OrbiTeam BSCW Server XSS / LFI / User Enumeration

-
OrbiTeam BSCW Server versions 5.0.x, 5.1.x, 5.2.4 and below, 7.3.x and below, and 7.4.3 and below suffer from path traversal, cross site scripting, HTTP header, session object manipulation, local file inclusion, and user enumeration vulnerabilities.

from Packet Storm https://ift.tt/3ElAWvi

Comments

Post a Comment

Popular posts from this blog

Modern Radio Receiver Architecture: From Regenerative to Direct Conversion

-
Image
Modern radio receivers have a distinct advantage over the common early designs which I covered in my previous article . Most of the receivers you will have worked with over the past couple decades are designs by Edwin Armstrong ; regenerative, superregenerative, or most commonly superheterodyne. These are distinguished by a few fascinating key traits that bring both benefits and drawbacks. Today let’s dive into Mr. Armstrong’s receivers. I’ll also talk about DC receivers which, despite the name, are not made to listen to batteries. These are receivers you are much more likely to encounter in modern equipment. Regenerative and Superregenerative The regenerative receiver is all about doing more with less. You still see some of these in simple applications like RF remote controls. The idea derives from how an oscillator works. In a simple way of thinking, an oscillator is an amplifier with enough positive feedback that any tiny signal at the right frequency will amplify and then, throu...
Get this one»

Custom Macro Keyboard Looks Good in Wood

-
Image
There’s more than one way to make a mechanical macro pad, and this wooden wonder represents one of our favorites . [Tauno Erik] had an old rubber dome rectangle keyboard lying around that still worked, but the poor thing was missing some of its caps. After salvaging the controller, [Tauno Erik] got to work on the tedious task of figuring out the mapping of the matrix, which was made easier with a Python script. Almost every component of this beauty is wood, including the mounting plate and those thicc and lovely keycaps — their top layer is solid oak, and the bottom bit is birch plywood. In order to interface the ‘caps with the switches, [Tauno Erik] designed and printed connector pieces that sit inside the extra large keycaps and accept the stems of the key switches. Speaking of switches, we’re not sure if [Tauno Erik] ended up using Cherry green switches, browns, or a mix of both (that would be interesting), but each one is mounted on a custom PCB along with a diode and a pull-up ...
Get this one»

Fractal Vise Holds Odd-Shaped Objects Tight

-
Image
A regular vice is great if you want to clamp rectangular objects, but it can fall down a little with more complex shapes. Inspired by an ancient vise [Chris Borge] whipped up his own 3D-printed fractal clamping tool . The inspiration for this one comes from the [Hand Tool Rescue] video that shows of the clever mechanism . The vice uses a series of interlocking parts that can freely articulate to grip the object of interest via several protruding fingers. In reproducing the design, [Chris] had some issues initially with the joints, but settling on a dovetail similar to that of the original metal vice which got things working nicely. [Chris] notes that while the design works, it could still use some refinement. Silicone or rubber tips on the fingers could give the vice better grip, and there remain some flexural issues that could be improved. Overall, however, it’s a useful table vice for small jobs on weird shaped things. We’ve seen 3D-printed vices before, particularly in the PCB vi...
Get this one»