The “ipkâ€� package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution. Zafiyet ile ilgili…

Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri…

An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code…

When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by…

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an…

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that…

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.class.php. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını…

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.class.php. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını…

An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için…

Buffer copy without checking size of input (‘Classic Buffer Overflow’) vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute…