9602 matches found
Wordpress Modern Events Calendar Lite 代码问题漏洞
Wordpress Modern Events Calendar Lite is an open source application plugin for Wordpress. This plugin is the best tool for managing event websites. A code issue vulnerability exists in the WordPress Modern Events Calendar Lite plugin before 5.16.5, which stems from an arbitrary file upload that...
Wordpress Modern Events Calendar Lite 跨站脚本漏洞
Wordpress Modern Events Calendar Lite is Wordpress open source plugin for an application. The plugin is used to manage the best tools for events website. A cross-site scripting vulnerability exists in the Modern Events Calendar Lite WordPress plugin versions prior to 5.16.5. The vulnerability ste...
PT-2021-15691 · Unknown · Modern Events Calendar Lite
Name of the Vulnerable Software and Affected Versions: Modern Events Calendar Lite versions prior to 5.16.5 Description: The issue allows for arbitrary file upload due to improper checking of imported files. An administrator can upload PHP files by using the 'text/csv' content-type in the request...
Wordpress Modern Events Calendar Lite SQL注入漏洞
Wordpress Modern Events Calendar Lite is an open source application plugin for Wordpress. The plugin is used to manage the best tools for events website . Wordpress Modern Events Calendar Lite prior to version 5.16.6 suffers from a SQL injection vulnerability that originates from not clearing the...
Wordpress Modern Events Calendar Lite 访问控制错误漏洞
Wordpress Modern Events Calendar Lite is an open source application plugin for Wordpress. This plugin is the best tool for managing event websites. An access control error vulnerability exists in the WordPress Modern Events Calendar Lite plugin before 5.16.5, which stems from not properly...
CVE-2021-21193
creationtimestamp| type| source ---|---|--- 2021-03-13 04:24:31+00:00| exploited| https://t.me/thehackernews/1090 2021-03-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=562 2021-03-15 04:50:46+00:00| published-proof-of-concept| https://t.me/infobes/295 2021-03-15...
CVE-2021-22986
creationtimestamp| type| source ---|---|--- 2021-03-11 07:06:06+00:00| seen| https://t.me/thehackernews/1085 2021-03-11 07:19:05+00:00| published-proof-of-concept| https://t.me/cKure/4260 2021-03-11 10:08:20+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus10/21 2021-03-12...
CVE-2021-21329 Multi Factor Authentication Token Improperly Validated On User Login
RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b...
Joomla Matukio Events 7.0.5 Cross Site Scripting Vulnerability
Exploit Title:Joomla Matukio Events 7.0.5 Stored XSS Author: Vincent666 ibn Winnie Software Link: https://matukio.compojoom.com/ Tested on: Windows 10 Web Browser: Mozilla Firefox My Youtube Channel : https://www.youtube.com/channel/UCZOWpC2dW9sipPq5z63C2rQ Google Dorks: inurl:option=commatukio...
Joomla Matukio Events 7.0.5 Cross Site Scripting
Exploit Title:Joomla Matukio Events 7.0.5 Stored XSS Date:08.03.2021 Author: Vincent666 ibn Winnie Software Link: https://matukio.compojoom.com/ Tested on: Windows 10 Web Browser: Mozilla Firefox My Youtube Channel : https://www.youtube.com/channel/UCZOWpC2dW9sipPq5z63C2rQ Google Dorks:...
RATCF 授权问题漏洞
RATCF is an open source framework for hosting Cyber-Security Capture the Flag events. RATCF suffers from an authorization issue vulnerability that originates from the fact that a user with multi-factor authentication enabled can log in without a valid token...
kernel: performance counters race condition use-after-free
A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integri...
CVE-2021-3151
creationtimestamp| type| source ---|---|--- 2021-02-27 07:40:05+00:00| seen| https://t.me/cibsecurity/24278 2021-05-29 01:17:02+00:00| seen| https://t.me/pwnwikizhchannel/524...
PYSEC-2021-131
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to external IP addresses when calculating the key...
Cross site request forgery (csrf)
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to external IP addresses when calculating the key...
USN-4751-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.8, linux-kvm, linux-oracle, linux-raspi vulnerabilities
It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-25656 Minh Yuan discovered that the tty driver in the Linux kernel contained race conditions when handling...
CVE-2021-27513
creationtimestamp| type| source ---|---|--- 2021-02-22 02:53:39+00:00| seen| https://t.me/cibsecurity/23894 2021-02-22 02:53:40+00:00| seen| https://t.me/cibsecurity/23895...
CVE-2020-8625
creationtimestamp| type| source ---|---|--- 2021-02-18 02:49:29+00:00| seen| https://t.me/cibsecurity/23791 2021-02-22 14:45:11+00:00| seen| https://t.me/CyberSecurityTechnologies/2759 2021-06-10 02:58:23+00:00| seen| Telegram/2f0bY5eTPGcC0pb-3D0fQKJ-gFOqNTjY0bD2TQfBuCgb5E 2026-07-29...
RACOM M!DGE Information Disclosure Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. An information disclosure vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit the...