49 matches found
CVE-2021-42952
Affected product: Zepl Notebooks. The CVE-2021-42952 entry describes a sandbox-escape flaw that enables Remote Code Execution from a Notebook to escape the sandbox and access internal Zepl assets, including cloud metadata services, effectively compromising cloud assets. The vulnerability affects ...
Description of the security update for SharePoint Server Subscription Edition: January 11, 2022 (KB5002111)
None None...
Hubs Cloud 配置错误漏洞
Hubs Cloud is an application for the Hubs community. All the AWS resources needed to host your own immersive space from your company or organization's own account can be created and managed. A misconfiguration vulnerability exists in Hubs Cloud that stems from a proxy feature built into the...
Microsoft Windows: Turn off game updates
Manages download of game update information from Windows Metadata Services. If you enable this setting, game update information will not be downloaded. If you disable or do not configure this setting, game update information will be downloaded from Windows Metadata Services. C Microsoft Corporati...
GitLab: GitLab::UrlBlocker validation bypass leading to full Server Side Request Forgery
Summary The GitLab::UrlBlocker IP address validation methods suffer from a Time of Check to Time of Use ToCToU vulnerability. The vulnerability occurs due to multiple DNS resolution requests performed before and after the checks. This issue allows a malicious authenticated user to send GET and PO...
Exploit for Link Following in Kubernetes
!Github All Releaseshttps://img.shields.io/github/downloads/...
The eXtensible Catalog (XC) Drupal Toolkit - Critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2015-121
The eXtensible Catalog Drupal Toolkit is a set of Drupal modules to harvest records of the XC Schema format from a Metadata Services Toolkit MST. The XC NCIP Provider module doesn't sufficiently protect some URLs against CSRF. A malicious user can cause a user with "administer ncip providers"...
