17638 matches found
CVE-2022-27247
Affected software: cdSoft Onlinetools-Smart Winhotel.MX 2021. The vulnerability is described as an Insecure Direct Object Reference (GastKont) that permits an attacker to download sensitive customer data (e.g., date of birth, full address, email, phone). Root cause indicated as improper exposure/...
CVE-2021-42967
CVE-2021-42967 affects novel-plus; unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java allows uploading JSP files across all versions. Root cause is lack of file upload restrictions, enabling remote attackers to plant hostile JSPs (impact: part...
TIBCO Security Advisory: May 18, 2022 - TIBCO BusinessConnect Trading Community Management-CVE-2022-22777
TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability Original release date:May 18, 2022 Last revised: --- CVE-2022-22777 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Trading Community Management versions 6.1.0 and below The followi...
CVE-2020-22985
CVE-2020-22985 : Concrete details from multiple sources show a Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier. The flaw enables remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task. Affected component ...
CVE-2022-23165
CVE-2022-23165 affects Sysaid 14.2.0. The issue is a Reflected Cross-Site Scripting (XSS) in the parameter helpPageName of the page /help/treecontent.jsp. Exploitation requires the affected product to expose Offline Help Pages and the victim to click a malicious link. Attackers may access sensiti...
CVE-2021-26361
The CVE-2021-26361 vulnerability affects AMD ASP/AGESA Boot Loader where a malicious or compromised UApp or ABL could exfiltrate arbitrary memory from the ASP stage 2 bootloader, leading to information disclosure. The issue is tied to the boot firmware stack (AGESA PI) across multiple AMD platfor...
CVE-2022-29928
JetBrains TeamCity (pre-2022.04) exposes secrets via TeamCity agent logs due to improper protection of sensitive information, enabling information disclosure. Multiple connected sources corroborate a log information disclosure vulnerability affecting TeamCity versions prior to 2022.04. The initia...
WordPress plugin WPGraphQL access control error vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin WPGraphQL versions prior to 0.3.5 are vulnerable to an access control error that...
IBM WebSphere Application Server Liberty 安全漏洞
IBM WebSphere Application Server Liberty is a Java application server from IBM built on top of the Open Liberty project. IBM WebSphere Application Server Liberty is vulnerable to an information disclosure vulnerability that originates when The vulnerability stems from the fact that when...
CVE-2022-1650
CVE-2022-1650: GitHub eventsource/eventsource prior to v2.0.2 suffers improper removal of sensitive information before storage/transfer. Affects eventsource/eventsource; root cause is incomplete sanitization of sensitive data in events. The connected document notes the fix to v2.0.2. No exploitat...
CVE-2022-28264
CVE-2022-28264 affects Adobe Acrobat/Reader on multiple lines of versions: Acrobat Reader DC 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can cause a read past the end of an allocated m...
Powershell Exec, Reverse HTTP Stager Proxy
Execute an x86 payload from a command via PowerShell. Tunnel communication over HTTP Module Options msf use payload/cmd/windows/powershell/vncinject/reversehttpproxypstore msf payloadreversehttpproxypstore show actions ...actions... msf payloadreversehttpproxypstore set ACTION msf...
Powershell Exec, Windows Command Shell, Reverse UDP Stager with UUID Support
Execute an x86 payload from a command via PowerShell. Spawn a piped command shell staged. Connect back to the attacker with UUID Support Module Options msf use payload/cmd/windows/powershell/shell/reverseudp msf payloadreverseudp show actions ...actions... msf payloadreverseudp set ACTION msf...
Powershell Exec, Windows Command Shell, Reverse TCP Stager (IPv6)
Execute an x86 payload from a command via PowerShell. Spawn a piped command shell staged. Connect back to the attacker over IPv6 Module Options msf use payload/cmd/windows/powershell/shell/reverseipv6tcp msf payloadreverseipv6tcp show actions ...actions... msf payloadreverseipv6tcp set ACTION msf...
Powershell Exec, Reverse TCP Stager (IPv6)
Execute an x86 payload from a command via PowerShell. Connect back to the attacker over IPv6 Module Options msf use payload/cmd/windows/powershell/peinject/reverseipv6tcp msf payloadreverseipv6tcp show actions ...actions... msf payloadreverseipv6tcp set ACTION msf payloadreverseipv6tcp show optio...
Powershell Exec, Reverse Ordinal TCP Stager (No NX or Win7)
Execute an x86 payload from a command via PowerShell. Connect back to the attacker Module Options msf use payload/cmd/windows/powershell/patchupmeterpreter/reverseordtcp msf payloadreverseordtcp show actions ...actions... msf payloadreverseordtcp set ACTION msf payloadreverseordtcp show options...
Powershell Exec, Reverse TCP Stager
Execute an x86 payload from a command via PowerShell. Connect back to the attacker Module Options msf use payload/cmd/windows/powershell/peinject/reversetcp msf payloadreversetcp show actions ...actions... msf payloadreversetcp set ACTION msf payloadreversetcp show options ...show and set...
Powershell Exec, Bind TCP Stager with UUID Support (Windows x86)
Execute an x86 payload from a command via PowerShell. Listen for a connection with UUID Support Windows x86 Module Options msf use payload/cmd/windows/powershell/patchupmeterpreter/bindtcpuuid msf payloadbindtcpuuid show actions ...actions... msf payloadbindtcpuuid set ACTION msf payloadbindtcpuu...
CVE-2022-27799
CVE-2022-27799 is an Acrobat Reader DC use-after-free vulnerability in the acroform event processing that could allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and e...
