Improper Access Control in cortezaproject/corteza-server

Hi, Old unused Password reset tokens are not getting expired after using the new one. Suppose I am an attacker and I got access to the recovery email option of victim account. I logged in to victim recovery email suppose that is [email protected]. Then I used the forget password option. I will get o...

Open Redirect in fisharebest/webtrees

Description OpenRedirect at login with parameter &url= Proof of Concept // PoC.request POST /demo-stable/index.php?route=%2Fdemo-stable%2Flogin%2Fdemo HTTP/2 Host: dev.webtrees.net Cookie: Secure-WT-ID=ekks8678620p55do7do21jd4p1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:93.0...

ROS-2-1929

2.1929 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

IBM AIX Denial of Service Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. A denial of service vulnerability exists in IBM AIX version 7.1, 7.2, and VIOS version 3.1. A local attacker could exploit this vulnerability to cause a denial of service...

Weak password vulnerability in SRG3260 of Huawei Technologies Co.

Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider specializing in ICT. A weak password vulnerability exists in Huawei Technologies SRG3260, which can be exploited by attackers to obtain sensitive information...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause memory corruption...

Cross-Site Request Forgery (CSRF) in zhongshaofa/easyadmin

✍️ Description Attacker able to upload any picture with CSRF attack. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the IP address or hostname of your application. In CSRF attacks...

2021 CWE Top 25 Most Dangerous Software Weaknesses

The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2021 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesses list. The Top 25 uses data from the National Vulnerability...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33134)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer is vulnerable to a...

Acronis True Image 安全漏洞

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image has a security vulnerability that can be exploited by attackers for...

ArcGIS Server Manager Stored Cross-Site Scripting Vulnerability

ArcGIS Server is the back-end server software component of ArcGIS Enterprise.ArcGIS Server Manager is an application that is installed with ArcGIS Server and provides an intuitive and convenient interface for managing the server. A stored cross-site scripting vulnerability exists in ArcGIS Server...

Google Android System Remote Code Execution Vulnerability (CNVD-2021-52331)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to achieve...

WordPress Easy Cookies Policy Plugin Cross-Site Scripting Vulnerability (CNVD-2021-49075)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Easy...

phpCMS SQL Injection Vulnerability (CNVD-2021-49040)

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in phpCMS. The vulnerability stems from the diggadd.php file not handling the diggmod...

Kirby Cross-Site Scripting Vulnerability (CNVD-2021-48509)

Kirby is a document-based content management system CMS. A cross-site scripting vulnerability exists in Kirby 3.5.5 and 3.5.6, which stems from the panel's "ListItem" component e.g., used in page and file sections displaying HTML as-is in page headers, and can be exploited by an attacker to condu...

IBM Security Verify Privilege Vault Link Injection Vulnerability

IBM Security Verify Privilege Vault is a privileged access management solution that enables IT administrators and IT security professionals to protect the privileges of all services, applications, roots and administrator accounts across the enterprise. A link injection vulnerability exists in IBM...

GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-45143)

GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/edit.php in GetSimple CMS version 3.4.0a. An attacker can exploit this vulnerability to conduct a cross-site scripting attack...

Ice Hrm Cross-Site Scripting Vulnerability (CNVD-2021-45759)

Ice Hrm is a human resource management system. A cross-site scripting vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability by uploading a crafted file that will result in the execution of arbitrary web script or HTML...

Nextcloud Android app information disclosure vulnerability (CNVD-2021-44760)

Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. The Nextcloud Android app suffers from an information disclosure vulnerability that can be exploited by an attacker to gain access to shared preference information in the Nextcloud...

Unauthorized Access Vulnerability in layuiAdmin

layuiAdmin is based on layui front-end UI framework to achieve a set of general-purpose pure static interface template for the development of various management systems . An unauthorized access vulnerability exists in layuiAdmin, which can be exploited by attackers to obtain sensitive information...