Pocsuite

This project is an open-sourced remote vulnerability testing and proof-of-concept development framework called Pocsuite. It is developed by the Knownsec 404 Team and supports Python 2.6+. The framework comes with a powerful proof-of-concept engine and many niche features for penetration testers a...

CVE-2021-20766

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

[ASA-202108-5] opera: multiple issues

Arch Linux Security Advisory ASA-202108-5 ========================================= Severity: High Date : 2021-08-10 CVE-ID : CVE-2021-30565 CVE-2021-30566 CVE-2021-30567 CVE-2021-30568 CVE-2021-30569 CVE-2021-30571 CVE-2021-30572 CVE-2021-30573 CVE-2021-30574 CVE-2021-30575 CVE-2021-30576...

Helpsystems HelpSystems Cobalt Strike 安全漏洞

HelpSystems HelpSystems Cobalt Strike is a penetration testing software from HelpSystems USA. A security vulnerability in Team Server for HelpSystems Cobalt Strike 4.2 and 4.3 allows remote attackers to crash a C2 server thread and prevent beacons from communicating with it...

CVE-2021-32465

An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute...

DEBIAN-CVE-2021-30541

Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from deficiencies in handling exceptional states, which allows attackers to disclose protected information.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the...

IBM WebSphere Application Server 安全漏洞

IBM WebSphere Application Server WAS is an application server developed and distributed by IBM in compliance with open standards, such as Java EE, XML and Web Services. IBM WebSphere Application Server versions 7.0, 8.0, 8.5, 9.0 An elevation of privilege vulnerability exists. A remote attacker...

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

SourceCodester Content Management System 跨站脚本漏洞

SourceCodester Content Management System is an application. A simple PHP/library MySQLi to manage content items for a simple website. sourceCodester Content Management System has a security vulnerability that can be exploited by remote attackers to inject arbitrary web scripts or HTML...

CVE-2021-2371

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

[ASA-202107-47] chromium: multiple issues

Arch Linux Security Advisory ASA-202107-47 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30565 CVE-2021-30566 CVE-2021-30567 CVE-2021-30568 CVE-2021-30569 CVE-2021-30571 CVE-2021-30572 CVE-2021-30573 CVE-2021-30574 CVE-2021-30575 CVE-2021-30576...

The vulnerability of the libradius kernel service in the FreeBSD operating system allows a hacker to cause a service failure.

The vulnerability of the libradius kernel service in the FreeBSD operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cross site scripting

A remote cross-site scripting XSS vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below; Aruba Instant 8.3.x: 8.3.0.7 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aru...

CVE-2021-29150

A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29150

Summary: CVE-2021-29150 is a remote insecure deserialization vulnerability in Aruba ClearPass Policy Manager, affecting versions prior to 6.10.0, 6.9.6, and 6.8.9. The issue is addressed by Aruba in updated releases. Affected product/component: Aruba ClearPass Policy Manager (CPM). Vulnerability ...

CVE-2021-32519

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager...

IBM Guardium Data Encryption 安全漏洞

A security vulnerability exists in IBM Security Guardium Data Encryption, an IBM software for securing sensitive data in organizations, which can be exploited by remote attackers to return detailed technical error messages in the browser when to obtain sensitive information...

HPESBHF04148 rev.1 - HPE Integrity Integrated Lights-Out 4 (iLO 4) for Superdome X Servers, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Superdome X Base Enclosure - Prior to Bundle 8.8.50 HPE Integrity Superdome X Server - Prior to Bundle 8.8.50 HPE Integrity Superdome X with BL920s Blades - Prior to Bundle 8.8....

files_antivirus 代码问题漏洞

filesantivirus is a ClamAV-based ownCloud antivirus application. A security vulnerability exists in filesantivirus, which allows remote attackers to exploit the vulnerability to compromise a target system. The affected products and versions are as follows:files antivirus:Prior to 1.0.0...