cve-2020-7247-exploit

cve-2020-7247-exploit cve-2020-7247의 Python 익스플로잇 취약점에 대해 읽어보기: https://blog.firosolutions.com/exploits/opensmtpd-remote-vulnerability/...

Dzzoffice 2.02.1 - Cross-Site Scripting

Dzzoffice 2.02.1SCUTF8 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the zero parameter. id: CVE-2021-30203 info: name: Dzzoffice 2.02.1 - Cross-Site Scripting author: arafatansari severity: high description: | Dzzoffice...

vulnhuntr

LLM과 정적 코드 분석을 사용하여 원격으로 악용 가능한 취약점을 식별하는 도구입니다. 세계 최초로 자율 AI가 발견한 0데이 취약점 설명 Vulnhuntr은 LLM의 힘을 활용하여 원격 사용자 입력에서 시작하여 서버 출력으로 끝나는 전체 코드 호출 체인을 자동으로 생성 및 분석함으로써, 기존 정적 코드 분석 도구가 수행할 수 있는 범위를 훨씬 넘어서는 복잡하고 다단계이며 보안을 우회하는 취약점을 탐지합니다. 모든 0데이에 대한 Vulnhuntr 출력을 포함한 모든 세부 사항은 여기에서 확인하세요: Protect AI...

Grandstream UCM6200 - SQL Injection

Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

CVE-2014-6271

CVE-2014-6271 bash 자동 패치 방법 취약점 테스트 다음 테스트를 실행하여 취약한지 확인할 수 있습니다: env x=' :;; echo vulnerable' bash -c 'echo hello' 취약점 패치 명령줄에서 다음을 실행하세요. 비밀번호 입력을 요청받을 수 있습니다. bash curl -s https://raw.githubusercontent.com/mattclegg/CVE-2014-6271/master/patch-mac.sh 크레딧...

Slackware Linux 15.0 / current libpng Vulnerability (SSA:2026-273-01)

The version of libpng installed on the remote host is prior to 1.6.59. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-273-01 advisory. New libpng packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

Astra Linux – Vulnerability in dcmtk

A vulnerability was detected in OFFIS DCMTK up to version 3.6.9. The issue affects the function DcmByteString::makeDicomByteString in the file dcmdata/libsrc/dcbytstr.cc of the dcmdata component. This manipulation can lead to memory corruption. The attack can be launched remotely. Upgrading to...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the download process in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

In DevTools of Google Chrome, out-of-bounds memory access prior to version 136.0.7103.59 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after free in ANGLE in Google Chrome before version 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected include Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, and 22.0.0.2. This easily exploitable...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in ANGLE in Google Chrome prior to version 125.0.6422.76 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass the mixed content policy through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Web Audio API in Google Chrome prior to version 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Accessibility in Google Chrome before version 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebAudio in Google Chrome before version 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

AWStats <= 7.5 - Full Path Disclosure

AWStats 7.6 contains a full path disclosure caused by improper handling of framename and update parameters in awstats.pl, letting remote attackers determine server file paths, exploit requires sending crafted parameters. id: CVE-2018-10245 info: name: AWStats = 7.5 - Full Path Disclosure author:...