17638 matches found
Hasura GraphQL 2.2.0 - Information Disclosure Exploit
Exploit Title: Hasura GraphQL 2.2.0 - Information Disclosure Software: Hasura GraphQL Community Software Link: https://github.com/hasura/graphql-engine Version: 2.2.0 Exploit Author: Dolev Farhi Tested on: Ubuntu import requests SERVERADDR = 'x.x.x.x' url = 'http:///v1/metadata'.formatSERVERADDR...
CVE-2021-44421
CVE-2021-44421 affects Occlum prior to 0.26.0 for Intel SGX. The pointer-validation logic in util/mem_util.rs acts as a confused deputy, allowing a local attacker to access unauthorized information via side-channel analysis. A fix is available in Occlum 0.26.0 and later; upgrade to mitigate.
Insufficient Granularity of Access Control
Description There are no rate limits and reuse of captcha is allowed resulting in reuse of same captcha to issue notifications to administrator Proof of Concept Capture the newsletter subscription flow in burp and continue with entering email & captcha until below POST form request is captured...
Matrimony 1.0 SQL injection Vulnerability
Title: Matrimony 1.0 SQLi Author: nu11secur1ty Vendor: https://www.vetbossel.in/matrimony-project-php/ Software: https://cutt.ly/LOHzKd0, https://www.vetbossel.in/matrimony-project-php/ Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/vetbossel.in/2022/Matrimony...
Russia Releases List of IPs, Domains Attacking Its Infrastructure with DDoS Attacks
As the ongoing Russia-Ukraine conflict continues to escalate, the Russian government on Thursday released a massive list containing 17,576 IP addresses and 166 domains that it said are behind a series of distributed denial-of-service DDoS attacks aimed at its domestic infrastructure. Some of the...
CVE-2021-22695
CVE-2021-22695 is rejected and not used; this entry does not represent an active vulnerability.
CVE-2021-22688
CVE-2021-22688 entry is rejected/not used; not a active vulnerability entry.
GHSA-V3WR-67PX-44XG Execution with Unnecessary Privileges in arc-electron
Impact When the end-user click on the response header that contains a link the target will be opened in ARC new window. This window will have the default preload script loaded which allows the scripts embedded in the link target to execute any logic that ARC has access to from the renderer proces...
CVE-2022-25016
CVE-2022-25016 concerns Home Owners Collection Management System v1.0, which has an arbitrary file upload vulnerability in the /student_attendance/index.php component. The issue permits an attacker to execute arbitrary PHP code by uploading a crafted file. Public references in NVD/RH entries conf...
Powering and Protecting Online Privacy: iCloud Private Relay and Information for Akamai Customers
See how Apple worked with Akamai to launch iCloud Private Relay. Learn about the service and how it can be best leveraged for Akamai customers...
Car Driving School Management 1.0 SQL Injection Vulnerability
Title: Car Driving School Management v1.0 SQLi Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15070/car-driving-school-management-system-phpoop-free-source-code.html Reference:...
py-Scrapy -- exposure of sensitive information vulnerability
ranjit-git reports: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
CVE-2022-25051
CVE-2022-25051 involves rtl_433 (version 21.12) with an Off-by-one error in the cmr113_decode path when processing a crafted file. The root cause is an off-by-one condition in the decoder function cmr113_decode, which the connected documents confirm as the triggering flaw. If exploited, CVSS indi...
GHSA-J34V-3552-5R7J Multiple security issues in Pomerium's embedded envoy
Envoy, which Pomerium is based on, has issued multiple CVEs impacting stability and security. Though Pomerium may not be vulnerable to all of the issues, it is recommended that all users upgrade to Pomerium v0.16.4 as soon as possible to minimize risk. Impact - Possible DoS or crash - Resources...
GHSA-XJP4-6W75-QRJ7 Remote CLI Command Execution Vulnerability in CodeIgniter4
Impact This vulnerability allows attackers to execute CLI routes via HTTP request. Patches Upgrade to v4.1.9 or later. Workarounds None. For more information If you have any questions or comments about this advisory: Open an issue in codeigniter4/CodeIgniter4 Email us at SECURITY.md...
CVE-2021-35036
Summary: CVE-2021-35036 is a cleartext storage of information vulnerability in Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k, potentially allowing an authenticated attacker to obtain sensitive configuration data. Affected product/condition: Zyxel VMG3625-T50B running V5.50(ABTL.0)b2k. The ...
dTabs <= 1.4 - Reflected Cross-Site Scripting
The plugin does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/options-general.php?page=dtabs.php&action=edit&tab="...