6929 matches found
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
The plugin does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to be updated belong to the plugin. As a result, unauthenticated attackers could update arbitrary blog options, such as the default role and make any...
CVE-2021-43798
creationtimestamp| type| source ---|---|--- 2021-12-07 13:19:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/917 2021-12-07 15:48:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/918 2021-12-07 17:34:45+00:00| published-proof-of-concept|...
CVE-2021-40094
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...
Design/Logic Flaw
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...
CVE-2021-40094
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...
CVE-2021-24943
creationtimestamp| type| source ---|---|--- 2021-12-06 18:21:01+00:00| seen| https://t.me/cibsecurity/33388 2026-03-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-03-10 2026-06-14 00:00:00+00:00| exploited| The Shadowserver...
Several Zoho ManageEngine products have been exploited
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. Multiple vulnerabilities have been discovered in Zoho ManageEngine products. The affected products include Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine SupportCenter Plus, Zoho ManageEngine Desktop Central, Zoho...
Victure WR1200 Trust Management Issue Vulnerability
Victure WR1200 is a router. A trust management issue vulnerability exists in Victure WR1200, which can be exploited by attackers to scan Wi-Fi networks for default keys...
Serva Server Remote Buffer Overflow Vulnerability
Vercot Serva is an automated Pxe server solution gas pedal based on an all-in-one portable multi-server engine from Vercot U.S. Serva is vulnerable to a server remote buffer overflow vulnerability that could be exploited by an attacker to cause a denial of service...
Gerapy Authentication Remote Command Execution Vulnerability
Gerapy is a crawler framework based on the Scrapy Scrapyd Scrapyd Client Scrapyd API Django. Gerapy authenticates remote command execution vulnerabilities, which can be exploited by attackers to gain control of the server...
Dell Networking OS10 Resource Management Error Vulnerability
Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. Dell Networking OS10 is vulnerable to a resource management error that could be exploited by attackers to cause a denial of service...
Dell Networking OS10 Elevation of Privilege Vulnerability
Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. An elevation of privilege vulnerability exists in Dell Networking OS10, which could be exploited by an attacker with specific API access to gain administrator privileges on the affected system...
Vim Buffer Overflow Vulnerability (CNVD-2022-05069)
Vim is a UNIX-based editor, and a buffer overflow vulnerability exists in Vim, which stems from the product's failure to properly determine memory boundaries and can be exploited by attackers to cause a buffer overflow...
Commvault CommCell Authentication Bypass Vulnerability
Commvault CommCell enables fast, large-scale backup and recovery of virtual machines, structured and unstructured data.An authentication bypass vulnerability exists in the CVSearchService service in versions of Commvault CommCell prior to 11.25, which could be exploited by an attacker to bypass...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-90760)
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-90761)
Open-xchange OX App Suite is a Web cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited by...
Gallagher Command Centre Server Incorrect Privilege Authentication Vulnerability
Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. a security vulnerability exists in the COM interface of Gallagher Command Center Server, which could be exploited by an attacker to retrieve sensitive informatio...
Lantronix PremierWave 2050 Stack Buffer Overflow Vulnerability
The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 has a security vulnerability that could be exploited by an attacker to execute remote code in a vulnerable portion of the branch deletedir...
Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04980)
The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...
CVE-2021-41277
creationtimestamp| type| source ---|---|--- 2021-11-17 22:20:55+00:00| seen| https://t.me/cibsecurity/32567 2021-11-21 13:37:04+00:00| seen| https://t.me/bhhub/640 2021-11-21 13:45:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4802 2021-11-22 13:37:04+00:00| seen|...