CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

Denial Of Service (DoS)

bind9 is vulnerable to denial of service. The process terminates with a failed assertion check when receiving a malicious query for a record...

Opmantek Open-AudIT 跨站脚本漏洞

Open-AudIT is a network auditing application, based on the scripting languages PHP, Bash and VBScript, that tells you what's on your network, how it's configured, and if any changes have been made. A cross-site scripting vulnerability exists in Open-AudIT 4.0.1. An attacker can exploit this...

SQLite report about CVE-2020-13435CVE-2021-0646

Malicious SQL statement causes a read access to a NULL pointer and denial of service. details...

Privilege Escalation

cloudfoundry-identity-server is vulnerable to privilege escalation. External input is directly appended to an SCIM query, allowing a remote attacker with client.write and groups.update to inject and execute a malicious SCIM query. This allows the retrieval of confidential information that allows ...

The vulnerability of the Etlas electronic document management system lies in the lack of protection for SQL query structures, which allows attackers to disclose the protected information.

The vulnerability of the Etlas electronic document management system lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain access to protected information by entering a specially crafted SQL query into the “Process Name” field o...

Multiple F5 BIG-IP and BIG-IQ Products Information Disclosure Vulnerabilities

F5 BIG-IP LTM and others are products of F5 USA.LTM is a local traffic manager; BIG-IQ is a software-based cloud management solution. The solution supports the deployment of application delivery and network services across public and private clouds, traditional data centers and hybrid...

Solarwinds Storage Manager 5.1.0 SQL Injection

This module exploits a SQL injection found in Solarwinds Storage Manager login interface. It will send a malicious SQL query to create a JSP file under the web root directory, and then let it download and execute our malicious executable under the context of SYSTEM. Module Options msf use...

Unfixed XSS vulnerability at www.ltu.se

Security researcher Uber0n, has submitted on 14/11/2007 a cross-site-scripting XSS vulnerability affecting www.ltu.se, which at the time of submission ranked 46482 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

InterScan VirusWall Remote Configuration Vulnerability

The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptio...

CVE-2004-1754

The DNS proxy DNSd for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records...

Microsoft Windows Indexing Service fails to properly handle query validation

Overview A vulnerability in the Microsoft Indexing Service could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Indexing Service provides applications and scripts with a means of managing, querying, and indexing information in file systems or web...

Multiple Vulnerabilities In Kayako eSupport v2.x

GulfTech Security Research December 18th, 2004 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako eSupport v2.x Risk : Multiple Vulnerabilities Description: Kayako eSupport is one of the most feature packed support systems; in this tour you will find why over a thousand...

phpShop 0.6.1-b - Multiple Vulnerabilities

phpShop 0.6.1-b - Multiple Vulnerabilities Multiple Vulnerabilities Vendor: phpShop Project Product: Version: phpShop 0.6.1-b And Earlier Website: http://www.phpshop.org/ BID: 9437 Description: phpShop is a PHP-based e-commerce application and PHP development framework. phpShop offers the basic...