XML External Entity (XXE)

quartz is vulnerable to XML external entity XXE attacks. The external DTDs and doctype declarations are not disabled by default, allowing an attacker to access system files, or perform requests on behalf of the server via a malicious XML document. The vulnerability also allows an attacker to...

XML External Entity (XXE)

modoboadmarc is vulnerable to XML external entity XXE attacks. During the import of aggregated DMARC report, unsanitized XML data is automatically parsed and fed to the database. This allows an attacker to access and retrieve system files or perform requests on behalf of the server...

JetBrains YouTrack Cross-Site Request Forgery Vulnerability (CNVD-2019-41872)

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site request forgery vulnerability exists in JetBrains YouTrack. An attacker could u...

Tiki Wiki CMS Groupware Cross-Site Request Forgery Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site request forgery vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which arises from a WEB application that does not adequately validate that a request is coming from a...

XML External Entity (XXE)

Raml parser is vulnerable to XML external entity attacks. The attack is possible because an XML input containing a reference to an external entity is not blocked by the XML parser, allowing an attacker to inject malicious XML files to retrieve system files or perform requests on behalf of the...

containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launc...

FUEL CMS Cross-Site Request Forgery Vulnerability (CNVD-2021-18031)

FUEL CMS is a content management system CMS based on the Codelgniter framework. A cross-site request forgery vulnerability exists in the blocks/create/Create Blocks section of the Admin console in FUEL CMS version 1.4.4. The vulnerability stems from the WEB application not adequately verifying th...

WordPress companion-sitemap-generator plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-sitemap-generator is a sitemap plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

WordPress wp-editor plugin cross-site request forgery vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-editor plugin is an editor plugin used in it. A cross-site request forgery vulnerability exists in the WordPress wp-edito...

MDaemon Webmail Cross-Site Request Forgery Vulnerability

MDaemon Technologies MDaemon Webmail formerly known as WorldClient is a Web-based e-mail client for MDaemon Email Server from MDaemon Technologies. A cross-site request forgery vulnerability exists in MDaemon Webmail. The vulnerability stems from a WEB application that does not adequately validat...

The vulnerabilities of the software components—Knowledge Management Configuration Service, EPBC, and EPBC2 on the SAP NetWeaver platform—allow attackers to control the application.

The vulnerability of the software components—Knowledge Management Configuration Service, EPBC, and EPBC2 of the SAP NetWeaver platform—is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to control the application using specially...

CVE-2018-1999017

Pydio version 8.2.0 and earlier contains a Server-Side Request Forgery SSRF vulnerability in plugins/action.updater/UpgradeManager.php Line: 154, getUpgradePath$url that can result in an authenticated admin users requesting arbitrary URL's, pivoting requests through the server. This attack appear...

Dirhunt - Find Web Directories Without Bruteforce

Dirhunt is a web crawler optimize for search and analyze directories. This tool can find interesting things if the server has the "index of" mode enabled. Dirhunt is also useful if the directory listing is not enabled. It detects directories with false 404 errors , directories where an empty inde...

Malware Network Communication Provides Better Early Warning Signal

Research is expected to be unveiled today that challenges the industry’s current reliance on dynamic malware analysis as the best means of early detection of infections. Instead, researchers from the Georgia Institute of Technology, the IMDEA Software Institute and EURECOM posit that a better...

New Attack Targeting Microsoft Outlook Web App (OWA) to Steal Email Passwords

Researchers have unearthed a dangerous backdoor in Microsoft's Outlook Web Application OWA that has allowed hackers to steal e-mail authentication credentials from major organizations. The Microsoft Outlook Web Application or OWA is an Internet-facing webmail server that is being deployed in...

Jenkins-CI Script-Console Java Execution

This module uses the Jenkins-CI Groovy script console to execute OS commands using Java. Module Options msf use exploit/multi/http/jenkins/scriptconsole msf undefinedscriptconsole show actions ...actions... msf undefinedscriptconsole set ACTION msf undefinedscriptconsole show options ...show and...

Relative IP Identification number change

The remote host uses non-random IP IDs, that is, it is possible to predict the next value of the ipid field of the ip packets sent by this host. SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

ChatZilla DoS

Large CPU consumption on oversized server requests...

Дырка в WEbSphere

При HTTP-запросе в котором указано имя сервера не подходящее ни под один из виртуальных серверов показывается содержимое JSP-страницы...

Security Update For Exchange Server 2013 CU9 (KB3087126)

This security update resolves a vulnerability in Microsoft Exchange Server. The vulnerability could allow information disclosure if Outlook Web Access OWA fails to properly handle web server requests...