The vulnerability of the OTRS ticket request review screen’s display, related to the lack of protective measures for the website structure, allows attackers to access confidential data.

The vulnerability of the OTRS ticket request review screen relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created email...

The vulnerability of the Drupal CMS system’s kernel, related to the lack of protective measures for website structures, allows attackers to compromise data integrity.

The vulnerability of the Drupal CMS system’s kernel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

The vulnerability of the text file viewing tool in the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structure. This allows attackers to compromise data integrity.

The vulnerability of the text file viewing tool in the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to compromise the integrity o...

The vulnerability of the software used to implement the hypertext environment in the Centreon IT infrastructure monitoring software allows a hacker to execute arbitrary SQL commands.

The vulnerability of the software for implementing the hypertext environment in the Centreon IT infrastructure monitoring software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands...

The vulnerability in the tce_select_mediafile.php function of the TCExam electronic examination system allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability in the tceselectmediafile.php file of the TCExam electronic examination system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

The vulnerability of the electronic examination system TCExam arises from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the electronic examination system TCExam exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially...

Path traversal

SharpCompress is a fully managed C library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal. SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is set to true in options. In order to...

Adobe InDesign TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

The vulnerability of the Chamilo LMS system for electronic teaching and content management arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary codes.

The vulnerability of the main/social/search.php and main/inc/lib/social.lib.php functions of the Chamilo LMS e-learning and content management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the Calendar Event Multi View plugin of the WordPress content management system, related to the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Calendar Event Multi View plugin in the WordPress content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Fantastic Blog CMS content management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Fantastic Blog CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the search.php script...

The vulnerability of the core/admin/profil.php function in the PluXML content management system allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the core/admin/profil.php function in the PluXML content management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protecte...

How Groove Gang is Shaking up the RAAS to Empower Affiliates

ARCHIVED STORY How Groove Gang is Shaking up the Ransomware-as-a-Service Market to Empower Affiliates By Max Kersten, John Fokker and Thibault Seret · September 08, 2021 Co-authored with Intel471 and McAfee Enterprise Advanced Threat Research ATR would also like to thank Coveware for its...

The vulnerability of the PHP-Fusion CMS system, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary code.

The vulnerability in the /administration/settingsregistration.php function of the PHP-Fusion CMS system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely by using a specially created...

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system for small and medium-sized businesses lies in the lack of security measures for the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created...

The vulnerability of the phpList mailing list management software lies in the lack of security measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the phpList mailing list management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by creating a new username in the “Login Name” field of the...

The vulnerabilities of BIG-IP’s access control and remote authentication mechanisms (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) are related to the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerabilities of BIG-IP access control and remote authentication mechanisms LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to perfor...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2021-7633 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Edge. Exploitation of this issue may allow a remote attacker to elevate their...

CVE-2021-36079

Adobe Bridge version 11.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...