2393 matches found
net.liftweb:lift-example (>=1.0, <=1.1-m7) potentially affected by CVE-2022-23221 via com.h2database:h2 (1.0.79)
com.h2database:h2 MAVEN version 1.0.79 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - net.liftweb:lift-example =1.0, =1.1-m7 Source cves: CVE-2022-23221 Source advisory: OSV:GHSA-45HX-WFHJ-473X...
VulnCheck KEV: CVE-2020-11978
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow...
Apache Airflow Command Injection
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow...
SourceLeakHacker - A Multi Threads Web Application Source Leak Scanner
SourceLeakHacker is a muilt-threads web directories scanner. Installation pip install -r requirements.txt Usage dictionary scale --output OUTPUT output folder, default: result/YYYY-MM-DD hh:mm:ss --threads THREADS, -t THREADS threads numbers, default: 4 --timeout TIMEOUT HTTP request timeout...
Croogo 3.0.2 Remote Code Execution
Exploit Title: Croogo 3.0.2 - Remote Code Execution Authenticated Date: 05/12/2021 Exploit Author: Deha Berkin Bir Vendor Homepage: https://croogo.org/ Software Link: https://downloads.croogo.org/v3.0.2.zip Version: 3.0.2 Tested on: Windows 10 Home Single Language 20H2 & WampServer 3.2.3 ==...
CVE-2021-43698
phpWhois last update Jun 30 2021 is affected by a Cross Site Scripting XSS vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $GET'query' then there is a XSS vulnerability...
CVE-2021-43698
phpWhois last update Jun 30 2021 is affected by a Cross Site Scripting XSS vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $GET'query' then there is a XSS vulnerability...
PhpWhois cross-site scripting vulnerability
PhpWhois is a Whois library containing Php by Spanish individual developer David Saez Padros. A cross-site scripting vulnerability exists in PhpWhois, which originates in the file example.php, where the exit function will terminate the script and print a message to the user. No detailed...
Exploit for CVE-2017-17562
GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/h...
PT-2021-22372 · Octorpki · Octorpki
Name of the Vulnerable Software and Affected Versions: OctoRPKI affected versions not specified Description: The issue allows a repository to create a file that can be written to disk outside the base cache folder due to a failure to escape a URI with a filename containing "..". This could enable...
org.apache.mina:mina-example (1.0.5), org.apache.mina:mina-filter-compression (1.0.5) +4 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.0.5)
org.apache.mina:mina-core MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.5 - org.apache.mina:mina-filter-compression 1.0.5 -...
org.apache.mina:mina-example (1.1.1), org.apache.mina:mina-filter-compression (1.1.1) +3 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.1.1)
org.apache.mina:mina-core MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.1 - org.apache.mina:mina-filter-compression 1.1.1 -...
org.apache.geronimo.gshell:gshell-assembly (1.0-alpha-1), org.apache.geronimo.gshell:gshell-whisper (1.0-alpha-1) +6 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.1.4)
org.apache.mina:mina-core MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.geronimo.gshell:gshell-assembly 1.0-alpha-1 - org.apache.geronimo.gshell:gshell-whisper 1.0-alpha-...
org.apache.mina:mina-example (1.0.4), org.apache.mina:mina-filter-compression (1.0.4) +4 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.0.4)
org.apache.mina:mina-core MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.4 - org.apache.mina:mina-filter-compression 1.0.4 -...
org.apache.mina:mina-example (1.0.3), org.apache.mina:mina-filter-compression (1.0.3) +4 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.0.3)
org.apache.mina:mina-core MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.3 - org.apache.mina:mina-filter-compression 1.0.3 -...
com.taobao.tair:tair-client (>=2.3.4, <=2.3.5), com.taobao.tair:tair3-client (3.0.1.14) +12 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.1.5)
org.apache.mina:mina-core MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - com.taobao.tair:tair-client =2.3.4, =2.3.4.4, =2.1.2, =2.1.8 - org.apache.mina:mina-example 1.1.5 -...
org.apache.mina:mina-example (1.0.10), org.apache.mina:mina-filter-codec-netty (1.0.10) +5 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.0.10)
org.apache.mina:mina-core MAVEN version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.10 - org.apache.mina:mina-filter-codec-netty 1.0.10 -...
Exploit for Path Traversal in Apache Http_Server
Apachuk - CVE-2021-41773 Grabber with Shodan Grabber Apache Di...
GitOops - All Paths Lead To Clouds
GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/CD jobs and environment variables...
Online Traffic Offense Management System 1.0 - Multiple SQL Injection Vulnerability
Exploit Title: Online Traffic Offense Management System 1.0 - Multiple SQL Injection Unauthenticated Exploit Author: Hubert Wojciechowski Contact Author: email protected Vendor Homepage: https://www.sourcecodester.com Software Link:...