ch.qos.logback:logback-access (0.9.22), ch.qos.logback:logback-classic (0.9.22) +1 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.22)

ch.qos.logback:logback-core MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.22 - ch.qos.logback:logback-classic 0.9.22 -...

ch.qos.logback:log4j-bridge (0.9), ch.qos.logback:logback-access (0.9) +2 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9)

ch.qos.logback:logback-core MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9 - ch.qos.logback:logback-access 0.9 - ch.qos.logback:logback-classic 0.9 -...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 Helpers Helpers, examples, and exploits for cv...

8x8: 8x8pilot.com: Reflected XSS in Apache Tomcat /jsp-examples example directory

A single host in the pilot environment exposed the Apache Tomcat /jsp-examples example directory. The issue has been rectified, as we removed the directory from the host...

CVE-2021-42228

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

Cross site scripting

Cross SIte Scripting XSS vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor the file suffix is allowed...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

CVE-2021-42228

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

CVE-2021-42227

CVE-2021-42227 describes a cross‑site scripting (XSS) vulnerability in KindEditor 4.1.x . The weakness is triggered via the editor’s upload flow, specifically related to the file handling in the upload context (e.g., an upload_json.php path) and exposure through a Google search result pointing to...

CVE-2021-42228: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

PT-2021-23564

Name of the Vulnerable Software and Affected Versions KindEditor version 4.1.x Description A Cross Site Request Forgery CSRF issue exists, allowing attackers to trick users into clicking malicious links by uploading an HTML file containing CSRF code on a website using the editor. This can be done...

Exploit for Path Traversal in Microsoft

〖EXP〗Ladon CVE-2021-40444 Office Vulnerability Reimplementatio...

Parameter updates not propagated

Handle gpersoon Vulnerability details Impact There are several functions to update parameters. However these parameters are only updated on the top level and not propagated to the other contracts. This could lead to various unpredictable results. Examples are: setNftHubAddress of RCFactory...

S3-Account-Search - S3 Account Search

This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you will need a role...

ch.qos.logback:log4j-bridge (0.9.4), ch.qos.logback:logback-examples (0.9.4) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.4)

ch.qos.logback:logback-classic MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.4 - ch.qos.logback:logback-examples 0.9.4 Source cves: CVE-2017-592...

ch.qos.logback:logback-access (0.9.16), ch.qos.logback:logback-classic (0.9.16) +12 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.16)

ch.qos.logback:logback-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.16 - ch.qos.logback:logback-classic 0.9.16 -...

ch.qos.logback:log4j-bridge (0.8.1), ch.qos.logback:logback-examples (0.8.1) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.8.1)

ch.qos.logback:logback-classic MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.8.1 - ch.qos.logback:logback-examples 0.8.1 Source cves: CVE-2017-592...

ch.qos.logback:logback-examples (0.9.23) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.23)

ch.qos.logback:logback-classic MAVEN version 0.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.23 Source cves: CVE-2017-5929 Source advisory:...

ch.qos.logback:logback-access (0.9.13), ch.qos.logback:logback-classic (0.9.13) +1 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.13)

ch.qos.logback:logback-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.13 - ch.qos.logback:logback-classic 0.9.13 -...

ch.qos.logback:logback-access (0.9.10), ch.qos.logback:logback-classic (0.9.10) +1 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.10)

ch.qos.logback:logback-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.10 - ch.qos.logback:logback-classic 0.9.10 -...