17643 matches found
CVE-2021-38562
CVE-2021-38562 affects Best Practical Request Tracker (RT) prior to specific fixed releases. A timing-attack vulnerability in lib/RT/REST2/Middleware/Auth.pm can disclose sensitive information. Affected RT versions include 4.2.x before 4.2.17, 4.4.x before 4.4.5, and 5.0.x before 5.0.2. Public ad...
Trend Micro Worry-Free Business Security Buffer Overflow Vulnerability
Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and email protection. Trend Micro Worry-Free Business Security suffers from a buffer overflow...
Trend Micro Worry-Free Business Security Unnecessary Privilege Vulnerability
Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and email protection. A security vulnerability exists in Trend Micro Worry-Free Business Security, which...
CVE-2021-42336
CVE-2021-42336 affects Easytest (Huaju Digital Technology, Inc.). The vulnerability is an authorization bypass in the learning history page, where after gaining a user’s permission, remote attackers can access other users’ and administrators’ account information (excluding passwords) by crafting ...
CVE-2021-42330
The CVE-2021-42330 issue affects ShinHer StudyOnline System, where the Teacher Edit function does not enforce proper authorization. According to connected records, after logging in with a user privilege, an attacker can craft URL parameters to access and edit other users’ credentials and personal...
dhr.idaho.gov Cross Site Scripting vulnerability OBB-2164619
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| dhr.idaho.gov ---|--- Open Bug Bounty...
CVE-2021-20796
The CVE-2021-20796 entry describes a path-traversal vulnerability in Cybozu Remote Service, affecting Cybozu Remote Service versions 3.1.8 (and related entries up to 3.1.9 for other CVEs). The vulnerability resides in the management screen and allows a remote authenticated attacker to upload an a...
lollimemmoli.it Cross Site Scripting vulnerability OBB-2163164
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
Usage Make sure Python and ncat are installed...
CVE-2021-37976
CVE-2021-37976 is a Google Chrome information-disclosure vulnerability described as an information leak in the core memory component that could allow a remote attacker to obtain potentially sensitive data from process memory via a crafted HTML page. The issue affected Chrome pre-94.0.4606.71; a f...
CVE-2021-37965
CVE-2021-37965 affects Google Chrome/Chromium’s Background Fetch API. The vulnerability stems from an inappropriate implementation, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The NVD records a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, no p...
CVE-2021-41564
Tad Honor’s viewing book list function is susceptible to an authorization bypass. The vulnerability, documented across multiple sources (NVD CVE-2021-41564 and related CNVD/CNNVD entries), allows remote attackers to delete articles by supplying special parameters without authenticating. The core ...
Career Navigator talk for IT Hub College
Last week I gave a "Career Navigator" talk for the students of the IT Hub College in Moscow. By the way, this college has a very interesting practical information security program. If it is relevant for you, check it out. Ive never talked so much about myself in public. It was like giving advises...
Simple Online College Entrance Exam System 1.0 Unauthenticated Admin Creation
Exploit Title: Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation Date: 07.10.2021 Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software...
Loan Management System 1.0 SQL Injection
Exploit Title: Loan Management System 1.0 - SQLi Authentication Bypass Date: 08.10.2021 Exploit Author: Merve Oral Vendor Homepage: https://www.sourcecodester.com/php/14471/loan-management-system-using-phpmysql-source-code.html Software Link:...
Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass
Exploit Title: Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass Date: 08.10.2021 Exploit Author: Merve Oral Vendor Homepage: https://www.sourcecodester.com/php/14981/online-employees-work-home-attendance-system-php-and-sqlite-free-source-code.html Software Link:...
chattanooga.gov Cross Site Scripting vulnerability OBB-2159118
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-40978
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...