17638 matches found
CVE-2021-27011
This CVE-2021-27011 entry is rejected and not used per the Initial Description.
Weekly Threat Digest: 21-27 February 2022
...
CVE-2022-22908
Summary: CVE-2022-22908 affects Sangfor VDI Client (SangforCSClient.exe) 5.4.2.1006. The issue arises when an attacker can read the process memory, enabling disclosure of the contents of the Username and Password fields (credential leakage). The connected documents corroborate the affected produc...
CVE-2021-45229
creationtimestamp| type| source ---|---|--- 2022-02-25 12:20:29+00:00| seen| https://t.me/cibsecurity/38076...
Security Assessor – Job Description and How to Become
Introduction It requires a ton of work to turn into a QSA and keep your affirmation. In truth, there is an enormous rundown of standards to meet to be thought of. What is a Cyber security control assessor? The Security Control Assessor SCA is a cybersecurity personnel that utilizes security testi...
CVE-2020-14478
CVE-2020-14478 is an XXE (XML External Entity) vulnerability affecting Rockwell Automation FactoryTalk Services Platform. The root cause is improper restriction of XML external entity references in the platform, allowing a local, authenticated attacker to access local or remote content and potent...
CVE-2022-23135
The CVE-2022-23135 entry concerns a directory traversal vulnerability in ZTE Zxhn F677 home gateways. The connected documents specify that versions prior to 9.0.0p1n29 expose a flaw where the lack of validation of user-modified destination paths allows an attacker with certain permissions to modi...
CVE-2022-21824
CVE-2022-21824 is a prototype pollution vulnerability in Node.js linked to console.table properties. It affects Node.js prior to patched releases and can be triggered when user-controlled data is passed as the first parameter with a plain object containing an own property such as proto . Public a...
U.S. Dept Of Defense: Authorization bypass -> IDOR -> PII Leakage
Hi team! During testing ████ I found javascript file containing administrative panel functionality. It is accessible at: https://████/█████████ In this file I found an end point responsible for returning data about applications of the website users to the website administrators. The returned data...
Backdoor.Win32.FTP.Ics Remote Command Execution
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/584bc06128469423f9e50e8a359d18acB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Ics Vulnerability: Unauthenticated Remote Command Execution Description: The...
CVE-2021-44574
CVE-2021-44574 is rejected/not used; this entry does not represent an active vulnerability.
Cookie Information < 2.0.8 - Reflected Cross-Site Scripting
The plugin does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue https://example.com/wp-admin/admin.php?page=wp-gdpr-compliance&x=%27+onanimationstart%3Dalert%28/XSS/%29+style%3Danimation-name%3Arotation+x...
CVE-2021-45083
CVE-2021-45083 affects Cobbler prior to 3.3.1. Files under /etc/cobbler are world-readable, exposing sensitive data (e.g., users.digest with SHA2-512 hashes and plaintext potential for weak passwords; settings.yaml with secrets). Local, non-privileged users could access these files to infer crede...
Information Security Consultant – Job Description and How to Become
Introduction As per Centrify, a forerunner in the Privileged Access Management PAM market that forms programming to forestall cyberattacks, the huge ascent of people working from a distance during the COVID-19 pandemic has raised the probability of a digital break. Therefore, network protection h...
trettel.it Cross Site Scripting vulnerability OBB-2380486
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...