10763 matches found
CVE-2021-28953
The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository...
Joseph Benden C/C++ Advanced Lint 代码问题漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code injection vulnerability in Microsoft Visual Studio Code unofficial C/C++ Advanced Lint extension prior to version 1.9.0 can be exploited by an attacker to execute arbitrary binaries when a user opens a carefully...
Exploit for Generation of Error Message Containing Sensitive Information in Zohocorp Manageengine_Servicedesk_Plus_Msp
Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User...
Compass Plus e-Commerce Payment Gateway 代码问题漏洞
Compass Plus e-Commerce Payment Gateway is an application interface of the Russian company Compass Plus. It provides an API interface for payment functions. A security vulnerability exists in TranzWare e-Commerce Payment Gateway before 3.1.27.5, which is caused by a vulnerability in the XML parse...
New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild
Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...
Zoho ManageEngine ServiceDesk Plus Authentication Bypass Vulnerability
Zoho ManageEngine ServiceDesk Plus SDP is a web-based IT helpdesk software with integrated asset and project management capabilities, based on the ITIL framework. An authentication bypass vulnerability exists in Zoho ManageEngine ServiceDesk Plus prior to version 11134 during SAML login. No detai...
CVE-2020-35682
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
CVE-2020-35682
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
Authentication flaw
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
CVE-2020-35682
CVE-2020-35682 affects Zoho ManageEngine ServiceDesk Plus prior to version 11134, where an Authentication Bypass can occur during SAML login due to the underlying authorization flaw. Public sources consistently describe an SAML-login bypass leading to elevated access; patches exist to reach versi...
ZOHO ManageEngine ServiceDesk Plus 安全漏洞
Zoho ManageEngine ServiceDesk Plus SDP is a web-based IT helpdesk software with integrated asset and project management capabilities, based on the ITIL framework. An authentication bypass vulnerability exists in Zoho ManageEngine ServiceDesk Plus prior to version 11134 during SAML login. No detai...
WordPress The Plus Addons for Elementor插件身份验证绕过漏洞（CVE-2021-24175）
...
Sandboxie Plus 0.7.2 Unquoted Service Path
Exploit Title: Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path Date: 2021-1-20 Exploit Author: Mohammed Alshehri Vendor Homepage: sandboxie-plus.com Software Link: https://github.com/sandboxie-plus/Sandboxie/releases/download/0.7.2/Sandboxie-Plus-x64-v0.7.2.exe Version: Version 0.7.2 Test...
Microsoft Directx 安全漏洞
Microsoft Directx is a tool from Microsoft that is designed to fix Windows anomalies. This software repair tool automatically updates C++ components and fixes the 0xc000007b problem exception. A security vulnerability exists in Microsoft Directx. The following products and editions are affected:...
Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path
Exploit Title: Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path Date: 2021-1-20 Exploit Author: Mohammed Alshehri Vendor Homepage: sandboxie-plus.com Software Link: https://github.com/sandboxie-plus/Sandboxie/releases/download/0.7.2/Sandboxie-Plus-x64-v0.7.2.exe Version: Version 0.7.2 Test...
Sandboxie Plus v0.7.2 - (SbieSvc) Unquoted Service Path Vulnerability
Exploit Title: Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path Exploit Author: Mohammed Alshehri Vendor Homepage: sandboxie-plus.com Software Link: https://github.com/sandboxie-plus/Sandboxie/releases/download/0.7.2/Sandboxie-Plus-x64-v0.7.2.exe Version: Version 0.7.2 Tested on: Microsoft...
Zoho ManageEngine ADSelfService Plus跨站脚本漏洞
ZOHO ManageEngine ADSelfService Plus, an integrated self-service password management and single sign-on solution for Active Directory and cloud applications from ZOHO, is vulnerable to cross-site scripting. A cross-site scripting vulnerability exists in Zoho ManageEngine ADSelfService Plus, which...
VulnCheck KEV: CVE-2021-24175
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user including admin by just providing the related username, as well as create accounts with...
Zoho ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-17218)
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A cross-site scripting vulnerability exists in versions prior to Zoho ManageEngine ADManager Plus 7066. No detailed vulnerability details are provided at this time...