InfluxDB-Exploit-CVE-2019-20933

InfluxDB エクスプロイト CVE-2019-20933 InfluxDB CVE-2019-20933 脆弱性のためのエクスプロイトです。InfluxDB 1.7.6 より前のバージョンでは、services/httpd/handler.go の authenticate 関数に認証バイパスの脆弱性があります。これは、JWT トークンが空の SharedSecret（別名 shared secret）を持つ可能性があるためです。...

Apache Cassandra 安全漏洞

Apache Cassandra is a distributed NoSQL database developed by the Apache Foundation in the United States. Version 4.0 of Apache Cassandra contains a security vulnerability. This vulnerability stems from the cqlsh command-line tool not properly clearing sensitive information, which may lead to the...

Exploit for Improper Authentication in Influxdata Influxdb

InfluxDB Exploit CVE-2019-20933 Exploit for InfluxDB CVE-2019...

Command injection

PyGIT.py in the Trac Git plugin trac-git before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command...