Month: October 2023

Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras. Read More

Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050...

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute...

It was discovered that Exim incorrectly handled validation of user-supplied data, which could lead to memory corruption. A remote attacker could possibly use this issue...

FEDORA-2023-6b4d3ca766 Packages in this update: netconsd-0.4-1.fc38 Update description: Update to 0.4 Read More

Posted by Egidio Romano on Oct 26 ------------------------------------------------------------------------------- SugarCRM <= 13.0.1 (set_note_attachment) Unrestricted File Upload Vulnerability ------------------------------------------------------------------------------- [-] Software Link: https://www.sugarcrm.com [-] Affected Versions: Version...

Posted by Egidio Romano on Oct 26 ---------------------------------------------------------------------------- SugarCRM <= 13.0.1 (GetControl) Server-Side Template Injection Vulnerability ---------------------------------------------------------------------------- [-] Software Link: https://www.sugarcrm.com [-] Affected Versions: Version...