28 matches found
EUVD-2019-18383
Malware in sbrugna...
EUVD-2021-33336
Malicious code in bioql PyPI...
EUVD-2022-27938
Malicious code in bioql PyPI...
CVE-2022-22795
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
CVE-2022-22795
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
Xxe
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
Signiant Manager + Agents code issue vulnerability
Signiant Manager + Agents is an enterprise-grade, accelerated file transfer solution from Signiant Corporation. A code issue vulnerability exists in Signiant Manager + Agents, which allows an attacker to access and extract any file on the system to steal sensitive information when the product is...
CVE-2022-22795
Signiant Manager+Agents is affected by an XML External Entity (XXE) vulnerability (CVE-2022-22795). The issue enables an attacker to read internal files on the compromised machine, with the product running as root on Linux and as NT/Authority on Windows, allowing access to sensitive files (e.g., ...
CVE-2022-22795 Signiant - Manager+Agents XML External Entity (XXE)
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
PT-2022-15684
Name of the Vulnerable Software and Affected Versions Signiant Manager+Agents affected versions not specified Description The issue allows an attacker to extract internal files of the affected machine through an XML External Entity XXE vulnerability. Since the product runs with root privileges on...
CVE-2022-22795: Improper Restriction of XML External Entity Reference
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
CVE-2022-22795
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
CVE-2021-46660
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
CVE-2021-46660
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
CVE-2021-46660
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
Xxe
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
Signiant Flight Code Vulnerability
Signiant flight is a unique utility from Signiant USA for optimizing the transfer of large data sets to and from the cloud. A security vulnerability in Manager+Agents before Signiant flight deck 15.1 allows XML External Entity XXE attacks...
CVE-2021-46660
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
CVE-2021-46660
CVE-2021-46660 affects Signiant Manager+Agents prior to version 15.1 . The issue is an XML External Entity (XXE) vulnerability in XML processing. Per CVSS 3.1/2.0 metrics, the impact is High (confidentiality, integrity, availability) with network vector and no user interaction. Remediation: upgra...