19886 matches found
Siemens SINEC NMS SQL Injection Vulnerability
SINEC NMS is a network management system used by Siemens to monitor and manage industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from a lack of validation and escaping of SQL parameter statements. An attacker could use this...
Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2021-77587)
SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which could be exploited by an attacker with privileged credentials to execute arbitrary commands in the loca...
Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2021-77593)
SINEC NMS is a network management system used by Siemens to monitor and manage industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements. An attacker could use this...
Tibco Ebx 授权问题漏洞
Tibco Ebx is a software from Tibco India that supports integration to manage enterprise data assets. An authorization issue vulnerability exists in TIBCO EBX Web Server, which arises from a problem with the software's validation of user-submitted passwords, which could be exploited to allow an...
Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2021-77589)
SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements in the software. An attacker...
[SECURITY] Fedora 34 Update: httpd-2.4.51-1.fc34
The Apache HTTP Server is a powerful, efficient, and extensible web server...
httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"
A Server-Side Request Forgery SSRF flaw was found in modproxy of httpd. This flaw allows a remote, unauthenticated attacker to make the httpd server forward requests to an arbitrary server. The attacker could get, modify, or delete resources on other services that may be behind a firewall and...
httpd: mod_session: Heap overflow via a crafted SessionHeader value
A heap overflow flaw was found In Apache httpd modsession. The highest threat from this vulnerability is to system availability...
CVE-2021-33732
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...
CVE-2021-33735
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...
CVE-2021-33732
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...
CVE-2021-33732
Siemens SINEC NMS is affected by CVE-2021-33732 (SQL Injection) in all versions prior to 1.0 SP2 Update 1. A privileged, authenticated attacker could send crafted requests to the web server and execute arbitrary commands in the local database. Remediation: update to v1.0 SP2 Update 1 or later. Th...
Puma 环境问题漏洞
Puma is a web server for highly concurrent applications by Evan Phoenix, an individual developer in the United States. Puma is vulnerable to an environmental issue that arises from improper design or implementation during code development of a web system or product...
Siemens SINEC NMS SQL注入漏洞
SINEC NMS is a network management system used by Siemens to monitor and manage industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements. An attacker could use this...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 复现 https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited v2.4.49 apache 独有漏洞，早期版本中并没有 apnormalizepath 这个函数，该函数是在v2.4.49版本中引入的，正是这个函数导致了 目录穿越，在 v2.4.50 被修复了 环境 https://github.com/1nhann/CVE-2021-41773 本环境中，加载了 cgi 模块： ini LoadModule...
Loco Translate < 2.5.4 - Authenticated PHP Code Injection
The plugin mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated "translator" users being able to inject PHP code into files ending with .php in web accessible locations. 1. Using a User with the translator role, navigate...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 scanner This script tests for the path t...
Fedora: Security Advisory for httpd (FEDORA-2021-5d2d4b6ac5)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Apache HTTP Server Path Traversal Vulnerability
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. Apache HTTP Server version 2.4.49 path traversal vulnerability , the vulnerability stems from the introduction of apnormalizepath...