Vulnerability Lab News Today

This week, hackers took over Mandiant's X account, authorities charged a Nigerian hacker with stealing $7.5 million from charities, the DOJ fined XCast $10 million

This week, hackers took over Mandiant's X account, authorities charged a Nigerian hacker with stealing $7.5 million from charities, the DOJ fined XCast $10 million

Introducing a novel technique for e-mail spoofing

SEC Consult Vulnerability Lab Security Advisory < 20231005-0 >=======================================================================title: Open Redirect in BSP Test Application it00(Bypass for CVE-2020-6215 Patch)product: SAP® Application Server ABAP and ABAP®Platform (SAP_BASIS)vulnerable version: see section "Vulnerable / tested versions"fixed version: see SAP security note 3258950CVE number: CVE-2020-6215impact: mediumhomepage: https://www.sap.comfound: 2022-09-23by: Fabian...

SEC Consult Vulnerability Lab Security Advisory < 20230927-0 >=======================================================================title: Multiple Vulnerabilitiesproduct: SAP® Enable Now Managervulnerable version: 10.6.5 (Build 2804) Cloud Editionfixed version: May 2023 ReleaseCVE number: N/A (cloud)impact: highhomepage: https://www.sap.com/about.htmlfound: 2022-10-21by: Paul Serban (Eviden)Fabian Hagg (Office Vienna)SEC Consult Vulnerability LabAn integrated part of SEC Consult, an Evi...

SEC Consult Vulnerability Lab Security Advisory < 20230925-0 >=======================================================================title: Stored Cross-Site Scriptingproduct: mb Support broker management solution openVIVA c2vulnerable version: fixed version: =>20220801CVE number: CVE-2022-39172impact: Mediumhomepage: https://mbsupport.defound: 2022-03-16by: Daniel Hirschberger (Office Bochum)SEC Consult Vulnerability LabAn integrated part of SEC Consult, an Eviden businessEurope | Asia...

Atos Unify product vulnerabilities could be exploited to cause disruption and reconfigure or backdoor the targeted system. 

SEC Consult Vulnerability Lab Security Advisory < 20230918-0 >=======================================================================title: Authenticated Remote Code Execution andMissing Authenticationproduct: Atos Unify OpenScape Session Border ControllerAtos Unify OpenScape BranchAtos Unify OpenScape BCFvulnerable version: OpenScape SBC before V10 R3.3.0OpenScape Branch V10 before V10 R3.3.0OpenScape BCF V10 before V10 R10.10.0fixed version: OpenScape SBC V10 >=R3.3.0OpenScape Branch ...

SEC Consult Vulnerability Lab Security Advisory < 20230829-0 >=======================================================================title: Reflected Cross-Site Scripting (XSS)product: PTC - Codebeamer (ALM Solution)vulnerable version: =21.09-SP14CVE number: CVE-2023-4296impact: highhomepage: https://www.ptc.com/en/products/codebeamerfound: 2023-04-14by: Niklas Schilling (Office Munich)SEC Consult Vulnerability LabAn integrated part of SEC Consult, an Eviden businessEurope | Asiahttps://ww...

Document Title:===============ETSI WEBstore 2023 - Persistent Cross Site VulnerabilityReferences (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2327Release Date:=============2023-07-26Vulnerability Laboratory ID (VL-ID):====================================2327Common Vulnerability Scoring System:====================================4.6Vulnerability Class:====================Cross Site Scripting - PersistentCurrent Estimated Price:========================1.000€ ...