1736 matches found
Strapi CMS Unauthenticated Password Reset
This module abuses the mishandling of a password reset request for Strapi CMS version 3.0.0-beta.17.4 to change the password of the admin user. Successfully tested against Strapi CMS version 3.0.0-beta.17.4. Module Options msf use auxiliary/scanner/http/strapi/3passwordreset msf...
Strapi CMS 3.0.0-beta.17.4 Privilege Escalation
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "Strapi CMS 3.0.0-beta.17.4 - Set Password Unauthenticated Metasploit", 'Description' = %q This exploit module abuses the...
CVE-2021-46359
FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks...
CVE-2021-46359
FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks...
CVE-2021-46359
CVE-2021-46359 affects FISCO-BCOS release-3.0.0-rc2. The issue is a denial-of-service vulnerability where some transactions may fail to commit, which could enable a double-spending scenario according to linked sources. The vulnerability is documented across multiple feeds (NVD/NVD-derived, CVE li...
CVE-2021-46359
FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks...
FISCO BCOS 代码问题漏洞
FISCO BCOS is a blockchain underlying platform. A code issue vulnerability exists in FISCO BCOS that stems from certain transactions in the product's operation failing to commit successfully. An attacker could use this vulnerability to cause a denial of service to the target. The following produc...
WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability discovered by ThuraMoeMyint Patchstack Red Team project in WordPress Yasr – Yet Another Stars Rating plugin versions = 2.9.9. Solution Update the WordPress Yasr – Yet Another Stars Rating plugin to the latest available version at least 3.0.0...
UBUNTU-CVE-2021-4160
There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...
CVE-2021-4160
There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...
CVE-2021-44994
There is an Assertion ''JERRYCONTEXT jmemheapallocatedsize == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0...
CVE-2021-44992
There is an Assertion ''ecmaobjectistypedarray objp'' failed at /jerry-core/ecma/operations/ecma-typedarray-object.c in Jerryscript 3.0.0...
CVE-2021-44993
There is an Assertion ''ecmaisvalueboolean basevalue'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c in Jerryscript 3.0.0...
CVE-2021-44992
There is an Assertion ''ecmaobjectistypedarray objp'' failed at /jerry-core/ecma/operations/ecma-typedarray-object.c in Jerryscript 3.0.0...
CVE-2021-44992
There is an Assertion ''ecmaobjectistypedarray objp'' failed at /jerry-core/ecma/operations/ecma-typedarray-object.c in Jerryscript 3.0.0...
CVE-2021-44994
There is an Assertion ''JERRYCONTEXT jmemheapallocatedsize == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0...
UBUNTU-CVE-2021-44992
There is an Assertion ''ecmaobjectistypedarray objp'' failed at /jerry-core/ecma/operations/ecma-typedarray-object.c in Jerryscript 3.0.0...
CVE-2021-44993
There is an Assertion ''ecmaisvalueboolean basevalue'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c in Jerryscript 3.0.0...
CVE-2021-44994
There is an Assertion ''JERRYCONTEXT jmemheapallocatedsize == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0...
CVE-2021-44993
The CVE-2021-44993 entry concerns the JerryScript engine (version 3.0.0). The vulnerability originates from an assertion failure in the file /jerry-core/ecma/operations/ecma-get-put-value.c (ecma_is_value_boolean (base_value)), which is described as a denial of service issue in multiple connected...