SAP Internet Graphics Service memory corruption vulnerability (CNVD-2021-42428)

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service, which can be exploited by an unauthenticated attacker to cause a system crash by submitting a malicious IG...

SAP Internet Graphics Service memory corruption vulnerability (CNVD-2021-42427)

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service, which can be exploited by an unauthenticated attacker to cause a system crash by submitting a malicious IG...

CVE-2021-27625

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method IgsData::freeMemory which will trigge...

SAP Internet Graphics Server 缓冲区错误漏洞

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service, which can be exploited by an unauthenticated attacker to cause a system crash by submitting a malicious IG...

Student Management System 1.0 Cross Site Scripting

Exploit Title: Student Management System 1.0 - 'message' Persistent Cross-Site Scripting Authenticated Date: 2021-05-13 Exploit Author: mohsen khashei kh4sh3i or [email protected] Vendor Homepage: https://github.com/amirhamza05/Student-Management-System Software Link:...

Student Management System 1.0 - 'message' Persistent Cross-Site Scripting (Authenticated)

Exploit Title: Student Management System 1.0 - 'message' Persistent Cross-Site Scripting Authenticated Date: 2021-05-13 Exploit Author: mohsen khashei kh4sh3i or [email protected] Vendor Homepage: https://github.com/amirhamza05/Student-Management-System Software Link:...

GHSA-QGCG-P3V2-9H4P Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can...

Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can...

Unauthorized Access Vulnerability in OA System of Beijing Zhiyuan Internet Software Co.

Founded in 2002, Beijing Zhiyuan Internet Software Co., Ltd. is a high-tech enterprise always focusing on the field of collaborative management software, providing customers with professional collaborative management software products, solutions, platforms and cloud services. An unauthorized acce...

CVE-2021-21731

The CVE-2021-21731 issue is a CSRF vulnerability in the ZTE ZXCLOUD iRAI management page. The root cause is insufficient verification of request origins, allowing an attacker to submit malicious requests that can delete data on the affected device. Affected products/versions: ZXCLOUD iRAI prior t...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...

Denial Of Service (DoS)

freediameter is vulnerable to denial of service. An attacker is able to crash the application via a malicious Diameter request to cause a memory corruption that results in a denial-of-service condition...

Untrusted Object Deserialization

Qcubed is vulnerable to untrusted object deserialization. An attacker is able to inject untrusted PHP object of the POST-variable “strProfileData” and execute code via a malicious POST request...

VMware ESXi OpenSLP Heap Overflow Vulnerability

VMware ESXi is VMware's open server resource consolidation platform that enables centralized management of multiple servers with less hardware and improved server performance and security. VMware ESXi OpenSLP Heap Overflow Vulnerability.The VMware ESXi OpenSLP heap overflow vulnerability is...

VMware vCenter Server Remote Code Execution Vulnerability

VMware vCenterServer provides a scalable, extensible platform for centrally managing VMware vSphere environments with optimized resource allocation and plug-in extensions. The VMware vCenter Server remote code execution vulnerability can be exploited by an attacker to send a malicious construct...

HTTP Request Smuggling

bottle is vulnerable to HTTP request smuggling. An attacker is able to send a malicious request containing a separate query parameter using a semicolon ;, resulting in unexpected interpretations of the request between the proxy and the server, and potentially poisoning the web cache...

Buffer Overflow Vulnerability in Cisco RV110W Products (CNVD-2021-05412)

The Cisco RV110W Wireless-N VPN Firewall is an enterprise-class router from Cisco USA. The Cisco RV110W product suffers from a buffer overflow vulnerability that originates from a program's failure to properly validate user data, which can be exploited by a remote attacker to execute arbitrary co...

Genivia gSOAP WS-Addressing plugin denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product UR...

CVE-2020-13514

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause increased privileges. Using the IRP 0x9c40a0e0 gives a low privilege user direct access to the OUT instruction that...

PT-2020-13588 · Nzxt · Nzxt Cam

Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: An information disclosure issue exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality. A specially crafted I/O request packet IRP using the IRP 0x9c4060d4 allows a low privilege user to...