Lucene search
+L

33357 matches found

OSV
OSV
•added 2021/04/02 8:15 p.m.•21 views

CVE-2021-28940

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

9.8CVSS7.6AI score
SaveExploits0References3
NVD
NVD
•added 2021/04/02 8:15 p.m.•28 views

CVE-2021-28940

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

9.8CVSS0.03299EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2021/04/02 12:00 a.m.•21 views

SUSE SLED15 / SLES15 Security Update : OpenIPMI (SUSE-SU-2021:1010-1)

This update for OpenIPMI fixes the following issues : Fixed an issue where OpenIPMI was creating non-position independent binaries bsc1183178. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

5.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/04/02 12:00 a.m.•57 views

ManageEngine OpManager Smart Update Manager RCE

Binary data manageengineopmanagercve-2020-28653.nbin...

9.8CVSS9.6AI score0.787EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2021/04/02 12:00 a.m.•38 views

Fedora: Security Advisory for busybox (FEDORA-2021-2024803354)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.02719EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/02 12:00 a.m.•6 views

CVE-2021-28940: Improper Encoding or Escaping of Output

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

9.8CVSS6.3AI score0.03299EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/04/01 12:00 a.m.•56 views

Apple iOS < 14.4.2 Vulnerability (HT212256)

Binary data appleios1442check.nbin...

6.1CVSS9.6AI score0.07082EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/04/01 12:00 a.m.•10 views

Binary Vulnerability in Microsoft DirectComposition

DirectComposition is a graphical interface rendering framework introduced by Microsoft in the kernel since Windows 8, mainly used for rendering windows, interfaces and animations of UWP applications. A binary vulnerability exists in Microsoft DirectComposition, which can be exploited by attackers...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/04/01 12:00 a.m.•15 views

Cisco Security Manager Installed (Windows)

Binary data ciscosecuritymanagerwindetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/04/01 12:00 a.m.•43 views

Apple iOS < 12.5.2 Vulnerability (HT212257)

Binary data appleios1252check.nbin...

6.1CVSS9.6AI score0.07082EPSS
SaveExploits0References2
NVD
NVD
•added 2021/03/31 5:15 p.m.•40 views

CVE-2021-29658

The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder...

8.8CVSS0.01243EPSS
SaveExploits0References3
CVE
CVE
•added 2021/03/31 4:58 p.m.•62 views

CVE-2021-29658

The CVE-2021-29658 entry concerns the vscode-rufo extension for Visual Studio Code, specifically versions before 0.0.4. The vulnerability allows an attacker to execute arbitrary binaries/code when a user opens a crafted workspace folder. Concrete details across connected documents consistently de...

8.8CVSS8.8AI score0.01243EPSS
SaveExploits0References3Affected Software1
Gitee
Gitee
•added 2021/03/30 7:18 p.m.•8 views

CTF-All-In-One

This repository is an offensive tool for CTF Capture The Flag competitions, specifically targeting Linux systems. The primary vulnerability class is not explicitly stated, but based on the content, it appears to be focused on binary exploitation Pwn. The tool is designed to be used in a CTF...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2021/03/30 4:48 p.m.•19 views

golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The...

7.5CVSS6.7AI score0.04861EPSS
SaveExploits0References5
CNVD
CNVD
•added 2021/03/30 12:00 a.m.•11 views

Binary Vulnerability in D-Link DIR-816 Router (CNVD-2021-27694)

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/03/30 12:00 a.m.•18 views

JetBrains TeamCity Web Interface Detection

Binary data jetbrainsteamcitywebdetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/03/30 12:00 a.m.•18 views

Apache Druid Detection

Binary data apachedruiddetect.nbin...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2021/03/30 12:00 a.m.•14 views

Binary Vulnerability in D-Link DIR-816 Router

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/03/30 12:00 a.m.•8 views

Binary Vulnerability in D-Link DIR-816 Router (CNVD-2021-27695)

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

6.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/03/30 12:00 a.m.•426 views

Openlitespeed 1.7.9 Cross Site Scripting

Exploit Title: Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting Date: 3/30/2021 Exploit Author: cmOs Vendor Homepage: https://openlitespeed.org/ Software Link: https://openlitespeed.org/kb/install-from-binary/ Version: 1.7.9 Tested on Ubuntu 20.04 Step 1: Log in to the dashboard using th...

7.4AI score
SaveExploits0
Rows per page
Query Builder