Design/Logic Flaw

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls...

CVE-2020-15077

OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

CVE-2021-33586

InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user able to connect to the server to access recently deallocated memory, aka the "malformed PONG" issue...

Jenkins 跨站请求伪造漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

Nextcloud: End to end encryption public key is not properly verified on Desktop and Android

Since last time when I reported something on multiple platforms you seems to prefer handling it in 1 spot. I now just do one. Let me know if You want me to fill separate for android as well. This issue does not seem to happen on iOS as there a test string is encrypted and decrypted, in short...

File Upload Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-35890)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to upload a...

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability in GitLab CE/EE versions prior to 13.7.9 through 13.8.7, 13.9...

UBUNTU-CVE-2021-22192

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server...

rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1)

Exploit Title: rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution Authenticated 1 Date: 2021-03-17 Exploit Author: Murat ŞEKER Vendor Homepage: https://www.rconfig.com Software Link: https://www.rconfig.com/downloads/rconfig-3.9.6.zip Version: rConfig v3.9.6 Install scripts :...

File upload vulnerability in We7 CMS (CNVD-2021-24741)

We7 CMS is a domestic asp.net-based at the same time with open source and open plug-in CMS system. A file upload vulnerability exists in We7 CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

CVE-2021-28141

An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the...

File Upload Vulnerability in Website Building System of Yue Information Network Co.

Shou Yueh Information Network Co., Ltd. is a company that combines the expertise of information network, marketing channel, and system software. A file upload vulnerability exists in the website builder system of Shouyue Information Network Co. An attacker could exploit this vulnerability to gain...

File Upload Vulnerability in NS-NGFW Backend of Netcom Next-Generation Firewalls

hereinafter referred to as Netcom was founded in 2004, is specialized in providing operators, finance, government, education, health care, enterprises, hotels, export integrated application gateway. A file upload vulnerability exists in the background of NS-NGFW. Attackers can utilize the...

File Upload Vulnerability in Merchant Backend Management System of Lianyungang Bubble Network Technology Co.

Lianyungang Bubble Network Technology Co., Ltd. focuses on WeChat small program micro-mall community group purchasing, fresh food e-commerce system development, is committed to the retail industry, to provide omni-channel e-commerce solutions. Lianyungang roll bubble network technology limited...

Sourceforge mbsync Path Traversal Vulnerability

Sourceforge mbsync is an application from the Sourceforge community in the United States. It provides synchronization of remote IMAP mailboxes with local maildir style mailboxes. A path traversal vulnerability exists in mbsync prior to v1.3.5 and v1.4.1 that originates from allowing a malicious o...

U.S. Dept Of Defense: Blind SQL iNJECTION

Hi DoD Secuirty team , i found Blind SQL Injection in this below domain https://███████ Proof of concept: Vuln URL:https://██████████/██████ Pooc: URL encoded POST input ███ was set to -1' OR 321=6 AND 1=1 or '4mEwSPwJ'=' Tests performed: -1' OR 1=1 or '4mEwSPwJ'=' = TRUE -1' OR 2=4 or '4mEwSPwJ'...

Trend Micro OfficeScan XG and Trend Micro Apex One Access Control Error Vulnerabilities (CNVD-2021-28307)

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

Unable to access StoreFront URL, error “can’t reach this page”

• In this scenario, the customer just built a test site running Virtual Apps 1912CU1 • He built one DDC, 2 StoreFront servers, and aleady created a Site and a StoreFront Store • When attempting to access the StoreFront URL, he gets an error saying “can’t reach this page” • Using the StoreFront...

Information Disclosure

hadoop-hdfs-client is vulnerable to information disclosure. The application allows the sending of authentication credentials over an insecure HTTP channel. An attacker is able to intercept the network traffic and obtain the SPNEGO authorization header and gain access to the server...