Exploit for CVE-2021-1675

C PrintNightmare CVE-2021-1675 You'll need a DLL to use Sh...

[SECURITY] Fedora 35 Update: python-rsa-4.7.2-1.fc35

Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...

[SECURITY] Fedora 33 Update: python-rsa-4.7.2-1.fc33

Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...

[SECURITY] Fedora 34 Update: python-rsa-4.7.2-1.fc34

Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2021-2457)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.1.1 to and including 7.75.0 is vulnerable to an 'Exposure of Private Personal Information to an Unauthorized Actor' by leaking credentials ...

Fedora: Security Advisory for gifsicle (FEDORA-2021-c351011066)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for gifsicle (FEDORA-2021-b349650e52)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP8 : zstd (EulerOS-SA-2021-2490)

According to the versions of the zstd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions matching the...

[SECURITY] Fedora 33 Update: gifsicle-1.93-1.fc33

Gifsicle is a command-line tool for creating, editing, and getting information about GIF images and animations. Some more gifsicle features: Batch mode for changing GIFs in place. Prints detailed information about GIFs, including comments. Control over interlacing, comments, looping,...

[SECURITY] Fedora 34 Update: gifsicle-1.93-1.fc34

Gifsicle is a command-line tool for creating, editing, and getting information about GIF images and animations. Some more gifsicle features: Batch mode for changing GIFs in place. Prints detailed information about GIFs, including comments. Control over interlacing, comments, looping,...

CVE-2021-34725 Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An...

Cisco IOS XR Privilege Escalation

The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to elevate their privileges to root...

Cisco IOS XR CLI Command Execution

The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2021-1546

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access through the CLI. An attacker could exploit this vulnerability by running a CLI command that targets an...

Cisco IOS XE SD-WAN Software 操作系统命令注入漏洞

Cisco IOS XE SD-WAN Software is a Cisco software for network management software-defined networking applied to the Cisco IOS XE network operating system. Cisco IOS XE SD-WAN Software suffers from an operating system command injection vulnerability that stems from insufficient input validation of...

Cisco IOS XE SD-WAN Software 安全漏洞

Cisco IOS XE SD-WAN Software is a Cisco software for network management software-defined networking for the Cisco IOS XE network operating system. A security vulnerability exists in Cisco IOS XE SD-WAN Software, which is caused by insufficient validation of CLI command parameters. An attacker cou...

Cisco SD-WAN 安全漏洞

Cisco SD-WAN is a highly secure cloud-scale architecture that is open, programmable, and scalable from Cisco USA. A security vulnerability exists in Cisco SD-WAN that results from improper protection of file access through the CLI. The vulnerability could allow an authenticated local attacker to...

Cisco ASR 900 安全漏洞

The Cisco ASR 900 is a 900 series aggregation services router from Cisco. A security vulnerability exists in the Cisco ASR 900 and ASR 920 that results from a hardware programming error when configuring ACLs using methods other than the configuration command line. An attacker could use this...

Exploit for Out-of-bounds Write in Php

This is an exploit module for a bug in php-fpm CVE-2019-11043. The exploit targets a vulnerability in certain nginx + php-fpm configurations, allowing a web user to execute code if the configuration is vulnerable. The exploit works by appending a specially crafted URL to the web server, which...

CMSmap

This is a Python-based open-source CMS scanner called CMSmap, which automates the process of detecting security flaws in popular Content Management Systems CMSs such as WordPress, Joomla, Drupal, and Moodle. The tool is designed to integrate common vulnerabilities for different types of CMSs in a...