1092 matches found
Apache Solr Server-Side Request Forgery Vulnerability
Apache Solr is a standalone enterprise-class search application server. The Apache Solr server-side request forgery vulnerability can be exploited by an attacker to gain access to an intranet by constructing a request containing a malicious URL...
Exploit for Path Traversal in Vmware Cloud_Foundation
Ladon Scanner For Golang Wiki http://k8gege.org/Ladon/LadonGo.html 简介...
GHSA-HVV8-336G-RX3M A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Impact The processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in a...
Exploit for Path Traversal in Lanproxy_Project Lanproxy
CVE-2021-3019 LanProxy Directory Traversal - - - - - - - - - -...
FortiOS Path Traversal Credential Gatherer
Fortinet FortiOS versions 5.4.6 to 5.4.12, 5.6.3 to 5.6.7 and 6.0.0 to 6.0.4 are vulnerable to a path traversal vulnerability within the SSL VPN web portal which allows unauthenticated attackers to download FortiOS system files through specially crafted HTTP requests. This module exploits this...
September 8, 2020—KB4570333 (OS Build 17763.1457)
None None...
September 8, 2020—KB4577032 (OS Build 17134.1726)
None None...
DEBIAN-CVE-2021-21288
CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...
CVE-2021-21288
CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...
Design/Logic Flaw
CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for...
Server-side request forgery in CarrierWave
Impact CarrierWave download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for internal use and gather information about the Intranet infrastructure of the platform. Patches Upgrade to 2.1.1 or 1.3.2. Workarounds Using proper network...
CarrierWave Code Issue Vulnerability
Mshibuya CarrierWave is an upload tool from the Mshibuya Personal Organization in the United States. It provides a simple and extremely flexible way to upload files from Ruby applications. A code issue vulnerability exists in CarrierWave versions prior to 1.3.2 and 2.1.1 that stems from a...
Arbitrary File Read Vulnerability in Lanproxy
Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy has an...
Arbitrary File Read Vulnerability in Lanproxy Intranet Penetration Tool
Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy Intranet...
January 12, 2021—KB4598243 (OS Build 14393.4169) - EXPIRED
None None...
January 12, 2021—KB4598279 (Monthly Rollup)
None None...
January 12, 2021—KB4598229 (OS Build 18363.1316) - EXPIRED
None None...
Directory Traversal Vulnerability in LanProxy Intranet Penetration Tool
Lanproxy is an intranet penetration tool that proxies services on the LAN to the public network. A path traversal vulnerability exists in lanproxy, which can be exploited by an attacker to obtain sensitive information...