HCL Technologies HCL Sametime Information Disclosure Vulnerability

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6 that stems from a lack of external URL absorption in FaviconService, which could be exploited by an attacker to specify the external URL where the online meeting...

HCL Technologies HCL Sametime Clickjacking Vulnerability

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6 that could be exploited by attackers to conduct clickjacking attacks in conference chats...

HCL Technologies HCL Unica Platform Code Issue Vulnerability

HCL Technologies HCL Unica Platform is an enterprise automated marketing platform from HCL Technologies India.A security vulnerability exists in versions of HCL Technologies HCL Unica Platform prior to 12.1.1, which stems from an improperly configured XML parser that processing user-supplied inpu...

Zyxel Firewall ZTP Unauthenticated Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zyxel Firewall ZTP Unauthenticated Command Injection', 'Description' = %q This module exploits CVE-2022-30525, an unauthenticated remote command...

HCL Technologies HCL Sametime File Upload Vulnerability

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6. The vulnerability stems from the fact that the user SID in the application can be modified, which can be exploited to modify the SID to enable arbitrary file...

HCL Technologies HCL Verse Information Disclosure Vulnerability

HCL Technologies HCL Verse is a mobile application from HCL Technologies India that allows access to emails and life plan management.A security vulnerability exists in versions of HCL Technologies HCL Verse for Android prior to version 12.0.9, which stems from a server setup and login process in...

E.U. Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse

The European Commission on Wednesday proposed new regulation that would require tech companies to scan for child sexual abuse material CSAM and grooming behavior, raising worries that it could undermine end-to-end encryption E2EE. To that end, online service providers, including hosting services...

HCL Technologies HCL Sametime 安全漏洞

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6, which stems from a lack of effective restrictions on sensitive information on websites, which could be exploited by attackers to gain access to sensitive...

HCL Technologies HCL Sametime 授权问题漏洞

HCL Sametime, a conferencing solution from HCL Technologies, is vulnerable to an authorization issue in HCL Sametime version 11.6, which stems from an application where users can read group conversations without actively participating, which could be exploited to read sensitive information...

Your Phone May Soon Replace Many of Your Passwords

Apple, Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to sign in to websites or online services. Experts say the changes should help defeat many types of...

CVE-2022-28507

Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting XSS via Dragon path router admin page...

CVE-2022-28507

Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting XSS via Dragon path router admin page...

Cross site scripting

Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting XSS via Dragon path router admin page...

CVE-2022-28507

Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting XSS via Dragon path router admin page...

CVE-2022-28507

CVE-2022-28507 affects Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 v1.0. The vulnerability is described as a Cross Site Scripting (XSS) issue on the Dragon Path router admin page. The connected documents do not provide technical specifics about the root cause, affected compone...

HCL Technologies HCL BigFix 安全漏洞

HCL BigFix Platform is an endpoint security management platform. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Client. An attacker exploits the vulnerability to perform elevation of privilege...

HCL Technologies Notes 安全漏洞

HCL Technologies Notes is an email software from HCL Technologies India. The software supports access to emails, calendars, contacts, etc. A security vulnerability exists in the HCL Technologies Notes 11.0 - 11.0.1 FP4 client, which stems from vulnerability to a group chat load script on restart...

Dragon Path Technologies Bharti Airtel Routers 跨站脚本漏洞

Dragon Path Technologies Bharti Airtel Routers is a series of wireless routers from Dragon Path Technologies Hong Kong, China. A security vulnerability exists in Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0, which originates from vulnerability to cross-site scriptin...

HCL Technologies BigFix Platform 安全漏洞

HCL Technologies BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL Technologies BigFix Platform that stems from...

FBI warns food and agriculture to brace for seasonal ransomware attacks

The Federal Bureau of Investigation FBI recently released a Private Industry Notification warning agriculture cooperatives also known as "farmers co-ops" of the looming danger of well-timed ransomware attacks. The agency warns that during the critical planting and harvesting seasons, attacks coul...