CVE-2021-26837

CVE-2021-26837 HelpSystems / Fortra DeliverNow SQL 注入漏洞 DeliverNow 的日志搜索页面（/LogGrid.aspx）上的 SearchTextbox 参数被直接拼接到 SQL Server 查询中，没有参数化处理，也没有服务端验证。该应用还将由此产生的 SQL Server 解析器错误直接回显给用户，这正是该漏洞最初自我暴露的方式。 数据库连接以 sa 身份运行，因此该注入继承了实例上的完全 sysadmin 权限。这足以对攻击者控制的 UNC 路径调用 master.dbo.xpdirtree，并强制 SQL Server...

EUVD-2021-13621

Malware in sbrugna...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

Sql injection

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

CVE-2021-26837 affects Fortra DeliverNow prior to version 1.2.18, where the SQL Injection flaw is exposed in the SearchTextBox parameter. The NVD entry documents that exploitation can lead to arbitrary code execution, privilege escalation, and access to sensitive information, with a CVSS v3.1 bas...

Threat Outbreak Alert RuleID21023: Email Messages Distributing Malicious Software on February 12, 2016

Medium Alert ID: 43530 First Published: 2016 February 15 14:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21023 may contain the following files: Name |...