Lucene search
+L

6803 matches found

Prion
Prion
added 2021/11/04 4:15 p.m.29 views

Authentication flaw

A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this...

10CVSS9.4AI score0.02417EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/04 3:35 p.m.34 views

CVE-2021-40119 Cisco Policy Suite Static SSH Keys Vulnerability

A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this...

9.8CVSS9.7AI score0.02417EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/11/04 12:00 a.m.18 views

PT-2021-4948

Name of the Vulnerable Software and Affected Versions Cisco Policy Suite affected versions not specified Description A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user...

10CVSS7.6AI score0.02417EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2021/11/03 4:00 p.m.8 views

CVE-2021-40119

A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this...

10CVSS7.6AI score0.02417EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/03 12:00 a.m.11 views

Cisco Policy Suite 信任管理问题漏洞

Cisco Policy Suite is a suite from Cisco that provides cloud-native policy, billing, and user data management capabilities. A security vulnerability exists in Cisco Policy Suite that results from the reuse of static SSH keys across installations in the Cisco Policy Suite key-based SSH...

10CVSS8.7AI score0.02417EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2021/10/19 6:28 p.m.334 views

Exploit for Origin Validation Error in Solarwinds Dameware_Mini_Remote_Control

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ open...

10CVSS9.2AI score0.05138EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2021/10/18 3:08 p.m.23 views

CVE-2021-22964

A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...

8.8CVSS3.3AI score0.01021EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2021/10/18 3:05 p.m.38 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.1CVSS4.1AI score0.01169EPSS
SaveExploits1References3
Malwarebytes
Malwarebytes
added 2021/10/15 10:49 a.m.32 views

What is an .exe file? Is it the same as an executable?

You may often see .exe files but you may not know what they are. Is it the same as an executable file? The short answer is no. So whats the difference? What is an .exe file? Exe in this context is a file extension denoting an executable file for Microsoft Windows. Windows file names have two part...

SaveExploits0
NVD
NVD
added 2021/10/14 3:15 p.m.36 views

CVE-2021-22964

A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...

8.8CVSS0.01021EPSS
SaveExploits1References1
NVD
NVD
added 2021/10/14 3:15 p.m.30 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.1CVSS0.01169EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/14 3:15 p.m.20 views

CVE-2021-22964

A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...

8.8CVSS8.4AI score
SaveExploits0References1
OSV
OSV
added 2021/10/14 3:15 p.m.18 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.1CVSS6.8AI score
SaveExploits0References1
Prion
Prion
added 2021/10/14 3:15 p.m.18 views

Design/Logic Flaw

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

5.8CVSS6.3AI score0.01169EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/14 3:15 p.m.6 views

CVE-2021-22964

A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...

8.8CVSS7.3AI score0.01021EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/10/14 3:15 p.m.7 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.1CVSS6.8AI score0.01169EPSS
SaveExploits1References2
Prion
Prion
added 2021/10/14 3:15 p.m.25 views

Design/Logic Flaw

A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...

6.8CVSS8.4AI score0.01021EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/10/14 2:50 p.m.126 views

CVE-2021-22963

CVE-2021-22963 describes a redirect vulnerability in the fastify-static module (versions before 4.2.4). When applications enable redirect: true, an attacker can trick users into visiting arbitrary sites by using a double slash followed by a domain (e.g., //domain). The issue affects fastify-stati...

6.1CVSS6AI score0.01169EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/14 2:50 p.m.42 views

CVE-2021-22963

A redirect vulnerability in the fastify-static module version 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: tru...

6.3AI score0.01169EPSS
SaveExploits1References1
CVE
CVE
added 2021/10/14 2:50 p.m.123 views

CVE-2021-22964

CVE-2021-22964 describes a redirect vulnerability in the fastify-static module (versions >=4.2.4 and

8.8CVSS8.3AI score0.01021EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder