ActivIdentity 8.2 - (ac.sharedstore) Unquoted Service Path Vulnerability

Exploit Title: ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path Exploit Author : SamAlucard Software Version : ActivIdentity 8.2 Vendor Homepage : https://www.hidglobal.com/ Tested on OS: Windows 7 Pro ActivIdentity was Acquired by HID Global in Octuber 2010 ActivClient is a desktop...

Reverse-Shell-Generator - Hosted Reverse Shell Generator With A Ton Of Functionality

Hosted Reverse Shell generator with a ton of functionality -- great for CTFs Hosted Instance https://revshells.com Features Generate common listeners and reverse shells Automatically copy to clipboard Button to increment the listening port number by 1 URI and Base64 encoding LocalStorage to persi...

byte-common (1.0.0), registry-sync (>=2.4.1, <=2.4.6) potentially affected by CVE-2021-27290 via ssri (>=7.0.0, <=7.1.0)

ssri NPM version =7.0.0, =2.4.1, =2.4.6 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

Open redirect

Rejected reason: Unused CVE for 2020...

Open redirect

Rejected reason: Unused CVE for 2020...

CVE-2020-27282

creationtimestamp| type| source ---|---|--- 2021-03-16 01:29:23+00:00| seen| https://t.me/cibsecurity/24931...

CVE-2021-28306

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent...

wpa_supplicant security update

1:2.6-12.1.0.2 - Added undefine-bitwise-in-common-header.patch bug 27677154 1:2.6-12.1 - P2P: Fix a corner case in peer addition based on PD Request CVE-2021-27803...

FBI-CISA Joint Advisory on Compromise of Microsoft Exchange Server

CISA and the Federal Bureau of Investigation FBI have released a Joint Cybersecurity Advisory CSA to address recently disclosed vulnerabilities in Microsoft Exchange Server. CISA and FBI assess that adversaries could exploit these vulnerabilities to compromise networks, steal information, encrypt...

DEBIAN-CVE-2021-20273

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

UBUNTU-CVE-2021-20273

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

PT-2021-13865 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw was found in the software, which can cause a crash via a crafted CGI request if it is toggled off. Recommendations: For versions prior to 3.0.32, update to version 3.0.32 or later to resolv...

The vulnerability of the pj_common_print_page() function (device/gdevpjet.c) in the software suite for processing, transforming, and generating Ghostscript documents, related to buffer overflow, allows an attacker to trigger a service failure.

The vulnerability of the pjcommonprintpage function device/gdevpjet.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2021-27964

creationtimestamp| type| source ---|---|--- 2021-03-05 07:47:07+00:00| seen| https://t.me/cibsecurity/24493 2021-03-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49651 2021-09-21 06:42:51+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/104 2021-12-12...

CVE-2021-25347

creationtimestamp| type| source ---|---|--- 2021-03-05 00:47:12+00:00| seen| https://t.me/cibsecurity/24486...

CVE-2020-24914

creationtimestamp| type| source ---|---|--- 2021-03-04 16:46:31+00:00| seen| https://t.me/cibsecurity/24445 2024-04-25 21:02:24+00:00| seen| https://t.me/arpsyndicate/4863 2024-12-27 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-27 2025-01-26...

CVE-2021-21313

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters target and id are not...

UBUNTU-CVE-2021-21313

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters target and id are not...

CVE-2021-21313

CVE-2021-21313 affects GLPI before 9.5.4, where the /ajax/common.tabs.php endpoint inadequately sanitizes parameters _target and id. This can enable crafted URLs to trigger cross‑site effects or script execution depending on the payloads (examples include JavaScript: alerts and other inline code)...

GLPI 跨站脚本漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...