PT-2021-22569

Name of the Vulnerable Software and Affected Versions: Canon Oce Print Exec Workgroup version 1.3.2 Description: The issue allows for Host header injection. Recommendations: For Canon Oce Print Exec Workgroup version 1.3.2, consider restricting access to the Host header to minimize the risk of...

PT-2021-22570

Name of the Vulnerable Software and Affected Versions: Canon Oce Print Exec Workgroup version 1.3.2 Description: The issue allows for cross-site scripting XSS attacks via the lang parameter. This means an attacker could potentially inject malicious scripts into the application, affecting users wh...

CVE-2021-39367: Improper Encoding or Escaping of Output

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...

Canon Oce Print Exec Workgroup 跨站脚本漏洞

Canon Oce Print Exec Workgroup is a software application from Canon Japan. It is a program that displays basic printer information. A security vulnerability exists in Canon Oce Print Exec Workgroup version 1.3.2, which allows an attacker to conduct XSS attacks via the lang parameter...

Command injection

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped...

PT-2021-10845 · Rconfig · Rconfig

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.5 Description: The issue allows command injection by sending a crafted GET request to "lib/ajaxHandlers/ajaxArchiveFiles.php" since the path parameter is passed directly to the exec function without being escaped...

CVE-2020-23151: Improper Neutralization of Special Elements used in an OS Command

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped...

rConfig 操作系统命令注入漏洞

rConfig is an open source network configuration management utility program. An operating system command injection vulnerability exists in rConfig version 3.9.5, which stems from the rConfig path parameter being passed directly to the exec function without being escaped. The vulnerability can be...

Backdoor.Win32.Zaratustra Remote File Write / Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/f240c16af2189ea9c94f317281ce7e59.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zaratustra Vulnerability: Unauthenticated Remote File Write Remote Code Exec...

UVI-2021-1001360 powerpc/mm: Fix lockup on kernel exec fault

powerpc/mm: Fix lockup on kernel exec fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...

GSD-2021-1001360 powerpc/mm: Fix lockup on kernel exec fault

powerpc/mm: Fix lockup on kernel exec fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...

UVI-2021-1001225 powerpc/mm: Fix lockup on kernel exec fault

powerpc/mm: Fix lockup on kernel exec fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...

PT-2021-25765

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.51, update ...

PT-2021-25695

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.13.3, update...

PT-2021-29690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.13.3, update to...

PT-2021-29825

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.133, update ...

PT-2021-25830

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.133, update ...

PT-2021-29760

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.51, update ...

Cross-Site Scripting (XSS)

Apache drill-java-exec is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the queryId...

PT-2021-27665

Name of the Vulnerable Software and Affected Versions: Mruby affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations: At the moment, there is...