Next.js 环境问题漏洞

Next.js is a React framework open source by Vercel. Versions of Next.js from 9.5.0 to 15.5.13, as well as versions before 16.1.7, have an environmental issue vulnerability. This vulnerability arises when the proxy rewrites traffic, and specially crafted DELETE/OPTIONS requests may trigger...

EUVD-2024-2263

Malicious code in bioql PyPI...

PT-2024-28950 · Unknown · Fastapi Opa

Name of the Vulnerable Software and Affected Versions: Fastapi OPA versions prior to 2.0.1 Description: The issue allows unauthenticated attackers to discover which entities exist within an application by sending HTTP OPTIONS requests. This is because OpaMiddleware allows all HTTP OPTIONS request...

Backdoor.Win32.Levelone.b Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/3f82e6ddc9f5242f5af200d2fbae4ce4.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Levelone.b Vulnerability: Remote Stack Buffer Overflow Description: The backdoor...

IBM Cognos Controller Information Disclosure Vulnerability (CNVD-2019-18843)

IBM Cognos Controller is a suite of business intelligence and planning solutions from IBM in the United States. The product features process automation, financial audit control, and the creation and management of financial reports. An information disclosure vulnerability exists in IBM Cognos...

Medium: subversion

Issue Overview: A flaw was found in the way the moddavsvn module handled OPTIONS requests. A remote attacker with read access to an SVN repository served via HTTP could use this flaw to cause the httpd process that handled such a request to crash. The getresource function in repos.c in the...

http-cors NSE Script

Tests an http server for Cross-Origin Resource Sharing CORS, a way for domains to explicitly opt in to having certain methods invoked by another domain. The script works by setting the Access-Control-Request-Method header field for certain enumerated methods in OPTIONS requests, and checking the...

SIP Endpoint Scanner (TCP)

Scan for SIP devices using OPTIONS requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Endpoint Scanner TCP', 'Description' = 'Scan for SIP devices using OPTIONS requests', 'Author' =...

SIP Endpoint Scanner (UDP)

Scan for SIP devices using OPTIONS requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Endpoint Scanner UDP', 'Description' = 'Scan for SIP devices using OPTIONS requests', 'Author' =...