19 matches found
EUVD-2021-26482
Malware in sbrugna...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
Mubu Authorization Issues Vulnerability
Mubu is a platform for online writing from Mubu, a company based in Beijing, China. An authorization issue vulnerability exists in Mubu version 2.2.1, which stems from its failure to strictly limit user privileges and can be exploited by a local attacker to execute system commands...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
Design/Logic Flaw
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2021-3134
CVE-2021-3134 affects Mubu 2.2.1. The vulnerability is a local privilege escalation: a local attacker can gain privileges to execute system commands. Root cause cited in connected records is an authorization issue stemming from failure to strictly limit user privileges (CNVD-2020-68878). The rela...
PT-2021-19248
Name of the Vulnerable Software and Affected Versions Mubu version 2.2.1 Description The issue allows local users to gain privileges to execute commands. Recommendations For Mubu version 2.2.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
Mubu Beijing’s authorization issue vulnerability
Mubu is a platform for online writing from Mubu, a company based in Beijing, China. An authorization issue vulnerability exists in Mubu version 2.2.1, which stems from its failure to strictly limit user privileges and can be exploited by a local attacker to execute system commands...
CVE-2021-3134: Undefined Security Weakness
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
CVE-2018-19286
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
Code injection
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
CVE-2018-19286
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
CVE-2018-19286
CVE-2018-19286 describes an XSS vulnerability in the mubu note server. An attacker can trigger XSS by configuring an account with a crafted name value (together with an arbitrary username) when creating and sharing a note, enabling the attacker to inject script via the name field. The NVD summary...
CVE-2018-19286
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...
PT-2018-14904
Name of the Vulnerable Software and Affected Versions mubu note version 2018-11-11 Description The issue allows for XSS by configuring an account with a crafted name value, along with an arbitrary username value, and then creating and sharing a note. Recommendations For mubu note version...
CVE-2018-19286: Improper Neutralization of Input During Web Page Generation
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...