Hitachi ABB Power Grids eSOMS 安全漏洞

Hitachi ABB Power Grids eSOMS is an application from Hitachi ABB Power Grids. a shift operations management system for the power generation industry. A security vulnerability exists in Hitachi ABB's Grids Retail Operations and Transaction Settlement Billing CSB 5.7.2 and prior versions, which ste...

pagalguy.com Improper Access Control vulnerability OBB-2118307

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pagalguy.com ---|--- Open Bug Bounty...

Wildfly 安全漏洞

Wildfly is a powerful, modular and lightweight application server from Wildfly. A security vulnerability exists in Wildfly that stems from an incorrect JBOSSLOCALUSER questioning location when configured with elytron that could result in the JBOSSLOCALUSER accessing all users on the machine...

OneNav 安全漏洞

OneNav is a minimalist navigation/bookmark management system developed using PHP. A security vulnerability exists in OneNav 0.9.12 which allows information disclosure of onenav.db3 content...

Simple Library Management System 1.0 SQL Injection

Exploit Title: Simple Library Management System 1.0 - 'rollno' SQL Injection Date: 2021-08-08 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.nikhilbhalerao.com/ Software Link: https://www.sourcecodester.com/php/14126/simple-library-management-system.html Version: V1 Category:...

Netgear NETGEAR 安全漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. NETGEAR has a security vulnerability that stems from some NETGEAR devices being affected by privilege escalation...

Netgear NETGEAR 安全漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. NETGEAR has a security vulnerability that can be exploited by attackers to implement denial of service attacks...

Defunct marketing firm exposed 32GB worth of records, customers data

By Waqas According to researchers, the exposed database contained around 50,000 files and had 32GB worth of data. This is a post from HackRead.com Read the original post: Defunct marketing firm exposed 32GB worth of records, customers data...

The Clubhouse database “breach” is likely a non-breach. Here’s why.

Before the work week ended last week Friday, a security researcher found a leak of what is claimed to be full phone numbers of users of Clubhouse, the new social media app everyone is talking about and just recently came out of beta. Clubhouse is an audio-only social media platform where, unlike...

U.S. Dept Of Defense: [CVE-2021-29156 on ForgeRock OpenAm] LDAP Injection in Webfinger Protocol!

Description: https://████████ is vulnerable to CVE-2021-29156. References https://nvd.nist.gov/vuln/detail/CVE-2021-29156 https://portswigger.net/research/hidden-oauth-attack-vectors...

lwip 安全漏洞

lwip is an open source TCP/IP stack implementation. A security vulnerability exists in lwIP that allows an attacker to exploit the vulnerability to access sensitive information via a crafted 6LoWPAN packet...

macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. The macOS suffers from a security vulnerability that stems from the fact that a malicious application may be able to access data from an account where the user is using Home...

Ian Dunn: Multiple server ssh usernames leaked in your github repository

hi security team,while searching on github,I have found multiple ssh usernames that belongs to your organization are exposed in the organization github repository STEPS TO REPRODUCE:- 1.Go to this repository. you will see the leaked multiple server ssh usernames...

Hitachi ABB Power Grids eSOMS 安全漏洞

Hitachi ABB Power Grids eSOMS is an application from Hitachi ABB Power Grids. a shift operations management system for the power generation industry. A security vulnerability exists in Hitachi ABB Power Grids eSOMS that stems from a password auto-fill vulnerability in the password field of the...

Important: postgresql96

Issue Overview: A flaw was found in postgresql. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

How data collected in gaming can be used to breach user privacy

By Sudais Asif Gaming firms collect user data to improve user experience but how that data can be used for malicious purposes? Here's what researchers say. This is a post from HackRead.com Read the original post: How data collected in gaming can be used to breach user privacy...

File Upload Vulnerability in TerraMaster System Administration

TerraMaster Ironwillmar specializes in providing users with professional private cloud storage appliances, including NAS networked cloud storage servers and DAS direct-attached storage units. A file upload vulnerability exists in TerraMaster system administration, which can be exploited by an...

Suricata 安全漏洞

Suricata is a network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supporting vendors, which supports multi-threading, built-in IPv6, and the ability to load pre-defined...

CVE-2021-30118 Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management RMM 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unauthenticated arbitrary file upload leadin...

SAMSUNG Messages 安全漏洞

SAMSUNG Messages is an application from the South Korean company Samsung SAMSUNG. It provides a tool that is pre-installed by default on all its official devices. A security vulnerability exists in SAMSUNG Message that stems from a lack of proper protection permissions on the SmsViewerActivity...