10896 matches found
CVE-2022-41331
A missing authentication for critical function vulnerability CWE-306 in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests...
CVE-2022-41331
A missing authentication for critical function vulnerability CWE-306 in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests...
CVE-2022-41331
FortiPresence infrastructure server prior to version 1.2.1 is affected by CVE-2022-41331: a missing authentication for critical functions (CWE-306) that could allow a remote, unauthenticated attacker to access Redis and MongoDB via crafted authentication requests. The issue has a high impact on c...
Siemens CPCI85 Firmware of SICAM A8000 Devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2022-41331: Missing Authentication for Critical Function
A missing authentication for critical function vulnerability CWE-306 in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests...
Siemens in OPC Foundation Local Discovery Server
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
Siemens Adaptec Maxview Application
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
The vulnerabilities of the closed software environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, the Cisco Prime Infrastructure – systems for monitoring and managing network equipment – allow attackers to escalate their privileges.
The vulnerability of the closed-programming environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, and the Cisco Prime Infrastructure system for network monitoring and management exists due to the lack of measures taken to neutralize special elements used i...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to...
KillNet Claims Creating Gay Dating Profiles with NATO Logins
By Waqas KillNet claims it carried out cyberattacks that resulted in the "paralysis" of 40% of NATO's electronic infrastructure. This is a post from HackRead.com Read the original post: KillNet Claims Creating Gay Dating Profiles with NATO Logins...
Israel Faces Fresh Wave of Cyberattacks Targeting Critical Infrastructure
By Waqas Authorities believe that these cyberattacks may be part of OpIsrael, organized by pro-Palestinian hackers. This is a post from HackRead.com Read the original post: Israel Faces Fresh Wave of Cyberattacks Targeting Critical Infrastructure...
Multiple Command Injection Vulnerabilities Found in Cisco EPNM, ISE, and Prime Infrastructure
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary An attacker with authenticated, local access can exploit these vulnerabilities to escape the restricted shell and gain root privileges on the operating system. To receive real-time threat...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a malicious individual to gain unauthorized access to protected information.
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager EPNM, exists due to an incorrect limit on the path name to the restricted catalog. Exploiting this vulnerability could allow a...
The vulnerability in the web interface for controlling Cisco Prime Infrastructure monitoring and network equipment allows a attacker to execute XSS attacks.
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system relates to path traversal. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to perform a CSRF attack and carry out arbitrary actions.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software lies in the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack and...
Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 - Spoofing
Title: Microsoft-Edge-Chromium-based-Webview2-1.0.1661.34-Spoofing-Vulnerability Author: nu11secur1ty Date: 04.10.2023 Vendor: https://developer.microsoft.com/en-us/ Software: https://developer.microsoft.com/en-us/microsoft-edge/webview2/ Reference:...
Taiwanese PC Company MSI Falls Victim to Ransomware Attack
Taiwanese PC company MSI short for Micro-Star International officially confirmed it was the victim of a cyber attack on its systems. The company said it "promptly" initiated incident response and recovery measures after detecting "network anomalies." It also said it alerted law enforcement agenci...
Iran-Based Hackers Caught Carrying Out Destructive Attacks Under Ransomware Guise
The Iranian nation-state group known as MuddyWater has been observed carrying out destructive attacks on hybrid environments under the guise of a ransomware operation. That's according to new findings from the Microsoft Threat Intelligence team, which discovered the threat actor targeting both...
Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit - Remote Code Execution (RCE)
Exploit Title: Microsoft Excel 365 MSO Version 2302 Build 16.0.16130.20186 64-bit - Remote Code Execution RCE Exploit Author: nu11secur1ty Date: 03.16.2023 Vendor: https://www.microsoft.com/en-us/microsoft-365/excel Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference:...
Microsoft and Fortra to Take Down Malicious Cobalt Strike Infrastructure
By Deeba Ahmed Cobalt Strike is a legitimate post-exploitation tool designed by Raphael Mudge of Fortra for adversary simulation but it has also been abused by cybercriminals. This is a post from HackRead.com Read the original post: Microsoft and Fortra to Take Down Malicious Cobalt Strike...