34 matches found
CVE-2021-31760
..| CVE-2021-31760 |.. Описание : Эксплуатация межсайтовой подделки запроса CSRF для получения удалённого выполнения команд RCE через функцию запущенных процессов Webmin Тестированная версия : Webmin 1.973 последняя версия на GitHub 07/03/2021 Тип атаки: Удалённая Воздействие : Удалённое выполнен...
CVE-2021-31761
CVE-2021-31761 Описание : Использование отраженной межсайтовой XSS-атаки для получения удаленного выполнения команд RCE через функцию запущенных процессов Webmin Протестированная версия : Webmin 1.973 последняя версия GitHub от 07/03/2021 Тип атаки: Удаленная Воздействие : Удаленное выполнение...
CVE-2021-31760
..| CVE-2021-31760 |.. Описание : Эксплуатация атаки межсайтовой подделки запросов CSRF для получения удаленного выполнения команд RCE через функцию запущенных процессов Webmin Протестированная версия : Webmin 1.973 последняя версия на GitHub от 07/03/2021 Тип атаки: Удаленная Воздействие :...
CVE-2021-31762
..| CVE-2021-31762 |.. 설명 : Webmin의 사용자 추가 기능을 통해 교차 사이트 요청 위조CSRF 공격을 악용하여 권한 있는 사용자를 만든 다음, Webmin의 실행 중인 프로세스 기능을 통해 리버스 셸을 획득 테스트 버전 : Webmin 1.973 GitHub의 최신 버전 07/03/2021 공격 유형: 원격 영향 : 원격 명령 실행 익스플로잇 POC 코드 : YouTube POC : https://youtu.be/qCvEXwyaF5U 제품 공급업체 : https://www.webmin.com 추가 정보...
CVE-2021-31761
..| CVE-2021-31761 |.. Описание : Эксплуатация отражённой межсайтовой XSS-атаки для получения удалённого выполнения команд RCE через функцию запущенных процессов Webmin Протестированная версия : Webmin 1.973 последняя версия на GitHub 07/03/2021 Тип атаки: Удалённая Воздействие : Удалённое...
SUSE CVE-2026-45287
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, go.opentelemetry.io/otel/schema/v1.0 and go.opentelemetry.io/otel/schema/v1.1 leaks one file descriptor on each successful ParseFile call. ParseFile opens the schema file and passes it to Parse without closing it...
CVE-2026-56018
JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify, allowing unbounded memory growth. In JsMinify XS.xs the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeContents; JsDiscardNode unlinks nodes withou...
CVE-2026-45287
OpenTelemetry-Go (Go implementation) prior to version 0.0.17 leaks one file descriptor per successful ParseFile call when parsing go.opentelemetry.io/otel/schema/v1.0 and v1.1. In long-running processes, repeated schema parsing without proper file closure can exhaust the process file descriptor l...
go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak
A flaw was found in OpenTelemetry-Go before schema package version 0.0.17. ParseFile in go.opentelemetry.io/otel/schema/v1.0 and v1.1 opens a schema file and passes it to Parse without closing it, leaking one file descriptor per successful call. Repeated parsing in a long-running process can...
CVE-2021-31761
Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...
Beware of scammers impersonating Malwarebytes
Scammers love to bank on the good name of legitimate companies to gain the trust of their intended targets. Recently, it came to our attention that a cybercriminal is using fake websites for security products to spread malware. One of those websites was impersonating the Malwarebytes brand. Image...
CVE-2023-4480
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...
CVE-2023-4480 Arbitrary File Read in Fusion File Manager
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...
SUSE Linux Enterprise Server 路径遍历漏洞
SUSE Linux Enterprise Server is a suite of enterprise server edition Linux operating systems from SUSE Germany. A path traversal vulnerability exists in SUSE Linux Enterprise Server. A remote attacker could use this vulnerability to read the files of a user running a process. The following produc...
CVE-2021-27570
An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic...
Authentication flaw
An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic...
CVE-2021-31762
Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...
CVE-2021-31761
Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...