🚨 CVE-2021-37449
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
🎖@cveNotify
GitHub
poc/IVM_5.12_XSS.md at main · 0xfml/poc
advisories/bugs/exploits/pocs etc. Contribute to 0xfml/poc development by creating an account on GitHub.
🚨 CVE-2021-37448
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
🎖@cveNotify
GitHub
poc/IVM_5.12_XSS.md at main · 0xfml/poc
advisories/bugs/exploits/pocs etc. Contribute to 0xfml/poc development by creating an account on GitHub.
🚨 CVE-2021-37447
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
🎖@cveNotify
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
🎖@cveNotify
www.nch.com.au
Telephone Conference Calling Software - Free Download
Quickly download this professional telephone conference server to quickly and easily create and use conference calling. All you need is a telephone and the internet.
🚨 CVE-2021-37446
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.
🎖@cveNotify
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.
🎖@cveNotify
www.nch.com.au
Telephone Conference Calling Software - Free Download
Quickly download this professional telephone conference server to quickly and easily create and use conference calling. All you need is a telephone and the internet.
🚨 CVE-2021-37445
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
🎖@cveNotify
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
🎖@cveNotify
www.nch.com.au
Telephone Conference Calling Software - Free Download
Quickly download this professional telephone conference server to quickly and easily create and use conference calling. All you need is a telephone and the internet.
🚨 CVE-2021-37444
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt Autodial function.
🎖@cveNotify
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt Autodial function.
🎖@cveNotify
www.nch.com.au
IVM Free Voicemail, Call Attendant & IVR Phone Software
IVM is a powerful IVR software for interactive voice response, voicemail & call attendant phone systems; supporting caller ID logging and multi-line support.
🚨 CVE-2021-37443
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
🎖@cveNotify
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
🎖@cveNotify
www.nch.com.au
IVM Free Voicemail, Call Attendant & IVR Phone Software
IVM is a powerful IVR software for interactive voice response, voicemail & call attendant phone systems; supporting caller ID logging and multi-line support.
🚨 CVE-2021-37442
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
🎖@cveNotify
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
🎖@cveNotify
www.nch.com.au
IVM Free Voicemail, Call Attendant & IVR Phone Software
IVM is a powerful IVR software for interactive voice response, voicemail & call attendant phone systems; supporting caller ID logging and multi-line support.
🚨 CVE-2021-35516
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
🎖@cveNotify
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
🎖@cveNotify
🚨 CVE-2021-35517
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.
🎖@cveNotify
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.
🎖@cveNotify
🚨 CVE-2021-31859
Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an alternative data stream.
🎖@cveNotify
Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an alternative data stream.
🎖@cveNotify
Ysoft
Build Better Ways of Working | Y Soft
Y Soft provides intelligent enterprise office solutions that help businesses and their people build better ways of working now and for the future.
🚨 CVE-2020-15496
Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.
🎖@cveNotify
Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.
🎖@cveNotify
🚨 CVE-2021-35030
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.
🎖@cveNotify
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.
🎖@cveNotify
Zyxel
Zyxel security advisory for XSS vulnerability of GS1900 series switches | Zyxel
Zyxel has released hotfixes addressing a cross-site scripting (XSS) vulnerability in the GS1900 series of switches and will include the patch in its next regular firmware update in October. Users are advised to install the applicable firmware updates for…
🚨 CVE-2021-22144
In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.
🎖@cveNotify
In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.
🎖@cveNotify
Discuss the Elastic Stack
Elasticsearch 7.13.3 and 6.8.17 Security Update
Elasticsearch Denial of Service issue (ESA-2021-15) An uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch…
🚨 CVE-2020-12681
Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.
🎖@cveNotify
Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.
🎖@cveNotify
3Xlogic
infinias Ethernet-Enabled Integrated Door Controller (eIDC) | 3xLogic
The infinias eIDC32 door controller is a compact, 2 inch PoE-enabled door controller that makes installation at the door simple and scalable.
🚨 CVE-2021-22778
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.
🎖@cveNotify
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.
🎖@cveNotify
🚨 CVE-2021-26824
DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentication and access all features and data on the USB.
🎖@cveNotify
DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentication and access all features and data on the USB.
🎖@cveNotify
Google
Home
Lab Introduction
🚨 CVE-2021-29784
IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168.
🎖@cveNotify
IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168.
🎖@cveNotify
Ibmcloud
IBM i2 Analyze information disclosure CVE-2021-29784 Vulnerability Report
IBM X-Force Exchange is a threat intelligence sharing platform enabling research on security threats, aggregation of intelligence, and collaboration with peers
🚨 CVE-2021-29770
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.
🎖@cveNotify
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.
🎖@cveNotify
Ibmcloud
IBM i2 Analyst's Notebook Premium input validation CVE-2021-29770 Vulnerability Report
IBM X-Force Exchange is a threat intelligence sharing platform enabling research on security threats, aggregation of intelligence, and collaboration with peers
🚨 CVE-2021-29769
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 202769.
🎖@cveNotify
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 202769.
🎖@cveNotify
Ibmcloud
IBM i2 Analyst's Notebook Premium information disclosure CVE-2021-29769 Vulnerability Report
IBM X-Force Exchange is a threat intelligence sharing platform enabling research on security threats, aggregation of intelligence, and collaboration with peers