1079 matches found
Server side request forgery (ssrf)
UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...
CVE-2020-21122
UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...
CVE-2020-21122
CVE-2020-21122 affects UReport v2.2.9 and involves a Server-Side Request Forgery (SSRF) in the designer page. The underlying issue allows an attacker to detect intranet device ports. The linked external records (RH Red Hat, OSV, CNVD, CNNVD, GHSA, etc.) consistently describe the same vulnerabilit...
UReport 代码问题漏洞
UReport is a high-performance pure Java reporting engine based on the Spring architecture. a server-side request forgery vulnerability exists in the designer page of UReport version 2.2.9. An attacker can use this vulnerability to detect intranet device ports...
What are the benefits of having ‘pandemic’ software in post-coronavirus pandemic business?
By Owais Sultan The coronavirus pandemic has brought about many new tools for businesses to use. However, it has also brought older tools back into the spotlight and tools that have blossomed with the help of extra funding. Lets discuss the options that have come into prominence during the COVID-...
Misskey 代码问题漏洞
Misskey is a micro-blogging platform, and a code issue vulnerability exists in Misskey due to a server-side request forgery vulnerability in the software's "upload from URL" and remote attachment handling. This could lead to the disclosure of non-public information on the intranet. No details of...
CVE-2020-14160
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources...
Server side request forgery (ssrf)
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources...
CVE-2020-14160
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources...
CVE-2020-14160
Gotenberg up to version 6.2.1 contains an SSRF in the remote URL to PDF conversion, allowing an attacker to read local files or access intranet resources. Affected component is the PDF conversion endpoint that processes remote URLs. The issue is evidenced across multiple sources (NVD description ...
Gotenberg 代码问题漏洞
Thecodingmachine Gotenberg is Victornpb Thecodingmachine individual developers of a Go-based HTML, Markdown and Office documents can be converted to PDF applications. The application is based on Docker's stateless API can be used to support building web applications. Gotenberg A security...
Understanding Network Access in Windows AppContainers
Posted by James Forshaw, Project Zero Recently I've been delving into the inner workings of the Windows Firewall. This is interesting to me as it's used to enforce various restrictions such as whether AppContainer sandboxed applications can access the network. Being able to bypass network...
eCh0raix Ransomware Variant Targets QNAP, Synology NAS Devices
Operators of the nearly-year-old eCh0raix ransomware strain that’s been used to target QNAP and Synology network-attached storage NAS devices in past, separate campaigns have, gotten more efficient. According to researchers, both have put out a new variant that can target either vendors’ devices ...
WordPress Plugin RSVPMaker 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
Weak Password Vulnerability in IMWorks Instant Messaging Software
IMworks enterprise instant messaging software official version is an instant messaging tool launched by the enterprise information, can assist users to build a LAN intranet. IMWorks instant messaging software has a weak password vulnerability that can be exploited by attackers to obtain sensitive...
Halo Server-Side Request Forgery Vulnerability
Halo is a light and clean Java blogging system. A server-side request forgery vulnerability exists in the SMTP configuration in Halo 1.3.2 and earlier versions, which can be exploited by an attacker to detect a server intranet...
IBM Sterling Secure Proxy 代码问题漏洞
IBM Sterling Secure Proxy is an International Business Machines Corporation IBM application proxy for securing file transfers in an organization's unprotected zone DMZ. IBM Sterling Secure Proxy has a server-side request forgery vulnerability vulnerability that originates from a server that fails...
CVE-2020-23079
SSRF vulnerability in Halo =1.3.2 exists in the SMTP configuration, which can detect the server intranet...