4765 matches found
ZOHO ManageEngine OpManager SQL注入漏洞
ZOHO ManageEngine OpManager is a network, server, and virtualization monitoring software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine OpManager version 125588 and prior versions, which can be exploited by remote attackers to perform SQL injection via some default...
After Adding the Veeam ONE Server to a Domain, the Reports List Is Empty
Challenge This article documents a scenario where the Veeam ONE software was initially installed on a Windows machine that was not joined to a Domain. Then after Veeam ONE is installed, that Windows machine is joined to a Domain. When this specific scenario occurs, the Reports menu will display a...
CVE-2022-0952
creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:13+00:00| seen| https://t.me/cibsecurity/41744 2023-08-08 13:26:31+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8812 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...
CVE-2021-26887
creationtimestamp| type| source ---|---|--- 2022-04-28 08:47:43+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/2007 2022-04-28 11:00:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5899...
IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-34982)
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...
Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to Insecure HTTP Method - TRACE discovered in MDM User Interface (CVE-2016-9718)
Summary IBM InfoSphere Master Data Management is vulnerable to a cross-site scripting Attack and could allow users to embed arbitrary JavaScript code in MDM User Interfaces and lead to disclosure of credentials. Insecure HTTP Method - TRACE discovered in MDM User Interface affects Inspector and W...
IBM QRadar SIEM Authorization Issue Vulnerability (CNVD-2022-34988)
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...
IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-34984)
IBM QRadar SIEM is a U.S.-based solution from IBM that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. IBM QRadar...
IBM QRadar SIEM Cross-Site Scripting Vulnerability (CNVD-2022-34987)
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. IBM QRadar SIEM...
Improper authorization - receptionist can read all Clinic reports
Description Hi there openemr maintainers, I would like to report an improper authorization vulnerability in your source code. Proof of Concept 1. Install openemr in your system and create an admin account and a receptionist account 2. Log in as receptionist and see that you don't see Reports...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for managing software tools used to create reports for Cisco Security Manager’s deployed security solutions exists due to the lack of protective measures taken for the web page structure. Exploiting this vulnerability allows a malicious actor to perform...
Chainlink oracle might return stale data
Lines of code Vulnerability details Impact Oracle might return stale data for basePrice and quotePrice. Proof of Concept refreshedAssetPerBaseInUQ in ChainlinkPriceOracle.sol does not check if the data from Chainlink is fresh . If there is a problem with the Chainlink oracle, this contract may be...
CVE-2022-27908
Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...
CVE-2022-27908
Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...
CVE-2022-27908
Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...
Sql injection
Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...
CVE-2022-27908
Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...
CVE-2021-43287
creationtimestamp| type| source ---|---|--- 2022-04-14 16:19:03+00:00| seen| https://t.me/cibsecurity/40760 2024-11-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-18 2025-01-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-15...
CVE-2022-22190
An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...
Improper access control
An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...