13874 matches found
centurionmilitaria.co.uk Cross Site Scripting vulnerability OBB-2161367
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-40542
creationtimestamp| type| source ---|---|--- 2021-10-11 16:23:31+00:00| seen| https://t.me/cibsecurity/30335 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40542.yaml...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
Digi RealPort has an unspecified vulnerability (CNVD-2021-103406)
Digi RealPort is a proprietary Serial-over-LAN encapsulation protocol. A security vulnerability exists in versions prior to Digi RealPort 4.8.488.0 due to a buffer overflow in the software's handling of ADDP discovery response messages, which could be exploited by an attacker to cause the executi...
jnthfonseca.ga Cross Site Scripting vulnerability OBB-2159735
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for CVE-2020-1472
介绍 参考很多师傅写的关于CS的脚本,内容有横向移动、密码抓取、权限提升、权限维持等,尽可能将内网渗透中常用到的东西整理一下方便使用 更新日志 2021.7.7 更新CVE-2021-1675只测试了本地提权,其他的待测 参考于 https://github.com/cube0x0/CVE-2021-1675 2021.7.26 更新CVE-2021-1675-36934,参考与 https://github.com/cube0x0/CVE-2021-36934 2021.8.14 更新ZeroLogonCVE-2020-1472,参考...
CVE-2021-35977
An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution...
CVE-2021-35977
An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution...
Buffer overflow
An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution...
CVE-2021-35977
An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution...
CVE-2021-35977
An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution...
CVE-2021-35977
Digi RealPort for Windows up to version 4.8.488.0 is affected by a buffer overflow in the handling of ADDP discovery response messages, which could allow arbitrary code execution. Affected product/component: Digi RealPort for Windows (Serial‑over‑LAN). Root cause: buffer overflow via ADDP discove...
Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2021 - Includes Oracle Jul 2021 CPU
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR10-FP85 and Version 8 SR6-FP30 used by IBM Tivoli Application Dependency Discovery Manager TADDM. These issues were disclosed as part of the IBM Java SDK updates. Vulnerability Details CVEID: CVE-2021-238...
PT-2021-21093 · Digi · Digi Realport
Name of the Vulnerable Software and Affected Versions: Digi RealPort for Windows versions through 4.8.488.0 Description: A buffer overflow exists in the handling of ADDP discovery response messages, which could result in arbitrary code execution. Recommendations: For versions through 4.8.488.0,...
Digi RealPort 安全漏洞
Digi RealPort is a proprietary Serial-over-LAN encapsulation protocol. A security vulnerability exists in versions prior to Digi RealPort 4.8.488.0 due to a buffer overflow in the software's handling of ADDP discovery response messages, which could be exploited by an attacker to cause the executi...
CVE-2021-42087
An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API...
Design/Logic Flaw
An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API...
Iranian APT is targeting Middle Eastern Aerospace and Telecommunications companies
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. ShellClient is a powerful new Remote Access Trojan RAT that was used in highly targeted attacks on a select few Aerospace and Telecommunications firms, primarily in the Middle East, with other victims in the United States,...
CVE-2021-34780
Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...
CVE-2021-34779
Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...