2461 matches found
CVE-2021-40532
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...
Code injection
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...
CVE-2021-40532
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...
CVE-2021-40532
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...
CVE-2021-40532
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...
CVE-2021-40532
Telegram Web K Alpha before 0.7.2 is affected by a vulnerability where the application mishandles characters in a document extension. The issue is described across multiple sources as affecting Telegram Web K Alpha prior to version 0.7.2, with no additional exploit details provided in the documen...
PT-2021-22926
Name of the Vulnerable Software and Affected Versions Telegram Web K Alpha versions prior to 0.7.2 Description The issue is related to the mishandling of characters in a document extension. Recommendations For versions prior to 0.7.2, update to version 0.7.2 or later to resolve the issue...
Telegram 安全漏洞
Telegram is an instant messaging mobile application. A security vulnerability exists in Telegram Web K Alpha prior to version 0.7.2, which stems from the program incorrectly handling characters in document extensions...
CVE-2021-40532: Undefined Security Weakness
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...
FIN7 Capitalizes on Windows 11 Release in Latest Gambit
The FIN7 financial cybercrime gang is back, delivering JavaScript backdoors using Word documents themed around the next version of Windows. That’s according to researchers at Anomali, who observed a recent campaign from the group that leveraged six different docs, all referencing “Windows 11 Alph...
BeaconEye - Hunts Out CobaltStrike Beacons And Logs Operator Command Output
BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity. How it works BeaconEye will scan live processes or MiniDump files for suspected CobaltStrike beacons. In live process mode,...
CVE-2021-36352
Stored cross-site scripting XSS vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability has found POST requests in /modules/registrationadmission/patientregister.php page with "namemiddle", "addrstr", "station", "namemaiden", "name2", "name3" parameters...
Use-after-free in actix-http
An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream...
Care2x2.7 Alpha SQL注入漏洞
Care2x2.7 Alpha is a software application. A hospital information management system. A SQL injection vulnerability exists in Care2x2.7 Alpha that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to...
Telegram Cross-Site Scripting Vulnerability
Telegram is an instant messaging mobile application. version 0.6.1 of Telegram Web K Alpha is vulnerable to a cross-site scripting vulnerability that stems from the fact that Telegram Web K Alpha allows XSS to pass through document names. An attacker could exploit the vulnerability to execute...
CVE-2021-20332 MongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an application
Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...
CVE-2021-37596
Telegram Web K Alpha 0.6.1 allows XSS via a document name...
Cross site scripting
Telegram Web K Alpha 0.6.1 allows XSS via a document name...