CVE-2021-38346

The Brizy Page Builder plugin = 2.3.11 for WordPress allowed authenticated users to upload executable files to a location of their choice using the brizycreateblockscreenshot AJAX action. The file would be named using the id parameter, which could be prepended with "../" to perform directory...

Directory traversal

The Brizy Page Builder plugin = 2.3.11 for WordPress allowed authenticated users to upload executable files to a location of their choice using the brizycreateblockscreenshot AJAX action. The file would be named using the id parameter, which could be prepended with "../" to perform directory...

Moodle Admin Shell Upload Exploit

This Metasploit module will generate a plugin which can receive a malicious payload request and upload it to a server running Moodle provided valid admin credentials are used. Then the payload is sent for execution, and the plugin uninstalled. You must have an admin account to exploit this...

Brizy < 2.3.12 - Authenticated File Upload and Path Traversal

Using the brizycreateblockscreenshot AJAX action, it was possible to provide a filename using the id parameter, and populate the file contents via the ibsf parameter, which would be base64-decoded and written to the file. While the plugin appended .jpg to all uploaded filenames, a double extensio...

openSUSE: Security Advisory for mbedtls (openSUSE-SU-2021:1344-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1344-1 Security update for mbedtls

This update for mbedtls fixes the following issues: CVE-2021-24119: Fixed side-channel vulnerability in base64 PEM boo1189589 Guard against strong local side channel attack against base64 tables by making access aceess to them use constant flow code...

Security update for mbedtls (moderate)

openSUSE Security Update: Security update for mbedtls Announcement ID: openSUSE-SU-2021:1344-1 Rating: moderate References: 1189589 Cross-References: CVE-2021-24119 CVSS scores: CVE-2021-24119 NVD : 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 An update...

GHSA-CQ6W-W5RJ-P9X8 Cross-site Scripting in Froala Editor

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about...

WhatsUpGold 21.0.3 Cross Site Scripting

Exploit Title: WhatsUpGold 21.0.3 - Stored Cross-Site Scripting XSS Date: 09.17.2021 Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.21.0.3, Build 188 Tested on: Windows 2019 Server CVE : CVE-2021-41318 Reference:...

Tecknodreams SapphireIMS Encryption Issue Vulnerability

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A security vulnerability exists in Tecknodreams SapphireIMS 40971, which stems from passwords in the database being stored in Base64 format. No details of the vulnerability are...

CVE-2021-36165

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

CVE-2021-36165

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

CVE-2021-36165

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

Default credentials

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

CVE-2021-36165

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

CVE-2021-36165

The CVE-2021-36165 entry affects the RICON Industrial Cellular Router S9922L (version 16.10.3(3794)). The underlying issue is cleartext storage of sensitive information and transmission of usernames/passwords encoded with base64. Connected sources (Red Hat, NVD, CNNVD, CVE lists) confirm this vul...

CVE-2021-36165: Cleartext Storage of Sensitive Information

RICON Industrial Cellular Router S9922L 16.10.33794 is affected by cleartext storage of sensitive information and sends username and password as base64...

Ricon Industrial Cellular Router S9922L has security vulnerabilities

Ricon Mobile Ricon Industrial Cellular Router S9922L is a mobile network router based on 4G/4.5G, WiFi and Vpn technology from Ricon Mobile Canada. It is used in intelligent transportation, Scada, Pos, industrial automation, telemetry, finance, environmental protection and many other fields. A...

PT-2021-21152

Name of the Vulnerable Software and Affected Versions RICON Industrial Cellular Router S9922L version 16.10.33794 Description The issue concerns the cleartext storage of sensitive information. Specifically, it involves sending the username and password as base64. There is no information provided...