An update that fixes one vulnerability is now available. Description: This update for python-M2Crypto fixes the following issues: - CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA ...
Continue Reading
22 июля, 2022
 The shift towards cloud and [cloud-native application architectures]() represe ...
Continue Reading
22 июля, 2022
Under certain circumstances an unauthenticated user could access the the web API for Metasys ADS/ADX/OAS 10 versions prior to 10.1.6 and 11 versions prior to 11.0.2 and enumerate users.Read More ...
Continue Reading
22 июля, 2022
Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a member of an organization could craft an API call that grants organization administra ...
Continue Reading
22 июля, 2022
Post ContentRead More ...
Continue Reading
21 июля, 2022
## 1. EXECUTIVE SUMMARY * **CVSS v3 5.3** * **ATTENTION:** Exploitable remotely/low attack complexity * **Vendor:** Johnson Controls, Inc * **Equipment:** Metasys ADS, ADX, OAS with MUI * ** ...
Continue Reading
21 июля, 2022
It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that ...
Continue Reading
21 июля, 2022
Post ContentRead More ...
Continue Reading
21 июля, 2022
Back to Main
