CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

Mahara 安全漏洞

Catalyst It Catalyst IT Mahara is a social networking system from Catalyst IT Catalyst It in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Mahara, which stems from the fact that the name of a folder in the file area can be seen...

PT-2022-1720 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Power BI client JS SDK, associated with the error data area. Exploitation of this issue may allow a remote...

PT-2022-1985 · Microsoft · Windows Remote Desktop Protocol Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Protocol Client affected versions not specified Description: The vulnerability is related to the Remote Desktop Protocol Client in Microsoft Windows and involves the disclosure of information in an error data...

CVE-2021-24937

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacuselectedsubtabarea parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue...

Business Logic Errors in dolibarr/dolibarr

Description Dolibarr is vulnerable to Business Logic Errors in the Weight, Length x Width x Height, Area, Volume fields of a Product since these values can be negative numbers. Proof of Concept 1.After login, in the top menu bar, click Products 2.In the left menu bar, click List to view the list ...

The vulnerability of the CORS mechanism implementation in Thunderbird email clients, Firefox browsers, and Firefox ESR browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CORS mechanism implementation in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, is related to the activation of functions from an unverified controlled area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...

NLnet Labs ldns 缓冲区错误漏洞

NLnet Labs ldns is a DNS library from the NLnet Labs Nlnet Labs Foundation in the Netherlands that facilitates the programming of DNS tools. A security vulnerability exists in Nlnet Labs ldns that stems from a heap out-of-bounds read vulnerability in the ldnsrrnewfrmstrinternal function when...

CVE-2020-14107

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

WordPress plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. The WordPress plugin suffers from a cross-site...

Path traversal

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

CVE-2022-22054 ASUS RT-AX56U - Path Traversal

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

Cross site scripting

DISPUTED Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability. Exploitation requires administrator privileges and is performed through the Wizard editor of the application. The attack requires an administrator to go into the Wizard editor and enter an XSS payload within the Pa...

ALPINE-CVE-2021-43566

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for...

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

CVE-2021-45917

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...

Stack overflow

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

Authentication flaw

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...

CVE-2021-45917

CVE-2021-45917 describes an improper authentication vulnerability in the server-request receiver function of the Shockwall system by Sun & Moon Rise. An authenticated attacker on an agent computer in the local network can use local registry information to perform a server-side request forgery (SS...

CVE-2021-20149

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessible via the WAN interface via IPv6 by default...