Prismatic < 2.8 - Contributor+ Stored XSS

The plugin does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in the frontend, however, higher...

Internet Bug Bounty: Fragmentation and Aggregation Flaws in Wi-Fi

I discovered three design flaws in the Wi-Fi standard and widespread related implementation flaws see GitHub overview and test tool. Here I'll specifically cover open source software. These findings have not received bug bounties from other sources. Implementation flaws allowing trivial packet...

Mysterious Custom Malware Collects Billions of Stolen Data Points

Researchers have uncovered a 1.2-terabyte database of stolen data, lifted from 3.2 million Windows-based computers over the course of two years by an unknown, custom malware. The heisted info includes 6.6 million files and 26 million credentials, and 2 billion web login cookies – with 400 million...

RLSA-2021:2363 Important: gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. Security Fixes: gupnp: allows DNS rebinding which could result in tricking browser into...

SUSE: Security Advisory (SUSE-SU-2019:1086-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability of the data collection and aggregation application from Cisco DNA Spaces Connector’s controllers and access points relates to the implementation or modification of arguments, allowing attackers to execute arbitrary commands with root privileges.

The vulnerability of the data collection and aggregation application from Cisco DNA Spaces Connector lies in the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...

CVE-2021-1547

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1550

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1554

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1555

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1549

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...