CVE-2021-36933

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

CVE-2021-26433

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

CVE-2021-36933

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

CVE-2021-26433

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

The vulnerability of the MS-EFSRPC protocol in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the MS-EFSRPC protocol in Windows operating systems is related to errors in processing SMB requests during authentication procedures. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

CVE-2021-26098

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess

This is a PoC Proof of Concept exploit for CVE-2016-0856, a vulnerability in the Windows RPC Remote Procedure Call service. The exploit targets the RpcClient and RpcDcClient classes in the bwconn.dll library. The exploit is written in Python and uses the ctypes library to interact with the Window...

Fortinet FortiSandbox 安全特征问题漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. A security signature issue vulnerability exists in the Fortinet FortiSandbox R...

impacket1472

This is a Python library called Impacket, which provides a collection of classes for working with network protocols. The library is focused on providing low-level programmatic access to the packets and for some protocols e.g. SMB1-3 and MSRPC the protocol implementation itself. The library includ...

PT-2021-20262 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL64NUC 7.21,...

gRPC Swift 资源管理错误漏洞

gRPC Swift is the open source Swift language implementation of gRPC, which includes a gRPC Swift API and code generator. The API and generated code are provided for gRPC clients and servers and can be built using Xcode or the Swift Package Manager. gRPC Swift contains a security vulnerability...

Apache Dubbo suffers from a deserialization vulnerability

Apache Dubbo is Apache's a lightweight Java-based RPC Remote Procedure Call framework. Apache Dubbo has a deserialization vulnerability that can be exploited by an attacker to gain control of the server...

Unspecified Vulnerability in Apache Dubbo (CNVD-2021-41082)

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. The product provides interface-based remote calling , fault tolerance and load balancing and automatic service registration and discovery. A security vulnerability exists in...

Apache Dubbo Deserialization Vulnerability (CNVD-2021-41088)

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. The product provides interface-based remote calling , fault tolerance and load balancing and automatic service registration and discovery. A deserialization vulnerability...

The vulnerability in the virtual training environment Moodle arises due to insufficient cleaning of data provided by users in XML-RPC calls, allowing attackers to execute arbitrary SQL queries.

The vulnerability in the virtual training environment Moodle exists due to insufficient cleaning of data provided by users in XML-RPC calls. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

CVE-2018-10865

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC method on any host accessible by the system, even if not belonging to him...

Red Hat Certification 授权问题漏洞

Red Hat Certification is a software package from Red Hat USA. A security vulnerability exists in redhat-certification 7 that allows an unauthenticated user to invoke the "restart" RPC method on any accessible host. An attacker could exploit this vulnerability to cause a denial of service...

PT-2021-8694 · Red Hat · Redhat-Certification

Name of the Vulnerable Software and Affected Versions: redhat-certification version 7 Description: The issue allows an unauthenticated user to perform a "Billion Laugh Attack" by replying to XMLRPC methods when getting the status of a host, due to the improper restriction of recursive definitions...

Red Hat Certification 安全漏洞

Red Hat Certification is a software package from Red Hat USA. A security vulnerability exists in Red Hat-certification 7 that allows an unauthenticated user to invoke the "restart" RPC method on any accessible host. An attacker could exploit this vulnerability to cause a denial of service...

Remote Procedure Calls

linux kernel is vulnerable to remote procedure calls. The vulnerabilities exists due to fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages...