3950 matches found
Next.js 安全漏洞
Next.js is a React framework open-sourced by Vercel. Next.js suffers from a security vulnerability that stems from vulnerability to a denial of service DoS attack, where an attacker can construct a request to operate on the server to be in a hung state until the hosting provider cancels the...
The vulnerability in the web interface for managing D-Link DIR-823G microprogramming routers allows a hacker to alter the device’s configuration.
The vulnerability of the web interface for managing D-Link DIR-823G microprogramming devices is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to alter the device’s configuration by sending a specially crafted HTTP POST request...
PT-2024-9868 · Totolink · Totolink A3002Ru
Name of the Vulnerable Software and Affected Versions: Totolink A3002R affected versions not specified Description: The issue is related to the formWsc function of the Totolink A3002R router's firmware, which fails to take measures to protect the web page structure. This can be exploited by a...
The vulnerability of the formWsc function in the microprogramming software of the Totolink A3002R router allows a intruder to execute arbitrary code.
The vulnerability of the formWsc function in the Totolink A3002R router’s microprogramming software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...
CVE-2024-28767
IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request...
Trellix ePolicy Orchestrator 跨站脚本漏洞
Trellix ePolicy Orchestrator is a centralized security management platform from FireEye Trellix USA. A cross-site scripting vulnerability exists in Trellix ePolicy Orchestrator versions prior to 5.10 Service Pack 1 Update 3. An attacker could use this vulnerability to inject arbitrary content int...
CVE-2024-53991 Potential Backup file leaked via Nginx in Discourse
Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use FileStore::LocalStore which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick...
CVE-2024-55082
A Server-Side Request Forgery SSRF in the endpoint http://your-server/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request...
CVE-2024-55082
A Server-Side Request Forgery SSRF in the endpoint http://your-server/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request...
CVE-2024-55082
A Server-Side Request Forgery SSRF in the endpoint http://your-server/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request...
CVE-2024-55082
CVE-2024-55082 describes a Server-Side Request Forgery (SSRF) in Stirling-PDF 0.35.1. The vulnerable component is the endpoint http://{your-server}/url-to-pdf, where crafted requests can trigger unauthorized access to sensitive data. Across connected sources, the affected product/stage is consist...
Fortinet FortiManager 操作系统命令注入漏洞
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...
CVE-2024-47578
Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side...
SAP Adobe Document Service 代码问题漏洞
Adobe Document Service is a service provided by Adobe for processing documents, supporting PDF creation, editing and other functions. A code issue exists in Adobe Document Service that originates from a vulnerability that allows an attacker with administrator privileges to send a specially crafte...
CVE-2024-50947
An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service DoS via a crafted request...
KMQTT 安全漏洞
KMQTT is a Kotlin multi-platform MQTT 3.1.1/5.0 client and proxy from the individual developer Davide Pianca. A security vulnerability exists in KMQTT version v0.4.8 that stems from allowing an attacker to cause a denial of service via a crafted request...
CVE-2024-50947
An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2024-50947
An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2024-50947
CVE-2024-50947 concerns kmqtt v0.2.7, where a crafted request can cause a Denial of Service (DoS). Multiple sources (NVD, Red Hat, OSV, CIRCL, CNNVD, CVE lists) corroborate the DoS impact. The documents do not provide root cause details, affected subcomponents, exploit code, or remediation steps....