WordPress Social Warfare 3.5.2 Remote Code Execution

Author = Raed Ahsan Creation Date = 24/07/2021 Vulnerability : SocialWarfare 3.5.2 plugin wordpress Remote Code Execution Linkedin = https://linkedin.com/in/raed-ahsan/ import socket import requests import subprocess import time import pyautogui print"Start your python SimpleHTTPServer on port 12...

CVE-2021-21664

An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored i...

Apache Tapestry Information Disclosure (CVE-2021-30638)

An information disclosure vulnerability exists in Apache Tapestry. A URL manipulation via smuggled backslashes allows Java webapp files inside WEB-INF to be listed and downloaded...

CVE-2021-23387

The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::createTrailing, as the web server uses relative URLs...

Open Redirection

koa-remove-trailing-slashes is vulnerable to open redirection. The usage of relative URLs instead of absolute URLs in removeTrailingSlashes allows an attacker to use trailing double slashes in the URL to redirect users to malicious websites...

CVE-2021-32618

CVE-2021-32618 – Open Redirect in Flask-Security-Too . The Flask extension Flask-Security-Too contains logic to validate the URL in the next parameter, attempting to allow only relative URLs or URLs with the same netloc. However, some browsers may transform incomplete URLs (for example next=\gith...

CVE-2021-23384

The CVE-2021-23384 entry concerns the npm package koa-remove-trailing-slashes (versions before 2.0.2). The vulnerability is an Open Redirect caused by the use of trailing double slashes in the URL within the function removeTrailingSlashes() (index.js) where the server uses relative URLs. This can...

Information Disclosure

docassemble is vulnerable to information disclosure. An attacker is able to gain unauthorized access to information on the system through URL manipulation...

Unauthorized access through URL manipulation

Impact The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. Patches The vulnerability has been patched in version 1.2.65 of the master branch, version 1.1.113 of the 1.1.x series, and version 1.0.12 of the stable branch. The Docker...

GHSA-QRMM-W4V4-Q7F8 Unauthorized access through URL manipulation

Impact The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. Patches The vulnerability has been patched in version 1.2.65 of the master branch, version 1.1.113 of the 1.1.x series, and version 1.0.12 of the stable branch. The Docker...

PT-2021-24453

Name of the Vulnerable Software and Affected Versions: docassemble versions prior to 1.2.65 docassemble versions prior to 1.1.113 docassemble versions prior to 1.0.12 Description: The issue allows attackers to gain unauthorized access to system information through URL manipulation. The estimated...

Cross site scripting

Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 2019-09-25-Screenly-OSE-lite.img, in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code...

CVE-2021-28174 Mitake Smart Stock Selection System - Broken Authentication

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

Open Redirect in forkcms/forkcms

✍️ Description The forkcms is vulnerable to Open Redirect through invalid characters in the URL path. 🕵️‍♂️ Proof of Concept With an authenticated user, access: http://localhost/private/en/authentication?querystring=/%01/effectrenan.com 💥 Impact This vulnerability allows attackers to fool victims...

CVE-2021-21321

fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from before version 4.0.2, by crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server i...

MinIO Cross-Site Request Forgery Vulnerability

Minio is an open source object storage server from US-based MinIO. The product supports building infrastructures for machine learning, analytics, and application data workloads. MinIO suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to modify calls to t...

CVE-2021-21287

MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side request forgery vulnerability. The target application may have functionality for importing data from a URL, publishing data to a URL, or...

CVE-2021-21287: Server-Side Request Forgery (SSRF)

MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side request forgery vulnerability. The target application may have functionality for importing data from a URL, publishing data to a URL, or...

Minio MinIO 代码问题漏洞

Minio is an open source object storage server from US-based MinIO. The product supports building infrastructures for machine learning, analytics, and application data workloads. MinIO suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to modify calls to t...