4070 matches found
kustomize-controller 操作系统命令注入漏洞
kustomize-controller is a Kubernetes operator that specializes in running continuous delivery pipelines for infrastructure and workloads defined with a Kubernetes manifest and assembled using Kustomize. An operating system command injection vulnerability exists in versions prior to...
CVE-2021-41372
A Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exists when Power BI Report Server Template file pbix containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to...
BlackBerry UEM 安全漏洞
Blackberry BlackBerry UEM is a cross-device platform for device, application and content management from Blackberry Canada. The platform allows organizations to view all users, devices, applications and policies in their environment through a single, integrated management panel. A security...
Vulnerability fixed in Cisco Small Business Series Switches
Cisco has fixed a vulnerability in several Small Business Series Switches. The vulnerability allows an unauthenticated malicious person with access to the management interface to obtain obtain administrator privileges. Successful exploitation requires a man-in-the-middle position between the...
PHP Melody 3.0 - (vid) SQL Injection Vulnerability
Exploit Title: PHP Melody 3.0 - 'vid' SQL Injection Vendor Homepage: https://www.phpsugar.com/phpmelody.html Version: v3 Product & Service Introduction: =============================== Upload, import, stream or embed any media. The smart way to manage audio & video. Comes with all the tools you...
CVE-2020-36504
The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow an attacker to make a logged in admin delete arbitrary quiz on the blog...
CVE-2021-36307
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...
Design/Logic Flaw
The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation...
CVE-2021-30359
The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation...
Huawei Imanager NetEco 数据伪造问题漏洞
Huawei Imanager NetEco is a professional energy infrastructure management platform from Huawei of China. It is used to provide accurate operations and maintenance management. Huawei iManager NetEco has a security vulnerability that could be exploited by attackers to forge signatures, bypass...
WordPress 代码问题漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in the WordPress plugin Catch Themes Demo Import in versions 1.7 a...
CVE-2021-20836
Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files...
CVE-2021-38295
In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code embedded in that HTML attachment will b...
CVE-2021-40854
AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged Notepad process that can launch other applications...
Kindeditor 跨站脚本漏洞
KindEditor is a lightweight, open source LGPL, cross-browser, web-based WYSIWYG HTML editor. KindEditor is capable of converting standard text areas to rich text editors. an XSS vulnerability exists in KindEditor prior to version 4.1.x. The vulnerability is related to the affected version not...
in flatcore/flatcore-cms
Title： race condition vs Temporary File Upload Description flatCore-CMS is vulnerable to Race condition while dealing uploading gallery Codes at https://github.com/flatCore/flatCore-CMS/blob/main/acp/core/files.uploadgallery.phpL31 php ifarraykeyexists'file',$FILES && $FILES'file''error' == 0...
in flatcore/flatcore-cms
Description Even with $fcuploadaddons = false, an attacker can still upload files by making the post request Proof of Concept 1 Enable $fcuploadaddons = true. 2 Upload a PHP file, but do not send. 3 Disable $fcuploadaddons = true. 4 Send the file upload request. See that the file is still being...
多款 HPE 产品代码问题漏洞
Hpe 3par StoreServ and others are products of Hewlett-Packard Hpe Company, U.S.A. Hpe 3par StoreServ is a series of flash-optimized systems.Hpe Primera Storage is an enterprise storage solution.Hpe Alletra 9000 Storage is a disk storage system. A code issue vulnerability exists in multiple HPE...
Inline Related Posts < 3.0.5 - Admin+ Cross-Site Scripting
Multiple parameters are vulnerable to stored Cross-site Scripting. The vulnerabilities require admin privileges to exploit. In each case the script will execute for every user viewing a post that contains one of the inline references. PoC POST...