Lucene search
+L

340 matches found

RedHat Linux
RedHat Linux
added 2021/11/10 10:0 a.m.11 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS7.3AI score0.12205EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
added 2021/11/10 9:59 a.m.18 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS7.3AI score0.12205EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
added 2021/11/10 9:48 a.m.9 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS7.3AI score0.12205EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
added 2021/11/10 9:20 a.m.15 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS7.3AI score0.12205EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
added 2021/11/10 9:15 a.m.10 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS7.3AI score0.12205EPSS
SaveExploits4References9
CNVD
CNVD
added 2021/11/02 12:0 a.m.39 views

Online Reviewer System Remote Code Execution Vulnerability

Online Reviewer System is an application. Online Reviewer System version 1.0 contains a remote code execution vulnerability that could be exploited by attackers to bypass image upload filters and upload maliciously crafted PHP files...

9.8CVSS6.1AI score0.06985EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2021/11/01 8:9 a.m.12 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS7.3AI score0.12205EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
added 2021/11/01 7:47 a.m.11 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS7.3AI score0.12205EPSS
SaveExploits4References9
OSV
OSV
added 2021/10/29 6:15 p.m.8 views

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS5.9AI score0.06985EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/10/29 6:15 p.m.7 views

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS7.4AI score0.06985EPSS
SaveExploits1References3
Prion
Prion
added 2021/10/29 6:15 p.m.22 views

Remote code execution

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

7.5CVSS9.6AI score0.06985EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/10/29 5:2 p.m.59 views

CVE-2021-41646

The CVE-2021-41646 entry concerns Sourcecodester Online Reviewer System 1.0, where an attacker can achieve Remote Code Execution by uploading a maliciously crafted PHP file that bypasses image-upload filters. The vulnerability enables an attacker to run arbitrary PHP code on the server via a craf...

9.8CVSS9.7AI score0.06985EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/10/29 5:2 p.m.33 views

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

10AI score0.06985EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.7 views

Online Reviewer System 代码问题漏洞

Online Reviewer System is a software application. An online reviewer system. A security vulnerability exists in Sourcecodester Online Reviewer System version 2.0, which allows an attacker to bypass the image upload filter and upload a maliciously crafted PHP file...

9.8CVSS8.4AI score0.02372EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.7 views

Online Reviewer System 代码问题漏洞

Online Reviewer System is a software application. An online reviewer system. A security vulnerability exists in Sourcecodester Online Reviewer System version 1.0 that allows an attacker to execute remote code via the image upload field...

9.8CVSS8.9AI score0.04455EPSS
SaveExploits1References2
zdt
zdt
added 2021/09/22 12:0 a.m.188 views

Online Reviewer System 1.0 - Remote Code Execution (Unauthenticated) Exploit

Exploit Title: Online Reviewer System 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Abdullah Khawaja Vendor Homepage: https://www.sourcecodester.com/php/12937/online-reviewer-system-using-phppdo.html Software Link:...

0.7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2021/04/28 12:0 a.m.34 views

Online Reviewer System SQL Injection (CVE-2021-27130)

An SQL injection vulnerability exists in Online Reviewer System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.8AI score0.02231EPSS
SaveExploits1
CNVD
CNVD
added 2021/04/19 12:0 a.m.4 views

Online Reviewer System SQL Injection Vulnerability

Online Reviewer System is a software application. An online reviewer system. Online Reviewer System version 1.0 suffers from a SQL injection vulnerability that stems from an authentication bypass SQL injection vulnerability that could result in a reverse shell upload. No detailed vulnerability...

9.8CVSS8AI score0.02231EPSS
SaveExploits1References1
NVD
NVD
added 2021/04/14 3:15 p.m.18 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS0.02231EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/14 3:15 p.m.7 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS7.3AI score0.02231EPSS
SaveExploits1References1
Rows per page
Query Builder