CVE-2021-43454

An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted file in the ATService path...

CVE-2021-43454

CVE-2021-43454 affects AnyTXT Searcher 1.2.394, with an Unquoted Service Path in the ATService path. The vulnerability is a local privilege escalation issue; CVSS-3.1 vector indicates LOCAL access, LOW privileges required, UI NONE, and HIGH impact on confidentiality, integrity, and availability (...

AnyTXT Searcher code issues and vulnerabilities

AnyTXT Searcher is a desktop search tool with a powerful full-text search engine from the AnyTXT Searcher community. A security vulnerability exists in AnyTXT Searcher 1.2.394 via a carefully crafted file in the ATService Path...

PT-2022-11841

Name of the Vulnerable Software and Affected Versions AnyTXT Searcher version 1.2.394 Description An Unquoted Service Path issue exists via a specially crafted file in the ATService path. Recommendations For version 1.2.394, consider restricting access to the ATService path to minimize the risk o...

CVE-2021-43454: Unquoted Search Path or Element

An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted file in the ATService path...

Atlassian Jira 8.6.x < 8.13.6 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.14, 8.6.x 8.13.6 or 8.14.x 8.16.1. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in the EditWorkflowScheme.jspa...

Atlassian Jira < 8.5.14 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.14, 8.6.x 8.13.6 or 8.14.x 8.16.1. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in the EditWorkflowScheme.jspa...

Atlassian Jira 8.14.x < 8.16.1 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.14, 8.6.x 8.13.6 or 8.14.x 8.16.1. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in the EditWorkflowScheme.jspa...

Atlassian Jira Server/Data Center 8.16.0 - Reflected Cross-Site Scripting Vulnerability

Exploit Title: Atlassian Jira Server/Data Center 8.16.0 - Reflected Cross-Site Scripting XSS Exploit Author: CAPTAINHOOK Vendor Homepage: https://www.atlassian.com/ Software Link: https://www.atlassian.com/software/jira/download/data-center Version: versions 8.5.14, 8.6.0 ≤ version 8.13.6, 8.14.0...

CVE-2021-26078

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability...

Jira Server and Jira Data Center cross-site scripting vulnerabilities

Atlassian JIRA Server and Jira Server & Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. The system is mainly used for tracking and managing all kinds of problems and defects in the workplace.Jira Server & Dat...

PT-2021-16945

Name of the Vulnerable Software and Affected Versions Jira Server and Jira Data Center versions prior to 8.5.14 Jira Server and Jira Data Center versions 8.6.0 through 8.13.5 Jira Server and Jira Data Center versions 8.14.0 through 8.16.0 Description The issue allows remote attackers to inject...

CVE-2021-26078: Improper Neutralization of Input During Web Page Generation

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability...

CVE-2021-26078

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability...

AnyTXT Searcher 1.2.394 Unquoted Service Path

Exploit Title: AnyTXT Searcher 1.2.394 - 'ATService' Unquoted Service Path Date: 2020-12-11 Exploit Author: Mohammed Alshehri Vendor Homepage: Anytxt.net Software Link: https://sourceforge.net/projects/anytxt/files/AnyTXT.Searcher.1.2.394.exe Version: Version 1.2.394 Tested on: Microsoft Windows ...

AnyTXT Searcher 1.2.394 - (ATService) Unquoted Service Path Vulnerability

Exploit Title: AnyTXT Searcher 1.2.394 - 'ATService' Unquoted Service Path Exploit Author: Mohammed Alshehri Vendor Homepage: Anytxt.net Software Link: https://sourceforge.net/projects/anytxt/files/AnyTXT.Searcher.1.2.394.exe Version: Version 1.2.394 Tested on: Microsoft Windows 10 Education -...

AnyTXT Searcher 1.2.394 - 'ATService' Unquoted Service Path

Exploit Title: AnyTXT Searcher 1.2.394 - 'ATService' Unquoted Service Path Date: 2020-12-11 Exploit Author: Mohammed Alshehri Vendor Homepage: Anytxt.net Software Link: https://sourceforge.net/projects/anytxt/files/AnyTXT.Searcher.1.2.394.exe Version: Version 1.2.394 Tested on: Microsoft Windows ...

Bypassing MassLogger Anti-Analysis — a Man-in-the-Middle Approach

The FireEye Front Line Applied Research & Expertise FLARE Team attempts to always stay on top of the most current and emerging threats. As a member of the FLARE Reverse Engineer team, I recently received a request to analyze a fairly new credential stealer identified as MassLogger. Despite the la...

Vulnx v2.0 - An Intelligent Bot Auto Shell Injector That Detect Vulnerabilities In Multiple Types Of CMS (Wordpress , Joomla , Drupal , Prestashop ...)

Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms, fast cms detection,informations gathering and vulnerabilitie Scanning of the target like subdomains, ipaddresses, country, org, timezone, region, ans and more ... Instead of injecting each and...

Bytecode Viewer - A Java 8 Jar & Android Apk Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Bytecode Viewer is an Advanced Lightweight Java Bytecode Viewer, GUI Java Decompiler, GUI Bytecode Editor, GUI Smali, GUI Baksmali, GUI APK Editor, GUI Dex Editor, GUI APK Decompiler, GUI DEX Decompiler, GUI Procyon Java Decompiler, GUI Krakatau, GUI CFR Java Decompiler, GUI FernFlower Java...