Lucene search
+L

7427 matches found

Microsoft Secure
Microsoft Secure
added 2021/12/08 6:00 p.m.23 views

New research shows IoT and OT innovation is critical to business but comes with significant risks

The need for much improved IoT and operational technology OT cybersecurity became clearer this year with recent attacks on network devices,1 surveillance systems,2 an oil pipeline,3 and a water treatment facility,4 to name a few examples. To better understand the challenges customers are facing,...

0.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/12/08 10:55 a.m.22 views

[eBook] Guide to Achieving 24x7 Threat Monitoring and Response for Lean IT Security Teams

If there is one thing the past few years have taught the world, it’s that cybercrime never sleeps. For organizations of any size and scope, having around-the-clock protection for their endpoints, networks, and servers is no longer optional, but it’s also not entirely feasible for many. Attackers...

7.2AI score
SaveExploits0
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/12/08 9:48 a.m.29 views

What is a Supply Chain Attack ❓

Presentation The Kaseya cyberattack disturbed more than 1,000 organizations over the Fourth of July weekend and may end up being perhaps the greatest hack ever. It’s additionally a typical case of an “Supply Chain” hack: a sort of cyberattack where hoodlums target programming merchants or IT...

7.1AI score
SaveExploits0
OSV
OSV
added 2021/12/08 12:01 a.m.20 views

GHSA-WJQC-J537-J9GJ Command injection in git-it-electron

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

9.8CVSS9.8AI score0.03468EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/12/08 12:01 a.m.34 views

Command injection in git-it-electron

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

9.8CVSS2.8AI score0.03468EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2021/12/08 12:00 a.m.35 views

Git-it OS Command Injection Vulnerability

Git-it is a free, open-source distributed version control system. Git-it is vulnerable to an OS command injection vulnerability that could be exploited by an attacker to inject OS commands during the Branches Arent For Birds challenge step...

9.8CVSS4.2AI score0.03468EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/08 12:00 a.m.34 views

Snipe-IT code issue vulnerability

Snipe-IT is an open source IT asset/license management system. snipe-IT is vulnerable to a code issue that could be exploited by attackers to conduct server-side request forgery SSRF attacks...

7.2CVSS4.2AI score0.00893EPSS
SaveExploits1References1
Veracode
Veracode
added 2021/12/07 4:01 a.m.15 views

Server-Side Request Forgery (SSRF)

snipe/snipe-it is vulnerable to server-side request forgery. An attacker can send requests on behalf of the server into the internal network via slack integration...

7.2CVSS4.5AI score0.00893EPSS
SaveExploits1References3
NVD
NVD
added 2021/12/07 12:15 a.m.17 views

CVE-2021-44685

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

9.8CVSS0.03468EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/07 12:15 a.m.6 views

CVE-2021-44685

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

9.8CVSS7.3AI score0.03468EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/07 12:15 a.m.24 views

CVE-2021-44685

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

9.8CVSS7.3AI score
SaveExploits0References2
Prion
Prion
added 2021/12/07 12:15 a.m.19 views

Command injection

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

7.5CVSS9.8AI score0.03468EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/12/07 12:00 a.m.11 views

Git 操作系统命令注入漏洞

Git-it is a free, open-source distributed version control system. Git-it is vulnerable to an OS command injection vulnerability that could be exploited by an attacker to inject OS commands during the Branches Arent For Birds challenge step...

9.8CVSS5.7AI score0.03468EPSS
SaveExploits1References3
CVE
CVE
added 2021/12/06 11:38 p.m.63 views

CVE-2021-44685

Git-it up to version 4.4.0 is affected by an OS command injection vulnerability (CVE-2021-44685) in the Branches Aren’t For Birds challenge. During verification, it executes reflog followed by the current branch name without sanitization, enabling injection. Public metrics indicate a high/critica...

9.8CVSS9.7AI score0.03468EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/06 11:38 p.m.29 views

CVE-2021-44685

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

10AI score0.03468EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/06 9:15 p.m.19 views

CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

7.2CVSS0.00893EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/06 9:15 p.m.13 views

CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

7.2CVSS6.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/06 9:15 p.m.10 views

CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

7.2CVSS5.7AI score0.00893EPSS
SaveExploits1References3
Prion
Prion
added 2021/12/06 9:15 p.m.10 views

Server side request forgery (ssrf)

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

6.5CVSS6.9AI score0.00893EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/12/06 8:20 p.m.26 views

CVE-2021-4075 Server-Side Request Forgery (SSRF) in snipe/snipe-it

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

2.7CVSS7.2AI score0.00893EPSS
SaveExploits1References2
Rows per page
Query Builder