17644 matches found
Weak Password Vulnerability in Zhongfu Information Security and Confidentiality Comprehensive Management Platform
Founded in 2002, CDF Information specializes in the research, development, sales and provision of total solutions for information security products. A weak password vulnerability exists in Zung Fu's comprehensive information security and confidentiality management platform, which can be exploited...
CVE-2021-1562
CVE-2021-1562: Cisco BroadWorks Application Server Information Disclosure involves the XSI-Actions interface. The root cause is improper input validation and authorization of certain commands, enabling an authenticated, remote attacker to access sensitive information on an affected system. Exploi...
CVE-2020-20584
A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...
Weak Password Vulnerability in Bohua NetDragon Information Security All-in-One Computer
Ltd. is a high-tech enterprise mainly engaged in software product development, information security product development, and computer system integration and information security services as a whole. A weak password vulnerability exists in Bohua NetDragon Information Security All-in-One Computer,...
Arbitrary File Download Vulnerability in Bohua NetDragon Information Security All-in-One Computer
Ltd. is a high-tech enterprise mainly engaged in software product development, information security product development, and computer system integration and information security services as a whole. An arbitrary file download vulnerability exists in Bohua NetDragon Information Security All-in-One...
Blue Screen of Death will be Black Screen of Death in Windows 11
By Deeba Ahmed The infamous Blue Screen of Death BSOD will be Black Screen of Death in the upcoming Windows 11, reports have confirmed. This is a post from HackRead.com Read the original post: Blue Screen of Death will be Black Screen of Death in Windows 11...
CVE-2021-35440
Smashing 1.3.4 is vulnerable to Cross-Site Scripting (XSS) via a crafted widget URL that can execute JavaScript in a victim’s browser and potentially exfiltrate session data/cookies. Affected component: the Smashing widget URL handling; root cause is insufficient input validation/escaping in the ...
CVE-2021-24388
CVE-2021-24388 affects the VikRentCar WordPress plugin prior to 1.1.7. Public sources describe a stored XSS via a non-sanitised/unsafely echoed custom field name and a missing CSRF check on saving settings, enabling a logged-in admin to set arbitrary Custom Fields (including XSS payloads). Exploi...
WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery
Overview WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" provided by codemiq contains a cross-site request forgery vulnerability CWE-352. Konan Nagashima of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported this...
Ricon Industrial Cellular Router S9922XL - Remote Command Execution (RCE)
Exploit Title: Ricon Industrial Cellular Router S9922XL - Remote Command Execution RCE Date: 02.07.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.riconmobile.com !/usr/bin/env python3 -- coding: utf-8 -- Ricon Industrial Cellular Router S9922XL Remote Command Execution Vendor: Ricon...
Weak Password Vulnerability in TP-LINK Video Surveillance Management and Storage All-in-One Computer from P&L Technology Ltd.
hereinafter referred to as "TP-LINK" is a supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK video surveillance management and storage all-in-one computer, which can be exploited by an attacker to log in to the backend and obtain sensitive information...
Directory Traversal Vulnerability in Yulin Golden Point Cloud Software Technology Co.
Yulin Golden Point Cloud Software Technology Co., Ltd, business scope: artificial intelligence application software development; network and information security software development; software sales; information security equipment sales; network equipment sales; electronic product sales and so on...
CVE-2021-31874
CVE-2021-31874 affects Zoho ManageEngine ADSelfService Plus prior to version 6104. In rare situations, it allows attackers to obtain sensitive information about the password-sync database. The provided documents describe the disclosure impact but do not include concrete exploit details, affected ...
Advisory ROSA-SA-2021-1829
Software: erlang R16B OS: Cobalt 7.9 CVE-ID: CVE-2011-0766 CVE-Crit: MEDIUM CVE-DESC: The random number generator in the Crypto application before 2.0.2.2.2 and SSH before 2.0.5, which was used in the Erlang / OTP ssh library before R14B03, uses predictable starting numbers based on the current...
ASB-A-184561583
Bulletin has no description...
PUB-A-176750676
Bulletin has no description...
CVE-2021-28993
CVE-2021-28993 affects Plixer Scrutinizer 19.0.2 with an SQL injection vulnerability that allows an attacker to obtain sensitive information remotely. Multiple connected sources (NVD/NVD-derived entries, Red Hat advisory, CNVD, PRION, OpenVAS plugin) confirm the existence of a SQLi flaw in Scruti...
What is an Insider Threat❓ Examples of Threats and Defenses
An insider threat is a vulnerability danger that originates from inside the affected organization, according to a clear description. The root of the problem would be someone with enough internal knowledge of the business to cause damage. This is not to say that the threat is being made by a curre...
CVE-2021-22341
There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module...