Unspecified Vulnerability in NETGEAR R7800

The NETGEAR R7800 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.46, which stems from a misconfiguration of security settings. No details of the vulnerability are available at this time...

CVE-2018-21159

NETGEAR ReadyNAS devices before 6.9.3 are affected by incorrect configuration of security settings...

Unspecified Vulnerability in Multiple NETGEAR Products (CNVD-2020-28014)

NETGEAR D7800 and others are products of NETGEAR USA.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR WNDR3700 is a wireless router. A security vulnerability exists in multiple NETGEAR products that stems from a misconfiguration of security settings. No detailed...

Multiple NETGEAR Products Input Validation Error Vulnerability (CNVD-2021-67651)

NETGEAR JNR1010 and others are a wireless router from NETGEAR, Inc. A security vulnerability exists in several NETGEAR products, which stems from misconfigured security settings. No detailed vulnerability details are available at this time...

Input Validation Error Vulnerability in Multiple NETGEAR Products (CNVD-2021-61046)

NETGEAR D7000 and others are products of NETGEAR USA.NETGEAR D7000 is a wireless modem.NETGEAR R6700v2 is a wireless router.NETGEAR R6800 is a wireless router. A security vulnerability exists in multiple NETGEAR products that stems from a misconfiguration of security settings. No detailed...

tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling

A flaw was found in Apache Tomcat. The HTTP header parsing code used an approach to end-of-line EOL parsing that allowed some invalid HTTP headers to be parsed as valid. This led to the possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the...

Unspecified Vulnerability in NETGEAR WAC505 and WAC510

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. A security vulnerability exists in the NETGEAR WAC505 prior to version 8.0.6.4 and the WAC510 prior to version 8.0.6.4, which stems from a misconfiguration of security settings. Detailed vulnerability details...

CVE-2019-19000

For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP headers have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information...

The Future is Misconfigured

As the world continues to grow more agile and flexible, it is crucial to know the state of the threat landscape. Trend Micro experts’ breakdown insights on current and emerging threats and technologies, with cloud misconfigurations front and center...

CVE-2020-3923

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

CVE-2020-3923

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

CVE-2020-3923 TONNET DVR – Broken Access Control

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

PT-2020-3259

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.99 Apache Tomcat versions 8.5.0 through 8.5.50 Apache Tomcat versions 9.0.0.M1 through 9.0.30 Description The issue is related to the HTTP header parsing code, which used an approach to end-of-line...

Docker Registries Expose Hundreds of Orgs to Malware, Data Theft

A slew of misconfigured Docker container registries has inadvertently exposed source code for 15,887 unique versions of applications owned by research institutes, retailers, news media organizations and technology companies. According to Palo Alto Networks’ Unit 42 division, the registries lacked...

Privilege escalation

A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe which is running as NT AUTHORITY\SYSTEM when AvastSecureBrowser.exe checks for new updates. When the update check is triggered, th...

GHSA-GP2M-7CFP-H6GF Incorrect persistent NameID generation in SimpleSAMLphp

Background When a SimpleSAMLphp Identity Provider is misconfigured, a bug in the software when trying to build a persistent NameID to univocally identify the authenticating subject could cause different users to get the same identifier generated, depending on the attributes available for them rig...

This Week in Security News: Trend Micro Creates Factory Honeypot to Trap Malicious Attackers and Microsoft Leaves 250M Customer Service Records Open to the Web

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, dive into a research study that explores the risks associated with common cybersecurity vulnerabilities in a factory setting. Also, read abo...

250 Million Microsoft Customer Support Records Exposed Online

If you have ever contacted Microsoft for support in the past 14 years, your technical query, along with some personally identifiable information might have been compromised. Microsoft today admitted a security incident that exposed nearly 250 million "Customer Service and Support" CSS records on...

250 Million Microsoft Customer Support Records Exposed Online

If you have ever contacted Microsoft for support in the past 14 years, your technical query, along with some personally identifiable information might have been compromised. Microsoft today admitted a security incident that exposed nearly 250 million "Customer Service and Support" CSS records on...

DRIVE.NET, Inc.: Same site Scripting

Same site scripting I have found an error of some misconfigured DNS in a subdomain of yours which causes same site scripting. PoC 1 Open a terminal and type ping localhost.drive2.ru You would see that it resolves back to 127.0.0.1 A screenshot has been attached Impact This may cause security issu...