DEBIAN-CVE-2021-42006

An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file...

UBUNTU-CVE-2021-42006

An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file...

CVE-2021-39347: Missing Authorization

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save function found in the /includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users unique STRIPE identifier and make purchases...

PT-2021-22553

Name of the Vulnerable Software and Affected Versions: Stripe for WooCommerce WordPress plugin versions 3.0.0 through 3.3.9 Description: The issue is related to a missing capability check on the save function found in the /includes/admin/class-wc-stripe-admin-user-edit.php file. This allows...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthor...

resteasy: Error message exposes endpoint class information

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...

Unspecified Vulnerability in Tecknodreams SapphireIMS

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A security vulnerability exists in Tecknodreams SapphireIMS 40971, which can be exploited by an attacker for username enumeration...

The vulnerability of the IFC Adapter component of Siemens NX software for product design, development, and manufacturing allows a perpetrator to execute arbitrary code.

The vulnerability of the IFC Adapter component of Siemens NX software for product design, development, and manufacturing since version 1980 is related to the use of memory after it is freed during IFC file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Women, Minorities Are Hacked More Than Others

Lower-income and vulnerable populations are disproportionally affected by cybercrime, according to a new survey, which uncovered that demographics play a big role in how often individuals are targeted. The survey results released Monday from Malwarebytes, Digitunity and Cybercrime Support Network...

NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the custom class name of the form field created, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC With the Form Builder "Dev Mode” setting enabled, create a form and a...

Advantech iView CommandServlet Directory Traversal (CVE-2021-22656)

A directory traversal vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied path when processing the request in CommandServlet Java class...

Cross site request forgery (csrf)

A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...

Rapid7 Technical Support: Building a Career Path With Endless Possibilities

At Rapid7, our Technical Support teams deliver a world-class support experience to our customers across the globe. We have Support Moose on 4 continents, in 10 offices, and across 8 time zones, but we're all one herd. So, how do we achieve this? We swarm on cases together each day, we collaborate...

Wuzhi WUZHI CMS 跨站脚本漏洞

Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. A security vulnerability exists in WUZHI CMS 4.1.0 and later, which originates from the coreframe/app/attachment/libs/class/ckditor.class.php configuration function...

CVE-2021-39554

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer located in Lexer.cc. It allows an attacker to cause Denial of Service...

CVE-2021-39554

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer located in Lexer.cc. It allows an attacker to cause Denial of Service...

Ubuntu 16.04 ESM : Python vulnerabilities (USN-5083-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5083-1 advisory. It was discovered that Python incorrectly handled certain RFCs. An attacker could possibly use this issue to cause a denial of service. This issue only...

PT-2021-27776

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurs due to a bad-cast to SplashPattern from an invalid vptr. This issue is related to the SplashState destructor and the restoreState function i...

ShowDoc file upload vulnerability

ShowDoc is an online API documentation, technical documentation tool ideal for IT teams. showDoc version 2.9.5 is vulnerable to file upload. A remote attacker can exploit this vulnerability to execute arbitrary code via the fileurl parameter in AdminUpdateController.class.php...

CVE-2021-38841

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...