4255 matches found
PT-2022-07: Insufficient authentication in Veeam Backup & Replication
The vulnerability was identified in Veeam Backup & Replication versions 9.5, 10, 11. The discovered vulnerability allows an attaker to authenticate using a NULL-session. This may lead to gaining control over the target system. Vulnerability status: Confirmed by vendor Date of vulnerability...
Internet Backbone Giant Lumen Shuns .RU
Lumen Technologies, an American company that operates one of the largest Internet backbones and carries a significant percentage of the worlds Internet traffic, said today it will stop routing traffic for organizations based in Russia. Lumens decision comes just days after a similar exit by...
Understanding How Hackers Recon
Cyber-attacks keep increasing and evolving but, regardless of the degree of complexity used by hackers to gain access, get a foothold, cloak their malware, execute their payload or exfiltrate data, their attack will begin with reconnaissance. They will do their utmost to uncover exposed assets an...
Exploit for Authentication Bypass by Capture-replay in Dingtian-Tech Dt-R004_Firmware
CVE-2022-29593 - Authentication Bypass by Capture Replay Ding...
Stack Overflow Vulnerability in TL-WDR7660 of P&L Technologies Limited (CNVD-2022-21792)
The TL-WDR7660 is a router. A stack overflow vulnerability exists in the P&L Technologies TL-WDR7660, which can be exploited by an attacker to gain server privileges...
Stack Overflow Vulnerability in TL-WDR7660 by P&L Technologies Ltd.
The TL-WDR7660 is a router. A stack overflow vulnerability exists in the P&L Technologies TL-WDR7660, which can be exploited by an attacker to gain server privileges...
OPENSUSE-SU-2022:0054-1 Security update for sphinx
This update for sphinx fixes the following issues: - CVE-2020-29050: SphinxSearch in Sphinx Technologies Sphinx allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc...
Pulian Technologies Limited Archer A54 Buffer Overflow Vulnerability
Tp-Link Archer A54 is a wireless dual-band router from Pulian Technologies Co. The Tp-Link Archer A54 router is vulnerable to a buffer overflow vulnerability, which stems from a stack overflow found in the function DM Fillobjbystr. An attacker could exploit this vulnerability to execute arbitrary...
Chinese Hackers Target Taiwan's Financial Trading Sector with Supply Chain Attack
An advanced persistent threat APT group operating with objectives aligned with the Chinese government has been linked to an organized supply chain attack on Taiwan's financial sector. The attacks are said to have first commenced at the end of November 2021, with the intrusions attributed to a...
New Critical RCE Bug Found in Adobe Commerce, Magento
Yet another zero-day bug has been discovered in the Magento Open Source and Adobe Commerce platforms, while researchers have created a working proof-of-concept PoC exploit for the recently patched CVE-2022-24086 vulnerability that came under active attack and forced Adobe to push out an emergency...
H3C SSL VPN - Username Enumeration
Exploit Title: H3C SSL VPN - Username Enumeration Exploit Author: LiquidWorm H3C SSL VPN Username Enumeration Vendor: Hangzhou H3C Technologies Co. | New H3C Technologies Co., Ltd. Product web page: https://www.h3c.com Affected version: n/a Summary: H3C SSL VPN is a secure VPN system based on SSL...
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction. Users information such as first name, last name, acount id, server uuid, email address, profile image, number, timestamps, etc can be extracted b...
Information disclosure
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction. Users information such as first name, last name, acount id, server uuid, email address, profile image, number, timestamps, etc can be extracted b...
CVE-2021-45310
CVE-2021-45310 affects Sangoma Switchvox version 102409 and is an information-disclosure vulnerability caused by improper access restriction. An unauthenticated HTTP GET to https://Switchvox-IP/main?cmd=invalid_browser (and related invalid_browse URL) can exfiltrate user data such as first/last n...
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction. Users information such as first name, last name, acount id, server uuid, email address, profile image, number, timestamps, etc can be extracted b...
Amy Zegart on Spycraft in the Internet Age
Amy Zegart has a new book: Spies, Lies, and Algorithms: The History and Future of American Intelligence. Wired has an excerpt: In short, data volume and accessibility are revolutionizing sensemaking. The intelligence playing field is leveling -- and not in a good way. Intelligence collectors are...
Rockwell Automation Allen-Bradley PowerMonitor 1000 Improper Neutralization of Input During Web Page Generation (CVE-2018-19615)
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted user's web browser to gain access to the affected device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
CVE-2021-29398
Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to browse and list the directories across the entire filesystem of the host of the web application...
CVE-2021-29393
Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters...