64 matches found
PT-2023-19970 · Caton · Caton Ctp Relay Server
Name of the Vulnerable Software and Affected Versions: Caton CTP Relay Server version 1.2.9 Description: A critical issue has been found in the API component of the affected software, specifically in the /server/api/v1/login endpoint. The manipulation of the username and password arguments leads ...
Caton Technology CTP Relay Server SQL注入漏洞
Caton Technology CTP Relay Server is a TS stream management platform from Caton Technology, China. Designed to handle complex video routing, real-time status, a built-in TS analyzer and stream-level monitoring alerts, it provides network operators with continuous information about bandwidth,...
CVE-2021-3959
A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272...
Server side request forgery (ssrf)
A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272...
CVE-2021-3959 Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)
A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272...
Bitdefender Endpoint Security Tool 代码问题漏洞
Bitdefender Endpoint Security Tool is an endpoint security management tool from Bitdefender Romania. A security vulnerability exists in Bitdefender Endpoint Security Tools that stems from a server-side request forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint...
RemotePotato0 - Just Another "Won't Fix" Windows Privilege Escalation From User To Domain Admin
Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Briefly: It abuses the DCOM activation service and trigger an NTLM authentication of the user currently...
Crash due to malformed relay protocol message
Impact 1. syncthing can be caused to crash and exit if sent a malformed relay protocol message message with a negative length field. 2. The relay server strelaysrv can be caused to crash and exit if sent a malformed relay protocol message with a negative length field. At no point is sensitive dat...
Security update for syncthing (moderate)
openSUSE Security Update: Security update for syncthing Announcement ID: openSUSE-SU-2021:0713-1 Rating: moderate References: 1184428 Cross-References: CVE-2021-21404 CVSS scores: CVE-2021-21404 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP...
Security update for syncthing (moderate)
openSUSE Security Update: Security update for syncthing Announcement ID: openSUSE-SU-2021:0688-1 Rating: moderate References: 1184428 Cross-References: CVE-2021-21404 CVSS scores: CVE-2021-21404 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update...
CVE-2021-21404
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...
Design/Logic Flaw
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...
CVE-2021-21404
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...
CVE-2021-21404
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...
CVE-2021-21404 Crash due to malformed relay protocol message
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...
CVE-2021-21404
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...
IBM BigFix Relay Server Sites and Package Enum
This module retrieves masthead, site, and available package information from IBM BigFix Relay Servers. Module Options msf use auxiliary/gather/ibm/bigfixsitespackagesenum msf undefinedbigfixsitespackagesenum show actions ...actions... msf undefinedbigfixsitespackagesenum set ACTION msf...
CVE-2018-15593
An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector...
openSUSE Security Update : syncthing (openSUSE-2018-45)
This update for syncthing brings a new version and fixes the following issues : - Update to version 0.14.42 : - Discovering new files in a deleted directory does not resurrect the directory ghsyncthing/syncthing4475. - 'Panic: interface conversion: errors.errorString is not net.Error' after resta...