5857 matches found
CVE-2020-29204
XXL-JOB 2.2.0 allows Stored XSS in Add User to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java...
CVE-2020-29204
XXL-JOB 2.2.0 allows Stored XSS in Add User to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java...
CVE-2020-29204
XXL-JOB 2.2.0 allows Stored XSS in Add User to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java...
CVE-2020-29204
CVE-2020-29204 affects XXL-JOB 2.2.0 with a Stored XSS in the Add User path. The root cause is a bypass of the 20-character limit in xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java, enabling persistent script injection. The NVD and related sources classify the CVSS v3...
CVE-2020-24658
creationtimestamp| type| source ---|---|--- 2020-12-24 20:55:03+00:00| seen| https://t.me/cibsecurity/21293...
CVE-2020-3830
creationtimestamp| type| source ---|---|--- 2020-12-20 22:01:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/832...
CVE-2020-27052
creationtimestamp| type| source ---|---|--- 2020-12-15 20:46:44+00:00| seen| https://t.me/cibsecurity/20864...
JVN#43969166: Apache Struts 2 vulnerable to remote code execution (S2-061)
Apache Struts 2 provided by The Apache Software Foundation contains a remote code execution vulnerability due to improper input validation CWE-20. Impact A remote attacker may execute arbitrary code. Solution Update the software Update the software to the latest version according to the informati...
Siemens Embedded TCP/IP Stack Vulnerabilities-AMNESIA:33 (Update C)
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: ENTRON 3VA COM100/800, SENTRON 3VA DSP800, SENTRON PAC2200, SENTRON PAC3200T, SENTRON PAC3200, SENTRON PAC4200, SIRIUS 3RW5 Vulnerability: Integer Overflow 2. UPDATE INFORMATION This...
Congrats to the winners of the 2020 December Metasploit community CTF
Thank you all that participated in the 2020 December Metasploit community CTF! The four day CTF was well received by the community, with 874 teams and 1903 users registered! We’ve included the high-level stats and the competition winners below. If you played the CTF and want to let the Metasploit...
CVE-2020-9247
There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a...
CVE-2020-29239
creationtimestamp| type| source ---|---|--- 2020-12-02 20:55:17+00:00| seen| https://t.me/cibsecurity/17047...
FreeBSD-SA-20:32.rtsold
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:32.rtsold Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in rtsold Category: core Module: rtsold Announced: 2020-12-01 Credits:...
Directory traversal in development mode handler in Vaadin 14 and 15-17
Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 Vaadin 14.0.0 through 14.4.2, and 3.0 prior to 5.0 Vaadin 15 prior to 18 allows attacker to request arbitrary files stored outside of intended frontend resources folder. See CWE-20: Improper...
CVE-2018-20803
creationtimestamp| type| source ---|---|--- 2020-11-23 20:46:09+00:00| seen| https://t.me/cibsecurity/16724...
CVE-2018-16720
CVE-2018-16720 affects Jingyun Antivirus v2.4.2.39, where the driver file ZySandbox.sys fails to validate input values for IOCTL 0x1236001c, enabling a local user to trigger a denial of service (BSOD) and possibly other impacts. The issue is documented across multiple sources (NVD, Red Hat adviso...
CVE-2020-4739
creationtimestamp| type| source ---|---|--- 2020-11-20 16:42:44+00:00| seen| https://t.me/cibsecurity/16657...
CVE-2020-4937
creationtimestamp| type| source ---|---|--- 2020-11-20 16:42:43+00:00| seen| https://t.me/cibsecurity/16656...