ROS-2-2195

2.2195 Multiple vulnerabilities in Mozilla Thunderbird CVE-2021-29957, CVE-2021-29956 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass the security restrictions imposed.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia :...

ROS-2-1721

2.1721 Multiple vulnerabilities in Mozilla Thunderbird CVE-2021-29957, CVE-2021-29956 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass the security restrictions imposed.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia :...

The vulnerabilities of the Azure Active Directory Connect Provisioning Agent and Azure Active Directory Connect, related to authentication mechanism flaws, allow attackers to bypass security measures.

The vulnerability of the Azure Active Directory Connect Provisioning Agent and Azure Active Directory Connect lies in the authentication mechanism’s flaws. Exploiting this vulnerability can allow attackers to bypass security measures...

ECOA Building Automation System Configuration Download Information Disclosure

Summary 1 The Risk-Terminator Web Graphic control BEMS Building Energy Management System are designed to provide you with the latest in the Human Machine Interface HMI technology, for completely monitoring and controlling management. It may be used singly for small and medium sized facilities,...

The vulnerability of the Java Runtime Environment (JRE) component in Java SE software platforms allows attackers to execute arbitrary code.

The vulnerability of the Java Runtime Environment JRE component in Java SE programming platforms is related to the bypassing of security functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created applet...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability exists in Mozilla Firefox that stems from insufficient validation of user-supplied input when the product delegates navigation to the operating system. A remote...

File Drop can be bypassed using Richdocuments app

None...

Logitech: Steal any users `access_token` via open redirect in https://streamlabs.com/global/identity?popup=1&r=

Heyy there, After reading the disclosed report 1178239, I started to look for bypasses but I found that it's restricted to only streamlabs.com and merch.streamlabs.com , providing any other domain or subdomain of streamlabs.com gives an error instead of the 302 redirect. From wayback machine...

CVE-2021-36235

An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. As a result, the attacker can start applications with elevated privileges...

Design/Logic Flaw

An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. As a result, the attacker can start applications with elevated privileges...

Google Chrome Blink security bypass vulnerability (CNVD-2021-67545)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Blink. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome DevTools security bypass vulnerability (CNVD-2021-67544)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome DevTools. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Blink security bypass vulnerability (CNVD-2021-67542)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Blink. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome DevTools. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome 权限许可和访问控制问题漏洞

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Blink. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Blink. An attacker could exploit this vulnerability to bypass security restrictions...

The vulnerability of the Apex One and OfficeScan antivirus software lies in errors during the saving of permissions, allowing a hacker to bypass the security measures.

The vulnerability of the Apex One and OfficeScan antivirus software lies in errors during the saving of permissions. Exploiting this vulnerability can allow a remote attacker to bypass security measures...

CVE-2021-30856

This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences...

Design/Logic Flaw

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences...

Online-Catering-Reservation-DT Food Catering (by: oretnom23 ) v1.0 SQL injection - login

The Online-Catering-Reservation-DT Food-Cateringby: oretnom23v1.0 is vulnerable in the application /catering/classes/Login.php which is redirected from /catering/dist/js/script.js app. The SQL injection can be deployed by using the username vulnerable parameter on /catering/admin/login.php. The...