Lucene search
+L

847 matches found

OSV
OSV
added 2021/06/30 12:34 a.m.15 views

GSD-2021-1001017 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves

spi: bcm2835: Fix out-of-bounds access with more than 4 slaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

7.2AI score
SaveExploits0
Kitploit
Kitploit
added 2021/06/02 9:30 p.m.103 views

Onelinepy - Python Obfuscator To Generate One-Liners And FUD Payloads

Python Obfuscator To Generate One-Liners And FUD Payloads. Download & Run git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide | || | . | | -| | | | -| . | | | Python |||||||||| | | Obfustucator || || usage: oneline.py -h -m M -i I...

7.5AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2021/05/21 2:26 p.m.4 views

aiproteomics (=0.2.1), alpharing (>=1.0.0 <=2.0.0) +25 more potentially affected by CVE-2021-29585 via tensorflow-cpu (>=1.15.0 <=2.1.0)

tensorflow-cpu PYPI version =1.15.0, =1.0.0, =0.0.1, =1.0.0.4, =0.1.0, =0.2.3, =0.0.5, =0.1.2, =1.0.0, =1.8.2, =1.6.1, =1.8.3 - netfl =1.5.0 and more Source cves: CVE-2021-29585 Source advisory: OSV:GHSA-MV78-G7WQ-MHP4...

7.8CVSS7AI score0.00201EPSS
SaveExploits1
Rockylinux
Rockylinux
added 2021/05/18 6:24 a.m.17 views

new module: python39:3.9

An update is available for python-more-itertools, pytest, python-psycopg2, python-lxml, python-PyMySQL, python3x-six, python-toml, python-urllib3, PyYAML, python-attrs, python-iniconfig, python-requests, modwsgi, python3x-pip, python-py, python-chardet, python-pluggy, Cython, python-psutil,...

0.2AI score
SaveExploits0
CNVD
CNVD
added 2021/04/27 12:0 a.m.9 views

Unspecified Vulnerability in MooTools More

MooTools More is an application software. library of MooTools plug-ins and enhancements. A security vulnerability exists in MooTools More 1.6.0, which can be exploited by an attacker to inject properties into Object.Prototype...

8.8CVSS6.6AI score0.01449EPSS
SaveExploits1References1
Veracode
Veracode
added 2021/04/26 7:7 a.m.19 views

Prototype Pollution

mootools-more is vulnerable to prototype pollution. An attacker is able to inject malicious properties into existing construct prototypes Object.prototype and modify attributes such as proto, constructor and prototype...

8.8CVSS3.5AI score0.01449EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2021/04/23 6:15 p.m.31 views

CVE-2021-20088

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype...

8.8CVSS0.01449EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/23 6:15 p.m.13 views

CVE-2021-20088

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype...

8.8CVSS6.7AI score
SaveExploits0References1
Prion
Prion
added 2021/04/23 6:15 p.m.19 views

Buffer overflow

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype...

6.5CVSS8.8AI score0.01449EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/04/23 5:49 p.m.62 views

CVE-2021-20088

CVE-2021-20088 affects Mootools More 1.6.0. The vulnerability is prototype pollution caused by improper modification of Object.prototype, allowing an attacker to inject properties into Object.prototype. CVSSv3.1 base score 8.8 (HIGH) with network attack, low complexity, and privileges required: L...

8.8CVSS8.4AI score0.01449EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/04/23 12:0 a.m.6 views

mootools-more 安全漏洞

MooTools More is an application software. library of MooTools plug-ins and enhancements. A security vulnerability exists in MooTools More 1.6.0, which can be exploited by an attacker to inject properties into Object.Prototype...

8.8CVSS5.6AI score0.01449EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/04/23 12:0 a.m.10 views

PT-2021-13766 · Unknown · Mootools-More

Name of the Vulnerable Software and Affected Versions: mootools-more version 1.6.0 Description: The issue is related to 'Prototype Pollution' where a malicious user can inject properties into Object.prototype due to improperly controlled modification of object prototype attributes. Recommendation...

8.8CVSS8.5AI score0.01449EPSS
SaveExploits1References5
vulnersOsv
vulnersOsv
added 2021/04/05 10:32 a.m.8 views

@100mslive/hms-video-react (>=0.3.27 <=0.3.59), @aagames-fe/google-translate (>=0.0.2 <=0.0.14) +371 more potentially affected by CVE-2021-23368 via postcss (>=8.0.0 <=8.2.1)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.1101.0-next.0, =0.30.7-danger.689b7beb.20, =0.33.2-danger.94e2a1914.37, =0.25.0, =0.2.19, =2.0.174, =2.0.174, =2.0.174, =2.6.25 and more Source cves: CVE-2021-23368 Source advisory: SNYK:JS-POSTCSS-1090595...

5.3CVSS6.7AI score0.0354EPSS
SaveExploits1
NVD
NVD
added 2021/03/18 3:15 p.m.27 views

CVE-2021-24140

Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5&type=test...

7.2CVSS0.01205EPSS
SaveExploits1References1
OSV
OSV
added 2021/03/18 3:15 p.m.7 views

CVE-2021-24140

Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5&type=test...

7.2CVSS7.2AI score0.01205EPSS
SaveExploits1References1
Prion
Prion
added 2021/03/18 3:15 p.m.24 views

Sql injection

Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5&type=test...

6.5CVSS7.3AI score0.01205EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/03/18 2:57 p.m.32 views

CVE-2021-24140 Ajax Load More < 5.3.2 - Authenticated SQL Injection

Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5&type=test...

7.6AI score0.01205EPSS
SaveExploits1References1
CVE
CVE
added 2021/03/18 2:57 p.m.190 views

CVE-2021-24140

The CVE-2021-24140 issue affects the WordPress plugin “Ajax Load More” (versions prior to 5.3.2). An unvalidated input path in POST /wp-admin/admin-ajax.php, via param repeater=' or sleep(5)# (and related payloads), enables SQL injection. Some sources note that exploitation requires authenticatio...

7.2CVSS7.3AI score0.01205EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/03/18 12:0 a.m.8 views

Wordpress Load More SQL注入漏洞

Wordpress Load More is Wordpress an open source application plugin . Provide a load more items function . WordPress Load More plugin before 5.3.2 SQL injection vulnerability exists , the vulnerability stems from /wp-admin/admin-ajax.php repeater parameter or type=test parameter...

7.2CVSS7.3AI score0.01205EPSS
SaveExploits1References2
Circl
Circl
added 2021/02/26 2:38 a.m.14 views

CVE-2021-24084

creationtimestamp| type| source ---|---|--- 2021-02-26 02:38:30+00:00| seen| https://t.me/cibsecurity/24169 2021-11-26 20:17:37+00:00| published-proof-of-concept| Telegram/ZgrYaKfoWxLUgzZDTo8GaEF-rvAT9lk-J3ogZvhycztJVHH 2021-11-28 12:01:28+00:00| seen| https://t.me/ctinow/43023 2021-11-28...

5.5CVSS5.8AI score0.02768EPSS
SaveExploits0References12
Rows per page
Query Builder