355 matches found
lmfantiques.com Cross Site Scripting vulnerability OBB-1416342
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-13941
A flaw was found in Solr. The Replication handler allows commands backup, restore, and delete backup that take non-validated allocation parameters which may result in the exfiltration of sensitive data such as OS user hashes NTLM/LMhashes. The highest threat from this vulnerability is to data...
Path traversal
The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal...
CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java
SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create ...
CVE-2020-12772
An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...
Design/Logic Flaw
An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...
CVE-2019-1338
A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'...
SAP Diagnostics Agent OS Command Injection Vulnerability
SAP Diagnostics Agent is a system diagnostic agent program from SAP. An operating system command injection vulnerability exists in SAP Diagnostic Agent LM-Service version 7.2. An attacker could exploit this vulnerability to inject code and take control of the application...
Rockwell Automation Kinetix 350 Drive 2097-V33PR5-LM CIP Motion Drive
Binary data 753351.prm...
Rockwell Automation Kinetix 350 Drive 2097-V31PR0-LM CIP Motion Drive
Binary data 753344.prm...
Rockwell Automation Kinetix 350 Drive 2097-V33PR6-LM CIP Motion Drive
Binary data 753352.prm...
Rockwell Automation Kinetix 350 Drive 2097-V32PR4-LM CIP Motion Drive
Binary data 753348.prm...
Rockwell Automation Kinetix 350 Drive 2097-V34PR3-LM CIP Motion Drive
Binary data 753353.prm...
Rockwell Automation Kinetix 350 Drive 2097-V33PR1-LM CIP Motion Drive
Binary data 753349.prm...
Rockwell Automation Kinetix 350 Drive 2097-V34PR6-LM CIP Motion Drive
Binary data 753355.prm...
Rockwell Automation Kinetix 350 Drive 2097-V32PR2-LM CIP Motion Drive
Binary data 753347.prm...
Rockwell Automation Kinetix 350 Drive 2097-V32PR0-LM CIP Motion Drive
Binary data 753346.prm...
Rockwell Automation Kinetix 350 Drive 2097-V34PR5-LM CIP Motion Drive
Binary data 753354.prm...