5064 matches found
PT-2021-26924
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.4.164 Description A potential NULL pointer dereference issue was identified in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2021-26974
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description The issue concerns a potential NULL pointer dereference in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-22517
Name of the Vulnerable Software and Affected Versions: Parsian Bank Gateway for Woocommerce WordPress plugin versions up to and including 1.0 Description: The issue allows attackers to inject arbitrary web scripts due to a var dump on $ POST variables found in the...
Exploit for CVE-2021-42278
noPac Exploiting CVE-2021-42278 and CVE-2021-42287 The origi...
PT-2024-11476
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the nfc genl dump ses done function. This function should check if the received argument is non-NULL because its allocatio...
Bus Pass Management System 1.0 - (Search) SQL injection Vulnerability
Exploit Title: Bus Pass Management System 1.0 - 'Search' SQL injection Exploit Author: Abhijeet Singh Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql/ Version: v-1.0 Default Tested on: macOS MontereyVersion 12.0.1 SQL...
ZOHO ManageEngine Remote Access Plus Information Disclosure Vulnerability
ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. An information disclosure vulnerability exists in ZOHO ManageEngine Remote Access Plus Server prior to version 10.1.2132.6, which stems from a privilege management Improperly managed, the process will start as a...
CVE-2021-42956
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
CVE-2021-42956
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
CVE-2021-42956
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
Information disclosure
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
CVE-2021-42956
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
CVE-2021-42956
CVE-2021-42956 affects Zoho ManageEngine Remote Access Plus Server for Windows, up to version 10.1.2132.6. Root cause: improper privilege management causes the server process to run as the logged-in user, enabling memory dump by non-admins. Impact: attacker could remotely dump sensitive informati...
ZOHO ManageEngine Remote Access Plus 安全漏洞
ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. An information disclosure vulnerability exists in ZOHO ManageEngine Remote Access Plus Server prior to version 10.1.2132.6, which stems from a privilege management Improperly managed, the process will start as a...
CVE-2021-42956: Improper Privilege Management
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
CVE-2021-42773
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, could allow a user to retrieve an arbitrary file from a remote host with the GetDumpFile command. In non-secure mode, the user is unauthenticated...
Broadcom Management Center 信息泄露漏洞
Broadcom Emulex HBA Manager formerly known as OneCommand Manager provides centralized management of Emulex HBAs in physical and virtual server deployments through a graphical user interface GUI and a fully scriptable command line user interface CLI. Manager versions prior to 11.4.425.0, 12.8.542....
CVE-2020-23873
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump...