CVE-2021-41769

CVE-2021-41769 affects Siemens SIPROTEC 5 devices (CPU variants CP050/CP100/CP300) with firmware versions before 8.83. The root cause is improper input validation in the web server, allowing an unauthenticated user to access device information. Impact is unauthorized disclosure of device data. Mi...

Adobe Acrobat And Reader Improper Input Validation (APSB22-01: CVE-2021-44739)

A vulnerability exists in Adobe. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Ubuntu 20.04 LTS : Linux kernel vulnerability (USN-5219-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5219-1 advisory. It was discovered that the eBPF implementation in the Linux kernel did not properly validate the memory size of certain ring buffer operation arguments. A local...

Siemens SIPROTEC 5 Devices

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIPROTEC 5 products Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to read device...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5217-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5217-1 advisory. It was discovered that the NFS server implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this ...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This is a Java project for a web application that uses the Log4j library. The project is a practice environment for testing and learning about the Log4j vulnerability CVE-2021-44228. The project includes a Maven project settings file, a Java class file, and a Log4j configuration file. The Log4j...

CVE-2021-35247 Improper Input Validation Vulnerability in Serv-U

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper...

Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library

Summary The version used of Log4j, the library used for logging by PowerNukkit, is subject to a remote code execution vulnerability via the ldap JNDI parser. It's well detailed at CVE-2021-44228 and CVE-2021-45105https://github.com/advisories/GHSA-p6xc-xr62-6r2g. Impact Malicious client code coul...

The vulnerability of TP-Link TL-XVR1800L router’s microprogramming software, related to improper input validation, allows a hacker to execute arbitrary code in the target system.

The vulnerability of TP-Link’s TL-XVR1800L router software relates to improper input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...

CVE-2021-39970

HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...

CVE-2021-39970

Huawei HarmonyOS exhibits a path-traversal-type vulnerability involving HwPCAssistant/HarmonyOS component that can lead to writing files with system_app privileges due to improper input validation. Connected sources describe a write-privilege impact on system-app level, implying potential file wr...

CVE-2021-45916

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

CVE-2021-45916

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

Advantech R-SeeNet telnet_form.php Cross-Site Scripting (CVE-2021-21799)

A reflected cross-site scripting vulnerability exists in Advantech R-SeeNet. The vulnerability is due to improper input validation in telnetform.php...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell POC CVE-2021-44228 The scope of this repository i...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell POC CVE-2021-44228 The scope of this repository i...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell POC CVE-2021-44228 The scope of this repository i...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j2 CVE-2021-44228 Vulnerability POC in Apache Tomcat...

ROS-2-1575

2.1575 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

ROS-2-1851

2.1851 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...