PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System 4.0 has a security vulnerability that can be exploited by an attacker to conduct xss attacks using multiple parameters. The parameters that can be exploited are 1...

CVE-2021-38000

creationtimestamp| type| source ---|---|--- 2021-10-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=682 2021-10-29 06:14:24+00:00| exploited| https://t.me/cKure/7810 2021-10-29 16:50:00+00:00| exploited| https://t.me/truesecator/2268 2021-10-30 15:46:49+00:00| seen|...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

USN-5109-1: nginx vulnerability

It was discovered that nginx incorrectly handled files with certain modification dates. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact...

USN-5109-1 nginx vulnerability

It was discovered that nginx incorrectly handled files with certain modification dates. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact...

CVE-2021-38454

creationtimestamp| type| source ---|---|--- 2021-10-12 18:25:34+00:00| seen| https://t.me/cibsecurity/30409 2022-02-13 13:50:12+00:00| seen| https://t.me/NeKaspersky/1799 2022-02-14 17:40:00+00:00| seen| https://t.me/truesecator/2627...

Metasploit Wrap-Up

Credential gatherers, mix-ins, oh my! We're excited that Metasploit now includes support for 28 related post modules for gathering credentials based on the PackRat toolset. This is a continuation of 5433, 11700, and 11719. It was developed by community contributors Kazuyoshi Maruta, Daniel...

CVE-2021-23445

creationtimestamp| type| source ---|---|--- 2021-09-27 20:35:00+00:00| seen| https://t.me/cibsecurity/29500 2024-05-29 20:13:05+00:00| seen| https://t.me/KMPteam/1841 2024-05-30 01:51:17+00:00| seen| https://t.me/HackerNewsAR/1101 2024-05-30 07:23:02+00:00| seen| https://t.me/KMPteam/1901...

CVE-2021-38406

creationtimestamp| type| source ---|---|--- 2021-09-17 22:24:09+00:00| seen| https://t.me/cibsecurity/29062 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 23:57:55+00:00| seen| https://t.me/arpsyndicate/1063 2024-12-24 20:32:51+00:00| seen|...

CVE-2021-26086

creationtimestamp| type| source ---|---|--- 2021-08-16 07:14:13+00:00| seen| https://t.me/cibsecurity/27346 2021-10-12 05:21:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/680 2021-10-13 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4511...

CVE-2021-32706

creationtimestamp| type| source ---|---|--- 2021-08-04 23:23:43+00:00| seen| https://t.me/cibsecurity/26847 2022-01-12 15:41:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/piholedomainsapiexec.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2021-28164

creationtimestamp| type| source ---|---|--- 2021-07-15 20:26:58+00:00| seen| https://t.me/cibsecurity/26189 2021-09-02 09:51:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/491 2021-11-12 18:09:42+00:00| seen|...

PT-2021-10740 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns a SQL injection vulnerability located in the hmsadminbetweendates-detailsreports.php file. This vulnerability can be exploited by remote unauthenticated...

CVE-2021-22214

creationtimestamp| type| source ---|---|--- 2021-06-20 07:41:59+00:00| seen| https://t.me/pwnwikizhchannel/682 2021-06-26 13:37:04+00:00| seen| https://t.me/bhhub/410 2021-11-01 04:09:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/784 2021-11-03 11:00:10+00:00|...

CVE-2017-20005

NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow or a false modification date far in the future, when encountered by the autoindex module...