404 matches found
Authentication flaw
Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...
CVE-2018-11050
Dell EMC NetWorker is affected by CVE-2018-11050 in versions 9.0–9.1.1.8, 9.2.1.3, and 18.1.0.1. The issue is a Clear-Text authentication over the network in the RabbitMQ AMQP component, causing user credentials to be sent unencrypted to the remote AMQP service. An unauthenticated attacker on the...
CVE-2018-11050
Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...
CVE-2018-11050: Cleartext Transmission of Sensitive Information
Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...
PT-2018-3856
Name of the Vulnerable Software and Affected Versions Dell EMC NetWorker versions 9.0 through 9.1.1.8 Dell EMC NetWorker versions 9.1.1.9 through 9.2.1.3 Dell EMC NetWorker version 18.1.0.1 Description The issue is related to the implementation of the Advanced Message Queuing Protocol AMQP in the...
CVE-2016-6567
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
Design/Logic Flaw
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
CVE-2016-6567 SHDesigns' Resident Download Manager (as well as the Ethernet Download Manager) does not authenticate firmware downloads before executing code and deploying them to devices
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
CVE-2016-6567
The CVE-2016-6567 entry describes SHDesigns’ Resident Download Manager for Rabbit 2000/3000 CPU boards as not authenticating firmware updates before executing code. A remote attacker able to send UDP traffic could potentially execute arbitrary code on the device. Public details indicate the Resid...
CVE-2016-6567: Download of Code Without Integrity Check
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections
Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text...
PyeongChang 2018 Winter Olympics Opening Ceremony Disrupted by Malware Attack
The Pyeongchang Winter Olympics taking place in South Korea was disrupted over the weekend following a malware attack before and during the opening ceremony on Friday. The cyber attack coincided with 12 hours of downtime on the official website for the Winter Games, the collapse of Wi-Fi in the...
Task Rabbit Clone SQL Injection Vulnerability
Task Rabbit Clone is a set of PHP-based scripts for online service marketplace websites. A SQL injection vulnerability exists in Task Rabbit Clone version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the singleblog.php file...
CVE-2018-6363
SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...
Sql injection
SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...
CVE-2018-6363
SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...
CVE-2018-6363
Task Rabbit Clone 1.0 has a SQL injection in single_blog.php via the id parameter. The vulnerability (CVE-2018-6363) is documented with high/critical impact in CVSS metrics (C/H I/H A/H on networks, low attack complexity, no auth). Related references indicate public exploit activity (e.g., Packet...
CVE-2018-6363
SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...
PT-2018-17506
Name of the Vulnerable Software and Affected Versions Task Rabbit Clone version 1.0 Description The issue exists due to SQL Injection in the single blog.php file, specifically via the id parameter. Recommendations For Task Rabbit Clone version 1.0, consider restricting access to the single blog.p...