Airspan AirVelocity 1500 安全漏洞

The Airspan AirVelocity 1500 is a revolutionary indoor high-performance small cell from Airspan USA. Designed to bring public access LTE networks to indoor spaces A security vulnerability exists in versions prior to Airspan AirVelocity 1500 15.18.00.2511, which stems from NET-SNMP-EXTEND-MIB bein...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 11.6. An attacker exploits the vulnerability to access and take over resources via specially crafted HTTP requests...

MAL-2022-6853 Malicious code in usaa-template-mocks-aggregate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c02da6001bfce43405f8bf2d1b55088f279cbc0d95e7badfd6f9178f1ffcd5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitLab: Unauthorized access

Hello Gents, I would like to report an issue where attackers are able to: 1. List about.gitlab.com GS bucket. 2. Access all resales through https://about.gitlab.com/all-releases.xml & https://about.gitlab.com/security-releases.xml, which contains undisclosed HackerOne reports. For Example: This...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from the presence of an insecure default file type filtering policy that allows execution of insecure JavaScript in deployed applications...

`rustdecimal` is a malicious crate

The Rust Security Response WG and the crates.io team were notified1 on 2022-05-02 of the existence of the malicious crate rustdecimal, which contained malware. The crate name was intentionally similar to the name of the popular rustdecimal2 crate, hoping that potential victims would misspell its...

WAVLINK WL-WN531P3和WAVLINK WN533A8 安全漏洞

WAVLINK WL-WN531P3 and WAVLINK WN533A8 are both products of China RuiYin Technology WAVLINK.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router. A security vulnerability exists in WAVLINK that stems from its wireless.cgi component not filtering the parameters deletelist,...

CVE-2022-2715

CVE-2022-2715 affects SourceCodester Employee Management System; the eloginwel.php file has a flaw where manipulating the id parameter enables SQL injection. The vulnerability can be exploited remotely and the exploit has been disclosed publicly (VDB-205834). Based on the provided documents, ther...

Hackers Compromise Employee Accounts to Access Twilio Internal Systems

By Waqas Twilio says the threat actors behind the attack had "sophisticated abilities to match employee names from sources with… This is a post from HackRead.com Read the original post: Hackers Compromise Employee Accounts to Access Twilio Internal Systems...

Arista Networks Arista EOS 安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

Kaspersky VPN Secure Connection 安全漏洞

Kaspersky VPN Secure Connection is a Vpn client software from the Russian company Kaspersky. The software checks the security of the network. If the Wi-Fi network is not secure, Kaspersky VPN Secure Connection prompts you to enable a secure connection by connecting to a specially assigned server...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

Nextcloud 安全漏洞

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in the Nextcloud server that stems from not properly logging federated sharing events...

Renato 安全漏洞

Renato is an open source knowledge base platform that uses static Markdown files to power your knowledge base. A security vulnerability exists in Renato version v0.17.0 that stems from the use of weak passwords, which can be exploited by an attacker to crack a user's password via a brute-force...

For months, JusTalk messages were accessible to everyone on the Internet

JusTalk, a popular mobile video calling and messaging app with 20 million global users, exposed a massive database of supposedly private messages to the public Internet for months. According to security researcher Anurag Sen, who discovered the open database, the messages were stored unencrypted,...

MAL-2022-2955 Malicious code in f36-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8429f79fd714aef2e42d4d72437a7b404d59fc7592a639fb43fb43dde7e6e4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lanling OA 安全漏洞

Lanling OA is an OA management system from the Chinese company Lanling. A security vulnerability exists in Lanling OA Landray Office Automation OA. An attacker can exploit this vulnerability to read arbitrary files via the component /sys/ui/extend/varkind/custom.jsp...

National Health Insurance 安全漏洞

National Health Insurance NHI is a health insurance program health insurance card in Taiwan, China. A security vulnerability exists in National Health Insurance that stems from insufficient validation of network packet header lengths and a stack-based buffer overflow, which could be exploited by ...

When a sextortion victim fights back

When Katie Yates suddenly started receiving nude photos of her friend, Natalie Claus, over on Snapchat, she instantly recognized that Claus had just become a victim of a sextortion attack. She also knew how Claus should respond. This happened in December 2019 when Claus was a sophomore. Both were...