CNVD-2022-18419)

Nextcloud Text is an open source self-hosted file synchronization and sharing communication application platform from the German company Nextcloud. Nextcloud Text has a security vulnerability that could be exploited by attackers to enumerate folders in such shares...

OTRS is vulnerable to XSS

OTRS is a service management software application from OTRS Germany. OTRS AG OTRS has a security vulnerability that originates from a request that can be generated for the appointment editing screen. An attacker could exploit the vulnerability to cause an XSS attack...

Unspecified Vulnerability in OTRS

OTRS is a service management software application from OTRS Germany. A security vulnerability exists in OTRS that stems from the possibility that created emails may get stuck in PostMaster filter processing, resulting in a denial of service. No details of the vulnerability are provided at this ti...

OTRS licensing issue vulnerability

A security vulnerability exists in OTRS, a German OTRS application, a service management software, due to a problem in the development and implementation of the lost password feature. A malicious attacker could exploit this vulnerability to be able to perform a valid user login via the "lost...

OTRS Information Disclosure Vulnerability (CNVD-2021-70116)

OTRS is a service management software application from OTRS Germany. OTRS suffers from an information disclosure vulnerability that arises from the software generating support packages that contain private S/MIME and PGP keys if the contained folder is not hidden. No details of the vulnerability...

Exploit for Allocation of Resources Without Limits or Throttling in Th-Wildau Covid-19_Contact_Tracing

Introduction The application is used for tracking people acco...

SIEMENS SINEMA Remote Connect Server Code Execution Vulnerability

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, a German company. The platform is primarily used to remotely access, maintain, control, and diagnose the underlying network. SIEMENS SINEMA Remote Connect Server is vulnerable to a code execution...

Level 4 Autonomous Cars Allowed on German Roads

The country is set to take a pioneering role with its latest autonomous vehicle law, temporarily bridging gaps until more concise international and European legal frameworks are set...

Shopware Command Injection Vulnerability

Shopware is a suite of open source e-commerce software from the German company Shopware. versions of Shopware prior to 6.4.3.1 have a command injection vulnerability in the mail proxy settings. No detailed vulnerability details are currently available...