Hcl Technologies Hcl Traveler Companion 加密问题漏洞

Hcl Technologies Hcl Traveler Companion is an ios Iphone and Ipad application from Hcl Technologies India. It is used to read encrypted Hcl Notes emails on Apple devices. HCL Traveler Companion suffers from an encryption issue vulnerability that stems from the software's susceptibility to an iOS...

Fedora: Security Advisory for udisks2 (FEDORA-2021-55f3c0b6f1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: udisks2-2.9.4-1.fc34

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies...

Lark Technologies: Able to steal private files by manipulating response using Compose Email function of Lark

A IDOR Insecure Direct Object Reference vulnerability was found within the "Compose Email" functions of Lark. This vulnerability could have allowed malicious users to fetch the files of other users if they knew the specific file ID which was an alphanumeric value. We thank @imrannisar for reporti...

ECOA BAS controller access control error vulnerability

Ecoa Bas controller is a building automation controller from Ecoa Technologies Corp in China. Ecoa Bas controller is vulnerable to an access control error, which can be exploited by attackers to compromise administrative account credentials in clear text to cause privilege escalation...

ECOA BAS controller path traversal vulnerability

Ecoa Bas controller is a building automation controller from Ecoa Technologies Corp. in China. A path traversal vulnerability exists in Ecoa Bas controller, which can be exploited by attackers to compromise the device directory content by using the GET parameter in the file manager...

Unspecified vulnerability exists in IR615 Router (CNVD-2021-82943)

The IR615 Router is a 4G industrial router from Rimu Technologies, China. The IR615 Router has a security vulnerability that could be exploited by an attacker to obtain user credentials to enumerate passwords and emulate other application users and perform actions on their behalf...

IR615 Router File Upload Vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies, China. The IR615 Router is vulnerable to file uploads, which can be exploited by attackers to upload malicious files as an administrator...

IR615 Router has an unspecified vulnerability (CNVD-2021-82942)

The IR615 Router is a 4G industrial router from Rimu Technologies, China. The IR615 Router has a security vulnerability that could be exploited by an attacker by sending a link to the administrator to exploit the header, which constitutes the router's management portal and tricks the administrato...

Cross-site scripting vulnerability exists in IR615 Router (CNVD-2021-82945)

The IR615 Router is a 4G industrial router from Rimu Technologies, China. IR615 Router has a cross-site scripting vulnerability that could be exploited to hijack user sessions connected to the system...

IR615 Router authorization issue vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies of China. The IR615 Router is vulnerable to an authorization issue that could be exploited by an attacker to take full control of the product and execute code on the internal network to which the product is connected...

IR615 Router Cross-Site Scripting Vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies, China. IR615 Router has a cross-site scripting vulnerability that can be exploited by attackers to perform reflected cross-site scripting attacks...

IR615 Router Cross-site Request Forgery Vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies, China. IR615 Router is vulnerable to cross-site request forgery, which can be exploited by attackers to remotely execute operations on the router's management portal...

IR615 Router Cross-Site Scripting Vulnerability (CNVD-2021-82946)

The IR615 Router is a 4G industrial router from Rimu Technologies, China. IR615 Router has a cross-site scripting vulnerability that could be exploited to hijack user sessions connected to the system...

IR615 Router encryption problem vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies, China. IR615 Router is vulnerable to an encryption issue that could be exploited by attackers to intercept communications and steal sensitive information or hijack sessions...

IR615 Router has an unspecified vulnerability (CNVD-2021-82944)

The IR615 Router is a 4G industrial router from Rimu Technologies, China. The IR615 Router has a security vulnerability that could be exploited by an attacker to enumerate different user accounts...

FreeBSD : Apache httpd -- Path Traversal and Remote Code Execution (d001c189-2793-11ec-8fb1-206a8a720317)

The Apache http server project reports : critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 CVE-2021-42013. It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a...

Career Navigator talk for IT Hub College

Last week I gave a "Career Navigator" talk for the students of the IT Hub College in Moscow. By the way, this college has a very interesting practical information security program. If it is relevant for you, check it out. Ive never talked so much about myself in public. It was like giving advises...

ECOA BAS controller arbitrary file upload vulnerability

ECOA BAS controller is a BAS controller developed by Ecoa Technologies Corp in Taiwan, China. ECOA BAS controller is vulnerable to arbitrary file uploads, which can be exploited to send specially crafted URL requests to the /upload URI with the file name and rbt parameters containing The "dot"...

ECOA BAS controller hard-coded credential vulnerability

ECOA BAS controller is a BAS controller developed by Ecoa Technologies Corp in Taiwan, China. ECOA BAS controller is vulnerable to hard-coded credentials, which can be exploited by attackers to directly log in and gain administrator control privileges...