DEBIAN-CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

UBUNTU-CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

The vulnerability in Oracle iPlanet’s web server, related to the read-only access to encryption keys without authentication, allows attackers to disclose protected information.

The vulnerability of Oracle iPlanet web server relates to the read-only access to encryption keys without authentication. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

sudo: Heap buffer overflow in argument parsing

A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user who can execute the sudo command by default, any local user can execute sudo without authentication. Successful exploitation of this flaw coul...

The vulnerability of the “ALTER ... DEPENDS ON EXTENSION” component in the PostgreSQL database management system allows a attacker to compromise data integrity.

The vulnerability of the “ALTER ... DEPENDS ON EXTENSION” component in the PostgreSQL database management system is related to the absence of an authentication mechanism. Exploiting this vulnerability could allow a perpetrator to compromise the integrity of the data...

Exploit for CVE-2020-0797

This repository is a PoC exploit for CVE-2020-0796, a wormable SMBv3 vulnerability. The vulnerability allows an attacker to execute code on a target SMB Server or SMB Client by sending a specially crafted packet. The exploit is implemented in Python and uses the socket library to send a packet to...

The vulnerability of the Cisco IoT Field Network Director software interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco IoT Field Network Director software interface lies in the absence of a authentication mechanism for accessing the database. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information through specially crafted requests...

CVE-2020-10291

Visual Components owned by KUKA is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds ...

CVE-2020-10291 RVD#3336: System information disclosure without authentication on KUKA simulators

Visual Components owned by KUKA is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds ...

Nacos Information Disclosure Vulnerability

nacos is a dynamic service discovery, configuration and service management platform for Alibaba in China. The software supports both DNS-based and RPC-based service discovery, and provides features such as providing real-time health checks and blocking services from sending requests to unhealthy...

PT-2020-8642 · Unknown · Juuko K-808

Name of the Vulnerable Software and Affected Versions: JUUKO K-808 versions prior to numbers ending ...9A, ...9B, ...9C, etc. Description: The issue allows remote attackers to execute commands on vulnerable installations of the equipment. No authentication is required to exploit this issue. The...

CVE-2020-25204

The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver. The purpose of this broadcast receiver is to show an in-game push notification to the player. However, the...

Apache ZooKeeper Information Disclosure

Apache ZooKeeper server service runs on TCP 2181 and by default, it is accessible without any authentication. This module targets Apache ZooKeeper service instances to extract information about the system environment, and service statistics. Module Options msf use...

Exploit for Injection in Thedaylightstudio Fuel_Cms

CVE-2018-16763 FuelCMS 1.4.1 Remote Code Execution Vulnera...

The vulnerability in the web interface of the Cisco IOS XE operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of authentication. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary code...

CVE-2020-25867

SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...

UBUNTU-CVE-2020-15177

In GLPI before version 9.5.2, the install/install.php endpoint insecurely stores user input into the database as urlbase and urlbaseapi. These settings are referenced throughout the application and allow for vulnerabilities like Cross-Site Scripting and Insecure Redirection Since authentication i...

Unicom Optical Cat wolink plug-in has information leakage vulnerability

The Unicom Optical Cat is a router. There is an information leakage vulnerability in the wolink plugin of CommuniLink Optical Cat, which is caused by the lack of authentication process of the plugin and can be exploited by attackers to obtain sensitive information...

PT-2020-6514 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to the implementation of the WEB CmdFileList function in the D-Link DAP-2020 Wi-Fi access point's firmware, which fails to neutralize special elements used in operating syste...

CVE-2020-17405

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symphony 7.3.2.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSOAuth process. The issue results from the lack of proper...