4811 matches found
Stable Channel Update for Desktop
The Stable channel has been updated to 101.0.4951.64 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
Sql injection
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...
CVE-2022-1388
creationtimestamp| type| source ---|---|--- 2022-05-05 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=800 2022-05-05 04:41:10+00:00| seen| https://t.me/thehackernews/2149 2022-05-05 05:09:26+00:00| seen| https://t.me/ShlezySecChannel/223 2022-05-05 07:52:31+00:00|...
ZOHO ManageEngine OpManager SQL注入漏洞
ZOHO ManageEngine OpManager is a network, server, and virtualization monitoring software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine OpManager version 125588 and prior versions, which can be exploited by remote attackers to perform SQL injection via some default...
Gogs 跨站脚本漏洞
Gogs Go Git Service is a Go-based self-service Git hosting service from the GOGS team that supports creating and migrating public/private repositories, adding and removing repository collaborators, and more. A security vulnerability exists in Gogs versions prior to 0.12.7, which stems from the la...
After Adding the Veeam ONE Server to a Domain, the Reports List Is Empty
Challenge This article documents a scenario where the Veeam ONE software was initially installed on a Windows machine that was not joined to a Domain. Then after Veeam ONE is installed, that Windows machine is joined to a Domain. When this specific scenario occurs, the Reports menu will display a...
CVE-2022-0952
creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:13+00:00| seen| https://t.me/cibsecurity/41744 2023-08-08 13:26:31+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8812 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...
CVE-2021-26887
creationtimestamp| type| source ---|---|--- 2022-04-28 08:47:43+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/2007 2022-04-28 11:00:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5899...
IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-34982)
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...
Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to Insecure HTTP Method - TRACE discovered in MDM User Interface (CVE-2016-9718)
Summary IBM InfoSphere Master Data Management is vulnerable to a cross-site scripting Attack and could allow users to embed arbitrary JavaScript code in MDM User Interfaces and lead to disclosure of credentials. Insecure HTTP Method - TRACE discovered in MDM User Interface affects Inspector and W...
IBM QRadar SIEM Authorization Issue Vulnerability (CNVD-2022-34988)
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...
IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-34984)
IBM QRadar SIEM is a U.S.-based solution from IBM that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. IBM QRadar...
IBM QRadar SIEM Cross-Site Scripting Vulnerability (CNVD-2022-34987)
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. IBM QRadar SIEM...
Improper authorization - receptionist can read all Clinic reports
Description Hi there openemr maintainers, I would like to report an improper authorization vulnerability in your source code. Proof of Concept 1. Install openemr in your system and create an admin account and a receptionist account 2. Log in as receptionist and see that you don't see Reports...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for managing software tools used to create reports for Cisco Security Manager’s deployed security solutions exists due to the lack of protective measures taken for the web page structure. Exploiting this vulnerability allows a malicious actor to perform...
Chainlink oracle might return stale data
Lines of code Vulnerability details Impact Oracle might return stale data for basePrice and quotePrice. Proof of Concept refreshedAssetPerBaseInUQ in ChainlinkPriceOracle.sol does not check if the data from Chainlink is fresh . If there is a problem with the Chainlink oracle, this contract may be...