16 matches found
EUVD-2021-26482
Malware in sbrugna...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
Mubu Authorization Issues Vulnerability
Mubu is a platform for online writing from Mubu, a company based in Beijing, China. An authorization issue vulnerability exists in Mubu version 2.2.1, which stems from its failure to strictly limit user privileges and can be exploited by a local attacker to execute system commands...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
Design/Logic Flaw
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2021-3134
CVE-2021-3134 affects Mubu 2.2.1. The vulnerability is a local privilege escalation: a local attacker can gain privileges to execute system commands. Root cause cited in connected records is an authorization issue stemming from failure to strictly limit user privileges (CNVD-2020-68878). The rela...
北京坤豆 Mubu 授权问题漏洞
Mubu is a platform for online writing from Mubu, a company based in Beijing, China. An authorization issue vulnerability exists in Mubu version 2.2.1, which stems from its failure to strictly limit user privileges and can be exploited by a local attacker to execute system commands...
CVE-2021-3134: Undefined Security Weakness
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2018-19286
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
Code injection
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
CVE-2018-19286
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
CVE-2018-19286
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
CVE-2018-19286
CVE-2018-19286 describes an XSS vulnerability in the mubu note server. An attacker can trigger XSS by configuring an account with a crafted name value (together with an arbitrary username) when creating and sharing a note, enabling the attacker to inject script via the name field. The NVD summary...
CVE-2018-19286: Improper Neutralization of Input During Web Page Generation
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...