Apache CloudStack 安全漏洞

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack has a security vulnerability that can be exploited ...

IBM Cloud Pak for Security和IBM QRadar Suite 安全漏洞

IBM Cloud Pak for Security is a software application. An open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated action faster.IBM QRadar Suite is an integrated security information and event management SIEM solution for...

CVE-2023-39988

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 标准云std.Cloud WxSync plugin = 2.7.23 versions...

Cisco Meraki MX67和Cisco Meraki MX68 信息泄露漏洞

The Cisco Meraki MX67 and Cisco Meraki MX68 are cloud-managed routers in the Cisco Meraki series. An access validation error vulnerability exists in the Cisco Meraki MX67 and Cisco Meraki MX68 that stems from improper access control and can be exploited by an attacker to cause information...

Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

Microsoft Azure Site Recovery 代码注入漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery is vulnerable to code injection. No details of the vulnerability are currently available...

Microsoft Azure 安全漏洞

Azure Data Explorer is a cloud-based big data analytics platform. a security vulnerability exists in Microsoft Azure Data Explorer, and no details of the vulnerability are currently available...

Pexip Infinity 输入验证错误漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity has a security vulnerability that could be exploited by an attacker to allow a temporary remote denial of service abort...

Apache HTTPd 2.4.49/2.4.50 路径穿越漏洞

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

IBM Cloud Pak for Applications跨站脚本漏洞

IBM Cloud Pak for Applications is an application from IBM of America, Inc. providing cloud-native development solutions that deliver rapid value. IBM Cloud Pak for Applications has a cross-site scripting vulnerability that stems from the application's IBM Cloud Pak being vulnerable to cross-site...

Huawei Manageone 环境问题漏洞

Huawei ManageOne is a cloud data center management solution, Huawei CampusInsight is a campus network management system, Huawei CampusInsight and ManageOne have security vulnerabilities that could be exploited by attackers to cause information leakage...

designhandlung.de Cross Site Scripting vulnerability OBB-1430138

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

云金地国土资源管理系统存在通用型任意文件读取漏洞

...

银河风云系列行为管理网关cgi-bin/dsweb.cgi 命令执行

No description provided by source...

小云wifi路由器默认webserver 代理服务未授权访问

No description provided by source...

勤云远程稿件处理系统 v8.0 后台任意用户信息修改漏洞

No description provided by source...

完美Bypass云锁最新版(V1.6.153)SQL注入防护规则(可UNION)

简要描述： 完美Bypass云锁最新版V1.6.153SQL注入防护规则可UNION 详细说明： 云锁版本： Mysql UNION语法 http://.../doc/refman/5.5/en/union.html SELECT ... UNION ALL | DISTINCT SELECT ... UNION ALL | DISTINCT SELECT ... 上回提到了这个union all http://.../bugs/wooyun-2016-0170481 云锁在过滤危险请求的时候两个敏感字段相邻就会被干掉，但是两个敏感字段中间"插入"点什么的话就不会被匹配到。 distin...

教育云公共服务平台系统Newsvideo.aspx NewID参数SQL注入漏洞

注入点 /public/Newsvideo.aspx dbname sqlmap跑出的数据。 用户表...

云锁论坛任意文件遍历及下载

简要描述： 云锁。。。。。 论坛 详细说明： 不说了 自己上图 http://bbs.yunsuo.com.cn/data/ 云锁论坛 漏洞证明： 上图...

傲游浏览器云推送功能跨站脚本漏洞

No description provided by source...