CVE-2021-26716

Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter...

CVE-2021-26716: Improper Neutralization of Input During Web Page Generation

Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter...

PT-2021-9456

Name of the Vulnerable Software and Affected Versions IntelR Server Boards, Server Systems and Compute Modules versions prior to 2.47 Description A buffer overflow in the BMC firmware may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations For...

Cross site scripting

Out of bounds read in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

Heap overflow

Heap overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Insufficient input validation in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12376

CVE-2020-12376 affects Intel® Server Boards, Server Systems and Compute Modules BMC firmware. The issue is use of a hard-coded key in firmware before version 2.47, potentially enabling information disclosure via local access by an authenticated user. Intel’s advisory Intel‑SA‑00434 confirms the v...

PT-2021-2011

Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security affected versions not specified Kaspersky Rescue Disk affected versions not specified Description: A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of...

PYSEC-2021-68

An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a memory leak that may result in a local denial of service DoS...

microprogramming software Input

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

server boards Privilege Escalation

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

microprogrammed software unauthorized access

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the use of rigidly encrypted credentials. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

microprogramming software buffer overflow

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

Metasploit Wrap-Up

MicroFocus? More like MacroVuln MicroFocus’s Operations Bridge Manager is a security information and event management SIEM tool designed to collect and parse security logs from multiple disparate sources. OBM has a large attack surface—something Pedro Ribeiro was able to take advantage of with hi...

PT-2021-30948

Уязвимость функции init parsec secid модуля ядра linux-astra-modules связана с некорректным освобождением памяти после завершения её использования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Exploit for Missing Authorization in Linuxfoundation Harbor

Ary Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。 版本：2.1.1 公开版 作者： Ali0th 联系： [email protected] 主页： github.com/Martin2877 声明：本工具仅供学习、测试使用，严禁用于非法用途，开发者对使用者的违法行为不负责任。 交流：欢迎提issue，或私信我加入工具使用交流群。 下载 前往releases下载 相关文档 我的一键 getshell 代码开发之路v1.8.pdf 功能 注意，部分功能还在开发中 0. 信息收集工具开发中 1. 通过多个网络空间的搜索引擎批量爬取相应网站, 如...

Intel Squashes High-Severity Graphics Driver Flaws

Intel has issued fixes for five high-severity vulnerabilities in its graphics drivers. Attackers can exploit these flaws to launch an array of malicious attacks – such as escalating their privileges, stealing sensitive data or launching denial-of-service attacks. The graphics driver is software...

Dependency Confusion Supply-Chain Attack Hit Over 35 High-Profile Companies

In what's a novel supply chain attack, a security researcher managed to breach over 35 major companies' internal systems, including that of Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, and achieve remote code execution. The technique, called dependency confusion or a...

PT-2021-11586

Name of the Vulnerable Software and Affected Versions: InoERP version 0.7.2 Description: The issue allows an unauthorized attacker to execute arbitrary code on the server side due to a lack of validations in the /modules/sys/form personalization/json fp.php API endpoint. Recommendations: For InoE...

Intel® Server Boards, Server Systems and Compute Modules Advisory

Summary: Potential security vulnerabilities in some Intel® Server Boards, Server Systems and Compute Modules Baseboard Management Controller BMC firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities...