PT-2022-22008 · Micro Star International · Msi Feature Navigator

Name of the Vulnerable Software and Affected Versions: Micro-Star International MSI Feature Navigator version 1.0.1808.0901 Description: An issue in the software allows attackers to write arbitrary files to the directory PromoPhoto, regardless of file type or size. Recommendations: For version...

PT-2022-22009 · Micro Star International · Msi Feature Navigator

Name of the Vulnerable Software and Affected Versions: Micro-Star International MSI Feature Navigator version 1.0.1808.0901 Description: An issue in the software allows attackers to download arbitrary files, regardless of the file type or size. Recommendations: For version 1.0.1808.0901, consider...

Micro-Star International MSI Feature Navigator v1.0.1808.0901 安全漏洞

Micro-Star International MSI Feature Navigator is a feature navigator from Micro-Star International China. A security vulnerability exists in Micro-Star International MSI Feature Navigator version v1.0.1808.0901. An attacker can exploit this vulnerability to download arbitrary files from an...

XSS Vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library Public Library Version

Mobile Library Public Library Edition is a mobile application personalized for public library patrons. There is an XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library Public Map Edition, which can be exploited by attackers ...

Beijing Century Superstar Information Technology Development Co., Ltd.'s Learning Pass suffers from a stored XSS vulnerability

LearningTone is a course learning, knowledge dissemination and management sharing platform built on a microservice architecture. There is a stored XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Learning Pass, which can be exploited b...

XSS Vulnerability in the Mobile Library of Beijing Century Super Star Information Technology Development Co.

Mobile Library is a professional mobile reading software specially made for all libraries. There is an XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library, which can be exploited by attackers to obtain sensitive information...

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

Information disclosure

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

CVE-2022-34659

The CVE-2022-34659 vulnerability affects Simcenter STAR-CCM+ (all versions) when the Power-on-Demand public license server is used. The issue is an information disclosure where applications expose the user, host, and display name of users, enabling an attacker to retrieve this data. Mitigations f...

Siemens Simcenter STAR-CCM+ 信息泄露漏洞

Simcenter STAR-CCM is a multiphysics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. an information disclosure vulnerability exists in Siemens Simcenter STAR-CCM due to the use of a public license server where the affected application...

Siemens Simcenter STAR-CCM+

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Simcenter STAR-CCM+ contains an information disclosure vulnerability...

Beijing Century Super Star Information Technology Development Co., Ltd. learning through the quality of engineering platform there are logical flaws vulnerabilities

Beijing Century Super Star Information Technology Development Co., Ltd. is an education informatization enterprise driven by technology, product and service innovation. A logic flaw vulnerability exists in the Beijing Century Super Star Information Technology Development Limited Liability Company...

shooting-starphoto.com Cross Site Scripting vulnerability OBB-2758014

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Information Disclosure Vulnerability in UTS Unified Threat Probe of Green Alliance Technology Group Co.

UTS Unified Threat Probe is to realize the collection and parsing work of traffic data, decoding, uploading and original traffic pcap data retention layer by layer, and support intrusion detection, virus detection and star sucking engine, etc., to provide unified threat detection capability. Gree...

new packages: star

An update is available for star. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Get to Know Steve Povolny

Meet Steve Povolny Head of Advanced Threat Research for Trellix Threat Labs By Michael Alicea · May 17, 2022 At Trellix, we celebrate and champion our people. This week, I sat down with Steve Povolny, Head of Advanced Threat Research for Trellix Threat Labs. As he is one of the leading...

staralliancemovies.com Cross Site Scripting vulnerability OBB-2616510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

EDRSandblast - Tool That Weaponize A Vulnerable Signed Driver To Bypass EDR Detections And LSASS Protections

EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections Kernel callbacks and ETW TI provider and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring. As of release, combination of userland...