CVE-2021-33494

OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering...

CVE-2021-33492

OX App Suite 7.10.5 allows XSS via an OX Chat room name...

Open-xchange OX App Suite 跨站脚本漏洞

Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited...

PT-2021-20156

Name of the Vulnerable Software and Affected Versions OX App Suite version 7.10.5 Description The issue allows for XSS via an OX Chat room title during typing rendering. This means that an attacker could potentially inject malicious scripts into the chat room title, which would then be executed b...

CVE-2021-33494: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering...

CVE-2021-33492: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.10.5 allows XSS via an OX Chat room name...

PT-2021-20154

Name of the Vulnerable Software and Affected Versions OX App Suite version 7.10.5 Description The issue allows for XSS via an OX Chat room name. Recommendations For OX App Suite version 7.10.5, update to a version that fixes this issue. At the moment, there is no information about a newer version...

CVE-2021-34418

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before...

CVE-2021-34418

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before...

CVE-2021-34417

The CVE-2021-34417 entry affects multiple Zoom On‑Premise components: Controller, MMR, Recording Connector, Virtual Room Connector, and Load Balancer, with vulnerable versions prior to 4.6.365.20210703 (Controller/MMR/Recording Connector) or 4.4.6868.20210703 (Virtual Room Connector) and 2.5.5496...

CVE-2021-34418: NULL Pointer Dereference

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before...

Zoom 多款产品输入验证错误漏洞

ZOOM Zoom Call Recording is a scalable session recording management solution.ZOOM on-premise Meeting Connector is a meeting connector.Zoom On- Premise Meeting Connector Controller and others are products of Zoom USA.Zoom On-Premise Meeting Connector Controller is an on-premise meeting connector. ...

CVE-2021-34417: Improper Input Validation

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Recording Connector before version 3.8.45.20210703, Zoom On-Premise Virtual Room...

ZOOM 多款产品代码问题漏洞

ZOOM Zoom Call Recording is a scalable session recording management solution.ZOOM on-premise Meeting Connector is a meeting connector.Zoom On- Premise Meeting Connector Controller and others are products of Zoom USA.Zoom On-Premise Meeting Connector Controller is an on-premise meeting connector. ...

PT-2021-7436

Name of the Vulnerable Software and Affected Versions Zoom On-Premise Meeting Connector versions prior to 4.6.239.20200613 Zoom On-Premise Meeting Connector MMR versions prior to 4.6.239.20200613 Zoom On-Premise Recording Connector versions prior to 3.8.42.20200905 Zoom On-Premise Virtual Room...

Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell...

Exploit for Deserialization of Untrusted Data in Veeam One

Modified-CVE-2020-10915-MsfModule THIS IS NOT AN ORIGINAL EXPL...

CVE-2020-21012

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...

CVE-2020-21012

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...