BOOTP Turbo 2.0.0.1253 - (bootpt.exe) Unquoted Service Path Vulnerability

Exploit Title: BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path Discovery by: Erick Galindo Vendor Homepage: https://www.weird-solutions.com Software : https://www.weird-solutions.com/download/products/bootptdemox64.exe Tested Version: 2.0.0.1253 Vulnerability Type: Unquoted Service Pa...

VerityStream MSOW Solutions Information Disclosure Vulnerability

VerityStream MSOW Solutions is an application from VerityStream, Inc. A medical system. An information disclosure vulnerability exists in Primary Source Verification in VerityStream MSOW Solutions versions prior to 3.1.1, which can be exploited by an attacker to discover the Social Security Numbe...

Weak password vulnerability in RAID management system

Tiandiwei is a leading global provider of intelligent security solutions. A weak password vulnerability exists in the RAID management system, which can be exploited by attackers to obtain sensitive information...

The Evolution of DevOps in 2021

DevOps has long been a key tool in helping organizations reliably and rapidly deliver systems into production. While in the past, IT and software development teams suffered from lengthy processes and struggled to resolve incompatible priorities, now DevOps allows for easier collaboration, as well...

CVE-2021-32077

Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number SSN values via a brute-force attack on a sometimes hidden search field, because the last four SSN digits are part of the supported combination of search...

Design/Logic Flaw

Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number SSN values via a brute-force attack on a sometimes hidden search field, because the last four SSN digits are part of the supported combination of search...

CVE-2021-32077

Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number SSN values via a brute-force attack on a sometimes hidden search field, because the last four SSN digits are part of the supported combination of search...

CVE-2021-32077

CVE-2021-32077 – VerityStream MSOW Solutions : A information disclosure vulnerability affects versions prior to 3.1.1, allowing an anonymous user to brute-force a (sometimes hidden) search field where the last four SSN digits are included in the supported selectors. This enables disclosure of doc...

Forrester names Microsoft a Leader in the 2021 Enterprise Email Security Wave

Today, organizations face an evolving threat landscape and an exponentially increasing attack surface. Email represents the primary attack vector for cybercrime, and security teams are in search of efficient and cost-effective means to minimize the risk of these threats and the impact they have o...

Forrester names Microsoft a Leader in the 2021 Enterprise Email Security Wave

Today, organizations face an evolving threat landscape and an exponentially increasing attack surface. Email represents the primary attack vector for cybercrime, and security teams are in search of efficient and cost-effective means to minimize the risk of these threats and the impact they have o...

VerityStream MSOW Solutions 安全漏洞

VerityStream MSOW Solutions is an application from VerityStream, Inc. A medical system. An information disclosure vulnerability exists in Primary Source Verification in VerityStream MSOW Solutions versions prior to 3.1.1, which can be exploited by an attacker to discover the Social Security Numbe...

How to apply a Zero Trust approach to your IoT solutions

For many, 2020 was a year of survival as they rapidly transformed their businesses in response to a new normal. From enabling new remote and hybrid work models to implementing new technology to help optimize operations, the last year has seen a significant uptick in the proliferation and role of...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20453)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Arbitrary Command Execution Vulnerability in YMBCMS 9.2

YMBCMS website management system also known as YMBCMS is one of the independent research and development products of Hebei OuRunTianTeng YMBCMS network studio.YMBCMS set computer station, cell phone station, WeChat public platform, small program, APP in one, shared space, data synchronization, is...

YMBCMS 9.2 suffers from SQL injection vulnerability (CNVD-2021-36240)

YMBCMS website management system also known as YMBCMS is one of the independent research and development products of Hebei OuRunTianTeng YMBCMS network studio.YMBCMS set computer station, cell phone station, WeChat public platform, small program, APP in one, shared space, data synchronization, is...

Intelligent Transportation Terminal Management Equipment of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a logic flaw vulnerability in the intelligent transportation terminal management equipment of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers t...

Unauthorized Access Vulnerability in AXIS M1014

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M1014, which can be exploited by attackers to obtain sensitive information...

Sipwise C5 NGCP CSC Cross-Site Request Forgery Vulnerability

Sipwise C5 NGCP CSC is an application system from Sipwise Austria. A core system for unified communications solutions. A cross-site request forgery vulnerability exists in Sipwise C5 NGCP CSC 3.6.7, which can be exploited by an attacker for cross-site request forgery...

Shanghai CFE Network Technology Co., Ltd. fire protection level platform has logic flaws vulnerability

Ltd., formerly known as: Shanghai Zhongguo Network Technology Co., Ltd. is committed to building fire safety industry standards, fire safety product industry standards, intelligent fire Internet of Things standards, as well as for the government, the group, enterprises to provide "Internet +"...

Sipwise C5 NGCP CSC Cross-Site Scripting Vulnerability

Sipwise C5 NGCP CSC is an application system from Sipwise Austria. A core system for unified communications solutions. A cross-site scripting vulnerability exists in Sipwise C5 NGCP CSC CEm39.3.1 version and prior versions, which stems from input passed via several parameters to several scripts...