211 matches found
CVE-2022-46353
A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. The webserver of affected device...
RDPHijack-BOF - Cobalt Strike Beacon Object File (BOF) That Uses WinStationConnect API To Perform Local/Remote RDP Session Hijacking
Cobalt Strike Beacon Object File BOF that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket e.g., golden ticket of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target...
CVE-2020-25152
A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges...
NetApp Virtual Desktop Service has an unspecified vulnerability
Netapp NetApp Virtual Desktop Service is a simple desktop service from NetApp USA that automates, manages and optimizes your digital workspace in the public cloud. When used with an HTML5 gateway, an attacker could exploit this vulnerability to take over a remote desktop session...
The vulnerability of the SAP NetWeaver integration platform, related to the lack of measures taken to protect the structure of the web page, allows a hacker to intercept the session of administrators or users of web resources.
The vulnerability of the ProxyServer server of the SAP NetWeaver software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of administrators ...
PT-2021-2229 · Siemens · Simatic Mv400
Name of the Vulnerable Software and Affected Versions: SIMATIC MV400 family versions prior to v7.0.6 Description: The issue is related to the implementation of the ISN generator in the TI-NDKTCPIP protocol stack, which uses insufficiently random values. This could allow a remote attacker to predi...
Dell EMC SourceOne 跨站脚本漏洞
Dell EMC SourceOne is a powerful archiving solution for handling email, documents and data from disparate collaboration and messaging systems. A stored cross-site scripting vulnerability exists in Dell EMC SourceOne 7.2SP10 and earlier versions. A remote, low-privilege attacker could exploit this...
CVE-2019-12002
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...
CVE-2019-12001
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...
CVE-2019-12001
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...
Session fixation
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...
Session fixation
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...
CVE-2019-12002
CVE-2019-12002 affects HPE MSA storage appliances (2040/1040/1050/2042/2050/2052) and associated firmware families (GL225P001 and earlier; VE270R001-01 and earlier; VL270R001-01 and earlier). The issue is a remote session reuse leading to an access restriction bypass, enabling an attacker to bypa...
CVE-2019-12001
CVE-2019-12001 covers a remote session reuse vulnerability that can bypass access restrictions in HPE MSA Storage devices. Public details in the initial description indicate affected models include MSA 2040/1040/1050/2042/2050/2052 with firmware/version lines such as GL225P001 and earlier; VE270R...
Take a screenshot of browser content when Browser Content Redirection is active
When Browser Content Redirection is active, pressing the Print Screen button or using Win+Shift+S to capture a screenshot will only capture the frame of the Internet Explorer or Chrome window. This is a limitation of the feature, as the screenshot will be captured within the session, but the BCR...
CVE-2011-2916
qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions...
UBUNTU-CVE-2010-4664
In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session...
HPE 3PAR StoreServ Management Console Session Reuse Vulnerability
The HPE 3PAR StoreServ Management Console SSMC is an HPE 3PAR management and reporting console that provides converged file and block management on HPE 3PAR StoreServ storage systems. A remote session reuse vulnerability exists in HPE 3PAR StoreServ Management Console 3.5.0. Detailed vulnerabilit...