Lucene search
+L

1092 matches found

CNVD
CNVD
added 2021/04/13 12:00 a.m.105 views

Apache Solr Server-Side Request Forgery Vulnerability

Apache Solr is a standalone enterprise-class search application server. The Apache Solr server-side request forgery vulnerability can be exploited by an attacker to gain access to an intranet by constructing a request containing a malicious URL...

9.8CVSS6.8AI score0.93053EPSS
SaveExploits5References1
Gitee
Gitee
added 2021/03/30 5:07 p.m.17 views

Exploit for Path Traversal in Vmware Cloud_Foundation

Ladon Scanner For Golang Wiki http://k8gege.org/Ladon/LadonGo.html 简介...

10CVSS9.7AI score0.99996EPSS
SaveExploits109
OSV
OSV
added 2021/03/22 11:28 p.m.8 views

GHSA-HVV8-336G-RX3M A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

Impact The processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in a...

5.3CVSS6.9AI score0.4999EPSS
SaveExploits1References17
GithubExploit
GithubExploit
added 2021/03/11 7:40 a.m.84 views

Exploit for Path Traversal in Lanproxy_Project Lanproxy

CVE-2021-3019 LanProxy Directory Traversal - - - - - - - - - -...

7.5CVSS7.5AI score0.18982EPSS
SaveExploits5
Metasploit
Metasploit
added 2021/02/27 5:42 p.m.81 views

FortiOS Path Traversal Credential Gatherer

Fortinet FortiOS versions 5.4.6 to 5.4.12, 5.6.3 to 5.6.7 and 6.0.0 to 6.0.4 are vulnerable to a path traversal vulnerability within the SSL VPN web portal which allows unauthenticated attackers to download FortiOS system files through specially crafted HTTP requests. This module exploits this...

9.8CVSS6.8AI score0.99999EPSS
SaveExploits22
Microsoft KB
Microsoft KB
added 2021/02/09 8:00 a.m.232 views

September 8, 2020—KB4570333 (OS Build 17763.1457)

None None...

9.3CVSS6.8AI score0.53399EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/02/09 8:00 a.m.83 views

September 8, 2020—KB4577032 (OS Build 17134.1726)

None None...

9.3CVSS6.8AI score0.53399EPSS
SaveExploits2
OSV
OSV
added 2021/02/08 8:15 p.m.5 views

DEBIAN-CVE-2021-21288

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...

4.3CVSS5AI score0.01173EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/08 8:15 p.m.38 views

CVE-2021-21288

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...

4.3CVSS0.01173EPSS
SaveExploits0References5
Prion
Prion
added 2021/02/08 8:15 p.m.19 views

Design/Logic Flaw

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...

4CVSS4.6AI score0.01173EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2021/02/08 7:16 p.m.49 views

Server-side request forgery in CarrierWave

Impact CarrierWave download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for internal use and gather information about the Intranet infrastructure of the platform. Patches Upgrade to 2.1.1 or 1.3.2. Workarounds Using proper network...

4.3CVSS2.7AI score0.01173EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2021/02/08 12:00 a.m.20 views

CarrierWave Code Issue Vulnerability

Mshibuya CarrierWave is an upload tool from the Mshibuya Personal Organization in the United States. It provides a simple and extremely flexible way to upload files from Ruby applications. A code issue vulnerability exists in CarrierWave versions prior to 1.3.2 and 2.1.1 that stems from a...

4.3CVSS5.9AI score0.01173EPSS
SaveExploits0References6
CNVD
CNVD
added 2021/01/19 12:00 a.m.6 views

Arbitrary File Read Vulnerability in Lanproxy

Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy has an...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/01/13 12:00 a.m.9 views

Arbitrary File Read Vulnerability in Lanproxy Intranet Penetration Tool

Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy Intranet...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/01/12 8:00 a.m.316 views

January 12, 2021—KB4598243 (OS Build 14393.4169) - EXPIRED

None None...

9.8CVSS6.8AI score0.13685EPSS
SaveExploits2
Microsoft KB
Microsoft KB
added 2021/01/12 8:00 a.m.68 views

January 12, 2021—KB4598279 (Monthly Rollup)

None None...

9.8CVSS6.8AI score0.13685EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/01/12 8:00 a.m.64 views

January 12, 2021—KB4598229 (OS Build 18363.1316) - EXPIRED

None None...

9.8CVSS6.8AI score0.07274EPSS
SaveExploits2
CNVD
CNVD
added 2021/01/09 12:00 a.m.11 views

Directory Traversal Vulnerability in LanProxy Intranet Penetration Tool

Lanproxy is an intranet penetration tool that proxies services on the LAN to the public network. A path traversal vulnerability exists in lanproxy, which can be exploited by an attacker to obtain sensitive information...

6.8AI score
SaveExploits0
OSV
OSV
added 2021/01/05 5:15 a.m.22 views

CVE-2021-3019

ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet...

7.5CVSS6.9AI score
SaveExploits0References2
Prion
Prion
added 2021/01/05 5:15 a.m.27 views

Directory traversal

ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet...

5CVSS7.3AI score0.18982EPSS
SaveExploits5References2Affected Software1
Rows per page
Query Builder