7003 matches found
Command Execution Vulnerability in Night God Emulator (CNVD-2021-43480)
Night God Emulator is a very useful mobile game simulation software, which allows you to play handheld games on your computer smoothly and to your heart's content. A command execution vulnerability exists in Night God Emulator, which can be exploited by attackers to gain control of the server...
XDcms suffers from SQL injection vulnerability (CNVD-2021-42983)
XDcms is a general purpose content management system. XDcms suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive database information...
Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2021-54699)
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code on the target system...
CVE-2021-22911
creationtimestamp| type| source ---|---|--- 2021-06-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49960 2021-06-07 15:45:27+00:00| published-proof-of-concept| Telegram/tCqBhGf-ONTgPl1jNxk7jSK9BW7FRzVpc1tCk80-PQdj1g 2021-07-07 00:00:00+00:00| exploited|...
ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack
Malicious actors are actively mass scanning the internet for vulnerable VMware vCenter servers that are unpatched against a critical remote code execution flaw, which the company addressed late last month. The ongoing activity was detected by Bad Packets on June 3 and corroborated yesterday by...
CVE-2021-42840
creationtimestamp| type| source ---|---|--- 2021-06-03 14:18:38+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/suitecrmlogfilerce.rb 2021-10-22 22:39:21+00:00| seen| https://t.me/cibsecurity/31054 2021-11-17 00:00:00+00:00| exploited|...
Command injection
A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5....
CVE-2020-11978
creationtimestamp| type| source ---|---|--- 2021-06-03 00:39:25+00:00| seen| https://t.me/pwnwikizhchannel/579 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-09-18 22:16:38+00:00| seen|...
Buffalo WSR-1166DHP3 and WSR-1166DHP4 Operating System Command Injection Vulnerability
Buffalo WSR-1166DHP3 and WSR-1166DHP4 A router from Buffalo WSR-1166DHP3 and WSR-1166DHP4 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary operating system commands with root privileges...
Ubuntu 20.04 LTS : polkit vulnerability (USN-4980-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4980-1 advisory. Kevin Backhouse discovered that polkit incorrectly handled errors in the polkitsystembusnamegetcredssync function. A local attacker could possibly use this issue ...
openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0825-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-21389
creationtimestamp| type| source ---|---|--- 2021-06-02 16:11:31+00:00| published-proof-of-concept| Telegram/yobw8ZrvHW0fEUWSUnBhVkPFKQSqUEvC1JTEUdeXbKUw 2022-07-04 20:48:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3003 2023-04-27 09:58:59+00:00| confirmed|...
Microsoft Edge (Chromium) < 91.0.864.37 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.37. It is, therefore, affected by multiple vulnerabilities as referenced in the May 27, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Duplication of Balance
Handle 0xsomeone Vulnerability details Impact It is possible to duplicate currently held ink or art within a Cauldron, thereby breaking the contract's accounting system minting units out of thin air. Proof of Concept The stir function of the Cauldron, which can be invoked via a Ladle operation,...
Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE
The plugin allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution. The issue is being actively exploited, and no patch is available. Further details will be made available once pathed. PoC The Custom Product Designer plugin for WordPress offers the ability...
CVE-2021-33564
creationtimestamp| type| source ---|---|--- 2021-05-28 11:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3477 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-33564.yaml 2023-07-25...
CVE-2020-24949
creationtimestamp| type| source ---|---|--- 2021-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49911 2021-05-28 09:44:39+00:00| seen| https://t.me/pwnwikizhchannel/517 2025-11-11 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-11-11 2026-03-22...
CVE-2020-25671
creationtimestamp| type| source ---|---|--- 2021-05-26 20:55:23+00:00| exploited| Telegram/8RLqebcrApWhcGHQe2nYx7z3TFAx9-6cNJyUWF8sJry8pmE...
