7528 matches found
Cross-site Scripting (XSS) - Stored in janeczku/calibre-web
Description Missing input check on Identifiers lead to stored XSS. Steps to reproduce 1. 1. Any book - Edit metadata - Identifiers 2. 2. Set any value to the first field and javascript:alertdocument.domain to the second one. 3. 3. Save the book, select it, click on Identifier - XSSed! Proof of...
samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...
Exploit for CVE-2021-42278
About Exploiting CVE-2021-42278 and CVE-2021-42287 to impers...
CVE-2021-42287
creationtimestamp| type| source ---|---|--- 2021-12-11 19:44:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/952 2021-12-11 20:46:13+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1328 2021-12-12 14:54:29+00:00| published-proof-of-concept| https://t.me/m1swarr1or/29...
OPENSUSE-SU-2021:1566-1 Security update for wireshark
This update for wireshark fixes the following issues: - Update to Wireshark 3.4.10: - CVE-2021-39920: IPPUSB dissector crash bsc1192830. - CVE-2021-39921: Modbus dissector crash bsc1192830. - CVE-2021-39922: C12.22 dissector crash bsc1192830. - CVE-2021-39924: Bluetooth DHT dissector large loop...
Samsung Dialer 安全漏洞
Samsung Dialer is a dialer from Samsung South Korea. A security vulnerability exists in versions prior to Samsung Dialer 12.7.05.24, which stems from a problem with the software's storage of device information, allowing an attacker to exploit the vulnerability to gain access to Samsung account ID...
Samsung Contacts 安全漏洞
Samsung Contacts is a phonebook app from Samsung South Korea. A security vulnerability exists in versions prior to Samsung Contacts 12.7.05.24, which stems from insecure information about the devices stored in the software's contacts, allowing an attacker to exploit the vulnerability to gain acce...
CVE-2021-43175
creationtimestamp| type| source ---|---|--- 2021-12-07 20:22:07+00:00| seen| https://t.me/cibsecurity/33487 2021-12-07 20:22:11+00:00| seen| https://t.me/cibsecurity/33489...
tmate-ssh-server 安全漏洞
Tmate-Ssh-Server is a Tmate Ssh server. tmate-ssh-server suffers from a security vulnerability that could be exploited by an attacker to compromise the integrity of session processing or to obtain read and write session IDs from read-only session symbolic links in this directory...
OPENSUSE-SU-2021:3873-1 Security update for netcdf
This update for netcdf fixes the following issues: - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,...
samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token
A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...
SUSE-SU-2021:3815-1 Security update for netcdf
This update for netcdf fixes the following issues: - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,...
Business-Dna Solution GmbH TopEase 安全漏洞
Business-Dna Solution GmbH TopEase is a "Transformational Risk" solution from Business-Dna Solution GmbH, Switzerland. It is used to manage complex projects and initiatives comprehensively, simply, quickly and securely. A security vulnerability exists in Business-Dna Solution GmbH TopEase, which...
OPENSUSE-SU-2021:1505-1 Security update for netcdf
This update for netcdf fixes the following issues: - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,...
Dell Networking X-Series 安全特征问题漏洞
Dell Networking X-Series is a series of intelligent managed switches from Dell, Inc. An authentication bypass vulnerability exists in Dell Networking X-Series, which can be exploited by remote, unauthenticated attackers to hijack sessions and access network servers by spoofing session IDs...
rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id
A flaw was found in the activerecord-sessionstore Active Record Session Store component through version 1.1.3 for Ruby on Rails where it does not use a constant time approach when delivering information about whether a guessed session ID is valid. This flaw allows remote attackers to leverage...
bind security and bug fix update
32:9.11.26-6 - Use random entropy to generate unique TKEY identifiers 1980916 32:9.11.26-5 - Fix possible assertion failure iscrefcountcurrent == 0 in freerbtdb 1953056...
CVE-2021-34421
creationtimestamp| type| source ---|---|--- 2021-11-12 02:38:09+00:00| seen| https://t.me/cibsecurity/32269 2021-11-23 12:54:49+00:00| seen| https://t.me/thebugbountyhunter/5812 2021-11-28 11:11:07+00:00| seen| https://t.me/BlueRedTeam/1245 2021-11-28 13:59:41+00:00| seen|...
Ubuntu: Security Advisory (USN-5142-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...