CVE-2023-47124

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

大汉JCMS 注入漏洞3

简要描述： 大汉JCMS 注入漏洞3 详细说明： shortmessage/quesendmsg.jsp String strTitle = ""; /检索关键字/ String groupname = ""; String id = Convert.getParameterrequest, "loginid", "a";//获取参数 String boxtype = Convert.getParameterrequest, "boxtype", "a"; strTitle += groupname; // 获取表单提交变量条件参数 String strQueKeyWords =...

Vulnerability: CylantSecure

Summary: CylantSecure is a kernel patch and system that analyses behavior and kills programs that deviates from the "normal" system behaviour. The vulnerability lies in the processessing delay that occurs between a process violating some security rule and the actual killing of the process a user...