282 matches found
PT-2023-32996 · Unknown · Presto Jdbc
Name of the Vulnerable Software and Affected Versions: Presto JDBC affected versions not specified Description: The issue allows for Server-Side Request Forgery SSRF when connecting to a remote Presto server. An attacker can modify the nextUri parameter to point to an internal server, causing the...
Arbitrary File Read
OpenRefine is vulnerable to Arbitrary File Read. The vulnerability due to improper jdbc url sanitization, which allows an attacker to set the allowLoadLocalInfile value to true by passing it through the databaseName parameter. This can be exploited to read sensitive internal server files...
"Internal Server Error 43549" response from Gateway with malformed request "/epatype?Param"
Security scanning report vulnerability on ADC: Web Server Misconfiguration - Server Error Message when http request url includes "/epatype?"...
iOS Workspace Error "Http/1.1 Internal Server Error 43549" via Gateway nFactor Authentication
Workspace for iOS shows "Http/1.1 Internal Server Error 43549" after successful authentication via NetScaler Gateway. Workspace for Windows works fine. AAA nFactorauthentication profile is configured in NetScaler Gateway...
SAML Intermittence on Citrix Gateway: Internal server error 43524
Users may experience intermittent issues during the SAML configuration process on Citrix Gateway. This can result in unpredictable behavior, with some users successfully accessing the SAML login while others encountering an "Internal server error 43524" message...
Nextcloud: Error when editing a calendar appointment returns stacktrace and query
A vulnerability was found where editing a calendar appointment and changing the ID to a non-existent value returned an error exposing internal server paths and an SQL query. The issue allowed disclosure of sensitive information...
UNISOC Chipsets 缓冲区错误漏洞
UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in some UNISOC products, which stems from a lack of boundary checking in the iwnpi server and may result in out-of-bounds writes. The following products are affected:...
Concrete5 CME v9.1.3 - Xpath injection
Exploit Title: Concrete5 CME v9.1.3 - Xpath injection Author: nu11secur1ty Date: 11.28.2022 Vendor: https://www.concretecms.org/ Software: https://www.concretecms.org/download Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/concretecms.org/2022/concretecms-9.1.3...
Blind LFI in register-model/get?name=
Description A blind LFI exists in /ajax-api/2.0/mlflow/registered-models/get?name= The response from the server is different depending on if the file exists on the local file system or not. When the arbitrary local file exists, the server responds with 500 INTERNAL SERVER ERROR and when it doesn'...
CVE-2023-26492 Directus vulnerable to Server-Side Request Forgery On File Import
Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery SSRF when importing a file from a remote web server POST to /files/import. An attacker can bypass the security controls by performing a DNS rebinding attack and...
PT-2023-20682 · Directus · Directus
Name of the Vulnerable Software and Affected Versions: Directus versions prior to 9.23.0 Description: Directus is a real-time API and App dashboard for managing SQL database content. It is vulnerable to Server-Side Request Forgery SSRF when importing a file from a remote web server via a POST...
SUSE CVE-2013-2074
kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message...
SUSE CVE-2015-5314
The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...
CVE-2022-39178
Webvendome - webvendome Internal Server IP Disclosure. Send GET Request to the request which is shown in the picture. Internal Server IP and Full path disclosure...
CVE-2022-39178 Webvendome - webvendome Internal Server IP Disclosure
Webvendome - webvendome Internal Server IP Disclosure. Send GET Request to the request which is shown in the picture. Internal Server IP and Full path disclosure...
PT-2022-24792 · Unknown · Webvendome
Name of the Vulnerable Software and Affected Versions: Webvendome affected versions not specified Description: The issue concerns an internal server IP disclosure in Webvendome. It can be triggered by sending a GET request to a specific endpoint, although the exact endpoint is not specified in th...
Webvendome 路径遍历漏洞
Webvendome is an application from Webvendome, Inc. Webvendome suffers from a path traversal vulnerability that stems from an internal server IP and full path disclosure, which can be exploited by an attacker to send GET requests...
SSRF via Plugin SMTP
Description The SMTP plugin doesn't have verification or validation, allowing the attacker to make requests to internal servers and get the contents. Reproduce 1. Go to Team & Settings 2. App Store SMTP 3. Configure and intercept Test request 4. Change Host/Port to internal address, example:...
U.S. Dept Of Defense: Unauthorized Access to Internal Server Panel without Authentication
The server can be accessed without any authentication and it contains information that should not be kept public for anyone. I advice you to take look if this data are sensitive or not! References ███████ Impact There might be sensitive info that should not have to be leaked to public. System Hos...
