Lucene search
+L

185 matches found

RedHat Linux
RedHat Linux
•added 2021/04/26 5:51 a.m.•11 views

Mozilla: More internal network hosts could have been probed by a malicious webpage

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...

7.4CVSS7.4AI score0.01477EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/04/26 5:49 a.m.•12 views

Mozilla: More internal network hosts could have been probed by a malicious webpage

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...

7.4CVSS7.4AI score0.01477EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/04/20 3:20 a.m.•74 views

CVE-2021-23961

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...

7.4CVSS0.7AI score0.01477EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/04/09 12:00 a.m.•18 views

Wcms Server-Side Request Forgery Vulnerability

WCMS is a content management system CMS. A server-side request forgery vulnerability exists in Wcms version 0.3.2, where an attacker sends a crafted request/html.php file to wex from the back-end server of a vulnerable web application via the pagename parameter. It can help to identify open ports...

8.3CVSS7AI score0.01155EPSS
SaveExploits1References1
OSV
OSV
•added 2021/04/07 4:15 p.m.•31 views

CVE-2020-24140

Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename parameter to wex/html.php. It can help identify open ports, local network hosts and execute command on local services...

8.3CVSS7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/07 12:00 a.m.•4 views

PT-2021-11010

Name of the Vulnerable Software and Affected Versions: Wcms version 0.3.2 Description: The issue allows an attacker to send crafted requests from the back-end server of a vulnerable web application via the path parameter to "wex/cssjs.php". This can be used to identify open ports, local network...

8.3CVSS0.01051EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2021/03/25 1:01 p.m.•12 views

Mozilla: Internal network hosts could have been probed by a malicious webpage

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

6.5CVSS7.4AI score0.00743EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/25 12:56 p.m.•16 views

Mozilla: Internal network hosts could have been probed by a malicious webpage

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

6.5CVSS7.4AI score0.00743EPSS
SaveExploits0References5
OSV
OSV
•added 2021/03/24 12:00 a.m.•36 views

UBUNTU-CVE-2021-23982

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

6.5CVSS6.9AI score0.00743EPSS
SaveExploits0References8
Packet Storm
Packet Storm
•added 2021/03/03 12:00 a.m.•319 views

Local Services Search Engine Management System 1.0 Cross Site Scripting

Exploit Title: Local Services Search Engine Management System LSSMES 1.0 - 'name' Persistent Cross-Site Scripting XSS Date: 2021-03-03 Exploit Author: Tushar Vaidya Vendor Homepage: https://phpgurukul.com/local-services-search-engine-management-system-using-php-and-mysql/ Software Link:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2021/03/03 12:00 a.m.•185 views

Local Services Search Engine Management System (LSSMES) 1.0 - Blind & Error based SQL injection (Authenticated)

Exploit Title: Local Services Search Engine Management System LSSMES 1.0 - Blind & Error based SQL injection Authenticated Date: 2021-03-02 Exploit Author: Tushar Vaidya Vendor Homepage: https://phpgurukul.com/local-services-search-engine-management-system-using-php-and-mysql/ Software Link:...

5.3AI score
SaveExploits0
OSV
OSV
•added 2021/02/26 3:15 a.m.•5 views

DEBIAN-CVE-2021-23961

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...

7.4CVSS8.1AI score0.01477EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/26 3:15 a.m.•14 views

CVE-2021-23961

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...

7.4CVSS7.3AI score0.01477EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2021/02/19 7:15 a.m.•13 views

CVE-2020-10252

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue via the apps/filessharing/external remote parameter, an authenticated attacker can interact with local services blindly aka Blind SSRF or conduct a Denial Of Service attack...

8.3CVSS6.7AI score
SaveExploits0References3
NVD
NVD
•added 2021/02/19 7:15 a.m.•34 views

CVE-2020-10252

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue via the apps/filessharing/external remote parameter, an authenticated attacker can interact with local services blindly aka Blind SSRF or conduct a Denial Of Service attack...

8.3CVSS0.01246EPSS
SaveExploits1References3
Prion
Prion
•added 2021/02/19 7:15 a.m.•24 views

Server side request forgery (ssrf)

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue via the apps/filessharing/external remote parameter, an authenticated attacker can interact with local services blindly aka Blind SSRF or conduct a Denial Of Service attack...

6.5CVSS8AI score0.01246EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/02/19 6:12 a.m.•41 views

CVE-2020-10252

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue via the apps/filessharing/external remote parameter, an authenticated attacker can interact with local services blindly aka Blind SSRF or conduct a Denial Of Service attack...

8.1AI score0.01246EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/01/26 12:00 a.m.•3 views

PT-2021-2599

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 85 Description The issue is related to information disclosure. It could allow a remote attacker to gain unauthorized access to protected information. Combining certain techniques with a malicious webpage may...

7.8CVSS0.01477EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2021/01/26 12:00 a.m.•43 views

CVE-2021-23961

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...

7.4CVSS7.3AI score0.01477EPSS
SaveExploits0References5
OSV
OSV
•added 2021/01/26 12:00 a.m.•27 views

UBUNTU-CVE-2021-23961

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 85...

7.4CVSS7.2AI score0.01477EPSS
SaveExploits0References6
Rows per page
Query Builder