Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2024/06/11 8:22 p.m.24 views

document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection

Impact What kind of vulnerability is it? Who is impacted? A remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where it is executed as the document-merge-server user with the UID 901 thus giving an attacker...

7.2CVSS8.9AI score0.01031EPSS
SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2023/11/14 11:30 a.m.88 views

Forbidden-Buster - A Tool Designed To Automate Various Techniques In Order To Bypass HTTP 401 And 403 Response Codes And Gain Access To Unauthorized Areas In The System

Forbidden Buster is a tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk. Probes HTTP 401 and 403 response...

7.7AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2023/03/21 5:5 p.m.497 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Ibexa Ezplatform-Graphql

CVE-2022-41876 - eZ Platform user information disclosure A vu...

7.5CVSS5.3AI score0.01295EPSS
SaveExploits1
Rows per page
Query Builder