Exploit for CVE-2020-1472

PoC exploit for CVE-2020-1472, a vulnerability in the Windows Netlogon service that allows for authentication bypass. The exploit uses the Impacket library to test the vulnerability and attempts to perform a Netlogon authentication bypass. The script will immediately terminate when successfully...

all-babynames.com Cross Site Scripting vulnerability OBB-1388422

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-8235: Authorization Bypass Through User-Controlled Key

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments...

CVE-2020-5980

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loaded system DLL will load its dependencies in an insecure fashion, which may lead to code execution or denial of service...

CVE-2020-5979

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which a user is presented with a dialog box for input by a high-privilege process, which may lead to escalation of privileges...

CVE-2020-12127

An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak router settings, including cleartext login details, DNS settings, and other sensitive information without authentication...

PT-2020-19754 · Unknown · Safetydance

Name of the Vulnerable Software and Affected Versions: safetydance versions all Description: The issue concerns Prototype Pollution via the set function. This affects all versions of the package, allowing for potential manipulation of object properties. Recommendations: For all versions, consider...

DEBIAN-CVE-2020-25604

An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest also operating on the timers to release a lock that it...

ALPINE-CVE-2020-25603

An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier e.g., smp...

PYSEC-2020-227

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

CVE-2020-7734

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

PT-2020-5421

Name of the Vulnerable Software and Affected Versions eDocLib affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the eDocLib platform for storing and processing corporate data. An attacker can exploit this by placing arbitrary co...

all-anatolia.com Cross Site Scripting vulnerability OBB-1310155

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

all-playbacks.co.il Cross Site Scripting vulnerability OBB-1298068

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-5418: Incorrect Authorization

Cloud Foundry CAPI Cloud Controller versions prior to 1.98.0 allow authenticated users having only the "cloudcontroller.read" scope, but no roles in any spaces, to list all droplets in all spaces whereas they should see none...

ai.grakn:grakn-dist (>=0.7.0, <=0.12.1), ai.grakn:grakn-test (0.10.0) +63 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.1.0, <=2.1.11)

org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =0.7.0, =0.15.0, =0.6.1, =0.11.0, =1.2.10-oss, =1.1.0-beta2, =1.1.0-beta2, =1.1.0-alpha2, =1.1.0-alpha2, =1.2.0-alpha3, =0.80, =0.1.1, =2.15.1, =2.15.1, =3.1 and more Source cves: CVE-2020-13946 Source advisory: MEND:CVE-2020-13946...

com.bazaarvoice.astyanax:astyanax-cassandra (>=3.8.0-bv8, <=3.8.0-bv9), com.bazaarvoice.astyanax:astyanax-contrib (>=3.8.0-bv8, <=3.8.0-bv9) +83 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.2.0, <=2.2.16)

org.apache.cassandra:cassandra-all MAVEN version =2.2.0, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =1.0.1-migration, =1.0.1-migration, =1.0.1-migration, =1.0.1-migration, =1.0.1-migration, =1.0.1-migration, =6.4.3 and more Source...

ai.grakn.kgms:client (1.4.3), ai.grakn:client-java (>=1.4.1, <=1.4.3) +96 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=3.11.0, <=3.11.7)

org.apache.cassandra:cassandra-all MAVEN version =3.11.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2020-13946 Source advisory: MEND:CVE-2020-13946...

CVE-2020-7726

All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function...

CVE-2020-7713

All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor...