Evan Grant
Insufficient input validation on apps.powerapps.com/teams/makerportal makerportalUrl parameter The makerPortalUrl parameter at apps.powerapps.com/teams/makerportal did not properly validate the supplied url.
Research Advisory
Research Advisory
Tenable has discovered multiple vulnerabilities in routers manufactured by Arcadyan. During the disclosure process for the issues discovered in the Buffalo routers, Tenable discovered that CVE-2021-20090 affected many more devices, as the root cause of the vulnerability exists in the underlying Arcadyan firmware.
Research Advisory
The retryPathname parameter can be used to create a stored cross-site scripting vulnerability on https://make.powerapps.com/startuperror.
Research Advisory
A number of subdomains of teams.microsoft.com were forwarding to invalidlearningpath.com, a domain which at the time was available for purchase.
Research Advisory
Tenable Research discovered an authenticated SQL injection vulnerability in ManageEngine Applications Manager.
Research Advisory
CVE-2020-5804: deleteEventLogFile Authenticated Path Traversal to File Deletion
Research Advisory
Tenable Research discovered multiple vulnerabilities in both Umbraco CMS and the Umbraco Cloud CMS platform resulting in a number of cross-site scripting (XSS) vulnerabilities, and the potential disclosure of sensitive internal credentials and user PII.
Research Advisory
Tenable Research discovered multiple vulnerabilities in Marvell QConvergeConsole GUI resulting from incomplete patches for previously published and patched vulnerabilities. CVE-2020-15643: saveAsText Directory Traversal Remote Code Execution Vulnerability