5383 matches found
CVE-2021-42651
A Server Side Template Injection SSTI vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/...
Sql injection
A Server Side Template Injection SSTI vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/...
CVE-2021-42651
A Server Side Template Injection SSTI vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/...
CVE-2021-42651
A Server Side Template Injection SSTI vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/...
CVE-2021-42651
CVE-2021-42651 describes a Server Side Template Injection (SSTI) in the open-source toolkit Pentest-Collaboration-Framework v1.0.8 . The vulnerability allows an authenticated remote attacker to execute arbitrary code via the path “/project/PROJECTNAME/reports/”. Root cause is SSTI in the server-s...
PT-2022-11654
Name of the Vulnerable Software and Affected Versions Pentest-Collaboration-Framework version 1.0.8 Description A Server Side Template Injection SSTI vulnerability allows an authenticated remote attacker to execute arbitrary code through the "/project/PROJECTNAME/reports/" API endpoint...
CVE-2021-42651: Improper Control of Generation of Code
A Server Side Template Injection SSTI vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/...
Siemens JT2Go and Teamcenter Visualization File Parsing Vulnerability
Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A security vulnerability exists in Siemens JT2Go and Teamcenter Visualization that can be exploited by an attacker to execute code in the context...
AMD Gave Google Cloud Rare Access to Its Tech to Hunt Chip Flaws
By working together, the companies say they’re better able to find security flaws in Google Cloud’s Confidential Computing infrastructure...
5 Benefits of Detection-as-Code
TL;DR: Adopt a modern, test-driven methodology for securing your organization with Detection-as-Code. Over the past decade, threat detection has become business-critical and even more complicated. As businesses move to the cloud, manual threat detection processes are no longer able to keep up. Ho...
Zip Path Traversal in Zimbra (mboximport) (CVE-2022-27925)
This module POSTs a ZIP file containing path traversal characters to the administrator interface for Zimbra Collaboration Suite. If successful, it plants a JSP-based backdoor within the web directory, then executes it. The core vulnerability is a path-traversal issue in Zimbra Collaboration Suite...
XWiki has unspecified vulnerabilities
Xwiki Platform is a set of wiki platforms for creating web collaboration applications from the French company Xwiki. security vulnerabilities exist in versions of XWiki prior to 13.10.6, 14.3.1 and 14.4-rc-1. X509 certificate with RSA, there is a risk of conflict with SHA1. No details of the...
Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software Redirection Vulnerability
Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of Cisco, a U.S. company.Cisco RoomOS Software is a set of automated management software for Cisco devices. Cisco TelePresence Collaboration Endpoint Software is a set of collaboration endpoint...
Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service and Information Disclosure Vulnerability
Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of Cisco, a U.S. company. Cisco TelePresence Collaboration Endpoint Software is a set of collaboration endpoint software. cisco TelePresence Collaboration Endpoint and RoomOS Software has a denial of...
CVE-2022-20764
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...
CVE-2022-20794
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...
Design/Logic Flaw
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...
Design/Logic Flaw
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...
CVE-2022-20794 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...
CVE-2022-20794
CVE-2022-20794 covers multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software. The issues could allow a remote attacker to cause a DoS, view sensitive data on the affected device, or redirect users to an attacker-controlled d...