Lucene search
+L

3465 matches found

Kitploit
Kitploit
added 2021/04/19 12:30 p.m.265 views

Cypheroth - Automated, Extensible Toolset That Runs Cypher Queries Against Bloodhound's Neo4j Backend And Saves Output To Spreadsheets

Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same queries throug...

6.9AI score
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2021/04/19 12:0 a.m.98 views

Security update for irssi (moderate)

openSUSE Security Update: Security update for irssi Announcement ID: openSUSE-SU-2021:0587-1 Rating: moderate References: 1184848 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for irssi fixes the following issues: irssi...

7.5AI score
SaveExploits0
Hacker One
Hacker One
added 2021/04/14 8:2 p.m.19 views

MTN Group: Missing captcha and rate limit protection in help form

Hello One of your form that you are using to receive help message from users, lack captcha and its backend/server does not block massive request. The page is https://mtn.cm/fr/help/ Steps To Reproduce: 1. Visit https://mtn.cm/fr/help/ and fill all the field and submit. 2. Intercept the request wi...

7.3AI score
SaveExploits0
OSV
OSV
added 2021/04/06 5:15 a.m.9 views

CVE-2021-28207

The specific function in ASUS BMC’s firmware Web management page Get Help file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

4.9CVSS5.8AI score0.01903EPSS
SaveExploits0References3
OSV
OSV
added 2021/04/05 7:15 p.m.8 views

CVE-2021-24212

The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...

9.8CVSS5.6AI score0.07908EPSS
SaveExploits2References2
NVD
NVD
added 2021/04/05 7:15 p.m.21 views

CVE-2021-24212

The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...

9.8CVSS0.07908EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2021/04/05 7:15 p.m.5 views

CVE-2021-24212

The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...

9.8CVSS5.7AI score0.07908EPSS
SaveExploits2References4
Prion
Prion
added 2021/04/05 7:15 p.m.23 views

Design/Logic Flaw

The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...

7.5CVSS9.3AI score0.07908EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2021/04/05 6:27 p.m.72 views

CVE-2021-24212

The WooCommerce Help Scout WordPress plugin (

9.8CVSS9.6AI score0.07908EPSS
SaveIn wildExploits2References2Affected Software1
Cvelist
Cvelist
added 2021/04/05 6:27 p.m.26 views

CVE-2021-24212 WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE

The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...

9.7AI score0.07908EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.7 views

WordPress 代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A code issue vulnerability exists in the...

9.8CVSS8.4AI score0.07908EPSS
SaveExploits2References3
The Hacker News
The Hacker News
added 2021/04/01 9:49 a.m.49 views

How to Vaccinate Against the Poor Password Policy Pandemic

Data breaches remain a constant threat, and no industry or organization is immune from the risks. From Fortune 500 companies to startups, password-related breaches continue to spread seemingly unchecked. As a result of the volume of data breaches and cybersecurity incidents, hackers now have acce...

0.2AI score
SaveExploits0
Citrix
Citrix
added 2021/04/01 12:0 a.m.7 views

FAQ: Configuring Local Access Using Receiver for HTML5 1.0

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article contains Frequently Asked Questions on configuring local access using Citrix Receiver f...

6.9AI score
SaveExploits0
Citrix
Citrix
added 2021/04/01 12:0 a.m.11 views

Citrix Receiver Application Icons are Unavailable from Systray

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After installing Citrix Receiver 3.0 and configuring it for PN Agent operation, users cannot configu...

7AI score
SaveExploits0
Citrix
Citrix
added 2021/04/01 12:0 a.m.11 views

Error: "You cannot add apps at this time" on Receiver StoreFront

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Domain users receive the following error after logging in using Receiver for Website : “You cannot a...

7AI score
SaveExploits0
OSV
OSV
added 2021/03/30 1:21 a.m.4 views

OPENSUSE-SU-2021:0485-1 Security update for eclipse

This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server bsc1183728. This update was imported from the SUSE:SLE-15-SP2:Update update project...

7.8CVSS7.5AI score0.00336EPSS
SaveExploits1References3
OSV
OSV
added 2021/03/29 4:15 p.m.9 views

CVE-2021-29267

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...

6.1CVSS6.4AI score0.00853EPSS
SaveExploits2References2
Prion
Prion
added 2021/03/29 4:15 p.m.19 views

Cross site scripting

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...

4.3CVSS6AI score0.00853EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2021/03/29 3:5 p.m.52 views

CVE-2021-29267

CVE-2021-29267 affects Sherlock SherlockIM. The vulnerability is a Cross Site Scripting (XSS) issue that can be triggered by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature. Exploitation involves a malicious HTML file uploaded through the chat bot, which ...

6.1CVSS5.9AI score0.00853EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2021/03/29 3:5 p.m.28 views

CVE-2021-29267

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...

6.2AI score0.00853EPSS
SaveExploits2References2
Rows per page
Query Builder