14 matches found
webcgi-exploits
Эксплойты для Web CGI Здесь представлены несколько эксплойтов для разных веб-CGI. Я написал их за последние несколько лет. Как это работает Веб-приложения в основном состоят из таких слоёв: 1. приложения 2. веб-фреймворки 3. движки скриптовых языков 4. веб-контейнерысерверы 5. веб-прокси перед...
EUVD-2021-23311
Malware in sbrugna...
CVE-2021-36718
SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data Employee name, Employee ID number, Working hours etc' The vulnerabilety has been addressed and fixed on version 11. Default credentials ,...
CVE-2021-36718
SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data Employee name, Employee ID number, Working hours etc' The vulnerabilety has been addressed and fixed on version 11. Default credentials ,...
Default credentials
SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data Employee name, Employee ID number, Working hours etc' The vulnerabilety has been addressed and fixed on version 11. Default credentials ,...
CVE-2021-36718 SYNEL - eharmonynew / Synel Reports version 8.0.2 Default credentials , Security miscommunication , Sensetive data exposure
SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data Employee name, Employee ID number, Working hours etc' The vulnerabilety has been addressed and fixed on version 11. Default credentials ,...
CVE-2021-36718
CVE-2021-36718 affects SYNEL eharmonynew and Synel Reports. Public docs confirm an authentication issue where attackers can log in with default credentials to export reports containing sensitive data (employee name, ID, hours worked). Affected versions include Synel eharmonynew prior to version 1...
CVE-2021-27448
A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...
CVE-2021-27448
A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...
Information disclosure
A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...
CVE-2021-27448
A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...
CVE-2021-27448: Execution with Unnecessary Privileges
A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...