10 matches found
ntdissector
ntdissector Ntdissector — это инструмент для разбора записей базы данных NTDS. Записи выгружаются в формате JSON и могут быть отфильтрованы по классу объектов. Если указать куст SYSTEM или правильный bootkey в hex-формате, с соответствующих столбцов будут сняты слои шифрования. Подробнее в...
EUVD-2026-54089
Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's event stream and observe another user's segmentation, transcription, import, export and training activity via the objectcls and objectpk values...
EUVD-2025-179154
Malicious code in emulate-wind-sudo-object-class npm...
EUVD-2021-33035
Malicious code in bioql PyPI...
LDAP Injection
ldap-backend is vulnerable to LDAP Injection. The vulnerability exists because the doGetIdentity function in LdapIdentityBackend.java does not properly filter the object class, allowing an attacker to inject and execute malicious LDAP query's through the principalName parameter...
UBUNTU-CVE-2021-46347
There is an Assertion 'ecmaobjectcheckclassnameisobject objp' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0...
HDF5 Group libhdf5 Shareable Message Type Code Execution Vulnerability(CVE-2016-4332)
Description HDF5 is a file format that is maintained by a non-profit organization, The HDF Group. HDF5 is designed to be used for storage and organization of large amounts of scientific data and is used to exchange data structures between applications in industries such as the GIS industry via...
Design/Logic Flaw
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope...
TrendMicro Web-Deployment Active-X Remote Execution
param NAME="YvVSW"...
CVE-2006-1731
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when 1 .valueOf.call or 2 .valueOf.apply are called without any arguments, which allows remote...