Podcast Generator 3.1 Cross Site Scripting

Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting XSS Date: 13/05/2021 Exploit Author: Ayşenur KARAASLAN Vendor Homepage: https://podcastgenerator.net/demoV2/ Software Link: https://podcastgenerator.net/download and...

CVE-2021-3528

CVE-2021-3528 affects noobaa-operator (versions before 5.7.0). The root cause is leakage of internal RPC AuthTokens between the noobaa operator and the noobaa core into log files. An attacker with access to those logs could use the leaked AuthToken to gain additional access to the noobaa deployme...

Can Data Protection Systems Prevent Data At Rest Leakage?

Protection against insider risks works when the process involves controlling the data transfer channels or examining data sources. One approach involves preventing USB flash drives from being copied or sending them over email. The second one concerns preventing leakage or fraud in which an inside...

CVE-2020-12967

CVE-2020-12967 relates to AMD SEV/SEV-ES: the lack of nested page table protection could allow arbitrary code execution in a guest VM if a malicious administrator gains control of the server hypervisor. Affected are AMD SEV/SEV-ES-enabled platforms (e.g., AMD EPYC family). The root cause is insuf...

CVE-2021-32607

CVE-2021-32607 concerns SmartStoreNET (SmartStore) up to version 4.1.1, where private messages rendered in Views/PrivateMessages/View.cshtml were not sanitized. The root cause, as described in the connected documentation, is a sanitize-then-transform pattern failure: user-controlled text is encod...

CVE-2021-31207

creationtimestamp| type| source ---|---|--- 2021-05-12 14:21:07+00:00| seen| https://t.me/truesecator/1705 2021-08-19 15:41:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeproxyshellrce.rb 2021-08-23 12:25:04+00:00| seen|...

CVE-2020-13873

Codoforum

CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms

More info at https://symfony.com/cve-2021-21424...

Cross-site Scripting (XSS) - Reflected in thecoshman/http

✍️ Description The web server is vulnerable to Cross-site scripting. An attacker can host a file with an XSS payload as the file name. When a user visits the web server address, the javascript will be executed in the browser. This is due to improper sanitization. 🕵️‍♂️ Proof of Concept - Create a...

Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2021-49606)

Adobe Animate is a multimedia authoring and computer animation program. Adobe Animate suffers from an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to obtain information...

Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2021-49607)

Adobe Animate is a multimedia authoring and computer animation program. Adobe Animate suffers from an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to obtain information...

Overflow could lead to stealing funds

Handle adelamo Vulnerability details Here you have more info: --- The text was updated successfully, but these errors were encountered: All reactions...

CVE-2021-23008

CVE-2021-23008 affects BIG-IP APM AD authentication. Vulnerable in: BIG-IP APM AD from versions 16.0.x (all), 15.x up to 15.1.2, 14.x up to 14.1.3, 13.x up to 13.1.3, 12.x up to 12.1.5, and all 11.x (not fixed). Root cause: bypass via a spoofed AS-REP over a hijacked KDC or compromised AD server....

Weak Password Vulnerability in NETGEAR WNDR4300 Routers

The NETGEAR WNDR4300 router is a wireless router device. A weak password vulnerability exists in the NETGEAR WNDR4300 Router, which can be exploited by an attacker to compromise the device, obtain sensitive information and perform unauthorized operations...

Unauthorized Access Vulnerability in Sharp MX-3610N

Sharp is a Japanese electrical and electronics company. An unauthorized access vulnerability exists in Sharp MX-3610N, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in RAID management system

Tiandiwei is a leading global provider of intelligent security solutions. A weak password vulnerability exists in the RAID management system, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in MPEG4 DVRs

The MPEG Motion Picture Experts Group is an ISO/IEC working group that develops international standards for the compression, decompression, processing and coded representation of motion pictures, audio and their combinations. A weak password vulnerability exists in MPEG4 DVR, which can be exploit...

Shenzhen Jixiang Tengda Technology Co., Ltd. unauthorized access vulnerability in Tengda wireless routers

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Tengda wireless router has an unauthorized access vulnerability, which can be exploited b...

Unauthorized Access Vulnerability in AXIS 214 PTZ Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 214 PTZ Network Camera, which can be exploited by attackers to obtain sensitive information...

CVE-2021-27571

CVE-2021-27571 affects Emote Remote Mouse up to version 4.0.0.0. The issue allows an attacker to retrieve recently used and running applications, their icons, and their file paths. The data is sent in cleartext and not protected by any authentication logic. Connected documents confirm the affecte...