Apple Security Advisory 2022-10-27-5
Apple Security Advisory 2022-10-27-6
Apple Security Advisory 2022-10-27-7
Apple Security Advisory 2022-10-27-8
Siemens APOGEE PXC / TALON TC Authentication Bypass
APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers and TALON TC BACnet Automation Controllers. With a 7.5 CVSS, this exploit allows for an attacker to perform an authentication bypass using an alternate path or channel to access hidden directories in the web server. […]
https://tamkrataitong.go.th
https://tamkrataitong.go.th notified by ./Niz4r
Tags: defacementVagrant Synced Folder Vagrantfile Breakout
This Metasploit module exploits a default Vagrant synced folder (shared folder) to append a Ruby payload to the Vagrant project Vagrantfile config file. By default, unless a Vagrant project explicitly disables shared folders, Vagrant mounts the project directory on the host as a writable vagrant directory on the guest virtual machine. This directory includes the […]
ERP Sankhya 4.13.x Cross Site Scripting
ERP Sankhya versions 4.13.x and below suffer from a cross site scripting vulnerability.
Dinstar FXO Analog VoIP Gateway DAG2000-16O Cross Site Scripting
Dinstar FXO Analog VoIP Gateway version DAG2000-16O suffers from a persistent cross site scripting vulnerability.