9603 matches found
CVE-2020-13851
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
Command injection
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
CVE-2020-13851
CVE-2020-13851 affects Artica Pandora FMS 7.44, enabling remote command execution via the Events feature. The underlying cause is a command-injection vulnerability in Events that could allow unauthenticated attackers to run arbitrary commands, potentially taking control of the Pandora FMS server ...
LSN-0068-1: Kernel Live Patch Security Notice
It was discovered that the virtual terminal implementation in the Linux kernel did not properly handle resize events. A local attacker could use this to expose sensitive information. CVE-2020-8647 It was discovered that the virtual terminal implementation in the Linux kernel contained a race...
SportsPress < 2.7.2 - Authenticated Stored Cross-Site Scripting
Any user with the role of administrator or League Manager is able to store XSS payloads in the custom delimiter setting of events pages. This will then execute on all events pages on the website. PoC Video PoC: https://youtu.be/J8QZ8S6CiS8...
Events Manager < 5.9.8 - Cross-Site Scripting (XSS)
The Events Manager WordPress plugin was affected by a Cross-Site Scripting XSS vulnerability...
Events Manager < 5.9.8 - SQL Injection
The Events Manager plugin was affected by an SQL Injection vulnerability...
Pandora FMS Events Remote Command Execution
This module exploits a vulnerability CVE-2020-13851 in Pandora FMS versions 7.0 NG 742, 7.0 NG 743, and 7.0 NG 744 and perhaps older versions in order to execute arbitrary commands. This module takes advantage of a command injection vulnerability in the Events feature of Pandora FMS. This flaw...
CVE-2018-12099
creationtimestamp| type| source ---|---|--- 2020-06-02 20:46:09+00:00| seen| https://t.me/VulnerabilityNews/14991 2020-06-02 20:46:10+00:00| seen| https://t.me/VulnerabilityNews/14992 2020-06-02 20:46:11+00:00| seen| https://t.me/VulnerabilityNews/14993 2020-06-02 20:55:25+00:00| seen|...
Null pointer dereference
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130...
keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP
A flaw was found in keycloak. BruteForceProtector does not handle Conditional OTP Authentication Flow login failure events due to these events not being sent to the brute force protection event queue. The highest threat from this vulnerability is to data confidentiality and integrity as well as...
CVE-2020-10636
creationtimestamp| type| source ---|---|--- 2020-05-27 11:15:02+00:00| seen| https://t.me/SecLabNews/7686 2022-02-24 22:15:10+00:00| seen| https://t.me/cibsecurity/38053...
Spam and phishing in Q1 2020
Quarterly highlights Don't get burned Burning Man is one of the most eagerly awaited events among fans of spectacular performance and installation art. The main obstacle to attending is the price of admission: a standard ticket will set you back $475, the number is limited, and the buying process...
CVE-2020-0986
creationtimestamp| type| source ---|---|--- 2020-05-20 16:44:14+00:00| seen| https://t.me/informationsecuritychannel/37956 2020-08-12 10:03:34+00:00| published-proof-of-concept| https://t.me/cKure/1816 2020-08-13 07:17:30+00:00| seen| MISP/ee40784a-dec9-4f4a-b95c-3d760d8a1e2a 2020-09-02...
CVE-2020-8481
creationtimestamp| type| source ---|---|--- 2020-05-20 14:27:36+00:00| seen| https://t.me/icscert/282 2020-05-20 14:27:39+00:00| seen| https://t.me/icscert/326...
CVE-2020-8474
creationtimestamp| type| source ---|---|--- 2020-05-20 14:27:36+00:00| seen| https://t.me/icscert/282 2020-05-20 14:27:39+00:00| seen| https://t.me/icscert/326...
CVE-2020-8486
creationtimestamp| type| source ---|---|--- 2020-05-20 14:27:36+00:00| seen| https://t.me/icscert/282 2020-05-20 14:27:39+00:00| seen| https://t.me/icscert/326...
CVE-2020-8477
creationtimestamp| type| source ---|---|--- 2020-05-20 14:27:36+00:00| seen| https://t.me/icscert/282 2020-05-20 14:27:39+00:00| seen| https://t.me/icscert/326...