Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

!Not Maintainedhttps://img.shields.io/badge/Maintenance%20Le...

maltrail

This is a Python-based malicious traffic detection system called Maltrail. It is designed to identify and report malicious traffic, including malware, suspicious domains, and other types of malicious activity. The system uses a combination of publicly available blacklists and custom user-defined...

CVE-2021-40921

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-40921

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-40921

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-40921

CVE-2021-40921 affects Detector versions 0.8.5 and earlier. The vulnerability lies in the _contactform.inc.php code path, where the cid parameter enables cross-site scripting (XSS) by injecting arbitrary web script or HTML. Impact is described as allowing an attacker to compromise client-side int...

CVE-2021-40921: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

Detector 跨站脚本漏洞

Detector is an open source, simple, Php and JavaScript based browser and feature detection library from the US-based individual developer Dave Olsen. A cross-site scripting vulnerability exists in Detector versions 0.8.5 and below that allows remote attackers to inject arbitrary web script or HTM...

CVE-2021-30124

The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...

Code injection

The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...

Microsoft Visual Studio Code 命令注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Visual Studio Code versions prior to 1.3.0, which stems from a problem with Visual Studio Code's unofficial vcode -phpmd aka PHP Mess Detector extension. The vulnerability can be...

HackerOne: Report Duplicate Detector can match deleted and draft reports, may disclose title and vulnerability information

When a Report is submitted on HackerOne.com, a feature called the Report Duplicate Detector helps program members and triagers find potential duplicates of the submitted report. This feature will match against all reports that were submitted to the program. When the feature was introduced, all...

GSD-2021-1000427 powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration

powerpc: Fix HAVEHARDLOCKUPDETECTORARCH build configuration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000471 powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration

powerpc: Fix HAVEHARDLOCKUPDETECTORARCH build configuration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by commit...

Npm es6-crawler-detect 安全漏洞

Npm es6-crawler-detect is an application from Npm. It can help detect bots, crawlers and spiders by scanning user agent strings or from the global ... A security vulnerability exists in es6-crawler-detect before 3.1.3, which stems from the lack of a limit on the length of the user agent string...

CVE-2020-12122

In Max Secure Max Spyware Detector 1.0.0.044, the driver file MaxProc64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019. This also extends to the various other products from Max Secure...

Input validation

In Max Secure Max Spyware Detector 1.0.0.044, the driver file MaxProc64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019. This also extends to the various other products from Max Secure...

CVE-2020-12122

In Max Secure Max Spyware Detector 1.0.0.044, the driver file MaxProc64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019. This also extends to the various other products from Max Secure...

CVE-2020-12122

CVE-2020-12122 affects Max Secure Max Spyware Detector 1.0.0.044 and other products using the MaxProc64.sys driver. The vulnerability stems from missing input validation for IOCTL 0x2200019, enabling a local attacker to trigger a denial of service (BSOD) and potentially other impacts. Impact is d...