BRAdmin Professional 3.75 - (BRA_Scheduler) Unquoted Service Path Vulnerability

Exploit Title: BRAdmin Professional 3.75 - 'BRAScheduler' Unquoted Service Path Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://global.brother/ Software Link: https://support.brother.com/g/b/downloadend.aspx?c=us&lang=en&prod=hls7000dnuseuas&os=10013&dlid=dlf005042000&flang=4&type3=...

BRAdmin Professional 3.75 Unquoted Service Path

Exploit Title: BRAdmin Professional 3.75 - 'BRAScheduler' Unquoted Service Path Date: 2021-03-17 Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://global.brother/ Software Link:...

Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by Apache Tomcat vulnerabilities.

Summary App Connect Professional & IBM WebSphere Cast Iron Solution have addressed the following vulnerabilities reported in Apache Tomcat. Vulnerability Details CVEID: CVE-2021-24122 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a flaw when...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM WebSphere Cast Iron & App Connect Professional. These issues were disclosed as part of the IBM Java SDK updates in October 2020. IBM WebSphere Cast Iron & App Connect Professional have addressed the...

SQL Injection Vulnerability in the Website Building System of Shaanxi Yahuang Science and Technology Co.

Ltd. is a professional networking company for Xi'an website construction, Xi'an website construction and design, Xi'an website construction and promotion, Xi'an website construction and optimization. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by...

CVE-2021-26025

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

CVE-2021-26025

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

Code injection

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

Code injection

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

ACDSee Professional Security Vulnerabilities

ACD Systems ACDSee Professional is a free version of image viewer from ACD Systems, USA. The product features image management, image editing, image browsing and image processing. A security vulnerability exists in ACDSee Professional 2021 14.0 1721, which originates from a user-mode write access...

ACDSee Professional Security Vulnerabilities

ACD Systems ACDSee Professional is a free version of image viewer from ACD Systems, USA. The product features image management, image editing, image browsing and image processing. A security vulnerability exists in ACDSee Professional 2021 14.0 1721, which originates from a user-mode write access...

CVE-2021-26025

CVE-2021-26025 affects ACDSee Professional 2021 (version 14.0.1721). The vulnerability is a User Mode Write Access Violation in PlugIns\IDE_ACDStd.apl triggered by a crafted BMP image, starting at IDE_ACDStd!zlibVersion+0x4e5e. Exploitation context: local access, low attack complexity, no authent...

CVE-2021-26025

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

CVE-2021-26026

CVE-2021-26026 affects ACDSee Professional 2021 (version 14.0 build 1721). The vulnerability is a User Mode Write Access Violation in the IDE_ACDStd.apl component, triggered by a crafted BMP image, with the fault location reported as IDE_ACDStd!JPEGTransW+0x... The CVE is documented across multip...

Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM WebSphere Cast Iron Solution & App Connect Professional These issues were disclosed as part of the IBM Java SDK updates in Jan 2020. IBM WebSphere Cast Iron Solution & App Connect Professional has addressed the applicable...

Security Bulletin: App Connect Professional is affected by Apache Tomcat vulnerabilities.

Summary App Connect Professional has addressed the following vulnerabilities reported in Apache Tomcat. Vulnerability Details CVEID: CVE-2020-13943 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a flaw when HTTP/2 client exceeded the agreed...

MSPs, have you picked the right PSA for you yet?

Not long ago, we helped MSPs pick the right remote monitoring and management RMM platform for them, and make it an essential part of their service toolkit. As you may recall, an RMM is a tool that helps MSPs do the work. And what better way to track the work—and other elements associated with...