2713 matches found
CVE-2024-6979
CVE-2024-6979 affects Axis OS, where a broken access control could allow less-privileged operator- and/or viewer-accounts to gain higher privileges. The issue is described as requiring complex steps and social engineering to trigger administrator configurations, with exploitation risk considered ...
PT-2024-29939 · Dell · Dell Precision Rack
Name of the Vulnerable Software and Affected Versions: Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2 Description: The issue is related to an Improper Input Validation vulnerability. A high-privileged attacker with local access could potentially exploit this vulnerability, leading t...
Helpdeskz 2.0.2 Cross Site Scripting
Exploit Title: Stored XSS Vulnerability via File Name Google Dork: N/A Date: 08 Aug 2024 Exploit Author: Md. Sadikul Islam Vendor Homepage: https://www.helpdeskz.com/ Software Link: https://github.com/helpdesk-z/helpdeskz-dev/archive/2.0.2.zip Version: v2.0.2 Tested on: Kali Linux / Firefox...
Network restriction bypass via race condition during namespace termination
CVSS Rating: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Low 3.1 A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace...
Microweber 2.0.15 Cross Site Scripting Vulnerability
Microweber version 1.0 suffers from a cross site scripting vulnerability in the search functionality. Original discovery of cross site scripting in this version is attributed to tmrswrr in June of 2024. Exploit Title: Microweber =v2.0.15 - Reflected Cross-Site Scripting XSS Exploit Author: Prerak...
Details Matter: Pentesting a single device to guarantee security
Rapid7’s penetration testing services regularly assess internal networks of various sizes. For this particular engagement, however, Rapid7 was tasked with performing a penetration test of just one device on an internal network. The device was being piloted for future deployment and the customer h...
INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore
INTERPOL said it devised a "global stop-payment mechanism" that helped facilitate the largest-ever recovery of funds defrauded in a business email compromise BEC scam. The development comes after an unnamed commodity firm based in Singapore fell victim to a BEC scam in mid-July 2024. It refers to...
Microweber 2.0.15 Cross Site Scripting
Exploit Title: Microweber =v2.0.15 - Reflected Cross-Site Scripting XSS Date: 16.07.2024 Exploit Author: Prerak Mittal Vendor Homepage: https://microweber.org/ Software Link: https://github.com/microweber/microweber/releases/tag/v2.0.15 Version: =v2.0.15 Tested on: Ubuntu 22.04 CVE : CVE-2024-401...
PT-2024-5476 · Totolink · Totolink A3300R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A critical issue was found in the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file, which can be exploited remotely. The manipulation of the File argument leads to a buff...
Global Outage Alert: Windows BSOD Crisis Following CrowdStrike Update – Recovery Steps & Qualys Assurance
On Friday, July 19, 2024, morning, reports surfaced globally of Microsoft Windows operating system users encountering the infamous Blue Screen of Death BSOD following the latest update from CrowdStrike. This widespread issue has severely impacted critical services, including telecommunications,...
GHSA-5V69-92VW-FMJH Apache StreamPark: maven build params could trigger remote command execution
In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...
Exploit for Race Condition in Openbsd Openssh
CVE-2024-6387 Installation et Exécution du script 💻 Pré...
Exploit for Race Condition in Openbsd Openssh
CVE-2024-6387 Installation et Exécution du script 💻 Pré...
Provisioning Services Boot Process Diagram
...
How to Upgrade from StoreFront 2.1 to StoreFront 2.6
The sequence of steps to upgrade from StoreFront 1.2to StoreFront 2.5: 1. Upgrade from StoreFront1.2 to StoreFront2.0. 2. Upgrade from StoreFront 2.0 to StoreFront 2.5 or StoreFront 2.6. For more information see the StoreFrontlegacy product documentation. To learn more about upgrading from...
CloudBridge Virtual WAN Gateway Mode and Inline Deployment Steps
This article provides step-by-step procedure in configuring a CloudBridge Virtual WAN appliance in Gateway mode based on a sample network setup...
Error 1603 Occurs When Installing Hotfix Rollup Pack 2 on XenApp 6.0
Error 1603 occurs when installing Hotfix Rollup Pack2 on XenApp 6.0. Troubleshooting Methodology The Technical Support Engineer completedthefollowing steps to resolve the issue: Enabled msi logging and attempted the hotfix rollup pack install again. Error 1603 occurred. Examined the msi logs; the...
Best Practices to Uninstall XenApp/Presentation Server on Windows Server
This article contains best practices for uninstalling XenApp/Presentation Server 4.5 on Windows Server. Best Practices Before uninstalling any Citrix Server products, consider the following points: Ensure that all Hotfixes and Hotfix Rollup Packs are removed before uninstalling. Refer to the Hotf...
PT-2024-37333 · Unknown · Gaizhenbiao/Chuanhuchatgpt
Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240410 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing an attacker to inject malicious JavaScript code into the chat history file. When a victim uploads this file, the malicio...