The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring, due to deficiencies in access control, allows unauthorized access by attackers to configuration files.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to configuration files...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to insufficient validation of input data, allows attackers to exploit their privileges.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary codes.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Delta Electronics InfraSuite Device Master software in real-time device monitoring, related to errors in code generation, allows a perpetrator to execute arbitrary codes.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by running Lua-based scripts...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data stored in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created UDP packets...

Design/Logic Flaw

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

CVE-2023-22497

Netdata CVE-2023-22497 concerns a streaming configuration flaw where a valid MACHINE_GUID could be used as an API key in stream.conf, allowing non-trusted users to access parent/child Netdata Agents. Affects Netdata agents that expose streaming functionality; attacker could leverage this to acces...

CVE-2023-22496

CVE-2023-22496 affects Netdata. An attacker able to establish a streaming connection can manipulate a health alert’s non-sanitized argument (registry_hostname) to cause the Netdata agent to execute arbitrary commands on the remote host as the netdata user. This is triggered during health_alarm_ex...

Real-Time Risk Mitigation in Google Cloud Platform

With Google Cloud Next happening this week, there’s been some recent water cooler talk - okay, informal, ad hoc Zoom calls - where discussions about what makes Google Cloud Platform GCP unique when it comes to security. A few specific differences have popped up here and there default data...

GitLab Security Issues: Six Months of Vulnerabilities

Have you ever thought the most popular CI/CD platform – GitLab – may have security issues? In fact, it is inevitable with such a massive infrastructure. Don’t worry! The platform is still reasonably secure: it scores well over 700 on BitSight, monitors alerts in real-time, and addresses them...

Schneider Electric Geo SCADA Mobile Information Disclosure Vulnerability

Schneider Electric Geo SCADA Mobile is a mobile extension from Schneider Electric, a French company. It provides real-time remote access to critical SCADA data, allowing system users to monitor performance while "on the go," increasing employee productivity and improving overall system performanc...

Flower Denial of Service Vulnerability

Flower is a Web-based, real-time monitoring and management of Celery distributed task queues. A denial of service vulnerability exists in the May 2, 2022 version of Flower and prior versions, which stems from being vulnerable to OAuth authentication bypass. An attacker can use this vulnerability ...

Zphisher-GUI-Back_office - A Zphisher GUI Back-Office Plugin

DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,or in any other way utilizing this in a wrong way. This Tool is made for educational purposes only. Do not attempt to viola...

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-36026)

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-36029)

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-36025)

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-36022)

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...