714 matches found
Exploit for CVE-2020-1472
zeroscan Zeroscan is a Domain Controller vulnerability scanne...
Arbitrary File Download Vulnerability in Built-in Reports of Renton Network Security Management System (CNVD-2021-47145)
Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file download vulnerability exists in the built-in...
Arbitrary File Download Vulnerability in Built-in Reports of Renton Network Security Management System
Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file download vulnerability exists in the built-in...
lua-resty-waf
This is a Lua library for building a web application firewall WAF on top of the OpenResty stack. The library is called "lua-resty-waf" and is maintained by Robert Paprocki p0pr0ck5. The library provides a set of APIs for loading and managing rules, as well as for logging and storing data. It also...
Command Execution Vulnerability in Built-in Reports of RenTianXin Network Security Management System
hereinafter referred to as RenTianHang was founded in May 2000, business covers network security, information security, public security, network resource security, industrial Internet security and many other areas, has become the most comprehensive technology of large-scale cyberspace security...
[ASA-202106-7] lib32-libcurl-compat: multiple issues
Arch Linux Security Advisory ASA-202106-7 ========================================= Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-22898 CVE-2021-22901 Package : lib32-libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1998 Summary ======= The package...
Information Leakage Vulnerability in the Built-in Reports of Ren Tian Xing Network Security Management System of Ren Tian Xing Network Technology Co.
Ltd. is the most comprehensive provider of large-scale cyberspace security protection solutions in China. There is an information leakage vulnerability in the built-in reports of Renzihang Network Security Management System of Renzihang Network Technology Co., Ltd, which can be exploited by...
Msldap - LDAP Library For Auditing MS AD
msldap LDAP library for MS AD Documentation Awesome documentation here! Features Comes with a built-in console LDAP client All parameters can be conrolled via a conveinent URL see below Supports integrated windows authentication SSPI both with NTLM and with KERBEROS Supports channel binding for...
Security fix for the ALT Linux 10 package postgresql13 version 13.3-alt1
May 17, 2021 Alexei Takaseev 13.3-alt1 - 13.3 Fixes CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 - Build with python3...
Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain The Result Reliability With Increased Threads
httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. Features Simple and modular code base making it easy to contribute. Fast And fully configurable flags to probe mutipl...
Paragon - Red Team Engagement Platform With The Goal Of Unifying Offensive Tools Behind A Simple UI
Paragon is a Red Team engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css. The repository also provides some offensive tools already...
EulerOS 2.0 SP3 : bash (EulerOS-SA-2021-1765)
According to the version of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment...
CVE-2021-27372
Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permissions via the build-in network monitoring tool and execute arbitrary commands...
The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory, allowing an attacker to exploit their privileges.
The vulnerability of the built-in software in the Intel NUC Kit relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Cloudlist - A Tool For Listing Assets From Multiple Cloud Providers
Cloudlist is a multi-cloud tool for getting Assets Hostnames, IP Addresses from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a centralized list of assets across multiple clouds with very little configuration efforts...
Design/Logic Flaw
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...
golang: malicious symbol names can lead to code execution at build time
An input validation vulnerability was found in Go. From a generated go file from the cgo tool, it is possible to modify symbols within that object file and specify code. This flaw allows an attacker to create a repository that includes malicious pre-built object files that could execute arbitrary...
The vulnerability of the built-in software in Intel NUC Kits is related to improper handling of resolutions, allowing attackers to increase their privileges.
The vulnerability in the built-in software of the Intel NUC Kit is related to incorrect handling of resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...
vulhub
It is an offensive tool for web application security testing. The repository contains a collection of pre-built vulnerable docker environments, allowing users to test web application security without requiring prior knowledge of docker. The tool is designed to be easy to use, with a simple...