HTTPd Daemon Code Execution

The multiple vulnerabilities of the HTTPd daemon of the microprogrammed Netgear DGN2200v router software are related to deficiencies in authentication procedures. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code...

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

CVE-2020-9496 Because the 2 xmlrpc related requets in webtools...

PT-2021-5758

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.49 Description The ap escape quotes function contains a flaw where it may write beyond the end of a buffer when processing malicious input. While no included modules pass untrusted data to this function...

Moderate: Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update

An update for rh-php73-php is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2021-32812

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

CVE-2021-32812

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

Cross site scripting

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

CVE-2021-32812

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

CVE-2021-32812 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') and Improper Encoding or Escaping of Output in frontend/server/server.js

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

PT-2021-19946

Name of the Vulnerable Software and Affected Versions Monkshu versions 2.90 and earlier Description Monkshu is an enterprise application server for mobile apps, responsive HTML 5 apps, and JSON API services. In the frontend HTTP server, there is a reflected cross-site scripting issue. An attacker...

CVE-2021-32812: Improper Neutralization of Input During Web Page Generation

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

LightMe - HTTP Server Serving Obfuscated Powershell Scripts/Payloads

LightMe is a Simple HTTP Server serving Powershell Scripts/Payloads after Obfuscate them and run obfuscation as a service in backgroud in order to keep obfuscate the payloads which giving almost new obfuscated payload on each HTTP request Main Features Obfuscate all powershell files within a...

Security Bulletin: Vulnerabilities identified in IBM HTTP Server shipped with IBM WebSphere Service Registry and Repository (CVE-2020-13938 and CVE-2021-30641)

Summary IBM HTTP Server is shipped as a component of IBM WebSphere Service Registry and Repository. Information about security vulnerabilities affecting IBM HTTP Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

Security Bulletin: Vulnerability in IBM WebSphere HTTP Server affects IBM i2 Analyze

Summary Versions of the IBM Websphere HTTP Server bundled with IBM i2 Analyze have vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM i2 Analyze| IBM i2 Analyze 4.3.1...

Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server used by WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager (CVE-2020-13938, CVE-2021-30641)

Summary IBM HTTP Server used by WebSphere Application Server is/are shipped with IBM Tivoli Federated Identity Manager. Information about security vulnerabilities affecting IBM HTTP Server used by WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer ...

com.github.seratch:jslack-lightning-micronaut (>=3.1.1, <=3.4.2), net.javacrumbs.shedlock:shedlock-micronaut (>=4.0.0, <=4.8.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.2.6)

io.micronaut:micronaut-http-server-netty MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.github.seratch:jslack-lightning-micronaut =3.1.1, =4.0.0, =4.8.0 Source cve...

com.slack.api:bolt-micronaut (>=0.99.1, <=1.0.2) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =0.99.1, =1.0.2 Source cves: CVE-2021-32769 Source...

com.slack.api:bolt-micronaut (>=1.0.9, <=1.0.11) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.6)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.0.9, =1.0.11 Source cves: CVE-2021-32769 Source...

org.ryoframework.core:ryo-application-micronaut (>=1.0.3, <=1.0.9), org.ryoframework.next:ryo-adapter-micronaut (1.0.0) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.1.0)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.ryoframework.core:ryo-application-micronaut =1.0.3, =1.0.9 -...

org.ryoframework.core:ryo-application-micronaut (>=1.1.1, <=1.3.1) potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.1.2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.ryoframework.core:ryo-application-micronaut =1.1.1, =1.3.1 Source cves:...