Nextcloud Code Issues Vulnerabilities

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A code issue vulnerability exists in Nextcloud Mail versions prior to 2.2.8 and prior to 3.3.0, which can be exploited by an attacker to perform a...

The vulnerability of the command-line interface (CLI) of the Microsoft Azure platform, which allows a hacker to gain access to user credentials

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials remotely...

The vulnerability of the General/vehicle/checkup/delete.php component of the Tongda OA automation tool allows a hacker to execute arbitrary SQL code.

The vulnerability of the General/vehicle/checkup/delete.php component of the Tongda OA automation tool for business processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

CVE-2023-6119

An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...

The vulnerability of the Bulkmodifications component in NagiosXI software, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Bulkmodifications component in NagiosXI software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the WP_Query class in the WordPress content management system allows attackers to expose stored user credentials.

The vulnerability of the WPQuery class in the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to access and disclose stored user credentials...

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution Vendor: Telecomunicazioni Elettro Milano TEM S.r.l. Product web page: https://www.tem-italy.it Affected version: Software version: 35.45 Webserver version: 1.7 Summary: This new line of Opera plus FM Transmitters combines very high...

Database Mess Up: 7TB of Healthcare Data Leak Affects 12 Million Patients

By Deeba Ahmed Yet another day, more unprotected data left in the Cloud without password or security measures. This is a post from HackRead.com Read the original post: Database Mess Up: 7TB of Healthcare Data Leak Affects 12 Million Patients...

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution

Summary This new line of Opera plus FM Transmitters combines very high efficiency, high reliability and low energy consumption in compact solutions. They have innovative functions and features that can eliminate the costs required by additional equipment: automatic exchange of audio sources,...

The vulnerability of the Core component of the WebLogic Server software allows a perpetrator to gain access to protected information.

The vulnerability of the Core component of the WebLogic Server software is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information...

Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity/known public exploitation Vendor : Rockwell Automation Equipment : Stratix 5800 and Stratix 5200 Vulnerabilities : Unprotected Alternate Channel, OS Command Injection 2. RISK EVALUATION Successful...

Vulnerability of Windows operating system deployment services, allowing attackers to disclose sensitive information

The vulnerability of Windows operating system deployment services is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the Microsoft Team Foundation Server project management and version control system, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the Microsoft Team Foundation Server project management and version control system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the FortiSandbox system’s threat detection and mitigation mechanism arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the FortiSandbox system’s threat detection and mitigation mechanism arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The software for resource planning in Microsoft Dynamics 365 is vulnerable due to the lack of security measures taken to protect the website structure. This vulnerability allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

The vulnerability of the distributed Git version control system for Windows lies in the lack of protection for service data, allowing a perpetrator to access confidential information.

The vulnerability of the distributed Git version control system for Windows is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to access confidential information...

The vulnerability of the Windows Deployment Services service allows a malicious individual to gain unauthorized access to confidential information.

The vulnerability of the Windows Deployment Services service in the Windows operating system is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of Microsoft Visual Studio, a software development tool, and the .NET platform lies in the lack of protection for service data, which allows attackers to gain access to confidential information.

The vulnerability of the Microsoft Visual Studio software and the .NET Core software platform is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to access confidential information...