572 matches found
Exploit for Deserialization of Untrusted Data in Clear Clearml
ClearML Exploit This repository contains a proof-of-concept e...
Cisco Identity Services Engine Information Disclosure (cisco-sa-ise-info-disc-ZYF2nEEX)
According to its self-reported version, Cisco Identity Services Engine Information Disclosure is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information...
CVE-2024-20515 Cisco Identity Services Engine Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration...
CVE-2024-20515 Cisco Identity Services Engine Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration...
Cisco Identity Services Engine ๅฎๅ จๆผๆด
Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco USA. The platform regulates the network by collecting real-time information from the network, users, and devices, and formulating and enforcing policies accordingly. A security...
PT-2024-38439
Name of the Vulnerable Software and Affected Versions HashiCorp Vault Community Edition versions prior to 1.17.6 HashiCorp Vault Enterprise versions prior to 1.17.6, 1.16.10, and 1.15.15 Description The issue arises from the SSH secrets engine not requiring the valid principals list to contain a...
Stormshield Network Security ๅฎๅ จๆผๆด
Stormshield Network Security SNS is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A security vulnerability exists in Stormshield Network Security that stems from an attacker's ability to alter data by bypassing access restrictions through...
C-MOR Video Surveillance 5.2401 Improper Access Control
Advisory ID: SYSS-2024-024 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Versions: 5.2401 Tested Versions: 5.2401 Vulnerability Type: Improper Access Control CWE-284 Risk Level: High Solution Status: Fixed Manufacturer Notification: 2024-04-05 Solution Date: 2024-07-31...
CVE-2024-45170
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MOR web interface. It was found out that different functions are only available to administrative users. However, acces...
[SECURITY] [DSA 5734-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5734-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 25, 2024 https://www.debian.org/security/faq -...
Configuration for Controlled Access to Different VPN Plugin Through NetScaler Gateway for XenMobile Deployments
Requirement 1: Disable VPN Access for the iOS VPN Client If you configure NetScaler Gateway for use with XenMobile, it includes configuration to enable Secure Web and approved Citrix Apps-enabled applications to access the corporate network. The access is enabled for authenticated users by...
CVE-2024-5654
The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'executepostdatacg7free' function in all versions up to, and including, 5.0.9. This makes it possible for unauthenticated attackers to toggle site...
CVE-2024-5732
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2024-5732 Clash Proxy Port improper authentication
A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2024-5732
CVE-2024-5732 concerns Clash (Windows) up to version 0.20.1, where the Proxy Port component contains unknown code that enables improper authentication. The vulnerability can be exploited remotely over the network, and the exploit has been disclosed publicly. Multiple sources (NVD/NVD-affiliate en...
Exploit for OS Command Injection in Php
Orange Tsi ๐ This vulnerability was found by Orange Tsai @oran...
DLink DIR < 2.17.b02 (SAP10018)
The version of DLink DIR installed on the remote host is prior to 2.17.b02. It is, therefore, affected by a vulnerability as referenced in the SAP10018 advisory. - Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote...
CVE-2024-2358 Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
A path traversal vulnerability in the '/applysettings' endpoint of parisneo/lollms-webui allows attackers to execute arbitrary code. The vulnerability arises due to insufficient sanitization of user-supplied input in the configuration settings, specifically within the 'extensions' parameter...
CVE-2024-2358 Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
A path traversal vulnerability in the '/applysettings' endpoint of parisneo/lollms-webui allows attackers to execute arbitrary code. The vulnerability arises due to insufficient sanitization of user-supplied input in the configuration settings, specifically within the 'extensions' parameter...
PT-2024-19946 ยท Unknown ยท Parisneo/Lollms-Webui
Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui affected versions not specified Description: A path traversal issue exists due to insufficient sanitization of user-supplied input in the configuration settings, specifically within the extensions parameter of the "/appl...