Pudding-Bot 信任管理问题漏洞

PuddingBot is a group management bot. PuddingBot is vulnerable to a trust management issue, which can be exploited by attackers to obtain a bot token in main.py...

nodejs 信任管理问题漏洞

nodejs is a JavaScript runtime environment based on the ChromeV8 engine by wrapping the Chromev8 engine as well as using event-driven and non-blocking IO applications to make the development of high-performance background applications in Javascript possible. There is a trust management issue...

Microsoft Windows 信任管理问题漏洞

Certifi is a Python SSL certificate from Certifi Open Source. Microsoft Windows Certificates is vulnerable to a trust management issue. The following products and editions are affected: Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 20H...

Siemens SICAM A8000 CP-8000 信任管理问题漏洞

The SICAM A8000 is used for automation applications in all areas of remote control and energy supply. A hard-coded credentials vulnerability exists in the Siemens SICAM A8000, which can be exploited by an attacker to enable the debug port using default credentials...

Align your security and network teams to Zero Trust security demands

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Security Product Marketing Manager Natalia Godyla talks with Jennifer Minella, Founder and...

Align your security and network teams to Zero Trust security demands

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Security Product Marketing Manager Natalia Godyla talks with Jennifer Minella, Founder and...

make-ca 安全漏洞

Make-Ca is a utility program that provides and manages complete Pki configurations. A security vulnerability exists in make-ca that stems from the fact that, starting with versions prior to 0.9 and 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates as...

Shopware Trust Management Issue Vulnerability

Shopware is a suite of open source e-commerce software from the German company Shopware.A trust management issue vulnerability exists in versions of Shopware prior to 5.7.7, which stems from the fact that shopware does not invalidate a user's session when a password is changed. An attacker could...

D-Link DIR-2640 trust management issue vulnerability

D-Link DIR-2640 is a high-powered Wi-Fi router from D-Link, a Taiwan-based company. D-Link DIR-2640 Quagga 1.11B02 and previous versions are vulnerable to a trust management issue, which stems from the use of default hard-coded credentials for the service, and can be exploited by remote attackers...

Trendnet AC2600 TEW-827DRU Trust Management Issue Vulnerability

The Trendnet AC2600 TEW-827DRU is a wireless router that has a security vulnerability that could be exploited by attackers to back up and restore device configurations through the management web interface. The devices are encrypted using the hard-coded password "12345678"...

2021 in Review, Part 3: 5 Things Security Professionals Were Discussing this Year

Today, everyone is talking about CVE-2021-44228, and with good reason. But before that, here were five of the issues that dominated virtual “water cooler talk” in 2021: 5. Data security in the cloud Champion heavyweight boxer Mike Tyson said, “Everyone has a plan until they get punched in the...

D-Link DIR-2640 信任管理问题漏洞

D-Link DIR-2640 is a high-powered Wi-Fi router from D-Link, a Taiwan-based company. D-Link DIR-2640 Quagga 1.11B02 and previous versions are vulnerable to a trust management issue, which stems from the use of default hard-coded credentials for the service, and can be exploited by remote attackers...

CVE-2021-23727

CVE-2021-23727 affects Celery before 5.2.2. An attacker who can access or manipulate task metadata stored in a backend could trigger a stored command injection by deserializing backend metadata. Documented impact is remote command execution when the backend data can be crafted or intercepted by a...

5 Cybersecurity Trends to Watch in 2022

No one could have predicted the sheer chaos the cybersecurity industry would experience over the course of 2021. Record-annihilating numbers of ransomware attacks, SolarWinds’ supply-chain havoc and most recently, the discovery of Log4j by…Minecraft gamers. All of it would have sounded too wild f...

Solarwinds Web Help Desk 信任管理问题漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and other features. SolarWinds Web Help Desk suffers from a trust management issue vulnerability...

e2guardian 信任管理问题漏洞

e2guardian is a web content filter that works in proxy, transparent or icap server mode. A trust management issue vulnerability exists in e2guardian that stems from e2guardian v5.4.x = v5.4.3r being affected by a lack of SSL certificate validation in the SSL MITM engine. In standalone mode i.e.,...

Fresenius Kabi Agilia Connect Infusion System Trust Management Issue Vulnerability

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.Fresenius Kabi Agilia Connect Infusion System is vulnerable to a trust management issue that could be exploited by attackers to gain privileges for all installations of the software...

Apache Sling Commons Messaging Mail Trust Management Issue Vulnerability

Apache Sling Commons Messaging Mail is an open source messaging mail service from the Apache Foundation in the U.S. A trust management issue vulnerability exists in Apache Sling Commons Messaging Mail 1.0.0, which stems from the Apache Sling Commons Messaging Mail provides a simple layer on top o...

hennepintheatretrust.org Cross Site Scripting vulnerability OBB-2308701

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fresenius Kabi Agilia Connect Infusion System 信任管理问题漏洞

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.Fresenius Kabi Agilia Connect Infusion System is vulnerable to a trust management issue that could be exploited by attackers to gain privileges for all installations of the software...