2055 matches found
Updated wireshark packages fix security vulnerability
IPPUSB dissector crash CVE-2021-39920. Modbus dissector crash CVE-2021-39921. C12.22 dissector crash CVE-2021-39922. PNRP dissector large loop wnpa-sec-2021-11. Bluetooth DHT dissector large loop CVE-2021-39924. Bluetooth SDP dissector crash CVE-2021-39925. Bluetooth HCIISO dissector crash...
IBM Sterling B2B Integrator Cross Site Scripting Vulnerability
IBM Sterling B2B Integrator suffers from a cross site scripting vulnerability. Versions affected include 5.2.0.0 through 5.2.6.53, 6.0.0.0 through 6.0.3.4, and 6.1.0.0 through 6.1.0.2. ======================================================================= title: Reflected cross-site scripting...
Moxa Command Injection / Cross Site Scripting / Vulnerable Software
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: see "Vulnerable / tested versions" vulnerable version: see "Vulnerable / tested versions" fixed version: see "Solution" CVE number:...
BSCW Server Remote Code Execution
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authenticated RCE product: BSCW Server vulnerable version: BSCW Server =5.0.11, =5.1.9, =5.2.3, =7.3.2, =7.4.2 fixed version: 5.0.12, 5.1.10, 5.2.4, 7.3.3, 7.4.3 CVE...
CamPhish - Grab Cam Shots From Target'S Phone Front Camera Or PC Webcam Just Sending A Link.
Grab cam shots from target's phone front camera or PC webcam just sending a link. What is CamPhish? CamPhish is techniques to take cam shots of target's phone fornt camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & serveo to generate a link which we will...
CVE-2021-38584
The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...
CVE-2021-38590
In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...
CVE-2021-38585
The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38588
In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...
CVE-2021-38587
In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...
CVE-2021-38589
In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...
Design/Logic Flaw
The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...
Design/Logic Flaw
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
Command injection
In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...
CVE-2021-38588
In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...
CVE-2021-38585
The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...
CVE-2021-38586
CVE-2021-38586 affects cPanel prior to 98.0.1. The issue is in /scripts/cpan_config, performing unsafe operations on files (SEC-589). The NVD metrics show CVSSv2/2.0: Low (2.1) with local access; CVSSv3.1/3.1: Medium (4.4) with local access, high integrity impact. Exploitation details or remediat...
CVE-2021-38587
The CVE-2021-38587 entry concerns cPanel prior to 96.0.13. The affected component is the script fix-cpanel-perl, which mishandles the creation of temporary files (SEC-586). The underlying issue is a faulty handling of temporary-file creation, enabling an impact described in the sources. The publi...