CVE-2021-28271

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

Privilege escalation

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

CVE-2021-28271

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

CVE-2021-28271

Mode C: CVE-2021-28271 affects Soyal Technologies SOYAL 701Server 9.0.1. The issue is an elevation of privileges due to improper permissions: the executable can be replaced by a user with authenticated/Everyone Full (F) rights. Root cause is improper access controls on the executable, enabling an...

Weak Password Vulnerability in RM1800-35(V3) of Mapletree Technology Co.

RM1800-35V3 is a router product from Mapletree Technology Co. The RM1800-35V3 from MyPlanet Technologies Co., Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-23365

CVE-2021-23365 affects github.com/tyktechnologies/tyk-identity-broker (pre-1.1.1). Root cause is insecure XML handling by the Go XML parser during encoding/decoding, permitting authentication bypass of SAML authentication. Impact is partial confidentiality/integrity concerns with the authenticati...

Weak password vulnerability in TP-LINK TL-WR749N router

P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WR749N router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

Weak password vulnerability in TP-LINK TL-WR1042ND router

P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WR1042ND router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

Weak password vulnerability in TP-LINK TL-WR743ND router

P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WR743ND router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

Dell Technologies Dell PowerScale OneFS Encryption Issue Vulnerability

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An encryption issue vulnerability exists in Dell PowerScale OneFS versions 8.1.0 through 9.1.0, which stems from a vulnerability...

Dell Technologies Dell PowerScale OneFS Operating System Command Injection Vulnerability

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An operating system command injection vulnerability exists in Dell PowerScale OneFS versions 8.1.0 through 9.1.0 that allows...

Lark Technologies: Improper Access Control on Lark Footer Feature

Due to improper access control within Lark's footer feature, an attacker could have potentially accessed private files. We thank @imrannisar for reporting this to our team and confirming the resolution...

Unauthorized Access Vulnerability in Huawei Technologies Co. web-based network management system

Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider. An unauthorized access vulnerability exists in Huawei Technologies web-based network management system, which can be exploited by attackers to obtain sensitive information...

Lark Technologies: Non privileged user is able to approve his own app himself leading to mass privilege escalations.

A privilege escalation vulnerability was identified in Lark which could have potentially allowed an attacker to approve the apps in the same tenant by bypassing the admin approval. We thank @imrannisar for reporting this to our team...

Weak Password Vulnerability in H3C Switch S5120-28P-HPWR-SI Management Platform

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking, 5G, security, etc., and provides one-stop digital solutions including cloud computing, big data, artificial intelligence, industrial internet, information security,...

Weak Password Vulnerability in AR Web Management Platform

Huawei Technologies Limited operates in the areas of switches, transmission equipment, data communication equipment, broadband multimedia equipment, power supply, wireless communication equipment, microelectronic products and software. A weak password vulnerability exists in the AR Web management...

Unauthorized Access Vulnerability in Clinical Browsing System of Bluebonnet Technologies Inc.

Bluebonnet Technology Co., Ltd. is a well-known medical information technology solution provider, focusing on the field of medical information technology, product development, sales and service as one of the national high-tech enterprises. An unauthorized access vulnerability exists in the clinic...

Information Leakage Vulnerability in Web-based Network Management System of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is committed to becoming a trusted partner for customers' business innovation and digital transformation. An information leakage vulnerability exists in the web-based network management system of Xinhua San Technologies Limited, which can be exploited by attackers ...

Unauthorized Access Vulnerability in web-based network management system of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is committed to becoming a trusted partner for customers' business innovation and digital transformation. An unauthorized access vulnerability exists in the web-based network management system of Xinhua San Technologies Limited, which can be exploited by attackers ...

Gamifying machine learning for stronger security and AI models

To stay ahead of adversaries, who show no restraint in adopting tools and techniques that can help them attain their goals, Microsoft continues to harness AI and machine learning to solve security challenges. One area we’ve been experimenting on is autonomous systems. In a simulated enterprise...