14437 matches found
Security feature bypass
Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality...
Design/Logic Flaw
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally...
Synacor Zimbra Collaboration Server 代码问题漏洞
Synacor Zimbra Collaboration Server ZCS is a suite of email and collaboration solutions from Synacor, USA. The solution provides email, contacts, calendar, file sharing, social networking, and other features. A security vulnerability exists in Synacor Zimbra Collaboration Server version v.8.8.15,...
Exploit for Deserialization of Untrusted Data in Spip
This PoC was wrote quickly, it's nothing special. This e...
PT-2023-23220 · Diagon · Diagon
Name of the Vulnerable Software and Affected Versions: Diagon version 1.0.139 Description: An issue exists in the GraphPlanar::Write functionality of Diagon. A specially crafted input, such as a markdown file or a network request, can lead to memory corruption or a heap buffer overflow. This can ...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-2302)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
How to configure EPA domain check combined with Smartaccess feature
Configuring the EPA policy to identify the Client domainjoined info, distinguishing with/without the domain info, then enumerating different resources for user...
HackerOne: inviting collaborator using email disclose the hackerone account related to the user
The new HackerOne collaborator feature allowed users to disclose the HackerOne account associated with an email address without the invitee's interaction...
CVE-2021-4387
The Opal Estate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.11. This is due to missing or incorrect nonce validation on the opalestatesetfeatureproperty and opalestateremovefeatureproperty functions. This makes it possible for...
CVE-2023-30586
A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine API can be used to bypass...
CVE-2021-34506
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2021-31982
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2021-34506
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
Security feature bypass
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
Security feature bypass
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
FreeBSD : mediawiki -- multiple vulnerabilities (95dad123-180e-11ee-86ba-080027eda32c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 95dad123-180e-11ee-86ba-080027eda32c advisory. - guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are...
WordPress Plugin WP Opal Estate 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2023-30586
A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine API can be used to bypass...
CVE-2023-30586
A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine API can be used to bypass...
CVE-2023-30586
A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine API can be used to bypass...