Lucene search
+L

3879 matches found

Positive Technologies
Positive Technologies
added 2022/03/28 12:00 a.m.10 views

PT-2022-2512 · Dotcms · Dotcms

Name of the Vulnerable Software and Affected Versions: dotCMS versions 3.0 through 22.02 Description: An issue was discovered in the ContentResource API, allowing attackers to craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal,...

10CVSS8AI score0.91553EPSS
SaveExploits4References25
HackRead
HackRead
added 2022/03/26 12:48 a.m.19 views

Confirmed: Anonymous Hacks Central Bank of Russia; Leaks 28GB of Data

By Waqas One of the Anonymous affiliate groups going by the Twitter handle of @Thblckrbbtworld has leaked 28GB worth of… This is a post from HackRead.com Read the original post: Confirmed: Anonymous Hacks Central Bank of Russia; Leaks 28GB of Data...

2.1AI score
SaveExploits0
NVD
NVD
added 2022/03/25 8:15 p.m.28 views

CVE-2022-27919

Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API...

9.8CVSS0.01841EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/25 8:15 p.m.6 views

CVE-2022-27919

Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API...

9.8CVSS7.8AI score0.01841EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/25 8:15 p.m.12 views

CVE-2022-27919

Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API...

9.8CVSS6.3AI score0.01841EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/25 8:15 p.m.22 views

Remote code execution

Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API...

7.5CVSS9.7AI score0.01841EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/25 7:55 p.m.40 views

CVE-2022-27919

Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API...

10AI score0.01841EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/03/25 12:00 a.m.11 views

PT-2022-18690 · Gradle · Gradle Enterprise

Name of the Vulnerable Software and Affected Versions: Gradle Enterprise versions prior to 2022.1 Description: The issue allows remote code execution if the installation process did not specify an initial configuration file, enabling certain anonymous access to administration and an API...

9.8CVSS9.9AI score0.01841EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/25 12:00 a.m.13 views

Gradle 安全漏洞

Gradle is the U.S. Gradle company's set of JVM-based project build tool , it supports maven, Ivy repository and so on. A security vulnerability exists in Gradle Enterprise that allows remote code execution. The configuration allows certain anonymous access to the administration and APIs.No detail...

9.8CVSS6.2AI score0.01841EPSS
SaveExploits0References2
HackRead
HackRead
added 2022/03/23 12:14 p.m.23 views

Anonymous hacks unsecured printers to send anti-war messages across Russia

By Waqas Anonymous has carried out a mass "Print Attack" in which it has sent over 100,000 print copies to… This is a post from HackRead.com Read the original post: Anonymous hacks unsecured printers to send anti-war messages across Russia...

4AI score
SaveExploits0
HackRead
HackRead
added 2022/03/19 7:59 p.m.22 views

Anonymous Leaks 79GB of Russian Oil Pipeline Giant’s Email Data

By Waqas Anonymous claims it breached Omega Company which is the in-house R&D unit of Transneft, the largest oil pipeline… This is a post from HackRead.com Read the original post: Anonymous Leaks 79GB of Russian Oil Pipeline Giants Email Data...

2.5AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2022/03/19 1:00 p.m.12 views

TSA’s First Crack at Guarding Pipelines From Hackers Falls Short

Plus: Anonymous dedicates a hack to Hillary Clinton, Google researchers expose Exotic Lily, and more...

2.5AI score
SaveExploits0
OSV
OSV
added 2022/03/17 5:15 p.m.10 views

CVE-2022-25364

In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. If this was not manually changed, a malicious actor with network access to the build cache could potentially populate it with manipulated entries that execute malicious code as par...

8.1CVSS5.8AI score0.01017EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/17 5:15 p.m.6 views

CVE-2022-25364

In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. If this was not manually changed, a malicious actor with network access to the build cache could potentially populate it with manipulated entries that execute malicious code as par...

9.3CVSS7.2AI score0.01017EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/17 12:00 a.m.11 views

Gradle 安全漏洞

Gradle is the U.S. Gradle company's set of JVM-based project build tool , it supports maven, Ivy repository and so on. Gradle Enterprise prior to 2021.4.2 suffers from a security vulnerability that stems from the default built-in build cache configuration allowing anonymous write access. If this...

9.3CVSS5.8AI score0.01017EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/03/17 12:00 a.m.13 views

PT-2022-17242 · Gradle · Gradle Enterprise

Name of the Vulnerable Software and Affected Versions: Gradle Enterprise versions prior to 2021.4.2 Description: The default built-in build cache configuration in Gradle Enterprise allowed anonymous write access, potentially enabling a malicious actor with network access to populate the cache wit...

9.3CVSS8.1AI score0.01017EPSS
SaveExploits0References4
HackRead
HackRead
added 2022/03/15 8:45 p.m.22 views

Anonymous cripples Russian Fed Security Service (FSB) & other top sites

By Waqas Anonymous says it also attacked the official website of the Russian Stock Exchange which, at the time of… This is a post from HackRead.com Read the original post: Anonymous cripples Russian Fed Security Service FSB & other top sites...

2AI score
SaveExploits0
CISA
CISA
added 2022/03/15 12:00 a.m.152 views

Russian State-Sponsored Cyber Actors Access Network Misconfigured with Default MFA Protocols

CISA and the Federal Bureau of Investigation FBI have released a joint Cybersecurity Advisory that details how Russian state-sponsored cyber actors accessed a network with misconfigured default multifactor authentication MFA protocols. The actors then exploited a critical Windows Print Spooler...

9CVSS3.1AI score0.99792EPSS
SaveExploits40References5
HackRead
HackRead
added 2022/03/12 11:59 p.m.19 views

Anonymous sent 7 million texts to Russians plus hacked 400 of their security cams

By Waqas Anonymous and its affiliate groups have sent 7 million text messages to Russian citizens about the war in… This is a post from HackRead.com Read the original post: Anonymous sent 7 million texts to Russians plus hacked 400 of their security cams...

2.3AI score
SaveExploits0
HackRead
HackRead
added 2022/03/11 7:42 p.m.21 views

Anonymous Hacks Russian Media Censoring Agency Roskomnadzor

By Waqas The announcement of the hack came from Emma Best of DDoSecrets who confirmed that an affiliate of Anonymous… This is a post from HackRead.com Read the original post: Anonymous Hacks Russian Media Censoring Agency Roskomnadzor...

2.1AI score
SaveExploits0
Rows per page
Query Builder