4586 matches found
Citrix ADC (NetScaler) Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Forms SSO Target RCE', 'Description' = %q A vulnerability exists within Citrix ADC that allows an unauthenticated attacker t...
CVE-2023-25524: Use of GET Request Method With Sensitive Query Strings
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...
Exploit for Use of Externally-Controlled Format String in Asus Rt-Ac86U_Firmware
CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/t...
CVE-2023-36339
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
Cross site request forgery (csrf)
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
WebBoss.io 安全漏洞
WebBoss.io is a website building platform for professional designers and developers from WebBoss.io. A security vulnerability exists in WebBoss.io CMS version v3.7.0, which stems from an access control issue that allows an attacker to access the website backup tool via a crafted GET request...
CVE-2023-36339
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
CVE-2023-36339
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
PT-2023-25539
Name of the Vulnerable Software and Affected Versions WebBoss.io CMS version 3.7.0.1 Description An access control issue allows attackers to access the Website Backup Tool via a crafted GET request. Recommendations For WebBoss.io CMS version 3.7.0.1, consider restricting access to the Website...
CVE-2023-36339: Incorrect Authorization
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
The vulnerability of D-Link DIR-823G router microprogramming software, related to the failure to take measures to neutralize special elements, allows a hacker to execute arbitrary commands.
The vulnerability of D-Link DIR-823G router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the EXCUSHELL header. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially...
New in Spring 6.1: RestClient
Spring Framework 6.1 M2 introduces the RestClient, a new synchronous HTTP client. As the name suggests, RestClient offers the fluent API of WebClient with the infrastructure of RestTemplate. Fourteen years ago, when RestTemplate was introduced in Spring Framework 3.0, we quickly discovered that...
The vulnerability of the QoSRuleListRpm component (/userRpm/QoSRuleListRpm.htm) in the software for TP-Link routers such as TL-WR940N, TL-WR841N, and TL-WR941N allows a hacker to cause service interruptions.
The vulnerability of the QoSRuleListRpm component /userRpm/QoSRuleListRpm.htm of TP-Link router software products such as TL-WR940N, TL-WR841N, and TL-WR941N lies in the fact that the operation is executed outside the buffer in memory when processing key parameters. Exploiting this vulnerability...
The vulnerability of the AccessCtrlTimeSchedRpm component (/userRpm/AccessCtrlTimeSchedRpm.htm) in the TP-Link routers such as TL-WR940N, TL-WR841N, TL-WR941N, TL-WR940N, and TL-WR740N allows a hacker to cause service failures.
The vulnerability of the AccessCtrlTimeSchedRpm component /userRpm/AccessCtrlTimeSchedRpm.htm of the TP-Link routers TL-WR940N, TL-WR841N, TL-WR941N, TL-WR940N, and TL-WR740N is related to the execution of an operation outside the buffer in memory when processing the Changed parameter. Exploiting...
Cross site request forgery (csrf)
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then...
CVE-2023-35120 PiiGAB M-Bus Cross-Site Request Forgery
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then...
Exploit for Cross-site Scripting in Zotpress_Project Zotpress
CVE-2023-32961 This repository is about XSS vulnerability in...
CVE-2023-35120: Cross-Site Request Forgery (CSRF)
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then...
D-Link DIR-823G Command Execution Vulnerability (CNVD-2023-65130)
The D-Link DIR-823G is a wireless router from China's AUO D-Link. A command execution vulnerability exists in the D-Link DIR-823G version 1.02B05, which stems from the application failing to properly filter construct command special characters, commands, etc. An attacker can exploit this...