1621 matches found
SKYWORTH Digital Technology RN510 跨站脚本漏洞
The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. A cross-site request forgery vulnerability exists in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. No detailed vulnerability details are...
sec-certs (>=0.0.0 <=0.0.1) potentially affected by CVE-2021-29421 via pikepdf (=2.0.0)
pikepdf PYPI version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pikepdf and may be impacted: - sec-certs =0.0.0, =0.0.1 Source cves: CVE-2021-29421 Source advisory: OSV:PYSEC-2021-34...
CVE-2021-25369
An improper access control vulnerability in seclog file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace...
A SpaceX Engineer's Dark Web Insider Trading Sparks SEC First
“MillionaireMike” allegedly ran a stock tip scam that earned him $27,000 in bitcoin payments...
Firewall Vendor Patches Critical Auth Bypass Flaw
Germany-based cybersecurity company Genua has fast-tracked a fix for a critical flaw in one of its firewall products. If exploited, the vulnerability could allow local attackers to bypass authentication measures and log in to internal company networks with the highest level of privileges. Genua...
Adobe Magento Commerce Cross Site Scripting
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-Site Scripting XSS product: Adobe Magento Commerce vulnerable version: 2.4.2 fixed version: 2.4.2 CVE number: CVE-2021-21029 impact: Medium homepage:...
CVE-2021-26266
CVE-2021-26266 affects cPanel prior to 92.0.9. The issue allows a Reseller to bypass the suspension lock (SEC-578). The connected documents consistently describe the vulnerability in this product/version; no root-cause or exploit details are provided beyond the bypass of the suspension mechanism....
CVE-2021-26267
CVE-2021-26267 affects cPanel prior to 92.0.9. An MySQL user with an old-style password hash can bypass suspension (SEC-579). Remediation: update to cPanel 92.0.9 or later to resolve the issue. Exploitation status not provided in the supplied documents.
PT-2020-6819 · Samsung +1 · Samsung Mobile Devices +1
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Devices versions prior to SMR MAR-2021 Release 1 Description: The issue is related to an improper access control vulnerability in the sec log file, which exposes sensitive kernel information to userspace. This vulnerability is...
CVE-2020-29135
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
Code injection
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
Design/Logic Flaw
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
CVE-2020-29136
CVE-2020-29136 affects cPanel versions prior to 90.0.17, where an authentication bypass allows 2FA to be defeated via brute-force (SEC-575). Root cause: improper enforcement of multi-factor authentication during brute-force attempts. Impact: unauthorized access by bypassing 2FA; exploitation stat...
CVE-2020-29136
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
CVE-2020-29137
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...
CVE-2020-29135
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
CVE-2020-29135
CVE-2020-29135 affects cPanel prior to 90.0.17, with multiple instances of URL parameter injection (SEC-567). The connected records identify the affected product and the vulnerability type, but do not provide explicit exploitation details, affected components beyond the web interfaces, or a confi...
This Week in Security News: US Cyber Command Exposes New Russian Malware and REvil Ransomware Gang ‘Acquires’ KPOT Malware
Welcome to our weekly roundup, where we share what you need to know about cybersecurity news and events that happened over the past few days. This week, learn about eight new malware samples that were developed and deployed by Russian hackers in recent attacks. Also, read about how the operators ...
Toymaker Mattel Hit by Ransomware Attack
Top toymaker Mattel revealed it was a victim of a ransomware attack that successfully encrypted some data and temporarily crippled a limited number of business functions. The disclosure was part of a U.S. Securities Exchange Commission SEC disclosure filed in late October. Mattel reported the...