OSAS Traverse Extension 11 Unquoted Service Path

Exploit Title: OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path Exploit Auth: Tech Johnny Vendor Homepage: https://www.osas.com Version: 11 x86 Tested on: Windows 2012R2 Details: C:\Windows\system32wmic service get name, pathname, displayname, startmode | findstr /i "Auto...

Npm ps-kill command injection vulnerability

Npm ps-kill is an application from Npm, Inc. Npm ps-kill is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands...

Photon OS 2.0: Bindutils PHSA-2021-2.0-0328

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0328. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Stripo Inc: Stored XSS at Module Name

Summary: Hello, I found stored xss at module name with this payload "Hello : Steps To Reproduce: 1. Add new container, it doesn't matter which is it 2. Paste this payload in the module name"Hello : 3. Update it then check the module name again in setting 4. Alert Popup Stored XSS Stored cross-sit...

JVN#86438134: Multiple cross-site scripting vulnerabilities in GROWI

GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters CWE-79 - CVE-2021-20672 Version| Vector| Score ---|---|--- CVSS v3|...

NewStart CGSL MAIN 6.02 : util-linux Vulnerability (NS-SA-2021-0055)

The remote NewStart CGSL host, running version MAIN 6.02, has util-linux packages installed that are affected by a vulnerability: - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. CVE-2014-9114 Note that Nessus has not tested for this issue but has instead relied...

NewStart CGSL CORE 5.04 / MAIN 5.04 : authconfig Vulnerability (NS-SA-2021-0048)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has authconfig packages installed that are affected by a vulnerability: - Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of...

NewStart CGSL MAIN 6.02 : vim Vulnerability (NS-SA-2021-0074)

The remote NewStart CGSL host, running version MAIN 6.02, has vim packages installed that are affected by a vulnerability: - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g., Python, Ruby, or Lua. CVE-2019-20807...

NewStart CGSL MAIN 6.02 : dotnet3.1 Vulnerability (NS-SA-2021-0055)

The remote NewStart CGSL host, running version MAIN 6.02, has dotnet3.1 packages installed that are affected by a vulnerability: - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. CVE-2020-1597 Note tha...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openldap Vulnerability (NS-SA-2021-0024)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openldap packages installed that are affected by a vulnerability: - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon crash...

CVE-2021-23273

The CVE-2021-23273 entry describes a stored XSS vulnerability in the Spotfire client components across multiple TIBCO Spotfire products (Analyst, Analytics Platform for AWS, Desktop, Server). A low-privileged attacker with network access can trigger a stored XSS that requires user interaction. Af...

Kangtaike SolarView Compact SV-CPT-MC310 Access Control Error Vulnerability

Kangtaike SolarView Compact is an application system from Kangtaike Japan Inc. which provides photovoltaic power measurement systems. Kangtaike SolarView Compact SV-CPT-MC310 suffers from an access control error vulnerability that could be exploited by an attacker to obtain and/or change settings...

RHEL 7 : kernel (RHSA-2021:0760)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0760 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: umask not applied on filesyste...

JVN#68418039: The installers of E START products may insecurely load Dynamic Link Libraries

The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides CWE-427, CVE-2015-9267, and CVE-2015-9268. Impact...

Photon OS 2.0: Linux PHSA-2021-2.0-0322

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0322. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147000...

Photon OS 1.0: Linux PHSA-2021-1.0-0366

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0366. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147007...

Photon OS 3.0: Linux PHSA-2021-3.0-0201

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0201. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146997;...

WiFi Mouse 1.7.8.5 - Remote Code Execution

Exploit Title: WiFi Mouse 1.7.8.5 - Remote Code Execution Date: 25-02-2021 Author: H4rk3nz0 Vendor Homepage: http://necta.us/ Software Link: http://wifimouse.necta.us/download Version: 1.7.8.5 Tested on: Windows Enterprise Build 17763 Desktop Server software used by mobile app has PIN option whic...

VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability

Document Title: =============== VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability References Source: ==================== https://www.securifera.com/advisories/cve-2021-27198/ https://myconnectionserver.visualware.com/download.html Release Date: ============= 2020-02-25...

Photon OS 1.0: Binutils PHSA-2021-1.0-0362

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0362. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...