PT-2023-31261

Name of the Vulnerable Software and Affected Versions Zebra Technologies ZTC ZT410-203dpi ZPL printer affected versions not specified Description A vulnerability has been found that allows an attacker on the same network as the printer to bypass authentication. This is achieved by sending a...

HCL Technologies HCL Digital Experience Cross-Site Scripting Vulnerability

HCL Technologies HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies, USA. A security vulnerability exists in HCL Technologies HCL Digital Experience. The vulnerability is exploited by attackers to perform cross-site scripting attack...

CVE-2023-4957: Authentication Bypass Using an Alternate Path or Channel

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

HCL Technologies BigFix Patch Management Security Vulnerability

HCL Technologies BigFix Patch Management is a comprehensive patch management solution from HCL Technologies, Inc. designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. HCL Technologies BigFix Patch Management has a...

DakshSCRA - Source Code Review Assist

Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providing a well-structured and organized approach for code reviewers. Rather than indiscriminately flagging everything as a potential issue, Daksh SCRA promotes thoughtful analysis,...

PT-2023-29149 · Imagination Technologies · Imagination Gpu

Name of the Vulnerable Software and Affected Versions: Imagination GPU devices versions 2018 and later Description: The issue allows for cross-origin pixel-stealing attacks against certain functions in the SVG Filter specification, such as feTurbulence and feBlend. This can enable attackers to...

Zero Trust Adoption: Tips to Win Over Leadership

Implementing Zero Trust can be difficult due to outdated systems, employee resistance, and cost. Yet, the benefits outweigh the challenges. It is key to use a platform that combines multiple security technologies to simplify IT and risk assessment, proper planning, and getting security buy-in fro...

Taskhub 2.8.7 SQL Injection Vulnerability

Exploit Title: taskhub 2.8.7 - SQL Injection Exploit Author: CraCkEr Vendor: Infinitie Technologies Vendor Homepage: https://www.infinitietech.com/ Software Link: https://codecanyon.net/item/taskhub-project-management-finance-crm-tool/25685874 Demo: https://taskhub.company/auth Tested on: Windows...

CVE-2018-4411

creationtimestamp| type| source ---|---|--- 2023-09-05 20:16:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/205...

CVE-2023-33325 WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.1 versions...

CVE-2023-33325

CVE-2023-33325 (Leyka plugin for WordPress) : Unauth. Reflected Cross-Site Scripting in Leyka versions = 3.30.2 (Patch indicates fix in 3.30.2). Other entries corroborate vulnerability details and patch status. If using

Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL

Overview Some of the Windows kernel drivers provided by Phoenix Technologies Inc. is vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-35841. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...

Trane Thermostats

1. EXECUTIVE SUMMARY ​CVSS v3 6.8 ​ATTENTION: Low attack complexity ​Vendor: Trane ​Equipment: XL824, XL850, XL1050, and Pivot thermostats ​Vulnerability: Injection 2. RISK EVALUATION ​Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as root...

Command Execution Vulnerability in TL-FW5600 and TL-FW6300 of P&L Technologies Ltd.

The TL-FW5600 and TL-FW6300 are firewall products from P&L Technologies. A command execution vulnerability exists in the TL-FW5600 and TL-FW6300 from P&L Technologies Ltd. that can be exploited by an attacker to execute arbitrary system commands...

Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this...

MicroWorld Technologies eScan Anti-Virus has a security vulnerability

MicroWorld Technologies eScan Anti-Virus is an Internet security solution from MicroWorld Technologies, USA. It provides virus protection for enterprise and home SOHO users. A security vulnerability exists in MicroWorld Technologies eScan Anti-Virus version 7.0.32, which originates from an...

HCL Technologies Traveler Companion Information Disclosure Vulnerability

HCL Technologies Traveler Companion is an ios Iphone and Ipad application from HCL Technologies, USA. Used to read encrypted Hcl Notes emails on Apple devices. An information disclosure vulnerability exists in HCL Technologies Traveler Companion, which can be exploited by attackers to obtain...

HCL Technologies Traveler To Do Information Disclosure Vulnerability

HCL Technologies Traveler To Do brings HCL Notes To Do feature to your iPhone, iPad or iPod Touch. HCL Technologies Traveler To Do suffers from an information disclosure vulnerability, which is caused due to a flaw in the Application Transfer Security ATS settings. An attacker can exploit this...

HCL Technologies Traveler Companion security vulnerabilities

HCL Technologies Traveler Companion is an ios Iphone and Ipad application from HCL Technologies, USA. Used to read encrypted Hcl Notes emails on Apple devices. An information disclosure vulnerability exists in HCL Technologies Traveler Companion, which can be exploited by attackers to obtain...

HCL Technologies Traveler Companion security vulnerabilities

HCL Technologies Traveler To Do brings HCL Notes To Do feature to your iPhone, iPad or iPod Touch. HCL Technologies Traveler To Do suffers from an information disclosure vulnerability, which is caused due to a flaw in the Application Transfer Security ATS settings. An attacker can exploit this...