Atlassian SAML Single Sign-On Bypass

When the resolution Reichert Network Solutions GmbH plugin is used for SSO authentication on Atlassian Jira Server, Atlassian Jira Data Center, Atlassian Confluence Server, Atlassian Confluence Data Center, Atlassian Bitbucket Server, Atlassian Bitbucket Data center, Atlassian Bamboo 5 and...

Metabase GeoJSON Remote Code Execution

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential RCE including environment variables because URLs were not validated prior to being loaded. No...

Atlassian Confluence 8.6.x < 8.6.1 Improper Authorization

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.x prior 7.19.6, 8.x prior to 8.3.4, 8.4.x prior to 8.4.4, 8.5.x prior to 8.5.3 or 8.6.x prior to 8.6.1. It is, therefore, affected by an improper authorization vulnerability. Note...

Atlassian Confluence 8.4.x < 8.4.4 Improper Authorization

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.x prior 7.19.6, 8.x prior to 8.3.4, 8.4.x prior to 8.4.4, 8.5.x prior to 8.5.3 or 8.6.x prior to 8.6.1. It is, therefore, affected by an improper authorization vulnerability. Note...

WordPress WPEngine Configuration Detected

WPengine is a popular provider of managed WordPress hosting. Configurations may be located in a file named config.json inside the wpeprivate hidden directory. This configuration file may expose sensitive information such as database credentials and WPEngine account information which may be used b...

Adobe ColdFusion Improper Access Control

Adobe ColdFusion prior to versions 2018 Update 19, 2021 Update 9 and 2023 Update 3, suffer from an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. No source data...

Strapi Cognito Provider Authentication Bypass

Strapi is a popular open-source headless CMS built with Node.js. Strapi versions after 3.2.0 and before 4.6.0 suffer from a lack of validation of JWT tokens sent through the AWS Cognito authentication provider during the OAuth flow. By forging a custom JWT token with any signature, a remote and...

Adobe ColdFusion Remote Code Execution

Adobe ColdFusion prior to versions 2018 Update 19, 2021 Update 9 or 2023 Update 3, suffer from an Insecure Deserialization vulnerability through the argumentCollection parameter on /CFIDE/adminapi/accessmanager.cfc endpoint. By leveraging this vulnerability, a remote unauthenticated attacker coul...

Apache Tomcat 11.0.0-M1 < 11.0.0-M11 Open Redirect

The version of Apache Tomcat installed on the remote host is 8.5.0 to 8.5.92, 9.0.0-M1 to 9.0.79, 10.1.0-M1 to 10.1.12 or 11.0.0-M1 to 11.0.0-M10. If the ROOT default web application is configured to use FORM authentication then it is possible that a specially crafted URL could be used to trigger...

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from insufficient data in the pSrc variable in the generalYUV444ToRGB8uP3AC4RBGRX function, which can be exploited by an attacker to...

The Last Hour Before Yevgeny Prigozhin's Plane Crash

Russia tightly controls its information space—making it hard to get accurate information out of the country. But open source data provides some clues about the crash...

MediaWiki < 1.17.2 Deleted Text Exposure

According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.17.2 or 1.18.x prior to 1.18.1. It is, therefore, affected by a flaw which may allow remote attackers to view deleted text via the prop=revisions parameter. Note that the scanner...

MediaWiki 1.18.x < 1.18.1 Deleted Text Exposure

According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.17.2 or 1.18.x prior to 1.18.1. It is, therefore, affected by a flaw which may allow remote attackers to view deleted text via the prop=revisions parameter. Note that the scanner...

Atlassian Confluence 7.14.0 < 7.19.8 < Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.0 prior to 7.13.20, 6.1.0 prior to 7.19.8 or 6.1.0 prior to 8.2.0. It is, therefore, affected by a Remote Code Execution flaw which permits remote attackers to execute arbitary co...

Atlassian Confluence < 7.13.17 Read Only User Attachment Uploads Service

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.13.17, 7.14.0 prior to 7.19.9 or 7.20 prior to 8.2.2. It is, therefore, affected by a flaw which permits remote attackers with read only permissions to a page to upload...

Web Application Description Language (WADL) File Detected

Web Application Description Language WADL file has been detected on this url. No source data...

PHP Debug Bar Enabled

The web application on the remote server has a PHP debug bar which is accessible without protection. A remote attacker can exploit this to gain more knowledge about the host, allowing an attacker to conduct further attacks. No source data...

Roxy-WI < 6.1.1.0 Remote Code Execution

Roxy-WI is an open source Graphical User Interface GUI for managing HAProxy, Nginx, Apache and Keepalived servers. Roxy-WI versions before 6.1.1.0 suffer does not properly sanitize the ipbackend parameter on the /app/options.py endpoint, allowing a remote and unauthenticated attacker to achieve a...

HTML Comments Detected

HTML comments are often used by developers to include information related to the application inline, which are ignored by a clients browser during rendering. These comments may include sensitive information such as SQL queries, credentials or internal IP for example. No source data...

GeoServer SQL Injection

The GeoServer instance installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization through an OGC Common Query Language query. No source data...