The vulnerability of the Saperion Web Client web application lies in its lack of access control mechanisms, which allows attackers to execute arbitrary code.

The vulnerability of the Saperion Web Client web application is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges remotely...

How to Change Veeam ONE Web Client Port

Purpose This article documents the procedure for changing the port used by the Veeam ONE Web Client, which by default is 1239. Solution Desktop Shortcut Not Automatically Updated This procedure does not update the Veeam ONE Web Client shortcut on the desktop C:\Users\Public\Desktop. Part 1: Updat...

uTorrent Users Warned of Remote Code Execution Vulnerability

Google Project Zero researchers are warning of two critical remote code execution vulnerabilities in popular versions of BitTorrent’s web-based uTorrent Web client and its uTorrent Classic desktop client. According to researchers, the flaws allow a hacker to either plant malware on a user’s...

CVE-2018-2364

SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting XSS vulnerability...

Remote code execution

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

Design/Logic Flaw

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293

Hyland Saperion Web Client (v7.5.2 83166) contains an Arbitrary File Read vulnerability. The CVE-2018-6293 entry is supported by multiple connected documents (e.g., CNVD and NVD) that describe information disclosure via reading arbitrary files. CVSS metrics indicate Confidentiality impact HIGH (C...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

CVE-2018-6292 affects Saperion Web Client version 7.5.2 (build 83166). The NVD entry documents a Remote Code Execution with network attack vector, low complexity, no privileges required, and no user interaction, leading to high impact on confidentiality, integrity, and availability. CVSSv3.0 base...

CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292: Undefined Security Weakness

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293: Exposure of Sensitive Information to an Unauthorized Actor

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

Nokia VitalQIP Web Client Detection

Binary data vitalqipwebclientdetect.nbin...

VMware Issues 3 Critical Patches for vSphere Data Protection

VMware, a Dell Technologies subsidiary, released several patches Tuesday fixing critical vulnerabilities affecting its vSphere cloud computing virtualization platform. The bugs address three vulnerabilities in VMware’s vSphere Data Protection VDP, a backup and recovery solution used with its...

OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)

It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with...

OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)

It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additiona...