624 matches found
CVE-2021-20032
SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...
CVE-2021-20032
SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...
Remote code execution
SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...
UPchieve: hackers.upchieve.org and argocd.upchieve.org is not preloaded.
POC video : IMG7790.MP4 Vulnerable URLs : https://hstspreload.org/?domain=argocd.upchieve.org and https://hstspreload.org/?domain=hackers.upchieve.org Impact Security Misconfiguration...
The vulnerability of Google Chrome browser extensions, related to security configuration errors, allows attackers to access confidential information.
The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
Pegasystem PEGA Platform Access Control Error Vulnerability
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An access control error vulnerability...
Improper access control
pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo...
CVE-2020-15390
CVE-2020-15390 affects Pega Platform (version 8.4.0.237) via the pyActivity component. The root cause is a security misconfiguration that yields improper access control through =GetWebInfo, enabling exposure of sensitive information. Documented impacts are consistent with high/severe risk (NVD re...
On : Graphql introspection is enabled and leaks details about the schema
Summary: Hi team ! i've found a misconfiguration in your graphql Api on the endpoint https://www.on-running.com/en-in/graphql in which an attacker is able to run a graphql interospection query to fetch schemas , types , fields , available query operations , after running interospection query on t...
The vulnerability of the Intrusion Detection Service (IDS) of Junos operating system’s MX routers allows a intruder to block any arbitrary traffic.
The vulnerability of the Intrusion Detection Service IDS on Junos operating system’s MX routers is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to block any incoming traffic remotely...
Clario: Google API key leaks and security misconfiguration leads Open Redirect Vulnerability
Summary: Hello, when i search your targets and javascript files I found an googleapikey leaks in url = https://account.clario.co/js/main.044af6485f6b0cd90809.js. Part of the leak down below; 'https://firebasedynamiclinks.googleapis.com/v1/shortLinks?key=AIzaSyAw-SpLHVTIP3IFEIkckCuEmIhnUrY9OrQ';...
Security Misconfiguration
Google Chrome is vulnerable to security misconfiguration. The vulnerability exist because of Incorrect handling of a confusable character in Omnibox in Google Chrome which allows an attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
CVE-2020-26898
NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings...
CVE-2020-26898
CVE-2020-26898 affects NETGEAR RAX40 devices running versions prior to 1.0.3.80 , due to an incorrect configuration of security settings . The vulnerability entry cites a high-risk impact (confidentiality, integrity, and availability potentially affected) and does not provide explicit exploitatio...
CVE-2020-26916
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 befor...
SonicWall SSL-VPN Products security misconfiguration leads to possible domain name collision vulnerability
SonicWall SSL-VPN products web interface has the option to publicly display their organization’s internal domain names in the Domain drop-down menu. An attacker with knowledge of an organization’s internal domain name can potentially take advantage of a DNS flaw known as domain name collision.A...
CVE-2020-12780
A security misconfiguration exists in Combodo iTop, which can expose sensitive information...
CVE-2020-12780
A security misconfiguration exists in Combodo iTop, which can expose sensitive information...