Silverstripe CMS GraphQL Server Resource Management Error Vulnerability

Silverstripe CMS GraphQL Server is a tool that makes SilverStripe data available as a GraphQL representation. A resource management error vulnerability exists in Silverstripe CMS GraphQL Server, which can be exploited by an attacker to perform a distributed denial-of-service attack DDOS attack...

The vulnerability of the OLE DB driver for the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for the Microsoft SQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

IBM Security Directory Server Security Vulnerability

IBM Security Directory Server is a suite of enterprise identity management software from International Business Machines IBM that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. A security vulnerability exists i...

Devolutions Server Security Vulnerability

Devolutions Server is an application from Devolutions Canada. provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2023.2.8.0 and prior versions that stems from improper access control and allows an attacker to...

CVE-2023-36778

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2023-36778 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-36730 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...

Microsoft Skype for Business Server 安全漏洞

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

The vulnerability in the web server software for Inductive Automation Ignition allows a perpetrator to execute arbitrary code.

The vulnerability of Inductive Automation Ignition’s web server software-related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the target system or cause service failures...

CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access...

CVE-2023-4492

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to...

CVE-2023-26151

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...

static-server path traversal vulnerability

statics-server is a server used to collect information about the environment in which Joomla is installed. A path traversal vulnerability exists in statics-server, which stems from improperly cleaned input passed via the validPath function of server.js, making it susceptible to directory traversa...

The vulnerability of component xrdp_painter.c in the XRDP server allows a attacker to access protected information.

The vulnerability of the xrdppainter.c component in the XRDP server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

Exploit for NULL Pointer Dereference in Gpac

CVE-2023-4683-Test This repo holds an easy to use POC for CVE...

Progress Software WS_FTP Server Security Vulnerability

Progress Software WSFTP Server is an effective and highly manageable FTP server from Progress Software, USA. A security vulnerability exists in Progress Software WSFTP Server versions prior to 8.8.2. An attacker can use this vulnerability to enumerate files in the "WebServiceHost" directory listi...

Code injection

The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server...

WithSecure products Security breaches

WithSecure products is a series of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure Policy Manager 15, Policy Manager Proxy version 15, which originates from a vulnerability that allows execution of unauthenticated remote code via a web server...

Design/Logic Flaw

Mastodon is a free, open-source social network server based on ActivityPub. In versions on the 4.x branch prior to versions 4.0.10, 4.2.8, and 4.2.0-rc2, under certain conditions, attackers can abuse the translation feature to bypass the server-side HTML sanitization, allowing unescaped HTML to...

CVE-2022-47556

CVE-2022-47556 describes uncontrolled resource consumption in Ormazabal ekorRCI . A low-privileged attacker with network access can send continuous, legitimate web requests to a function that is not properly validated, causing a Denial of Service (DoS) on the device. The vulnerability affects eko...