33220 matches found
Security Bulletin: Cross-Site Request Forgery vulnerability in IBM InfoSphere Master Data Management Server (CVE-2014-0873)
Summary The IBM InfoSphere Master Data Management Server User Interfaces are vulnerable to Cross-Site Request Forgery attacks. Vulnerability Details CVE ID: CVE-2014-0873 DESCRIPTION: Due to insufficient safeguards against cross-site request forgery in the IBM InfoSphere Master Data Management...
Patch Management: Missing updates from HCL BigFix
Binary data hclbigfixgetmissingupdates.nbin...
D-Link DIR-825 G1 操作系统命令注入漏洞
The DIR-825 G1 is a router from D-Link in Taiwan, China. A command injection vulnerability exists in the D-Link DIR-825 G1 firmware version, which stems from a lack of parameter validation in the "webupg" binary file. The vulnerability can be exploited to execute arbitrary system commands with th...
Patch Management: HCL BigFix Report
Binary data hclbigfixreport.nbin...
Patch Management: HCL BigFix Get Installed Packages
Binary data hclbigfixgetpackages.nbin...
ManageEngine ADAudit Plus < Build 7060 XXE RCE
Binary data manageengineadauditplusCVE-2022-28219vcf.nbin...
Patch Management: HCL BigFix Server Settings
Binary data hclbigfixsoapsettings.nbin...
Patch Management: HCL BigFix Computer Info Initialization
Binary data hclbigfixinitinfo.nbin...
Miele Benchmark Programming Tool 1.1.49 / 1.2.71 Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation product: Miele Benchmark Programming Tool vulnerable version: at least 1.1.49 and 1.2.71 fixed version: 1.2.72 CVE number: CVE-2022-22521 impact:...
Google Chrome < 101.0.4951.41 Multiple Vulnerabilities
Binary data 701401.pasl...
Apache Airflow Web API Detection
Binary data apacheairflowwebapidetect.nbin...
CVE-2022-27135
xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service Segmentation fault or other unspecified effects by sending a crafted PDF file to the pdftoppm binary...
CVE-2022-27135
xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service Segmentation fault or other unspecified effects by sending a crafted PDF file to the pdftoppm binary...
DDexec - A Technique To Run Binaries Filelessly And Stealthily On Linux Using Dd To Replace The Shell With Another Process
In Linux in order to run a program it must exist as a file, it must be accessible in some way through the file system hierarchy this is just how execve works. This file may reside on disk or in ram tmpfs, memfd but you need a filepath. This has made very easy to control what is run on a Linux...
VMware Workspace One Access / VMware Identity Manager Server-side Template Injection RCE (CVE-2022-22954)
Binary data vmwareworkspaceoneaccesscve-2022-22954.nbin...
Rippled blockchain public chain system has a binary vulnerability
Rippled, the underlying blockchain network node program on which the digital currency Ripple XRP relies, suffers from a binary vulnerability in the Rippled blockchain public chain system. The vulnerability is caused by an array out-of-bounds access error in the code, which could be exploited by a...
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
...
Adobe ColdFusion Installed (macOS)
Binary data macosxadobecoldfusioninstalled.nbin...
