4975 matches found
cups: Information leak through Cups-Get-Document operation
A vulnerability was found in OpenPrinting CUPS. Unauthorized users are permitted to fetch documents over local or remote networks, leading to confidentiality breach...
Pouch has a container escape vulnerability
Pouch is a lightweight container technology that helps Ali deliver internal business faster while improving the utilization of physical resources in hyperscale data centers. Pouch has a container escape vulnerability that can be exploited by an attacker to write arbitrary files on the container's...
CVE-2023-31412
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password...
CVE-2023-31412
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password...
Design/Logic Flaw
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password...
CVE-2023-31412
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password...
CVE-2023-31412
The CVE-2023-31412 issue affects the LMS5xx family, where weak hash generation produces insecure hashes. If an attacker obtains a hash, a collision attack could enable password retrieval. Documents from NVD/Red Hat/SICK PSIRT confirm the vulnerability and indicate risk components (network exposur...
CVE-2023-31412
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password...
Holehe - Tool To Check If The Mail Is Used On Different Sites Like Twitter, Instagram And Will Retrieve Information On Sites With The Forgotten Password Function
Holehe Online Version Summary Efficiently finding registered accounts from emails. Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others. Retrieves information using the forgotten password function. Does not alert the target email. Ru...
SICK LMS5xx 安全漏洞
The SICK LMS5xx is a series of sensors from SICK, Germany. A security vulnerability exists in the SICK LMS5xx that stems from the use of a weak hash generation method that results in the creation of an insecure hash that could lead to a conflict attack and retrieve a password...
PT-2023-19045 · Geomatika · Geomatika Isigeo Web
Name of the Vulnerable Software and Affected Versions: Geomatika IsiGeo Web version 6.0 Description: The issue allows remote authenticated users to retrieve PHP files from the server via Local File Inclusion. Recommendations: For Geomatika IsiGeo Web version 6.0, consider restricting access to...
CVE-2023-38909
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function...
Input validation
Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface...
TSPlus 16.0.0.0 - Remote Work Insecure Credential storage
Exploit Title: TSPlus 16.0.0.0 - Remote Work Insecure Credential storage Date: 2023-08-09 Exploit Author: Carlo Di Dato for Deloitte Risk Advisory Italia Vendor Homepage: https://tsplus.net/ Version: Up to 16.0.0.0 Tested on: Windows CVE : CVE-2023-31069 With TSPlus Remote Work v. 16.0.0.0 you ca...
Citrix License server unavailable on Studio with Error: XDDS:796F2703
The license server is marked as unavailable on Studio even though the license server is up and running The error received when trying to connect to the license server is as follows, An error occurred while retrieving the certificate for the license server at this address. Further error details ar...
Users with no "Browse Users permissions" are able to fetch issues which are assigned to another user or reported by other user using advanced search filter
h3. Issue Summary Users with no "Browse Users permissions" are able to fetch issues which are assigned to another user or reported by other user using advanced search filter. This is reproducible on Data Center: yes h3. Steps to Reproduce Log into JIRA with a user which does not have Browse Users...
InfoHound - An OSINT To Extract A Large Amount Of Data Given A Web Domain Name
During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization. InfoHound performs passive analysis techniques which do not interact directly with the target using OSINT to...
CVE-2023-32360
A vulnerability was found in OpenPrinting CUPS. Unauthorized users are permitted to fetch documents over local or remote networks, leading to confidentiality breach. Mitigation The user can either set 'PreserveJobFiles No' in cupsd.conf which will completely shut off the saving the job files,...
PT-2023-6517 · Dell · Dell Storage Integration Tools For Vmware +2
Name of the Vulnerable Software and Affected Versions: Dell Storage Integration Tools for VMware DSITV versions prior to 6.1.1 Dell Storage vSphere Client Plugin DSVCP versions prior to 6.1.1 Replay Manager for VMware RMSV versions prior to 3.1.2 Description: The issue is related to an informatio...
CVE-2023-21232
In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...