PT-2021-11977

Name of the Vulnerable Software and Affected Versions: OpenEMR version 5.0.2.1 Description: The Patient Portal of OpenEMR is affected by a Command Injection issue in the /interface/main/backup.php API endpoint. An authenticated attacker can exploit this by sending a POST request that executes...

NewStart CGSL CORE 5.05 / MAIN 5.05 : samba Multiple Vulnerabilities (NS-SA-2020-0106)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has samba packages installed that are affected by multiple vulnerabilities: - A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set i...

NewStart CGSL CORE 5.05 / MAIN 5.05 : mod_auth_mellon Vulnerability (NS-SA-2020-0106)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has modauthmellon packages installed that are affected by a vulnerability: - modauthmellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL...

Tenda AC5 AC1200 跨站脚本漏洞

The Tenda AC5 is an AC1200 smart dual-band WiFi router. A stored cross-site scripting vulnerability exists in the /main.html Wifi setting in Tenda AC5 V15.03.06.47multi. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the Wifi Name parameter...

Exploit for CVE-2020-1034

This is a PoC Proof of Concept exploit for CVE-2020-1034, a vulnerability discovered by Microsoft and fixed on August 9, 2020. The exploit targets an unpatched Windows 10 2004, build 19041.488. The exploit code is written in C++ and uses the Windows API to manipulate the system's Event Tracing fo...

PT-2021-27614

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the ycc rgb convert, sep upsample, and process data conte...

CVE-2020-7771

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

CVE-2020-7771

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

CVE-2020-7771

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

CVE-2020-7771

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

CVE-2020-7771: Improperly Controlled Modification of Object Prototype Attributes

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

Victornpb Asciitable.js Security Vulnerability

Victornpb Asciitable is a Javascript-based codebase for generating Ascii tables from two-digit tables of strings by the individual developer of Victornpb. A security vulnerability exists in asciitable.js before 1.0.3, which stems from the vulnerability to prototype contamination in the main...

PT-2021-12658

Name of the Vulnerable Software and Affected Versions: asciitable.js versions prior to 1.0.3 Description: The issue concerns a Prototype Pollution vulnerability via the main function. This allows for potential manipulation of the prototype chain, which could lead to various security issues. The...

Seal Finance Farm Security Breach

Seal Finance Farm is a network protocol used by the Seal Finance community to support decentralized trading.SEAL An experimental protocol that acts as an intermediary between the main DeFi protocol tokens, creating deeper liquidity between the two Seal Finance Farm has a security vulnerability. T...

PT-2021-4094

Name of the Vulnerable Software and Affected Versions JerryScript version 2.4.0 Description The issue is related to insufficient checking of unusual or exceptional states in the main print unhandled exception function of the main-utils.c file. This can be exploited by a remote attacker to cause a...

DEBIAN-CVE-2020-12658

gssproxy aka gss-proxy before 0.8.3 does not unlock condmutex before pthread exit in gpworkermain in gpworkers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional...

CVE-2020-35275

Coastercms v5.8.18 is affected by cross-site Scripting XSS. A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application...

CVE-2020-35275

Coastercms v5.8.18 is affected by cross-site Scripting XSS. A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application...

CVE-2020-35275

Coastercms v5.8.18 is affected by cross-site Scripting XSS. A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application...

PT-2020-17307

Name of the Vulnerable Software and Affected Versions Coastercms version 5.8.18 Description The issue allows a user to steal a cookie and redirect the user to any malicious website because it is triggered on the main home page of the product/application. This is due to cross-site Scripting XSS...