Weak password vulnerability in S7706 and S9303 of Huawei Technologies Co.

Huawei Technologies Limited operates in the areas of switches, transmission equipment, data communication equipment, broadband multimedia equipment, power supply, wireless communication equipment, microelectronic products and software. A weak password vulnerability exists in S7706 and S9303 of...

Privilege escalation

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system...

CVE-2021-26758

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system...

Critical Auth Bypass Bug Found in VMware Data Center Security Product

A critical vulnerability in the VMware Carbon Black Cloud Workload appliance could be exploited to bypass authentication and take control of vulnerable systems. Tracked as CVE-2021-21982, the flaw is rated 9.1 out of a maximum of 10 in the CVSS scoring system and affects all versions of the produ...

CVE-2020-9892

creationtimestamp| type| source ---|---|--- 2021-04-04 15:57:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2966...

Building a Fortress: 3 Key Strategies for IT Security

Last year and early spring has been undoubtedly tough for cybersecurity. We’ve seen one of – if not the – worst cyberattacks on U.S. companies and government agencies in the last decade; and the ProxyLogon Microsoft Exchange vulnerabilities continue to be dangerous. Knowing just how vulnerable ma...

Decided to move on from your NGAV/EDR? A Guide for Small Security Teams to What's Next

You're fully aware of the need to stop threats at the front door and then hunt any that got through that first gate, so your company installed an EPP/ EDR solution. But like most companies, you've already come across its shortcoming – and these are amplified since you have a small security team...

VMware vRealize Operations Manager SSRF和文件读取漏洞（CVE-2021-21975 CVE-2021-21983）

Description On March 30, 2021, VMware published a security advisory for CVE-2021-21975 and CVE-2021-21983, two chainable vulnerabilities in its vRealize Operations Manager product. CVE-2021-21975 is an unauthenticated server-side request forgery SSRF, while CVE-2021-21983 is an authenticated...

VMware vRealize Operations updates address Server Side Request Forgery and Arbitrary File Write vulnerabilities (CVE-2021-21975, CVE-2021-21983)

1. Impacted Products VMware vRealize Operations VMware Cloud Foundation vRealize Suite Lifecycle Manager 2. Introduction Multiple vulnerabilities in VMware vRealize Operations were privately reported to VMware. Patches and Workarounds are available to address these vulnerabilities in impacted...

Weak password vulnerability in SRG3200 of Huawei Technologies Co.

The SRG3200 router is a high-performance enterprise-class router from Huawei Technologies Co. A weak password vulnerability exists in the Huawei Technologies SRG3200, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in Huawei Technologies Ltd Secoway USG2250

Secoway USG2250 is a firewall product from Huawei Technologies Co. A weak password vulnerability exists in the Huawei Technologies Co. Secoway USG2250, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in ER5200G2, ER3100G2, ER3260G2 of Xinhua San Technologies Co.

ER5200G2, ER3100G2, ER3260G2 are the new generation of high-performance enterprise routers launched by Xinhua San Technologies Co. A weak password vulnerability exists in the ER5200G2, ER3100G2, ER3260G2 of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive...

Weak Password Vulnerability in H3C NER324

H3C NER324 is a new-generation enterprise-grade Gigabit high-performance router launched by Xinhua San Technologies Co. It is targeted at the market of Internet cafes, sing-along bars, digital movie theaters and other cultural industries. The H3C NER324 suffers from a weak password vulnerability...

Weak Password Vulnerability in Various Products of Xinhua San Technologies Co.

The ER5100 is a high-performance Gigabit downstream router. the ER5200G2 is a next-generation enterprise-class Gigabit high-performance router. the GR5200 is a next-generation high-performance enterprise-class router. A weak password vulnerability exists in various products of Xinhua San...

Weak Password Vulnerability in USG2130 at P&L Technologies Ltd.

The TL-ER2220G is a dual-core, multi-WAN port Gigabit enterprise VPN router from P&L Technologies. A weak password vulnerability exists in USG2130 of P&L Technology Limited, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in WX2540H of Xinhua San Technologies Co.

The WX2540H is a wireless controller. A weak password vulnerability exists in the WX2540H of Xinhua San Technologies Limited, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in WX2560H of Xinhua San Technologies Co.

WX2560H is a gateway-type wireless controller independently developed by Xinhua San Technologies Co. A weak password vulnerability exists in the WX2560H of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Various H3C MSR Series Routers

The MSR series router is an enterprise router from Xinhua San Technologies Co. A weak password vulnerability exists in various H3C MSR series routers, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Multiple Wireless Controller Products of Xinhua San Technologies Co.

H3C WX3510H, H3C WX2510H, H3C WX3508H, H3C WX3540H are wireless controllers from Xinhua San Technology Co. A weak password vulnerability exists in several wireless controller products of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in WX3520H of Xinhua San Technologies Co.

The WX3520H is an enterprise-class operational wireless controller. A weak password vulnerability exists in the WX3520H of Xinhua San Technologies Limited, which can be exploited by an attacker to obtain sensitive information...