Lucene search
+L

3727 matches found

OSV
OSV
added 2021/05/18 1:52 a.m.44 views

GHSA-6XHG-Q9C8-RJ32 Credential leak in react-native-fast-image

This affects all versions before version 8.3.0 of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session toke...

5.3CVSS5.2AI score0.0158EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/05/18 1:52 a.m.78 views

Credential leak in react-native-fast-image

This affects all versions before version 8.3.0 of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session toke...

5.3CVSS5.5AI score0.0158EPSS
SaveExploits1References6Affected Software1
CNVD
CNVD
added 2021/05/18 12:0 a.m.5 views

Denial of Service Vulnerability in FAST FAC1203R, FR100P-AC, FAC1900R, FAC1200R

Shenzhen FAST Communication Technology Co., Ltd hereinafter referred to as FAST is a provider of client-side network and communication technology and equipment in China. Founded in 2002, headquartered in Shenzhen high-tech industrial zone. It is a high-tech enterprise with complete independent R&...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/05/18 12:0 a.m.6 views

Denial of Service Vulnerability in FAST FWB201S, FWB505, FAC1203R, FWB200

Shenzhen FAST Communication Technology Co., Ltd hereinafter referred to as FAST is a provider of client-side network and communication technology and equipment in China. Founded in 2002, headquartered in Shenzhen high-tech industrial zone. It is a high-tech enterprise with complete independent R&...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/05/18 12:0 a.m.11 views

Denial of Service Vulnerability in FAST FWB201S, FWB505, FAC1203R, FWB200

Shenzhen FAST Communication Technology Co., Ltd hereinafter referred to as FAST is a provider of client-side network and communication technology and equipment in China. Founded in 2002, headquartered in Shenzhen high-tech industrial zone. It is a high-tech enterprise with complete independent R&...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/05/12 12:0 a.m.5 views

Weak password vulnerability in FAST 300M of Shenzhen Xunjie Communication Technology Co.

The FAST 300M is a wireless broadband router. Shenzhen Xunjie Communication Technology Co., Ltd FAST 300M suffers from a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

7AI score
SaveExploits0
Fedora
Fedora
added 2021/05/10 1:8 a.m.43 views

[SECURITY] Fedora 33 Update: python-markdown2-2.4.0-1.fc33

Markdown is a text-to-HTML filter; it translates an easy-to-read / easy-to-write structured text format into HTML. Markdown's text format is most similar to that of plain text email, and supports features such as headers, emphasis, code blocks, blockquotes, and links. This is a fast and complete...

7.5CVSS1.6AI score0.02384EPSS
SaveExploits1
Kitploit
Kitploit
added 2021/05/08 9:30 p.m.418 views

Kiterunner - Contextual Content Discovery Tool

For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications, specifically APIs. Over time,...

6.7AI score
SaveExploits0References4
Kitploit
Kitploit
added 2021/05/07 9:30 p.m.263 views

WordPress-Brute-Force - Super Fast Login WordPress Brute Force

WordPress Brute Force Super Fast Login .---. .----------- / \ / ------ / / \ / ----- ////// ' / --- //// / // : ★★ : --- // / / / '-- // //..\ WpCrack Brute Froce Tool™ ====UU====UU========================== '//||\ '' usage: python WpCrack.py options optional arguments: -h, --help show this help...

7.6AI score
SaveExploits0References1
Fedora
Fedora
added 2021/05/05 1:4 a.m.46 views

[SECURITY] Fedora 32 Update: libmicrohttpd-0.9.73-1.fc32

GNU libmicrohttpd is a small C library that is supposed to make it easy to run an HTTP server as part of another application. Key features that distinguish libmicrohttpd from other projects are: C library: fast and small API is simple, expressive and fully reentrant Implementation is http 1.1...

10CVSS0.2AI score0.08739EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/05/03 12:0 a.m.7 views

Qualcomm 组件 资源管理错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides functionality to Qualcomm devices. A resource management error vulnerability exists in FastRPC, which stems from a missing null check that can be used after release. The following products and...

8.4CVSS7.3AI score0.0016EPSS
SaveExploits0References6
Fedora
Fedora
added 2021/04/27 1:13 a.m.51 views

[SECURITY] Fedora 32 Update: rust-1.51.0-3.fc32

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

9.8CVSS2.5AI score0.0289EPSS
SaveExploits4
Fedora
Fedora
added 2021/04/27 1:0 a.m.54 views

[SECURITY] Fedora 33 Update: rust-1.51.0-3.fc33

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

9.8CVSS2.5AI score0.0289EPSS
SaveExploits4
Fedora
Fedora
added 2021/04/26 12:27 a.m.27 views

[SECURITY] Fedora 34 Update: nodejs-14.16.1-1.fc34

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

1.6AI score
SaveExploits0
Fedora
Fedora
added 2021/04/24 8:27 p.m.77 views

[SECURITY] Fedora 34 Update: rust-1.51.0-3.fc34

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

9.8CVSS2.5AI score0.0289EPSS
SaveExploits4
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.5 views

fast_ber 缓冲区错误漏洞

fastber is a small lightweight library for BER encoding and decoding. A heap buffer overflow vulnerability exists in yy::yylex in asncompiler.hpp in fastber 0.4 and earlier. No details of the vulnerability are provided at this time...

7.1CVSS5.9AI score0.00913EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/04/21 12:0 a.m.8 views

PT-2021-10985 · Fast Ber · Fast Ber

Name of the Vulnerable Software and Affected Versions: fast ber versions prior to v0.5 Description: An issue was discovered in the yy::yylex function located in asn compiler.hpp, which has a heap-based buffer over-read. Recommendations: For versions prior to v0.5, update to version v0.5 or later ...

7.1CVSS6.8AI score0.00913EPSS
SaveExploits1References4
Exploit DB
Exploit DB
added 2021/04/21 12:0 a.m.640 views

Fast PHP Chat 1.3 - 'my_item_search' SQL Injection

Exploit Title: Fast PHP Chat 1.3 - 'myitemsearch' SQL Injection Date: 15/04/2021 Exploit Author: Fatih Coskun Vendor Homepage: https://codecanyon.net/item/fast-php-chat-responsive-live-ajax-chat/10721076 Version: 1.3 Category: Webapps Tested on: Kali linux Description : The vulnerability allows a...

5.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2021/04/20 8:51 p.m.13 views

kernel: Use after free via PI futex state

A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...

7.8CVSS7.1AI score0.01377EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2020:3457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00516EPSS
SaveExploits0References17
Rows per page
Query Builder