Wietse Boonstra

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: إصدارات Videx CyberAudit-Web الأقدم من 1.1.3 الوصف: تم اكتشاف ثغرة أمنية تتعلق بتزوير الطلبات من جانب الخادم (SSRF) في خدمة الويب videx-legacy-ssl التابعة لبرنامج CyberAudit-Web من Videx. قد تؤدي هذه المشكلة إلى وصول غير مصرح به إلى البنية التحتية الأساسية. التوصيات: بالنسبة للإصدارات الأقدم من 1.1.3، قم بالتحديث إلى إصدار أحدث من 1.1.3 لإصلاح الثغرة الأمنية. كحل مؤقت، ضع في اعتبارك تقييد الوصول إلى خدمة الويب videx-legacy-ssl لتقليل مخاطر الاستغلال.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: Videx CyberAudit-Web الإصدارات الأقدم من 9.5 الوصف: تم تحديد ثغرة في تجاوز المصادقة، مما يسمح للمهاجم بإنشاء جلسة عمل صالحة دون الحاجة إلى بيانات اعتماد من خلال استغلال ثغرة منطقية. التوصيات: بالنسبة للإصدارات الأقدم من 9.5، قم بالتحديث إلى إصدار أعلى من 9.5، حيث تم توفير تصحيح لجميع الحالات، بما في ذلك تلك التي وصلت إلى نهاية الدعم (EOM). إذا كنت بحاجة إلى دعم، يرجى الاتصال بـ support@videx.com للحصول على المساعدة.

A Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool, allowing an attacker to upload executable files to a publicly accessible folder without verifying any requirements. This leads to the possibility of executing code on the underlying system when the file is triggered.

An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this issue to gain access to the underlying database by exporting it as a CSV file.

A SQL Injection issue has been found in the SO Planning tool when the public view setting is enabled, allowing an attacker to gain access to the underlying database.

A Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the public view setting is enabled, an attacker can upload a PHP-file that will be available for execution for a few milliseconds before it is removed, leading to execution of code on the underlying system.

The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection vulnerability. This vulnerability can be exploited via the `url` parameter of an authenticated endpoint, allowing OS Command Injection.

The issue is related to a Path Traversal vulnerability, which allows an unauthenticated attacker to access or create arbitrary files via a URL parameter. This vulnerability affects Enphase IQ Gateway, formerly known as Envoy, and can be exploited by attackers to compromise exposed systems.

The issue is related to an improper neutralization of special elements used in a command, allowing OS command injection. This vulnerability is present in an internal script and poses a serious threat, as attackers can exploit a flaw in these scripts.

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows file manipulation through a URL parameter in the Enphase IQ Gateway. The endpoint requires authentication, meaning an attacker would need to have valid credentials to exploit this issue.

The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as 'Command Injection' vulnerability. This vulnerability can be exploited through an URL parameter of an authenticated endpoint, allowing OS Command Injection.

The issue is related to inadequate encryption strength, allowing an authenticated attacker to execute arbitrary OS commands via encrypted package upload.

An issue allows an administrator to execute commands as root via the alerts management dialog.

The issue allows an authenticated administrator to craft an alert that can execute a Server-Side Request Forgery (SSRF) attack, but only with POST requests.

The issue allows an attacker to launch a Reflected XSS attack using a crafted URL. This type of attack occurs when an application takes user input and reflects it back to the user without proper validation or encoding, allowing an attacker to inject malicious code.

The issue allows local users to execute scripts under root privileges. This means that users with local access can potentially run commands or scripts with elevated privileges, posing a significant security risk.

The issue allows an authenticated attacker to create alerts that trigger a stored XSS attack. This means an attacker with authentication credentials can create malicious alerts that, when triggered, execute malicious scripts stored on the victim's browser, potentially leading to unauthorized actions or data theft.

The issue allows an authenticated administrator to remotely execute arbitrary shell commands via the API. This could potentially lead to unauthorized access and control of the system.

A remote attacker can obtain sensitive information due to the failure to set the HTTP Only flag within the Service Desk module. This issue can be exploited in combination with a successful Cross-Site Scripting attack to gain access to the management interface.

The issue is related to the ITarian Endpoint Manage Communication Client being compiled with insecure OpenSSL settings. This allows a malicious actor with low privileges access to a system to escalate their privileges to SYSTEM by abusing an insecure openssl.conf lookup.