PT-2021-14762 · Zte · Zte Bigvideo

Name of the Vulnerable Software and Affected Versions: ZTE BigVideo analysis product affected versions not specified Description: The ZTE BigVideo analysis product has an input verification issue due to inconsistent front and back verifications when configuring the large screen page. An attacker...

CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

CVE-2021-45255

The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with that domain,...

CVE-2021-40835

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

UBUNTU-CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

CVE-2021-45017

Cross Site Request Forgery CSRF vulnerability exits in Catfish =6.1. when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column...

Mozilla: URL leakage when navigating while executing asynchronous function

The Mozilla Foundation Security Advisory describes this flaw as: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL...

CVE-2021-43541

When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

DEBIAN-CVE-2021-43536

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

Mozilla: URL leakage when navigating while executing asynchronous function

The Mozilla Foundation Security Advisory describes this flaw as: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL...

Ubiquiti Networks UniFi Protect 安全漏洞

Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks, Inc. A security vulnerability exists in the UniFi Protect application that allows a malicious actor using malicious code to convince a privileged user to access a URL to take over that user's account. The...

USN-5151-1 mailman vulnerabilities

It was discovered that Mailman incorrectly handled certain URL. An attacker could possibly use this issue to execute arbitrary code. CVE-2021-43331 It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information...

The vulnerability of the application for identifying, analyzing, and visualizing business risks in IBM Data Risk Manager stems from deficiencies in checking the path name to the restricted access catalog. This allows attackers to write arbitrary files.

The vulnerability of the IBM Data Risk Manager application for identifying, analyzing, and visualizing business risks is related to deficiencies in checking the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to upload...

Moodle 跨站脚本漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. cross-site scripting vulnerability exists in Moodle, which stems from the lack of effective filtering and escaping of URL parameters in...

PT-2021-23214 · Unknown · Python Discord Bot

Name of the Vulnerable Software and Affected Versions: Python discord bot affected versions not specified Description: The issue concerns the Python discord bot, which is the community bot for the Python Discord community. In affected versions, when a non-blacklisted URL and an otherwise triggeri...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a buffer overflow vulnerability, which can be exploited to execute arbitrary code via the url parameter...

The vulnerability of the URLValidator, validate_ipv4_address, and validate_ipv46_address functions of the Django web application software lies in insufficient validation of incoming requests, allowing attackers to compromise data integrity.

The vulnerability of the URLValidator, validateipv4address, and validateipv46address functions in the Django software framework relates to the absence of prohibition for leading zero characters in octal literals. Exploiting this vulnerability could allow a malicious actor to compromise data...

PT-2021-8816 · Mitsubishi · Smartrtu

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. SmartRTU devices affected versions not specified Description: The issue allows remote attackers to obtain sensitive information, including directory listings and source code, by making a direct request to the...

CVE-2020-21658

A Cross-Site Request Forgery CSRF in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL...

CVE-2021-1534

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker...