8 matches found
CVE-2019-20460: Cross-Site Request Forgery (CSRF)
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For...
3 security lessons from an MSP that survived the Kaseya VSA attack
Jay Tipton, chief executive for the Managed Service Provider MSP Technology Specialists, remembers his Fourth of July weekend this year like many MSP employees likely remember theirs: As a bit of a nightmare. “That’s like the worst feeling you’ll ever have,” Tipton said about his initial...
Rockwell Automation Micrologix 1400 <= 21.2 Encoded Ladder Logic Read Exploit
Binary data 720226.prm...
IBM HomePagePrint 1.0 7 Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/763/info Certain versions of the IBM Web page printout software IBM HomePagePrint can in some instances be remotely exploited by malicious webservers. The problem lies in a buffer overflow in the code which handles IMGSRC...
Mandriva Update for commoncpp MDVA-2010:225 (commoncpp)
Check for the Version of commoncpp OpenVAS Vulnerability Test Mandriva Update for commoncpp MDVA-2010:225 commoncpp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for commoncpp MDVA-2010:225 (commoncpp)
Check for the Version of commoncpp OpenVAS Vulnerability Test Mandriva Update for commoncpp MDVA-2010:225 commoncpp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2001-1483
CVE-2001-1483 affects OPIE (One-Time Passwords In Everything) versions 2.32 and 2.4. It permits remote attackers to determine whether a user account exists by observing how passphrases are printed: random passphrases if the account does not exist, static passphrases if it does. This is an informa...
