54 matches found
Arbitrary Code Injection
Overview @modern-js/utils is a progressive web framework based on React. Affected versions of this package are vulnerable to Arbitrary Code Injection via unsafe deserialization of RSC payloads from HTTP requests to Server Function endpoints. An unauthenticated attacker can execute arbitrary code ...
CVE-2025-55182: React and Next.js Server Functions Deserialization RCE
...
EUVD-2013-1985
Malware in sbrugna...
CVE-2023-33363
An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers...
DEBIAN-CVE-2021-37219
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2...
CVE-2021-37219
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2...
UBUNTU-CVE-2021-37219
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2...
Cross site request forgery (csrf)
Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery CSRF in many functions, like adding – deleting for hosts or servers...
[SECURITY] Fedora 24 Update: nodejs-request-2.67.0-6.fc24
Request is designed to be the simplest way possible to make HTTP calls. It supports HTTPS and follows redirects by default. You can stream any response to a file stream. You can also stream a file to a PUT or POST request. It also supports a few simple server and proxy functi ons...
ClearSCADA - Remote Authentication Bypass Exploit
There is an authentication bypass vulnerability in ClearSCADA that can be exploited by triggering an exception in dbserver.exe and taking advantage of the way the program handles it. !/usr/bin/python cs-auby.py ClearSCADA Remote Authentication Bypass Exploit Jeremy Brown jbrown3264/gmail Oct 2010...
Localize: Unexpected array leaks information about the system
By changing a string parameter on the /pages/settings page to an array see example.png and submitting the form, the page shows an error message leaking information about the server and functions used see error.png. This works on multiple POST parameters. Warning: trim expects parameter 1 to be...
[SECURITY] Fedora 18 Update: nodejs-request-2.21.0-1.fc18
Request is designed to be the simplest way possible to make HTTP calls. It supports HTTPS and follows redirects by default. You can stream any response to a file stream. You can also stream a file to a PUT or POST request. It also supports a few simple server and proxy functi ons...
CVE-2013-1997
Multiple buffer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XAllocColorCells, 2 XkbReadGetDeviceInfoReply, 3 XkbReadGeomShapes, 4 XkbReadGetGeometryReply...
