1860 matches found
CVE-2021-38148
Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs...
Design/Logic Flaw
Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs...
CVE-2021-38148
Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs...
CVE-2021-38148
Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs...
CVE-2021-37543
In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects...
CVE-2021-37543
CVE-2021-37543 affects JetBrains RubyMine prior to 2021.1.1. The vulnerability permits code execution without user confirmation for untrusted projects. The issue is documented in CVE-2021-37543 and is listed in JetBrains’ Security Bulletin Q2-2021, which shows RubyMine was resolved in version 202...
Admin and treasury change should be confirmed.
Handle tensors Vulnerability details Impact Inputting the wrong address here could lock out a lot of the funds and smart contract methods. Proof of Concept Recommended Mitigation Steps Require the changed address to confirm the switch with a pendingAdmin, pendingTreasury variable. --- The text wa...
CVE-2021-20090
creationtimestamp| type| source ---|---|--- 2021-08-04 11:27:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3986 2021-08-08 08:22:21+00:00| exploited| https://t.me/cKure/6532 2021-08-08 14:28:35+00:00| exploited| https://t.me/CyberSecurityTechnologies/4021 2021-08-08...
CVE-2021-37216
creationtimestamp| type| source ---|---|--- 2021-08-02 16:27:25+00:00| seen| https://t.me/cibsecurity/26674 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37216.yaml...
New CISA Director Confirmed, W.H. Gains Cyber-Director
The U.S. has made a key move to shore up its cybersecurity strategy, with the confirmation of Jen Easterly as the director of the Cybersecurity and Infrastructure Security Agency CISA on Monday. Easterly, a former official at the National Security Agency from 2011 to 2013 and two-time Bronze Star...
The vulnerability of software such as Google Chrome, Firefox, Firefox ESR, and Thunderbird lies in a data source confirmation error, which allows attackers to gain access to confidential data.
The vulnerability of the Google Chrome, Firefox, Firefox ESR, and Thunderbird software lies in a data source confirmation error. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...
CVE-2021-25428
Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...
CVE-2021-25428
Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...
PackageManager安全漏洞
Samsung PackageManager is an application from Samsung Korea. A security vulnerability exists in versions prior to Samsung PackageManager SMR July-2021 Release 1, which can be exploited by attackers to gain dangerous levels of privileges without user confirmation in limited circumstances...
MGASA-2021-0306 Updated thunar packages fix a security vulnerability
An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program based on the file type without user confirmation. This could be used to achieve code execution CVE-2021-32563...
CVE-2021-32718
RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper tag sanitization, potentially allowing for JavaScript code execution in the...
Unused return value from Transfer()/ TransferFrom()
Handle JMukesh Vulnerability details Impact return value from transfer/ transferFrom confirm the success of that function call, these return should be checked Proof of Concept Tools Used Manual analysis Recommended Mitigation Steps utilise the return value to check the success of the function ---...
CVE-2021-22214
creationtimestamp| type| source ---|---|--- 2021-06-20 07:41:59+00:00| seen| https://t.me/pwnwikizhchannel/682 2021-06-26 13:37:04+00:00| seen| https://t.me/bhhub/410 2021-11-01 04:09:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/784 2021-11-03 11:00:10+00:00|...
unlv.edu Cross Site Scripting vulnerability OBB-2053193
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| unlv.edu ---|--- Open Bug Bounty...