Google Chrome File System API信息泄露漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by the window.showSaveFilePicker function that parses and returns environment variable values to the user when passing environment variables, which can be exploited by an attacker to...

D-Link DCS-2530L Camera Unauthorized RCE 0day Vulnerability

The D-Link DCS-2530L is a camera from AUO D-Link. The D-Link DCS-2530L camera suffers from an unauthorized RCE 0day vulnerability that can be exploited by an attacker to execute arbitrary commands on the target device as root to execute arbitrary commands on the target device...

CVE-2019-11488

The CVE-2019-11488 entry concerns SimplyBook.me Enterprise prior to 2019-04-23, where an Incorrect Access Control flaw in the Account Access / Password Reset Link could allow unauthorized attackers to read/write Customer or Administrator data via a persistent HTTP GET hash link replay (demonstrat...

CVE-2017-8196

FusionSphere V100R006C00SPC102NFV has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable...