1735 matches found
ThinVNC 安全漏洞
ThinVNC is a remote desktop implementation based on HTML5 and AJAX. A security vulnerability exists in ThinVNC version 1.0b1, which stems from the application's lack of authentication. An unauthenticated attacker can bypass the authentication process by using "http://thin-vnc:8080/cmd?cmd=connect...
Denial Of Service (DoS)
dcraw:sid is vulnerable to denial of service.An integer overflow is possible when the victim runs dcraw with a maliciously crafted X3F input image, allowing arbitrary code to be executed in the victim's system...
Use After Free
firefox-esr:sid is vulnerable to Use-after-free. The vulnerability exist in VR Process destruction which allows an attacker to cause an application crash...
Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022
On March 29, 2022, the following critical vulnerability in the Spring Cloud Function Framework affecting releases 3.1.6, 3.2.2, and older unsupported releases was disclosed: CVE-2022-22963: Remote code execution in Spring Cloud Function by malicious Spring Expression For a description of this...
Epagneul - Graph Visualization For Windows Event Logs
Epagneul is a tool to visualize and investigatewindows event logs. Deployment Requires docker and docker-compose to be installed. Installing make Offline deployment On a machine connected to internet, build an offline release: make release This will create a release folder containing ready to go...
CVE-2021-45821
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user. As a result, a malicious user can extract sensitive data such as usernames and passwords and in some cases use this vulnerability in order...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
Xbtit SQL注入漏洞
Xbtit is an open source tracker software. version 3.1 of Xbtit is vulnerable to SQL injection, which stems from a missing filter escape for SQL statements in the sid parameter of the ajaxchat/getHistoryChatData.php file. An attacker could exploit this vulnerability to extract sensitive data such ...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
CVE-2020-25721
Samba AD DC is affected by CVE-2020-25721, where Kerberos acceptors could obtain a stable AD identifier (SID and samAccountName) in issued tickets. This concerns Samba used as an AD DC on Linux; the root issue is Samba not providing reliable SID information in Kerberos tickets. Exploitation conte...
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. An infinite loop vulnerability exists in gpac in the gflog function, which causes a Denial of Service...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. A null pointer dereference vulnerability exists in gpac in the gfnodegettag function, which causes a segmentation fault and application crash...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The trakboxsize function in GPAC allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The gfhinterfinalize function allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. A Null Pointer Dereference vulnerability exitgs in GPAC in MP4Box via strlenavx2, which causes a Denial of Service...