AlphaWeb XE - File Upload Remote Code Execution (Authenticated) Exploit

Exploit Title: AlphaWeb XE - File Upload Remote Code Execution RCE Authenticated Exploit Author: Ricardo Ruiz @ricardojoserf Vendor website: https://www.zenitel.com/ Product website: https://wiki.zenitel.com/wiki/AlphaWeb Example: python3 CVE-2021-40845.py -u "http://$ip:80/" -c "whoami" Referenc...

Command Injection Vulnerability in Legacy IBM System x IMM - Lenovo Support US

No description provided...

CVE-2021-37186

Summary of CVE-2021-37186 : Siemens LOGO! CMR2020/CMR2040 and SIMATIC RTU3000 family implement an insufficiently random Initial Sequence Number (ISN) generator in their TCP/IP stack. This can allow an adjacent attacker with LAN access to interfere with traffic, spoof connections, and potentially ...

CVE-2021-41054

creationtimestamp| type| source ---|---|--- 2021-09-14 00:15:04+00:00| seen| https://t.me/cibsecurity/28760...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1253-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

A3: Sensitive Data Exposure ❗️ — Top 10 OWASP 2017

A3: Sensitive Data Exposure ❗️ — Top 10 OWASP 2017 Introduction I feel like a lot of mystery surrounds this issue from the top 10 OWASP vulnerabilities. A lot of people seem to wonder which data is sensitive when exposed. Some people seem to think every single API key disclosed in a JS file is a...

CVE-2021-33361

CVE-2021-33361 affects GPAC’s MP4Box (GPAC 1.0.1) with a memory leak in afra_box_read that allows memory read via a crafted file. Connected sources confirm GPAC as the vulnerable component and describe the underlying issue and potential impact as memory leakage, with multiple advisories noting mi...

tcpslice -- heap-based use-after-free in extract_slice()

The Tcpdump Group reports: heap-based use-after-free in extractslice...

CVE-2021-23435

CVE-2021-23435 affects the Ruby gem clearance (Rails authentication). The open redirect vulnerability occurs when session[:return_to] is set to a value that includes multiple leading slashes (/////example.com), causing a redirect to an external domain after the slashes (e.g., http://example.com)....

LA Police Are Collecting Detainees' Social Media Information

According to new documents, officers ask people they stop for their Facebook and Twitter account details, and then feed the data into Palantir...

ECOA Building Automation System Configuration Download Information Disclosure

ECOA Building Automation System Configuration Download Information Disclosure Vendor: ECOA Technologies Corp. Product web page: http://www.ecoa.com.tw Affected version: ECOA ECS Router Controller - ECS FLASH ECOA RiskBuster Terminator - E6L45 ECOA RiskBuster System - RB 3.0.0 ECOA RiskBuster Syst...

Improper access control

Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information...

CVE-2021-38540

Affected software: Apache Airflow 2.x, specifically >=2.0.0 and

CVE-2021-3054

CVE-2021-3054 is a TOCTOU race condition in the Palo Alto Networks PAN-OS web interface. An authenticated administrator with permission to upload plugins can trigger arbitrary code execution with root privileges. Affected PAN-OS versions include 8.1.x before 8.1.20, 9.0.x before 9.0.14, 9.1.x bef...

CVE-2021-28732

CVE-2021-28732 is a duplicate of CVE-2021-28372. Connected sources describe CVE-2021-28372 (ThroughTek Kalay Platform) as a device impersonation vulnerability: with a valid 20-byte UID, an attacker can register a malicious device to hijack client connections and obtain credentials, enabling remot...

CVE-2021-1824

CVE-2021-1824 affects macOS Big Sur 11.3 and Security Update 2021-002 Catalina. The issue, addressed by improved entitlements, could allow a malicious application with root privileges to access private information. Public details in the provided sources confirm the fixed versions but do not speci...

CVE-2021-1862

Description: A person with physical access may be able to access contacts. This issue is fixed in iOS 14.5 and iPadOS 14.5. Impact: An issue with Siri search access to information was addressed with improved logic...

CVE-2021-1862

CVE-2021-1862 describes an information-disclosure issue on Apple devices where a person with physical access could potentially access contacts via Siri search. The vulnerability affects iOS and iPadOS prior to 14.5 and is addressed in iOS 14.5 / iPadOS 14.5 with improved logic for Siri search acc...

CVE-2021-30706

CVE-2021-30706 concerns an information-disclosure vulnerability in Apple’s ImageIO WEBP file parsing on macOS. The root cause is an out-of-bounds read triggered by specially crafted WEBP data, allowing sensitive information to be disclosed from affected processes. Public advisories list the impac...

CVE-2021-1904

Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...