3406 matches found
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...
SUSE SLES12 Security Update : python3 (SUSE-SU-2022:2166-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2166-1 advisory. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file...
SUSE: Security Advisory (SUSE-SU-2022:2166-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for python3-docs (FEDORA-2022-5ea8aa7518)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: python3-docs-3.10.5-1.fc35
The python3-docs package contains documentation on the Python 3 programming language and interpreter...
[SECURITY] Fedora 36 Update: python2.7-2.7.18-22.fc36
Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especial ly how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...
Fedora: Security Advisory for python3-docs (FEDORA-2022-9da5703d22)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Confluence Data Center 7.18.0 - Remote Code Execution Exploit
Exploit Title: Confluence Data Center 7.18.0 - Remote Code Execution RCE Exploit Author: h3v0x Vendor Homepage: https://www.atlassian.com/ Software Link: https://www.atlassian.com/software/confluence/download-archives Version: All 7.4.17 versions before 7.18.1 Tested on: - CVE : CVE-2022-26134...
Medium: python
Issue Overview: In Python3's Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP. CVE-2020-27619 The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parseqsl and urllib.parse.parseqs by using a vector called parameter cloaking. Wh...
Confluence OGNL Injection Remote Code Execution Exploit
Confluence suffers from a pre-authentication remote code execution vulnerability that is leveraged via OGNL injection. All 7.4.17 versions before 7.18.1 are affected. !/usr/bin/python3 Exploit Title: Confluence Pre-Auth Remote Code Execution via OGNL Injection Google Dork: N/A Date: 06/006/2022...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL...
Security fix for the ALT Linux 10 package openvpn version 2.5.6-alt1
2.5.6-alt1 built May 24, 2022 Andrey Cherepanov in task 300403 --- May 16, 2022 Nikolay A. Fetisov - New version Closes: 42217 - Security fixes: + CVE-2022-0547: possible authentication bypass if multiple authentication plugins tries to do deferred authentication - Fix build with new...
Mageia: Security Advisory (MGASA-2022-0182)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Path Traversal in Franklinfueling Colibri_Firmware
CVE-2021-46417 Franklin Fueling Systems Colibri Controller Mod...
Oracle Linux 8 : python3 (ELSA-2022-1986)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1986 advisory. - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response Resolves: rhbz2036020 Tenable has extracted the preceding...
Ruijie Reyee Mesh Router - Remote Code Execution (Authenticated) Exploit
Exploit Title: Ruijie Reyee Mesh Router - Remote Code Execution RCE Authenticated Google Dork: None Exploit Author: Minh Khoa of VSEC Vendor Homepage: https://ruijienetworks.com Software Link: https://www.ruijienetworks.com/resources/products/1896-1900 Version: ReyeeOS 1.55.1915 - EW3.01B11P35 an...
Navigate CMS 2.9.4 - Server-Side Request Forgery (SSRF) (Authenticated) Exploit
!/usr/bin/env python3 Exploit Title: Navigate CMS 2.9.4 - Server-Side Request Forgery SSRF Authenticated Exploit Author: cheshireca7 Vendor Homepage: https://www.navigatecms.com/ Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.9.4r1561.zip/download Version:...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
shodan search 'http.html:"BIG-IP Configuration Utility"' --fiel...
RHEL 8 : python3 (RHSA-2022:1986)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1986 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...