ADRecon

Download from https://github.com/adrecon/ADRecon ADRecon: Active Directory Recon ADRecon is a tool which extracts and combines various artefacts as highlighted below out of an AD environment. The information can be presented in a specially formatted Microsoft Excel report that includes summary...

EUVD-2021-21326

Malware in sbrugna...

PT-2022-2567 · Siemens · Desigo Pxc4 +1

Name of the Vulnerable Software and Affected Versions: Desigo PXC4 versions prior to V02.20.142.10-10884 Desigo PXC5 versions prior to V02.20.142.10-10884 Description: A vulnerability has been identified in the addCell JavaScript function, which fails to properly sanitize user-controllable input...

Wipro Holmes Orchestrator 20.4.1 Report Disclosure

Exploit Title: Wipro Holmes Orchestrator 20.4.1 Unauthenticated Excel Report Download Date: 09/08/2021 Exploit Author: Rizal Muhammed @ub3rsick Vendor Homepage: https://www.wipro.com/holmes/ Version: 20.4.1 Tested on: Windows 10 x64 CVE : CVE-2021-38147 In the Wipro Holmes Orchestrator 20.4.1...

Wipro Holmes Orchestrator 20.4.1 Report Disclosure Vulnerability

Exploit Title: Wipro Holmes Orchestrator 20.4.1 Unauthenticated Excel Report Download Exploit Author: Rizal Muhammed @ub3rsick Vendor Homepage: https://www.wipro.com/holmes/ Version: 20.4.1 Tested on: Windows 10 x64 CVE : CVE-2021-38147 In the Wipro Holmes Orchestrator 20.4.1 application, if at...

PYSEC-2021-355

“Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability. A customer can inject payloads in the name input field in the billing address while buying a product. When a store administrator accesses the reports page to export the data as an Excel file and...

CVE-2021-34676

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation...

CVE-2021-34676

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation...

CVE-2021-34676

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation...

CVE-2021-34676: Improper Authentication

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation...

PT-2021-20639

Name of the Vulnerable Software and Affected Versions: Basix NEX-Forms versions 7.8.7 and earlier Description: The issue allows authentication bypass for Excel report generation. Recommendations: For versions 7.8.7 and earlier, update to a version that contains a fix for this issue, as no specifi...

Enterprise security vulnerability notification engine-vulnerability warning-the black bar safety net

Today most enterprises are in vulnerability scanning+vulnerability announcements, there are the following two questions: 1. The drain sweep the presence of the“scan cycle is long, the scan database not updating”, etc., while the scanning report whether the number of interference terms, leading to...