248761 matches found
CVE-2026-79899
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2021-26714
CVE-2021-26714 Vulnerabilidad de Directory Traversal en el portal de Enterprise License Manager en Mitel MiContact Center Enterprise anterior a la versión 9.4. https://nvd.nist.gov/vuln/detail/CVE-2021-26714vulnCurrentDescriptionTitle...
CVE-2024-6244
🚀 pz-frontend-manager -U -p -i usage: p.py -h --url URL --username USERNAME --password PASSWORD --image IMAGE pz-frontend-manager = 1.0.5 - CSRF change user profile picture options: -h, --help show this help message and exit --url URL, -u URL Base URL of the WordPress site --username USERNAME, -U...
CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...
EUVD-2026-90881
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...
CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...
CVE-2026-79896
Fortra BoKS Manager is vulnerable to an out-of-bounds read in the custom TLS ClientHello parser utilized by boks_portmux . A remote unauthenticated attacker can exploit this by submitting a malformed ClientHello to terminate the boks_portmux daemon. While the daemon typically restarts automatical...
CVE-2021-32162
..| CSRFtoCommandInjection2 |.. 描述： 利用跨站请求伪造（CSRF）攻击，通过Webmin的文件管理器功能实现命令注入 测试版本： Webmin 1.973（GitHub最新版本 2021年3月7日） 攻击类型： 远程 影响： 命令执行 利用代码POC： 产品供应商： https://www.webmin.com 附加信息： "Webmin 是一款基于Web的Unix-like服务器及服务系统管理工具，全球安装量超过100万。通过它，可以配置操作系统内部设置，如用户、磁盘配额、服务或配置文件，还可以修改和控制开源应用，例如BIND DNS...
CVE-2026-79898
Fortra BoKS Manager contains a command injection vulnerability in the crlserver component. An authenticated user with permission to add CRL URLs via BCC , the WSI REST or SOAP API , or the cacrl command-line interface can trigger shell command substitution. This allows the attacker to execute com...
CVE-2026-79898 Fortra BoKS Manager crlserver command injection vulnerability
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...
EUVD-2026-90875
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...
CVE-2022-22954-Testi
CVE-2022-22954-Prueba Prueba de la vulnerabilidad CVE-2022-22954 VMware Workspace ONE Access e Identity Manager contienen una vulnerabilidad de ejecución remota de código debido a una inyección de plantilla del lado del servidor. Un actor malicioso con acceso a la red puede desencadenar una...
CVE-2025-9223
Applications Manager - Execute Program Action Bypass PoC 📖 Descripción Este repositorio contiene una Prueba de Concepto PoC que demuestra una vulnerabilidad de ejecución de comandos en la función "Execute Program Action" de ManageEngine Applications Manager. 🔍 Detalles de la Vulnerabilidad...
CVE-2026-79899 Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2026-79899 Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2026-79899
Fortra BoKS Manager contains an insecure temporary file vulnerability in the bccgethostcert utility. The root cause is the creation of predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master with read access to files under BOKS_tmp may obtain CA secr...
EUVD-2026-90871
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...
CVE-2026-97281
The WP Project Manager plugin for WordPress (versions