The vulnerability of the ReadyScript e-commerce management system, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ReadyScript e-commerce management system lies in the improper implementation of the sequence of actions to be performed, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the “REDAAM” IT-infrastructure centralized management system, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

The vulnerability of the Test IT testing management system, related to the use of default login credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the FOQUZ platform, related to the incorrect duration of a session, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FOQUZ platform, related to synchronization errors when using a shared resource, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on the name of the path to the catalog, allows attackers to compromise the integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a password hash instead of a password for authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

BLE-TPMS

CVE-2024-39081 Lien : https://vulners.com/cve/CVE-2024-39081 BLE BASED TREEL TPMS pour vélos Ici, nous avons effectué et expliqué la manipulation de données TPMS via Bluetooth. Nous pouvons envoyer une fausse alarme à l'utilisateur de l'application via Bluetooth. Les constatations détaillées de...

CVE-2023-3163-SQL-Injection-Prevention

CVE-2023-3163-SQL-Injection-Prevention Un moyen simple et rapide de vérifier si votre SQL Developer by Oracle est vulnérable aux injections SQL CVE-2023-3163, ce qui survient le plus souvent lorsque la version de SQL Developer est 23.1.0. Exploit CVE-2023-21969 - Vérification de la vulnérabilité ...

Nemesis

Nemesis demain, je pousse une mise à jour, changement de licence et aussi quelques nouveaux monstres contre les voleurs de données. outil Windows que j'ai créé parce que j'en avais marre de regarder des forks de jlaive dans des échantillons de malwares sans rien de public pour les déchiqueter au...

CVE-2024-21305

CVE-2024-21305 Этот репозиторий содержит отчет и PoC CVE-2024-21305, уязвимости конфигурации небезопасной защиты целостности кода под управлением гипервизора HVCI. Эта уязвимость позволяла выполнять произвольный код в режиме ядра, фактически обходя HVCI, в корневом разделе. Для ознакомления с...

asclepius

Asclepius Asclepius valide l'intégrité des sauvegardes en restaurant les fichiers et en testant activement leur récupérabilité. Au lieu de se fier aux métadonnées, il tente d'analyser les formats de fichiers réels documents, images, vidéos, archives, courriels pour confirmer que les sauvegardes...

dbslice

dbslice Extrayez des sous-ensembles de base de données minimaux et intègres sur le plan référentiel pour le développement local et le débogage. Le problème Copier toute une base de données de production sur votre machine est irréalisable. Mais reproduire un bogue nécessite souvent d'avoir les...

draytek-arsenal

Draytek Arsenal : observabilité et durcissement des équipements de périphérie Draytek. Les attaquants avancés choisissent de plus en plus les équipements de périphérie comme cibles. Cependant, ces appareils sont contrôlés par un logiciel fermé appelé firmware, souvent distribué dans un format...

CVE-2017-9606

CVE-2017-9606 En raison d'une vérification insuffisante de l'intégrité, de l'authenticité et de droits utilisateur faibles sur le dossier de mise à jour, un utilisateur local peut créer de faux fichiers de mise à jour ViPNet avec un code d'exécution arbitraire et les placer dans le dossier de mis...

CVE-2021-44228

CVE-2021-44228 9 декабря 2021 года мир узнал о новой уязвимости, связанной с Log4J. Оценка CVSSv3 Common Vulnerability Scoring System данной уязвимости была оценена в 10 баллов, что делает её критической https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 Её вектор CVSSv3 выглядит следующим...