CVE-2021-33824

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

CVE-2021-33822

An issue was discovered on 4GEE ROUTER HH70VB Version HH70E102.0022. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

JVN#21298724: Hitachi Virtual File Platform vulnerable to OS command injection

Hitachi Virtual File Platform provided by Hitachi contains an OS command injection vulnerability CWE-78 due to a flaw in processing parameters of the HTTP requests. Impact A remote attacker who can log in to the product may execute an arbitrary OS command with root privilege. Solution Update the...

MOXA MGate MB3180: Resource management error vulnerability

The MOXA MGate MB3180 is a technology product with a port transfer rate of 0.9216 Mbps. A denial of service exists in MOXA Mgate MB3180 version 2.1 Build 18113012. An attacker can exploit this vulnerability by sending an incomplete HTTP request using the slowhttptest utility to exhaust the...

PT-2021-20332

Name of the Vulnerable Software and Affected Versions: UniFi Protect G3 FLEX Camera version UVC.v4.30.0.67 Description: An issue was discovered in the UniFi Protect G3 FLEX Camera, where attackers can use the slowhttptest tool to send incomplete HTTP requests. This could make the server keep...

PT-2021-20337

Name of the Vulnerable Software and Affected Versions: MOXA Mgate MB3180 version 2.1 Build 18113012 Description: An issue allows attackers to send incomplete HTTP requests using the slowhttptest tool, causing the server to wait for the packet to finish the connection until its resources are...

PT-2021-20335

Name of the Vulnerable Software and Affected Versions: 4GEE ROUTER HH70VB version HH70 E1 02.00 22 Description: An issue allows attackers to send incomplete HTTP requests using tools like slowhttptest, causing the server to wait for the packet to finish the connection until its resources are...

PT-2021-3855

Name of the Vulnerable Software and Affected Versions FortiMail versions prior to 6.4.4 Description The issue is related to the improper neutralization of special elements used in an OS command in the administrative interface of FortiMail. This could allow a remote attacker to execute arbitrary...

CKEditor 3 - Server-Side Request Forgery Vulnerability

Exploit Title: CKEditor 3 - Server-Side Request Forgery SSRF Google Dorks : inurl /editor/filemanager/connectors/uploadtest.html Exploit Author: Blackangel Software Link: https://ckeditor.com/ Version:all version under 4 1,2,3 Tested on: windows 7 Steps of Exploit:- 1-using google dorks inurl...

CKEditor 3 Server-Side Request Forgery

Exploit Title: CKEditor 3 - Server-Side Request Forgery SSRF Google Dorks : inurl /editor/filemanager/connectors/uploadtest.html Date: 12-6-2021 Exploit Author: Blackangel Software Link: https://ckeditor.com/ Version:all version under 4 1,2,3 Tested on: windows 7 Steps of Exploit:- 1-using google...

CKEditor 3 - Server-Side Request Forgery (SSRF)

Exploit Title: CKEditor 3 - Server-Side Request Forgery SSRF Google Dorks : inurl /editor/filemanager/connectors/uploadtest.html Date: 12-6-2021 Exploit Author: Blackangel Software Link: https://ckeditor.com/ Version:all version under 4 1,2,3 Tested on: windows 7 Steps of Exploit:- 1-using google...

SUSE SLES11 Security Update : curl (SUSE-SU-2021:14707-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14707-1 advisory. - curl 7.1.1 to and including 7.75.0 is vulnerable to an Exposure of Private Personal Information to an Unauthorized Actor by leaking credentials in t...

SUSE: Security Advisory (SUSE-SU-2018:3970-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MTN Group: Blind SSRF External Interaction on https://mtngbissau.com/

Hii Security Team, I am S Rahul MCEHMetaxone Certified Ethical Hacker and a Security Researcher I just checked your website and found Blind SSRF External Interaction on https://mtngbissau.com/ What is SSRF? Server-side request forgery also known as SSRF is a web security vulnerability that allows...

CVE-2021-20380

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

CVE-2021-20380

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

Information disclosure

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

CVE-2021-20380

CVE-2021-20380 affects IBM QRadar Advisor With Watson App (versions 1.1–2.5) used with IBM QRadar SIEM 7.4, where a remote attacker could obtain sensitive information from HTTP requests, enabling potential further attacks. The incident originates from information exposure within the QRadar Adviso...

CVE-2021-20380

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

PT-2021-13929

Name of the Vulnerable Software and Affected Versions: IBM QRadar Advisor With Watson App versions 1.1 through 2.5 Description: The issue allows a remote user to obtain sensitive information from HTTP requests, which could aid in further attacks against the system. Recommendations: For IBM QRadar...