Lucene search
+L

1287 matches found

Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•1 views

PT-2022-7979

Name of the Vulnerable Software and Affected Versions Lithium Forum version 2017 Q1 Description A critical issue has been found in the Compose Message Handler component. The manipulation of the upload url argument leads to server-side request forgery. The attack must be approached locally. The...

5.3CVSS0.00333EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/28 12:00 a.m.•9 views

CVE-2017-20106: Server-Side Request Forgery (SSRF)

A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument uploadurl leads to server-side request forgery. The attack needs to be approached...

5.3CVSS4.9AI score0.00333EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2022/06/19 9:30 p.m.•88 views

VAmPI - Vulnerable REST API With OWASP Top 10 Vulnerabilities For Security Testing

The Vulnerable API Based on OpenAPI 3 VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency of tools used to detect security issues in APIs. It includes a...

7.5AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2022/06/19 12:30 p.m.•45 views

Cervantes - Collaborative Platform For Pentesters Or Red Teams Who Want To Save Time To Manage Their Projects, Clients, Vulnerabilities And Reports In One Place

Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place. Features OpenSource Multiplatform Multilanguage Team Collaboration BuiltIn dashbaords and analytics Manage your clients...

7.6AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/15 12:00 a.m.•19 views

The vulnerability of the Fax Compose Form component in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Fax Compose Form component in Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.02058EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/15 12:00 a.m.•21 views

The vulnerability of the Fax Compose Form component in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Fax Compose Form component in Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02058EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/09 12:00 a.m.•24 views

The vulnerability of the Fax Compose Form component in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Fax Compose Form component in Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02058EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
•added 2022/06/07 12:00 p.m.•52 views

This Week in Spring - June 7th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! Ive just landed in tantalizing Toronto, Canada, for the SpringOne Tour Toronto show. Im so excited to be here, at long last, after so long away from one of my favorite countries. Ill be doing two talks - my usual, Kubernetes...

0.5AI score
SaveExploits0
OSV
OSV
•added 2022/06/02 2:15 p.m.•8 views

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

9.8CVSS7.5AI score0.044EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•12 views

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

10CVSS7.4AI score0.044EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•20 views

Docker-Tester 操作系统命令注入漏洞

Docker-Tester uses docker-compose files to set up test environments and verify them before running tests. A security vulnerability exists in version 1.2.1 of Docker-Tester, which can be exploited by an attacker to maliciously execute operating system commands...

10CVSS8.4AI score0.044EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2022/05/12 1:23 p.m.•505 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Essay 🕸️ Description 🖼️ This repository co...

7.5CVSS8.4AI score0.99992EPSS
SaveExploits167
OSV
OSV
•added 2022/04/15 7:15 p.m.•19 views

CVE-2022-26918

Windows Fax Compose Form Remote Code Execution Vulnerability...

7.8CVSS7.6AI score0.02058EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/15 7:15 p.m.•12 views

CVE-2022-26917

Windows Fax Compose Form Remote Code Execution Vulnerability...

7.8CVSS7.5AI score0.02058EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/15 7:15 p.m.•12 views

CVE-2022-26916

Windows Fax Compose Form Remote Code Execution Vulnerability...

7.8CVSS7.6AI score0.02058EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/15 7:15 p.m.•16 views

CVE-2022-26918

Windows Fax Compose Form Remote Code Execution Vulnerability...

7.8CVSS7.6AI score0.02058EPSS
SaveExploits0References3Affected Software26
NVD
NVD
•added 2022/04/15 7:15 p.m.•26 views

CVE-2022-26917

Windows Fax Compose Form Remote Code Execution Vulnerability...

7.8CVSS0.02058EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/15 7:15 p.m.•23 views

CVE-2022-26918

Windows Fax Compose Form Remote Code Execution Vulnerability...

7.8CVSS0.02058EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/15 7:15 p.m.•39 views

Remote code execution

Windows Fax Compose Form Remote Code Execution Vulnerability...

5.1CVSS7.8AI score0.02058EPSS
SaveExploits0References1Affected Software5
Prion
Prion
•added 2022/04/15 7:15 p.m.•38 views

Remote code execution

Windows Fax Compose Form Remote Code Execution Vulnerability...

5.1CVSS8.3AI score0.02058EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder