Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Windows

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the declarative reading and writing methods for BinData binary file formats, related to uncontrolled resource consumption, allows a perpetrator to cause service failures.

The vulnerability of the declarative method for reading and writing BinData binary file formats is related to the relatively slow creation of certain classes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

DEBIAN-CVE-2021-42006

An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file...

UBUNTU-CVE-2021-42006

An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthor...

resteasy: Error message exposes endpoint class information

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...

Unspecified Vulnerability in Tecknodreams SapphireIMS

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A security vulnerability exists in Tecknodreams SapphireIMS 40971, which can be exploited by an attacker for username enumeration...

The vulnerability of the IFC Adapter component of Siemens NX software for product design, development, and manufacturing allows a perpetrator to execute arbitrary code.

The vulnerability of the IFC Adapter component of Siemens NX software for product design, development, and manufacturing since version 1980 is related to the use of memory after it is freed during IFC file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Women, Minorities Are Hacked More Than Others

Lower-income and vulnerable populations are disproportionally affected by cybercrime, according to a new survey, which uncovered that demographics play a big role in how often individuals are targeted. The survey results released Monday from Malwarebytes, Digitunity and Cybercrime Support Network...

NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the custom class name of the form field created, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC With the Form Builder "Dev Mode” setting enabled, create a form and a...

Advantech iView CommandServlet Directory Traversal (CVE-2021-22656)

A directory traversal vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied path when processing the request in CommandServlet Java class...

Cross site request forgery (csrf)

A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...

Rapid7 Technical Support: Building a Career Path With Endless Possibilities

At Rapid7, our Technical Support teams deliver a world-class support experience to our customers across the globe. We have Support Moose on 4 continents, in 10 offices, and across 8 time zones, but we're all one herd. So, how do we achieve this? We swarm on cases together each day, we collaborate...

Wuzhi WUZHI CMS 跨站脚本漏洞

Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. A security vulnerability exists in WUZHI CMS 4.1.0 and later, which originates from the coreframe/app/attachment/libs/class/ckditor.class.php configuration function...

CVE-2021-39554

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer located in Lexer.cc. It allows an attacker to cause Denial of Service...

CVE-2021-39554

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer located in Lexer.cc. It allows an attacker to cause Denial of Service...

Ubuntu 16.04 ESM : Python vulnerabilities (USN-5083-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5083-1 advisory. It was discovered that Python incorrectly handled certain RFCs. An attacker could possibly use this issue to cause a denial of service. This issue only...

ShowDoc file upload vulnerability

ShowDoc is an online API documentation, technical documentation tool ideal for IT teams. showDoc version 2.9.5 is vulnerable to file upload. A remote attacker can exploit this vulnerability to execute arbitrary code via the fileurl parameter in AdminUpdateController.class.php...

CVE-2021-38841

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...

Simple Water Refilling Station Management System SQL注入漏洞

Simple Water Refilling Station Management System is a simple water refilling station management system . A SQL injection vulnerability exists in the v1.0 version of Simple Water Refilling Station Management System, which originates from the application WaterRefilling/classes/Login.php, the userna...