CVE-2021-27762

Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses...

FANUC ROBOGUIDE elevation of privilege vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC, Japan. FANUC ROBOGUIDE v9.40083.00.05 and previous versions have an elevation of privilege vulnerability. The vulnerability stems from the fact that the affected product is vulnerable to misconfigured binaries, and an attacker with...

CVE-2021-38483

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...

Privilege escalation

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...

CVE-2021-38483

CVE-2021-38483 affects FANUC ROBOGUIDE (ROBOGUIDE v9.40083.00.05 and earlier). The root cause is misconfigured binaries that allow a local attacker with SYSTEM privileges to overwrite the binary and modify files, enabling privilege escalation (IHV/I/H). Several sources confirm the same vector and...

CVE-2021-38483 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...

PT-2022-2568 · Fanuc · Fanuc Roboguide

Name of the Vulnerable Software and Affected Versions: FANUC ROBOGUIDE affected versions not specified Description: The issue is related to errors in assigning permissions for files, which can allow an attacker to gain privilege escalation. It is also associated with misconfigured binaries,...

FANUC ROBOGUIDE 安全漏洞

FANUC ROBOGUIDE is a robot simulation software from FANUC, Japan. FANUC ROBOGUIDE v9.40083.00.05 and previous versions have an elevation of privilege vulnerability. The vulnerability stems from the fact that the affected product is vulnerable to misconfigured binaries, and an attacker with...

Japanese Healthcare Firm ‘Doctors Me’ Exposed Images of 12,000 Patients

By Deeba Ahmed In Total Doctors Me left 30GB worth of data exposed to the public due to a misconfigured Amazon… This is a post from HackRead.com Read the original post: Japanese Healthcare Firm Doctors Me Exposed Images of 12,000 Patients...

CVE-2022-25481

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode...

Anonymous & its affiliates hacked 90% of Russian misconfigured databases

By Waqas A new report reveals that since the Russian attack on Ukraine, Anonymous and its affiliate groups have compromised… This is a post from HackRead.com Read the original post: Anonymous & its affiliates hacked 90% of Russian misconfigured databases...

ImpressCMS: SQL Injection in version 1.4.3 and below

A SQL Injection vulnerability was discovered in ImpressCMS version 1.4.3 and earlier. This vulnerability allowed remote attackers to inject malicious code into the application, enabling them to read and modify sensitive information from the database. In some cases, attackers could even upload a...

CVE-2021-42855 Local privilege escalation due to misconfigured write permission on .debug_command.config file

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent DSA uses the ".debugcommand.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map t...

AWS Credentials Disclosure

Amazon Web Services AWS is a public cloud provider offering different hosting services for their customers. Amazon Web Services can be accessed through programmatic calls to their API by authenticating with access keys, which are a combination of both an access key ID and a secret access key...

Validate the Efficacy of your Endpoint Security Controls Continuously with Breach and Attack Simulations

Validate the efficacy of your Endpoint Security controls continuously with Breach and Attack Simulations By Nicolas Stricher, Trellix XDR solution Architect, EMEA and Doron RosenbergTrellix Senior Sales Engineer, Israel · March 4, 2022 Efficacy of Trellix Endpoint Security At Trellix we are proud...

Hackers Find a New Way to Deliver Devastating DDoS Attacks

Cybercriminals are exploiting a fleet of more than 100,000 misconfigured servers to knock websites offline...

Alohi: Misconfigured rate limit for SMS phone verification endpoint

One of our rate-limit configurations had a high threshold, allowing attackers to spam request multiple SMS codes by replicating the network request to a phone number before getting blocked...

Atlassian Jira Server jira-importers-plugin跨站请求伪造漏洞

Atlassian Jira Service is the server version of an IT service desk and request tracking system from Atlassian Australia. Atlassian Jira Server jira-importers-plugin is vulnerable to cross-site request forgery, which stems from jira-importers-plugin being misconfigured with XSRF protection. An...

Atlassian Jira 跨站请求伪造漏洞

Atlassian Jira Service is the server version of an IT service desk and request tracking system from Atlassian Australia. Atlassian Jira Server jira-importers-plugin is vulnerable to cross-site request forgery, which stems from jira-importers-plugin being misconfigured with XSRF protection. An...

HUAWEI EMUI Buffer Overflow Vulnerability (CNVD-2022-12766)

Huawei Emui is an Android-based mobile operating system developed by Huawei China.A security vulnerability exists in HUAWEI EMUI/Magic UI, which stems from misconfigured ACPU memory access permissions. An attacker could exploit the vulnerability to cause out-of-bounds access...