PT-2023-6214 · South River Technologies · Titan Mft +1

Name of the Vulnerable Software and Affected Versions: South River Technologies' Titan MFT and Titan SFTP servers affected versions not specified Description: A session fixation issue allows an attacker to bypass server authentication by tricking an administrator into authorizing a session ID of...

HCL Technologies BigFix Insights for Vulnerability Remediation (IVR) Weak Encryption Vulnerability

HCL Technologies BigFix Insights is a U.S.-based company that accelerates risk identification and decision making through elevated views of endpoint queue data, rich reporting, and integration with existing business intelligence tools. HCL Technologies BigFix Insights for Vulnerability Remediatio...

CVE-2023-4957

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

Authentication flaw

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

CVE-2023-4957 Authentication Bypass on Zebra ZTC

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

CVE-2023-4957

CVE-2023-4957 affects Zebra Technologies ZTC industrial printers (ZT410) and GK420d desktop models. A authentication-bypass flaw allows an attacker on the same network to alter web-page credentials by sending a crafted POST to setvarsResults.cgi when the printer’s protected mode is disabled. Repo...

CVE-2023-4957 Authentication Bypass on Zebra ZTC

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

HCL Technologies HCL Digital Experience Cross-Site Scripting Vulnerability

HCL Technologies HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies, USA. A security vulnerability exists in HCL Technologies HCL Digital Experience. The vulnerability is exploited by attackers to perform cross-site scripting attack...

HCL Technologies BigFix Patch Management Security Vulnerability

HCL Technologies BigFix Patch Management is a comprehensive patch management solution from HCL Technologies, Inc. designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. HCL Technologies BigFix Patch Management has a...

DakshSCRA - Source Code Review Assist

Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providing a well-structured and organized approach for code reviewers. Rather than indiscriminately flagging everything as a potential issue, Daksh SCRA promotes thoughtful analysis,...

PT-2023-29149 · Imagination Technologies · Imagination Gpu

Name of the Vulnerable Software and Affected Versions: Imagination GPU devices versions 2018 and later Description: The issue allows for cross-origin pixel-stealing attacks against certain functions in the SVG Filter specification, such as feTurbulence and feBlend. This can enable attackers to...

Zero Trust Adoption: Tips to Win Over Leadership

Implementing Zero Trust can be difficult due to outdated systems, employee resistance, and cost. Yet, the benefits outweigh the challenges. It is key to use a platform that combines multiple security technologies to simplify IT and risk assessment, proper planning, and getting security buy-in fro...

Taskhub 2.8.7 SQL Injection Vulnerability

Exploit Title: taskhub 2.8.7 - SQL Injection Exploit Author: CraCkEr Vendor: Infinitie Technologies Vendor Homepage: https://www.infinitietech.com/ Software Link: https://codecanyon.net/item/taskhub-project-management-finance-crm-tool/25685874 Demo: https://taskhub.company/auth Tested on: Windows...

CVE-2018-4411

creationtimestamp| type| source ---|---|--- 2023-09-05 20:16:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/205...

CVE-2023-33325 WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.1 versions...

CVE-2023-33325

CVE-2023-33325 (Leyka plugin for WordPress) : Unauth. Reflected Cross-Site Scripting in Leyka versions = 3.30.2 (Patch indicates fix in 3.30.2). Other entries corroborate vulnerability details and patch status. If using

Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL

Overview Some of the Windows kernel drivers provided by Phoenix Technologies Inc. is vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-35841. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...

Trane Thermostats

1. EXECUTIVE SUMMARY ​CVSS v3 6.8 ​ATTENTION: Low attack complexity ​Vendor: Trane ​Equipment: XL824, XL850, XL1050, and Pivot thermostats ​Vulnerability: Injection 2. RISK EVALUATION ​Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as root...

Command Execution Vulnerability in TL-FW5600 and TL-FW6300 of P&L Technologies Ltd.

The TL-FW5600 and TL-FW6300 are firewall products from P&L Technologies. A command execution vulnerability exists in the TL-FW5600 and TL-FW6300 from P&L Technologies Ltd. that can be exploited by an attacker to execute arbitrary system commands...

Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this...