519 matches found
NTLM Authentication Detected
The scanner detected the presence of a web page protected by a 'NTLM' authentication. No source data...
External Backend API Detected
Modern web applications often rely on a third party service as a backend when they are built with a micro-service architecture or using a third party SaaS service. In such deployments, it is recommended to perform additional scans directly against these backend hosts with the consent and approval...
XML Injection
An XML Injection is when an attacker tries to inject an XML documents to the application. If the XML parser fails to contextually validate data, then the test will yield a positive result. This attack may lead to the disclosure of confidential data, denial of service, port scanning from the...
SAP NetWeaver KW Reflected Cross-Site Scripting
A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data. No source data...
Atlassian SAML Single Sign-On Bypass
When the resolution Reichert Network Solutions GmbH plugin is used for SSO authentication on Atlassian Jira Server, Atlassian Jira Data Center, Atlassian Confluence Server, Atlassian Confluence Data Center, Atlassian Bitbucket Server, Atlassian Bitbucket Data center, Atlassian Bamboo 5 and...
Metabase GeoJSON Remote Code Execution
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential RCE including environment variables because URLs were not validated prior to being loaded. No...
Atlassian Confluence 8.4.x < 8.4.4 Improper Authorization
According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.x prior 7.19.6, 8.x prior to 8.3.4, 8.4.x prior to 8.4.4, 8.5.x prior to 8.5.3 or 8.6.x prior to 8.6.1. It is, therefore, affected by an improper authorization vulnerability. Note...
Atlassian Confluence 8.6.x < 8.6.1 Improper Authorization
According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.x prior 7.19.6, 8.x prior to 8.3.4, 8.4.x prior to 8.4.4, 8.5.x prior to 8.5.3 or 8.6.x prior to 8.6.1. It is, therefore, affected by an improper authorization vulnerability. Note...
WordPress WPEngine Configuration Detected
WPengine is a popular provider of managed WordPress hosting. Configurations may be located in a file named config.json inside the wpeprivate hidden directory. This configuration file may expose sensitive information such as database credentials and WPEngine account information which may be used b...
Adobe ColdFusion Improper Access Control
Adobe ColdFusion prior to versions 2018 Update 19, 2021 Update 9 and 2023 Update 3, suffer from an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. No source data...
Strapi Cognito Provider Authentication Bypass
Strapi is a popular open-source headless CMS built with Node.js. Strapi versions after 3.2.0 and before 4.6.0 suffer from a lack of validation of JWT tokens sent through the AWS Cognito authentication provider during the OAuth flow. By forging a custom JWT token with any signature, a remote and...
Adobe ColdFusion Remote Code Execution
Adobe ColdFusion prior to versions 2018 Update 19, 2021 Update 9 or 2023 Update 3, suffer from an Insecure Deserialization vulnerability through the argumentCollection parameter on /CFIDE/adminapi/accessmanager.cfc endpoint. By leveraging this vulnerability, a remote unauthenticated attacker coul...
Apache Tomcat 11.0.0-M1 < 11.0.0-M11 Open Redirect
The version of Apache Tomcat installed on the remote host is 8.5.0 to 8.5.92, 9.0.0-M1 to 9.0.79, 10.1.0-M1 to 10.1.12 or 11.0.0-M1 to 11.0.0-M10. If the ROOT default web application is configured to use FORM authentication then it is possible that a specially crafted URL could be used to trigger...
FreeRDP 缓冲区错误漏洞
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from insufficient data in the pSrc variable in the generalYUV444ToRGB8uP3AC4RBGRX function, which can be exploited by an attacker to...
The Last Hour Before Yevgeny Prigozhin's Plane Crash
Russia tightly controls its information space—making it hard to get accurate information out of the country. But open source data provides some clues about the crash...
MediaWiki < 1.17.2 Deleted Text Exposure
According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.17.2 or 1.18.x prior to 1.18.1. It is, therefore, affected by a flaw which may allow remote attackers to view deleted text via the prop=revisions parameter. Note that the scanner...
MediaWiki 1.18.x < 1.18.1 Deleted Text Exposure
According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.17.2 or 1.18.x prior to 1.18.1. It is, therefore, affected by a flaw which may allow remote attackers to view deleted text via the prop=revisions parameter. Note that the scanner...
Atlassian Confluence 7.14.0 < 7.19.8 < Remote Code Execution
According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.0 prior to 7.13.20, 6.1.0 prior to 7.19.8 or 6.1.0 prior to 8.2.0. It is, therefore, affected by a Remote Code Execution flaw which permits remote attackers to execute arbitary co...
Atlassian Confluence < 7.13.17 Read Only User Attachment Uploads Service
According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.13.17, 7.14.0 prior to 7.19.9 or 7.20 prior to 8.2.2. It is, therefore, affected by a flaw which permits remote attackers with read only permissions to a page to upload...