6621 matches found
cve-2020-7247-exploit
cve-2020-7247-exploit Python 对 cve-2020-7247 的利用程序 了解该漏洞： https://blog.firosolutions.com/exploits/opensmtpd-remote-vulnerability/...
vulnhuntr
利用 LLM 和静态代码分析识别可远程利用漏洞的工具。 全球首个由 AI 自主发现的 0day 漏洞 描述 Vulnhuntr 利用 LLM 的强大能力，自动构建并分析从远程用户输入开始、到服务器输出结束的完整代码调用链，以检测复杂的、多步骤的、能够绕过安全防护的漏洞，其能力远超传统静态代码分析工具。在此查看所有细节，包括 Vulnhuntr 对所有 0day 漏洞的输出：Protect AI Vulnhuntr 博客 已发现的漏洞 !TIP 使用 Vulnhuntr 发现了漏洞？向 huntr.com 提交报告即可获得赏金，并提交 PR 将其添加到下方列表中！ !NOTE...
Dzzoffice 2.02.1 - Cross-Site Scripting
Dzzoffice 2.02.1SCUTF8 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the zero parameter. id: CVE-2021-30203 info: name: Dzzoffice 2.02.1 - Cross-Site Scripting author: arafatansari severity: high description: | Dzzoffice...
CVE-2014-6271
CVE-2014-6271 自动修复bash的方式 测试漏洞 你可以通过执行以下测试来确定是否受到影响： env x=' :;; echo vulnerable' bash -c 'echo hello' 修复漏洞 在命令行中运行以下命令。可能会提示你输入密码。 bash curl -s https://raw.githubusercontent.com/mattclegg/CVE-2014-6271/master/patch-mac.sh 致谢 基于 http://alblue.bandlem.com/2014/09/bash-remote-vulnerability.html...
AWStats <= 7.5 - Full Path Disclosure
AWStats 7.6 contains a full path disclosure caused by improper handling of framename and update parameters in awstats.pl, letting remote attackers determine server file paths, exploit requires sending crafted parameters. id: CVE-2018-10245 info: name: AWStats = 7.5 - Full Path Disclosure author:...
Grandstream UCM6200 - SQL Injection
Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...
SAP Solution Manager 7.2 - Remote Command Execution
SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the download process in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
In DevTools of Google Chrome, out-of-bounds memory access prior to version 136.0.7103.59 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in WebRTC in Google Chrome prior to version 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in the Web Audio API in Google Chrome prior to version 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in ANGLE in Google Chrome prior to version 125.0.6422.76 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass the mixed content policy through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after free in ANGLE in Google Chrome before version 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
The use of “after free” in Accessibility in Google Chrome before version 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected include Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, and 22.0.0.2. This easily exploitable...