13617 matches found
Open redirect
Rejected reason: Unused CVE for 2020...
CVE-2020-27282
creationtimestamp| type| source ---|---|--- 2021-03-16 01:29:23+00:00| seen| https://t.me/cibsecurity/24931...
CVE-2021-28306
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent...
wpa_supplicant security update
1:2.6-12.1.0.2 - Added undefine-bitwise-in-common-header.patch bug 27677154 1:2.6-12.1 - P2P: Fix a corner case in peer addition based on PD Request CVE-2021-27803...
FBI-CISA Joint Advisory on Compromise of Microsoft Exchange Server
CISA and the Federal Bureau of Investigation FBI have released a Joint Cybersecurity Advisory CSA to address recently disclosed vulnerabilities in Microsoft Exchange Server. CISA and FBI assess that adversaries could exploit these vulnerabilities to compromise networks, steal information, encrypt...
DEBIAN-CVE-2021-20273
A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...
UBUNTU-CVE-2021-20273
A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...
PT-2021-13865 · Privoxy +4 · Privoxy +4
Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw was found in the software, which can cause a crash via a crafted CGI request if it is toggled off. Recommendations: For versions prior to 3.0.32, update to version 3.0.32 or later to resolv...
The vulnerability of the pj_common_print_page() function (device/gdevpjet.c) in the software suite for processing, transforming, and generating Ghostscript documents, related to buffer overflow, allows an attacker to trigger a service failure.
The vulnerability of the pjcommonprintpage function device/gdevpjet.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2021-27964
creationtimestamp| type| source ---|---|--- 2021-03-05 07:47:07+00:00| seen| https://t.me/cibsecurity/24493 2021-03-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49651 2021-09-21 06:42:51+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/104 2021-12-12...
CVE-2021-25347
creationtimestamp| type| source ---|---|--- 2021-03-05 00:47:12+00:00| seen| https://t.me/cibsecurity/24486...
CVE-2020-24914
creationtimestamp| type| source ---|---|--- 2021-03-04 16:46:31+00:00| seen| https://t.me/cibsecurity/24445 2024-04-25 21:02:24+00:00| seen| https://t.me/arpsyndicate/4863 2024-12-27 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-27 2025-01-26...
CVE-2021-21313
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters target and id are not...
UBUNTU-CVE-2021-21313
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters target and id are not...
CVE-2021-21313
CVE-2021-21313 affects GLPI before 9.5.4, where the /ajax/common.tabs.php endpoint inadequately sanitizes parameters _target and id. This can enable crafted URLs to trigger cross‑site effects or script execution depending on the payloads (examples include JavaScript: alerts and other inline code)...
GLPI 跨站脚本漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
Rockwell Automation CompactLogix 5370 输入验证错误漏洞
The Rockwell Automation CompactLogix 5370 is a programmable logic controller from Rockwell Automation. The Rockwell Automation CompactLogix 5370 and ControlLogix 5570 are vulnerable to an input validation error vulnerability that allows an attacker to send a specially crafted CIP packet request t...
