11343 matches found
The vulnerability of the microprogrammed logic controllers MELSEC iQ-F series from FX5U, FX5U, FX5UJ, FX5S, FX5-ENET, and FX5-ENET/IP lies in the storage of passwords in an unencrypted form, allowing unauthorized access to protected information.
The vulnerability of the microprogrammed logic controllers MELSEC iQ-F series from FX5U, FX5U, FX5UJ, FX5S, FX5-ENET, and FX5-ENET/IP lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected informatio...
GoBruteforcer: New Golang-Based Malware Breaches Web Servers Via Brute-Force Attacks
A new Golang-based malware dubbed GoBruteforcer has been found targeting web servers running phpMyAdmin, MySQL, FTP, and Postgres to corral the devices into a botnet. "GoBruteforcer chose a Classless Inter-Domain Routing CIDR block for scanning the network during the attack, and it targeted all I...
PT-2023-1713
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier Description The vulnerability in Adobe ColdFusion is related to improper access control and deserialization of untrusted data, which could result in arbitrary...
HPESBNS04457 rev.5 - HPE NonStop servers, multiple vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, memory corruption; Remote: Denial of Service DoS, Gain Unauthorized Access, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop SSL T0910 - T0910L02^AAW onwards, T0910H01^AAV Onwards ODBC/MX Server T797...
New GoBruteforcer Malware Targeting Web Servers Running Popular Services
Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary The GoBruteforcer malware targets web servers and uses Golang programming language. It employs CIDR block scanning to access servers through brute force and deploy an...
HPESBHF04456 rev.1 - HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4), Remote Cross-Site Scripting
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.82 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.78 HPE Integrated Lights-Out 6 iLO 6 - Prior to v1.2...
[SECURITY] Fedora 38 Update: perl-HTTP-Daemon-6.16-1.fc38
Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. The HTTP::Daemon is a subclass of IO::Socket::IP, so you can perform socket operations directly on it too...
Hewlett Packard Enterprise Superdome Flex Server 信息泄露漏洞
Hewlett Packard Enterprise Superdome Flex Server is a modular server product from Hewlett Packard Enterprise USA. An information disclosure vulnerability exists in HPE Superdome Flex Servers prior to v3.65.8 and Superdome Flex 280 Servers prior to v1.45.8, which can be exploited by an attacker to...
Real Time Automation 460MCBS 5.2.14 Cross Site Scripting
Exploit Title: Real Time Automation 460MCBS Cross Site Scripting XSS Date: 2023-03-09 Exploit Author: Yehia Elghaly Vendor Homepage: https://www.rtautomation.com/ Software Link: https://www.rtautomation.com/product/460mcbs/ Version: Revision 5.2.14 Tested on: Real Time Automation CVE: N/A Summary...
CVE-2022-37939
CVE-2022-37939 affects HPE Superdome Flex Servers v3.65.8 and earlier, and Superdome Flex 280 Servers v1.45.8 and earlier. The issue is a local information disclosure vulnerability; exploitation is described as local, with no user interaction required. The Red Hat and NVD records align on the sam...
[SECURITY] Fedora 36 Update: perl-HTTP-Daemon-6.16-1.fc36
Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. The HTTP::Daemon is a subclass of IO::Socket::IP, so you can perform socket operations directly on it too...
Debian: Security Advisory (DLA-639-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-737-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-887-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-537-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1985-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-777-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Shein's Android App Caught Transmitting Clipboard Data to Remote Servers
An older version of Shein's Android application suffered from a bug that periodically captured and transmitted clipboard contents to a remote server. The Microsoft 365 Defender Research Team said it discovered the problem in version 7.9.2 of the app that was released on December 16, 2021. The iss...
Amazon Linux 2 : python (ALAS-2023-1980)
The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1980 advisory. An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing som...
