ivan huertas vulnerabilities and exploits

(subscribe to this query)

Lenovo SHAREit prior to 3.2.0 for Windows and SHAREit prior to 3.5.48_ww for Android transfer files in cleartext, which allows remote malicious users to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vector...

1 Article

The Wifi hotspot in Lenovo SHAREit prior to 3.2.0 for Windows allows remote malicious users to obtain sensitive file names via a crafted file request to /list.

1 Article

The Wifi hotspot in Lenovo SHAREit prior to 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote malicious users to obtain access by leveraging a position within the WLAN coverage area.

1 Article

The Wifi hotspot in Lenovo SHAREit prior to 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote malicious users to obtain access by leveraging a position within the WLAN coverage area.

Lenovo Shareit 3.0.18 Ww

1 Article

QNAP Qcenter Virtual Appliance versions 1.6.1056 (20170825) and 1.6.1075 (20171123) suffer from information disclosure and command injection vulnerabilities.

An issue exists in FasterXML jackson-databind before 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possi...

Fasterxml Jackson-databind Debian Debian Linux 9.0 Fedoraproject Fedora 29 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Retail Merchandising System 15.0 Redhat Openshift Container Platform 3.11 Redhat Jboss Enterprise Application Platform 7.2.0 Redhat Single Sign-on 7.3 Redhat Jboss Brms 6.4.10 Redhat Automation Manager 7.3.1 Redhat Decision Manager 7.3.1

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and previous versions could allow authenticated users to run arbitrary commands.

Qnap Q\\'center

1 EDB exploit

Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and previous versions could allow authenticated users to run arbitrary commands.

Qnap Q\\'center

1 EDB exploit

Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and previous versions could allow authenticated users to run arbitrary commands.

Qnap Q\\'center

1 EDB exploit

Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and previous versions could allow authenticated users to access sensitive information.

Qnap Q\\'center

2 EDB exploits

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook