Eclipse Mosquitto Access Control Error Vulnerability

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . An access control error vulnerability exists in Eclipse Mosquitto version 1.3.0 and prior versions, which can be exploited by a low-privileged attacker with local access to certain Windows versions to inse...

Eclipse Mosquitto Access Control Error Vulnerability (CNVD-2021-36852)

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . An Access Control Error vulnerability exists in Eclipse Mosquitto, which can be exploited by an attacker to insert malware using the component's elevated privileges...

CVE-2021-28826

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker...

Eclipse Mosquitto 访问控制错误漏洞

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . An access control error vulnerability exists in Eclipse Mosquitto version 1.3.0 and prior versions, which can be exploited by a low-privileged attacker with local access to certain Windows versions to inse...

PT-2021-17946

Name of the Vulnerable Software and Affected Versions: TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition versions 1.3.0 and below TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition versions 1.3.0 and below Description: The Windows Installation...

CVE-2021-28826: Incorrect Authorization

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker...

Parsoid comment fostering allows for inserting mostly arbitrary <meta> tags

More info at https://phabricator.wikimedia.org/T279451...

UBUNTU-CVE-2021-3483

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system...

Clear-text insertion of user's passwords into log files

...

CVE-2021-24208 WP Page Builder < 1.2.4 - Multiple Stored Cross-Site scripting (XSS)

The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the “Raw HTML” widget and the “Custom HTML” widgets though the custom HTML widget requires sending a crafted request - it appears that this...

CVE-2021-29933

The CVE concerns the Rust crate insert_many (pre-2021-01-26). Affected behavior arises when resizing a vector used to insert items: the implementation moved items with ptr::copy, then iterated the provided Iterator; if the iterator’s next() panics, the elements may be dropped twice, causing doubl...

Moodle 3.10.3 Cross Site Scripting

Exploit Title: Moodle 3.10.3 - 'label' Persistent Cross Site Scripting Date: 25.03.2021 Author: Vincent666 ibn Winnie Software Link: https://moodle.org/ Tested on: Windows 10 Web Browser: Mozilla Firefox Google Dorks: inurl:/lib/editor/atto/plugins/managefiles/ or calendar/view.php?view=month...

CVE-2021-28822

The Enterprise Message Service Server tibemsd, Enterprise Message Service Central Administration tibemsca, Enterprise Message Service JSON configuration generator tibemsconf2json, and Enterprise Message Service C API components of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO...

CVE-2021-28823

The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating...

CVE-2021-28823

The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating...

CVE-2021-28820

The FTL Server tibftlserver, FTL C API, FTL Golang API, FTL Java API, and FTL .Net API components of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contain a vulnerability that theoretically allows a low privileged attacker...

CVE-2021-28818

The Rendezvous Routing Daemon rvrd, Rendezvous Secure Routing Daemon rvrsd, Rendezvous Secure Daemon rvsd, Rendezvous Cache rvcache, Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API components of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition...

CVE-2021-28819

The Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating...

TIBCO Software TIBCO Rendezvous Developer Edition 安全漏洞

TIBCO Software Rendezvous Routing Daemon is an application component from TIBCO Software, Inc. The component used for TIBCO. A security vulnerability exists in TIBCO Software Rendezvous Routing Daemon that originates from a vulnerability that can be exploited by an attacker to insert malware...

Tibco TIBCO Enterprise Message Service 代码问题漏洞

Tibco TIBCO Enterprise Message Service is an enterprise messaging middleware from Tibco, USA. It is based on the standard Java™ Message Service JMS agent, which allows any JMS-enabled application, whether native or third-party, to exchange messages quickly and easily. A security vulnerability...