4762 matches found
WithSecure fsicapd 安全漏洞
WithSecure products is a series of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure fsicapd, which stems from the presence of a denial of service DoS that could crash while parsing a scan request...
Rails Web Console Detected
Rails has several gems, including a native one allowing access to a ruby console through the application. Badly configured, this console is accessible without authorization to any user, which allows to execute arbitrary code remotely. No source data...
Nutanix AHV : (NXSA-AHV-20201105.30007)
The version of AHV installed on the remote host is prior to 20201105.30007. It is, therefore, affected by a vulnerability as referenced in the NXSA-AHV-20201105.30007 advisory. - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 -...
CVE-2022-36566
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...
CVE-2022-36566
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...
Command injection
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...
CVE-2022-36566
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...
CVE-2022-36566
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...
Rengine 操作系统命令注入漏洞
Rengine is an automated reconnaissance framework for gathering information during penetration testing of web applications. A security vulnerability exists in Rengine version v1.3.0, which stems from a command injection in its scan engine functionality...
PT-2022-23474 · Rengine · Rengine
Name of the Vulnerable Software and Affected Versions: Rengine version 1.3.0 Description: A command injection issue was found in the scan engine function. Recommendations: For Rengine version 1.3.0, consider disabling the scan engine function as a temporary workaround until a patch is available...
UBUNTU-CVE-2022-24106
In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc...
Cross site request forgery (csrf)
The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for...
WordPress plugin Mailchimp for WooCommerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2022-31798
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /cardscan.php?CardFormatNo= XSS with session fixation via PHPSESSID when they are chained together. This would allow an attacker to take over an admin account or a user account...
PT-2022-20940 · Nortek Linear · Nortek Linear Emerge E3-Series
Name of the Vulnerable Software and Affected Versions: Nortek Linear eMerge E3-Series version 0.32-07p Description: The issue allows an attacker to take over an admin account or a user account through a combination of XSS and session fixation via the PHPSESSID when devices are chained together...
The vulnerability of the McAfee Security Scan Plus (MSS+) antivirus software, related to deficiencies in access control, allows a perpetrator to execute a LotL attack (a type of Living off the Land attack).
The vulnerability of the McAfee Security Scan Plus MSS+ antivirus software is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute a LotL attack a type of Living off the Land attack...
CVE-2022-37025
An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...
CVE-2022-37025
An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...
CVE-2022-37025
An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...
Privilege escalation
An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...