Fortinet FortiPortal 安全漏洞

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. A command injection vulnerability exists in Fortinet FortiPortal, which can be exploited b...

PT-2023-8080

Name of the Vulnerable Software and Affected Versions FortiPortal versions 7.0.0 through 7.2.0 Description The issue is related to an improper neutralization of special elements used in a command, which may allow a remote authenticated attacker with at least R/W permission to execute unauthorized...

SUSE CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

CVE-2021-42539

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

Design/Logic Flaw

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

PT-2021-23617

Name of the Vulnerable Software and Affected Versions Product affected versions not specified Description The issue concerns a missing permission validation on system backup restore. This could potentially lead to account takeover and unapproved settings changes. Recommendations At the moment,...

CVE-2021-42539: Missing Authentication for Critical Function

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

SINEMA Server 访问控制错误漏洞

Siemens SINEMA Server is a software developed for industrial applications by Siemens, Germany. It enables you to fully visualize and monitor your network. Siemens SINEMA Server has a security vulnerability that could be exploited by an attacker to obtain encoded system configuration backup files...

A New Program for Your Peloton – Whether You Like It or Not | McAfee Blogs

ARCHIVED STORY A New Program for Your Peloton – Whether You Like It or Not Sam Quinn · JUN 15, 2021 Executive Summary For those that are not familiar with Peloton, it is a brand that has combined high end exercise equipment with cutting-edge technology. Its products are equipped with a large tabl...

Patch Tuesday, Good Riddance 2020 Edition

Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load. Nine of the 58 security vulnerabilities addressed this month earned Microsofts most-dire "critical" label, meaning they can be abused by malware or miscreants to...

CVE-2019-7178

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...

CVE-2019-7178

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...

Privilege escalation

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...

CVE-2019-7178

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...

CVE-2019-7178

CVE-2019-7178 affects Pexip Infinity prior to 20.1, enabling privilege escalation by restoring a system backup. Connected sources confirm the vulnerability text and vendor advisories (Red Hat entry reiterates the same description). The exact root cause, vulnerable components, impacted configurati...

CVE-2019-7178: Improper Input Validation

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup...

PT-2020-11233

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 20.1 Description The issue allows for privilege escalation by restoring a system backup. Recommendations For versions prior to 20.1, update to version 20.1 or later to resolve the issue...

How to Free Recover Deleted Files on Your Mac

There are many scenarios where you would want to recover deleted data from your Mac. These deleted files could be your important photos, official documents, financial records, etc. Loss of such data can cause you unnecessary emotional and financial harm. However, you can make use of data recovery...

[SECURITY] Fedora 31 Update: timeshift-20.03-1.fc31

Timeshift for Linux is an application that provides functionality similar to the System Restore feature in Windows and the Time Machine tool in Mac OS. Timeshift protects your system by taking incremental snapshots of the file system at regular intervals. These snapshots can be restored at a late...

CVE-2019-16155

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more...