286151 matches found
Cisco ASA OS Command Injection (CVE-2020-3167)
A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...
Atlassian Jira < 9.12.40 / 10.3.x < 10.3.26 / 11.3.x < 11.3.12 (JRASERVER-79546)
The version of Atlassian Jira Server running on the remote host is affected by a vulnerability as referenced in the JRASERVER-79546 advisory. - h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center,...
Atlassian Jira Service Management Data Center and Server < 5.12.40 / 10.3.x < 10.3.26 / 11.3.x < 11.3.12 (JSDSERVER-16809)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16809 advisory. - h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service...
PT-2026-106255
Name of the Vulnerable Software and Affected Versions Bitbucket Data Center versions 4.6.0 through 9.4.25, 10.2.7, and 10.5.0 Confluence Data Center versions 5.10.0 through 9.2.25 and 10.2.18 Crowd Data Center versions 2.11.0 through 6.3.6, 7.0.2, 7.1.6, and 7.2.3 Jira Software Data Center versio...
Rockwell Automation Allen-Bradley Stratix 5950 Improper Input Validation (CVE-2018-0231)
A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...
CVE-2017-0290-
CVE-2017-0290- Hello i,am Gihad Alkmaty froom Libya script CVE-2017-0290- specialist smash Windows DEFINDER windows/8.1/10/...
CVE-2023-43147
CVE-2023-43147 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/limo-booking-software Version: 1.0 Tested on: Windows 10 Pro Impact: Add an attacker user with admin privileges CVE: Cross Site Request Forgery vulnerability in...
CVE-2023-40868
CVE-2023-40868 Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. The vulnerability is a Cross-Site Request Forgery CSRF vulnerability in the mooSocial MooSocial Softwa...
CVE-2023-40869
CVE-2023-40869 Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions XSS STORE via CSRF. Paths Affected...
CVE-2021-3438
CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege...
privacytools.io
Encryption Against Global Mass Surveillance. Contributing This project is archived. See our Welcome to Privacy Guides post for more information. Our project has now moved on to Privacy Guides. It's important for a website on privacy to be up-to-date. Keep an eye on software updates of the...
Open Automation Software OAS Platform V16.00.0121 - Missing Authentication
An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...
FAUST iServer 9.0.018.018.4 - Local File Inclusion
FAUST iServer before 9.0.019.019.7 is susceptible to local file inclusion because for each URL request it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal. id: CVE-2021-34805 info: name: FAUST iServer 9.0.018.018.4 - Local File Inclusio...
SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution
A pre-authentication remote code execution vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14. The issue arises from the unsafe use of the eval function within the Perl CGI component ciwweb.pl, where attacker-supplied input inside hidRandomACARAT is directly...
binary-cartography
Binary Cartography Technical webinars on reverse engineering, malware analysis, and software protection. This repository hosts materials for Binary Cartography , Tim's independent webinar series on binary security. The focus is practical reverse engineering, malware analysis, and software...
CVE-2025-66838
CVE-2025-66838 Lack of Rate Limiting - File Upload Description An attacker can rapidly upload a large volume of files to cause denial of service CVSS Score: 6.5 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan Abu-Nadi...
CVE-2026-14459-14460-pardus-software
Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...
CVE-2017-3248
CVE-2017-3248...
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat...