151 matches found
CVE-2021-27999
CVE-2021-27999 affects Local Services Search Engine Management System Project 1.0. The vulnerability is a SQL injection in the editid parameter that enables admins to dump all data from the database. Exploitation details are not provided beyond the description; no patch/version is specified in th...
CVE-2021-27999
A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database...
Local Services Search Engine Management System SQL注入漏洞
Local Services Search Engine Management System is a local services search engine management system. Local Services Search Engine Management System Project 1.0 suffers from a SQL injection vulnerability that arises from a database-based application that lacks validation of externally entered SQL...
Local Services Search Engine Management System 跨站脚本漏洞
Local Services Search Engine Management System is a local services search engine management system. A cross-site scripting vulnerability exists in the Local Services Search Engine Management System Project, which stems from a persistent cross-site scripting vulnerability discovered in the Local...
OESA-2021-1272 gupnp security update
GUPnP is an elegant, object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. It provides the same set of features as libupnp,but shields the developer from most...
OPENSUSE-SU-2021:2153-1 Security update for gupnp
This update for gupnp fixes the following issues: - CVE-2021-33516: Fixed a DNS rebinding, which could trick the browser into triggering actions against local UPnP services bsc1186590...
Restund 安全漏洞
Restund is an open source network traversal server. A security vulnerability exists in Restund that stems from Restund is an open source NAT traversal server that can be instructed to return a TURN server to open a relay to a range of loopback addresses, which allows you to access any other servi...
gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local UPnP services
A flaw was found in gupnp. DNS rebinding can occur when a victim's browser is used by a remote web server to trigger actions against local UPnP services including data exfiltration, data tempering, and other exploits. The highest threat from this vulnerability is to data confidentiality and...
USN-4970-1 gupnp vulnerability
It was discovered that GUPnP incorrectly filtered local requests. If a user were tricked into visiting a malicious website, a remote attacker could possibly use this issue to perform actions against local UPnP services such as obtaining or altering sensitive information...
CVE-2021-33516
An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected...
Mozilla: More internal network hosts could have been probed by a malicious webpage
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...
Mozilla: More internal network hosts could have been probed by a malicious webpage
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...
Mozilla: More internal network hosts could have been probed by a malicious webpage
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...
Mozilla: More internal network hosts could have been probed by a malicious webpage
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...
Mozilla: More internal network hosts could have been probed by a malicious webpage
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...
Mozilla: More internal network hosts could have been probed by a malicious webpage
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...
CVE-2021-23961
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...
Wcms Server-Side Request Forgery Vulnerability
WCMS is a content management system CMS. A server-side request forgery vulnerability exists in Wcms version 0.3.2, where an attacker sends a crafted request/html.php file to wex from the back-end server of a vulnerable web application via the pagename parameter. It can help to identify open ports...
CVE-2020-24140
Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename parameter to wex/html.php. It can help identify open ports, local network hosts and execute command on local services...
Mozilla: Internal network hosts could have been probed by a malicious webpage
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...