Lucene search
+L

3460 matches found

Github Security Blog
Github Security Blog
•added 2021/09/15 8:23 p.m.•57 views

Cross-site Scripting in Beego

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page...

6.1CVSS5.8AI score0.00795EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/09/15 8:23 p.m.•74 views

GHSA-C77F-4RGJ-JFR4 Cross-site Scripting in Beego

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page...

6.1CVSS5.9AI score0.00795EPSS
SaveExploits1References3
GitLab Advisory Database
GitLab Advisory Database
•added 2021/09/15 12:00 a.m.•43 views

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page...

6.1CVSS2.2AI score0.00795EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2021/09/14 6:15 p.m.•31 views

CVE-2021-39391

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page...

6.1CVSS0.00795EPSS
SaveExploits1References2
OSV
OSV
•added 2021/09/14 6:15 p.m.•14 views

CVE-2021-39391

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page...

6.1CVSS6AI score
SaveExploits0References2
Prion
Prion
•added 2021/09/14 6:15 p.m.•23 views

Cross site scripting

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page...

4.3CVSS6AI score0.00795EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/09/14 5:27 p.m.•71 views

CVE-2021-39391

Beego 2.0.1 admin panel contains a Cross-Site Scripting (XSS) vulnerability in the URI path of an HTTP request, triggered when administrators view the “Request Statistics” page. Concrete references note this XSS in multiple sources (GitHub advisories, CVE records, OSV, CNNVD). The root cause is i...

6.1CVSS5.9AI score0.00795EPSS
SaveExploits1References2Affected Software1
Citrix
Citrix
•added 2021/09/14 12:00 a.m.•18 views

SDWAN: Virtual paths are flapping.

The virtual paths are fluctuating from GOOD to BAD/DEAD and vice versa. This can be checked under Monitoring Statistics Path Summary table. The Loss % of upload paths of DC to Branch SDWAN were showing 43 % and 8 % as shown below:...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/14 12:00 a.m.•2 views

CVE-2021-39391: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page...

6.1CVSS5.9AI score0.00795EPSS
SaveExploits1References2
GitLab Advisory Database
GitLab Advisory Database
•added 2021/09/14 12:00 a.m.•50 views

Cross-site Scripting

Cross Site Scripting XSS vulnerability exists in the admin panel in Beego via the URI path in an HTTP request, which is activated by administrators viewing the Request Statistics page...

6.1CVSS2AI score0.00795EPSS
SaveExploits1References2Affected Software1
ThreatPost
ThreatPost
•added 2021/09/08 5:03 p.m.•42 views

TeamTNT’s New Tools Target Multiple OSes

The TeamTNT malware pushers have a slew of new toys with which to wreak havoc – multiple shell/batch scripts, open-source tools, a cryptocurrency miner, an IRC and more – that have inflicted more than 5,000 infections globally as antivirus AV tools struggle to catch up with the newest malware...

6.7AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2021/09/06 8:30 p.m.•66 views

packetsifterTool - A Tool To Aid Analysts In Sifting Through A Packet Capture (Pcap) To Find Noteworthy Traffic

PacketSifter is a tool to perform batch processing of PCAP data to uncover potential IOCs. Simply initializePacketSifter with your desired integrations VirusTotal, AbuseIPDB and pass PacketSifter a pcap and the desired switches and PacketSifter will sift through the data and generate several outp...

7.3AI score
SaveExploits0References2
OSV
OSV
•added 2021/08/25 3:57 p.m.•8 views

OPENSUSE-SU-2021:1192-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.6.7: Fix a DoS via a remotely triggerable assertion failure boo1189489, TROVE-2021-007, CVE-2021-38385 tor 0.4.6.6: Enable the deterministic RNG for unit tests that covers the address set bloomfilter-based API's tor 0.4.6.5 Add controller...

7.5CVSS7.5AI score0.01685EPSS
SaveExploits1References3
Securelist
Securelist
•added 2021/08/23 10:00 a.m.•220 views

Gaming-related cyberthreats in 2020 and 2021

The video game industry is soaring, not in the least thanks to the lockdowns, which forced people to look for new ways to entertain themselves and socialize. Even with things going back to normal, gaming is expected to have a very bright future. Newzoo estimates the industry to gross 175.8 billio...

0.1AI score
SaveExploits0
OSV
OSV
•added 2021/08/22 10:06 p.m.•6 views

OPENSUSE-SU-2021:1178-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.6.7: Fix a DoS via a remotely triggerable assertion failure boo1189489, TROVE-2021-007, CVE-2021-38385 tor 0.4.6.6: Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch Enable the deterministic RNG for unit tests that covers the...

7.5CVSS7.5AI score0.01685EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/08/19 12:00 a.m.•47 views

Security update for tor (important)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:1169-1 Rating: important References: 1189489 Cross-References: CVE-2021-38385 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for tor fixes t...

7.5CVSS7.5AI score0.01685EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/08/12 12:00 a.m.•44 views

cPanel Information Disclosure Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An information disclosure vulnerability exists in cPanel versions prior to 96.0.8. The vulnerability stems from weak privileges on web statistics. An attacker can exploit this vulnerability to obtain information...

5.5CVSS5.1AI score0.00262EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/11 11:15 p.m.•13 views

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

5.5CVSS6.1AI score0.00262EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/08/11 11:15 p.m.•10 views

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

5.5CVSS6.2AI score0.00262EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/11 12:00 a.m.•13 views

Cpanel 信息泄露漏洞

cPanel is a set of Web-based host control management system of the U.S. cPanel. An information disclosure vulnerability exists in cPanel versions prior to 96.0.8. The vulnerability stems from weak privileges on web statistics. An attacker can exploit this vulnerability to obtain information...

5.5CVSS5.7AI score0.00262EPSS
SaveExploits0References3
Rows per page
Query Builder