Apache APISIX Dashboard Detection

Binary data apacheapisixdashboarddetect.nbin...

The vulnerability of the rz_core_analysis_type_match() function in the Rizin command-line tool set allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the rzcoreanalysistypematch function in the Rizin command-line tool relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code using a specially created malicious binary file...

Apache APISIX Dashboard < 2.10.1 Authentication Bypass (Direct Check)

Binary data apacheapisixcve-2021-45232.nbin...

CVE-2021-46441

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization...

CVE-2021-46442

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization...

CVE-2021-46441

CVE-2021-46441 affects D-Link DIR-825 G1 firmware with the webupg binary. The vulnerability arises from a lack of parameter verification, allowing an attacker who has obtained authorization to supply cmd parameters that execute arbitrary system commands. Connected advisories corroborate a command...

CVE-2021-46441

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization...

CVE-2021-46442

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization...

Security Bulletin: Cross-Site Request Forgery vulnerability in IBM InfoSphere Master Data Management Server (CVE-2014-0873)

Summary The IBM InfoSphere Master Data Management Server User Interfaces are vulnerable to Cross-Site Request Forgery attacks. Vulnerability Details CVE ID: CVE-2014-0873 DESCRIPTION: Due to insufficient safeguards against cross-site request forgery in the IBM InfoSphere Master Data Management...

Patch Management: HCL BigFix Computer Info Initialization

Binary data hclbigfixinitinfo.nbin...

Patch Management: HCL BigFix Get Installed Packages

Binary data hclbigfixgetpackages.nbin...

Patch Management: Missing updates from HCL BigFix

Binary data hclbigfixgetmissingupdates.nbin...

Patch Management: HCL BigFix Report

Binary data hclbigfixreport.nbin...

Patch Management: HCL BigFix Server Settings

Binary data hclbigfixsoapsettings.nbin...

D-Link DIR-825 G1 操作系统命令注入漏洞

The DIR-825 G1 is a router from D-Link in Taiwan, China. A command injection vulnerability exists in the D-Link DIR-825 G1 firmware version, which stems from a lack of parameter validation in the "webupg" binary file. The vulnerability can be exploited to execute arbitrary system commands with th...

ManageEngine ADAudit Plus < Build 7060 XXE RCE

Binary data manageengineadauditplusCVE-2022-28219vcf.nbin...

Miele Benchmark Programming Tool 1.1.49 / 1.2.71 Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation product: Miele Benchmark Programming Tool vulnerable version: at least 1.1.49 and 1.2.71 fixed version: 1.2.72 CVE number: CVE-2022-22521 impact:...

Bore - Simple CLI Tool For Making Tunnels To Localhost

A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust cargo install bore-cli On your local machine bore local 8000 --to bore.pub This will expose your local...

Google Chrome < 101.0.4951.41 Multiple Vulnerabilities

Binary data 701401.pasl...

Apache Airflow Web API Detection

Binary data apacheairflowwebapidetect.nbin...