34 matches found
CVE-2021-31761
CVE-2021-31761 विवरण : रिफ्लेक्टेड क्रॉस-साइट स्क्रिप्टिंग XSS हमले का शोषण करके Webmin की चल रही प्रक्रिया सुविधा के माध्यम से रिमोट कमांड निष्पादन RCE प्राप्त करना परीक्षित संस्करण : Webmin 1.973 GitHub का नवीनतम संस्करण 07/03/2021 हमले का प्रकार: दूरस्थ प्रभाव : दूरस्थ कमांड निष्पादन एक्सप्लॉइ...
CVE-2021-31760
..| CVE-2021-31760 |.. الوصف : استغلال هجوم تزوير الطلب عبر المواقع CSRF للحصول على تنفيذ أوامر عن بُعد RCE عبر ميزة العملية الجارية في Webmin الإصدار المُختبر : Webmin 1.973 أحدث إصدار على GitHub 07/03/2021 نوع الهجوم : عن بُعد التأثير : تنفيذ أوامر عن بُعد eXploit's C0de POC : فيديو اليوتيوب PO...
CVE-2021-31762
..| CVE-2021-31762 |.. विवरण : क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF हमले का फायदा उठाकर Webmin के उपयोगकर्ता जोड़ें सुविधा के माध्यम से एक विशेषाधिकार प्राप्त उपयोगकर्ता बनाना और फिर Webmin की चल रही प्रक्रिया सुविधा के माध्यम से रिवर्स शेल प्राप्त करना परीक्षित संस्करण : Webmin 1.973 GitHub का नवीन...
CVE-2021-31761
..| CVE-2021-31761 |.. Description : Webmin की चल रही प्रक्रिया सुविधा के माध्यम से Reflected Cross-Site Scripting XSS हमले का शोषण करके Remote Command Execution RCE प्राप्त करना Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: दूरस्थ Impact : Remote Command Execution...
CVE-2021-31760
..| CVE-2021-31760 |.. विवरण : क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF हमले का उपयोग करके Webmin की चल रही प्रक्रिया सुविधा के माध्यम से रिमोट कमांड निष्पादन RCE प्राप्त करना परीक्षित संस्करण : Webmin 1.973 GitHub का नवीनतम संस्करण 07/03/2021 हमले का प्रकार: रिमोट प्रभाव : रिमोट कमांड निष्पादन एक्सप्लॉ...
SUSE CVE-2026-45287
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, go.opentelemetry.io/otel/schema/v1.0 and go.opentelemetry.io/otel/schema/v1.1 leaks one file descriptor on each successful ParseFile call. ParseFile opens the schema file and passes it to Parse without closing it...
CVE-2026-56018
JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify, allowing unbounded memory growth. In JsMinify XS.xs the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeContents; JsDiscardNode unlinks nodes withou...
CVE-2026-45287
OpenTelemetry-Go (Go implementation) prior to version 0.0.17 leaks one file descriptor per successful ParseFile call when parsing go.opentelemetry.io/otel/schema/v1.0 and v1.1. In long-running processes, repeated schema parsing without proper file closure can exhaust the process file descriptor l...
go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak
A flaw was found in OpenTelemetry-Go before schema package version 0.0.17. ParseFile in go.opentelemetry.io/otel/schema/v1.0 and v1.1 opens a schema file and passes it to Parse without closing it, leaking one file descriptor per successful call. Repeated parsing in a long-running process can...
CVE-2021-31761
Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...
Beware of scammers impersonating Malwarebytes
Scammers love to bank on the good name of legitimate companies to gain the trust of their intended targets. Recently, it came to our attention that a cybercriminal is using fake websites for security products to spread malware. One of those websites was impersonating the Malwarebytes brand. Image...
CVE-2023-4480
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...
CVE-2023-4480 Arbitrary File Read in Fusion File Manager
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...
SUSE Linux Enterprise Server 路径遍历漏洞
SUSE Linux Enterprise Server is a suite of enterprise server edition Linux operating systems from SUSE Germany. A path traversal vulnerability exists in SUSE Linux Enterprise Server. A remote attacker could use this vulnerability to read the files of a user running a process. The following produc...
CVE-2021-27570
An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic...
Authentication flaw
An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic...
CVE-2021-31762
Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...
Cross site request forgery (csrf)
Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...