RCE (Remote Code Execution) in Confluence Data Center & Server

This High severity RCE Remote Code Execution vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of Confluence Data Center & Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8, allows an authenticated attacker to execute arbitrary code which has high...

RCE (Remote Code Execution) in Confluence Data Center & Server

This High severity RCE Remote Code Execution vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of Confluence Data Center & Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.5, allows an authenticated attacker to execute arbitrary code which has high...

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, is related to insufficient protection of the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the StruxureWare Data Center Exper monitoring system relates to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack at the final download point of a DCE file, by modifying paramete...

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, arises from improper code generation. This allows a perpetrator to execute arbitrary code.

The vulnerability of the StruxureWare Data Center Exper monitoring system is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the “hostname” parameter, by entering a synthetically created hostname...

Security Bulletin: IBM Communications Server for AIX is vulnerable to Timing Oracle in RSA Decryption in GSKit builds prior to 8.0.55.31 ( CVE-2023-32342 )

Summary IBM GSKit is used by IBM Communications Server for AIX as part of the TN3270 Server and TN Redirector features. CVE-2023-32342. Vulnerability Details CVEID:CVE-2023-32342 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side...

Security Bulletin: IBM Communications Server for Linux & CS for Linux on System z is vulnerable to Timing Oracle in RSA Decryption in GSKit builds prior to 8.0.55.31 ( CVE-2023-32342 )

Summary IBM GSKit is used by IBM Communications Server for Linux & CS for Linux on System z as part of the TN3270 Server and TN Redirector features. CVE-2023-32342. Vulnerability Details CVEID:CVE-2023-32342 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information,...

Page restrictions are not inherited for pages created from Templates

h3. Issue Summary Page restrictions are not inherited to child pages if the child page is created via Templates e.g Meeting notes template. This is reproducible on Data Center: yes h3. Steps to Reproduce Create a page and apply page restriction for some user View and edit restriction Create a chi...

Granting the 'Administer Projects' permission to a 'Custom Field' within a permission scheme allows all users to see the Project Settings

h3. Issue Summary This is reproducible on Data Center: yes Granting the Administer Projects permission to a User custom field value results in users having access to the Project Settings area even when the field is not populated. h3. Steps to Reproduce Create a new project with sample data Create...

NetBox 跨站脚本漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from a security issue in the Create Tenants /tenancy/tenants/ feature, and can b...

NetBox 跨站脚本漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows...

Exploit for Injection in Atlassian Confluence_Data_Center

go-exploit: Go Exploit Framework !Gohttps://github.com/vu...

Confluence System error page is displaying environment details.

h3. Issue Summary Confluence System error page is displaying environment details. This has been fixed as per https://jira.atlassian.com/browse/CONFSERVER-55306 but the issue still persists. This is reproducible on Data Center: yes h3. Steps to Reproduce Create a Confluence instance with version...

CVE-2022-41998

Uncontrolled search path in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41979

Protection mechanism failure in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2022-40210

Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Data Center Manager 安全漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager versions prior...

Intel Data Center Manager 授权问题漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager versions prior...

Intel Data Center Manager 安全漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager versions prior...

Intel Data Center Manager 代码问题漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager versions prior...

Intel Data Center Manager 安全漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager versions prior...