14319 matches found
Apache HTTP/2 资源管理错误漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management and other functions. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by attackers to cause a denial o...
Fedora: Security Advisory for exim (FEDORA-2023-0a7690525f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-43271
Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols...
MOVEit Vulnerabilities Expose Organizations to Cyberattacks
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Critical SQL Injection vulnerabilities in Progress Softwares MOVEit Transfer product, exploited by Clop ransomware gang since May 2023, led to unauthorized access and data breaches, affecting...
CVE-2023-43696
Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...
Upgrading your Android device? Read this first
Last month, we wrote an article about what to do when upgrading your iPhone. Since then, we've received several requests to do a similar post about Android devices. Providing uniform and easy to follow instructions is a bit harder to do for Android, because there are many differences between make...
[SECURITY] Fedora 38 Update: exim-4.96.1-1.fc38
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
[SECURITY] Fedora 37 Update: exim-4.96.1-1.fc37
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
70mai a500s Access Control Error Vulnerability
70mai a500s is a smart car recorder from 70mai 70mai. A security vulnerability exists in version v1.2.119 of 70mai a500s, which can be exploited by an attacker to directly access and delete the video files of the car recorder via FTP and other protocols...
SICK APU Security Vulnerability
SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from an arbitrary file download vulnerability. The vulnerability can be exploited by an attacker to download arbitrary files from a server via HTTP requests...
PT-2023-28754 · 70Mai · 70Mai A500S
Name of the Vulnerable Software and Affected Versions: 70mai a500s version 1.2.119 Description: The issue is related to incorrect access control, allowing attackers to directly access and delete video files of the driving recorder through ftp and other protocols. Recommendations: For version...
PJSIP Resource Management Error Vulnerability
PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A resource management error vulnerability exists in versions of PJSIP prior to 2.14, which stems from a higher-level transfer being...
USDT tokens should approve to zero first otherwise it may cause other tokens to get stuck in the case of aprooveMultipleTokens
Lines of code Vulnerability details Impact Unsafe ERC20 approve that do not handle non-standard erc20 behavior. Some token contracts do not return any value. Some token contracts revert the transaction when the allowance is not zero. Proof of Concept When receiving tokens to the destination chain...
The vulnerability of the Ad hoc Transfer Module of the WS_FTP Server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Ad hoc Transfer Module of the WSFTP Server server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
NetBSD Security Vulnerabilities
NetBSD is an open source Unix-like operating system from the NetBSD Foundation. A security vulnerability exists in versions prior to NetBSD ftpd 20230930, which stems from a vulnerability that allows an attacker to disclose information about a host's file system before authenticating via the MLSD...
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
Progress WSFTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system...
CVE-2023-5402
A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network...
CVE-2023-5402
A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network...
