cve-2021-1675

〖EXP〗Ladon打印机漏洞提权CVE-2021-1675复现 http://k8gege.org/p/CVE-2021-1675.html 基本情况 6月9日，微软发布6月安全更新补丁，修复了50个安全漏洞，其中包括一个Windows Print Spooler权限提升漏洞，漏洞CVE编号：CVE-2021-1675。未经身份验证的远程攻击者可利用该漏洞以SYSTEM权限在域控制器上执行任意代码，从而获得整个域的控制权。建议受影响用户及时更新漏洞补丁进行防护，做好资产自查以及预防工作，以免遭受黑客攻击。 漏洞描述 Print...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

CyberPower < v2.8.3 - SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to . id: CVE-2024-32736 info: name: CyberPower PDNU" tags: cve,cve2024,cyberpower,sqli,vkev,vuln http: - method: GET path: - "BaseURL/api/v1/confup?mode=&uid=1'%20UNION%20select%201,2,3,4,sqliteversion;--"...

CVE-2020-13259

CVE-2020-13259 PoC der vollständigen Account-Übernahme auf RAD SecFlow-1v Eine Sicherheitslücke in der webbasierten Verwaltungsoberfläche von RAD SecFlow-1v könnte es einem nicht authentifizierten, entfernten Angreifer ermöglichen, einen Cross-Site-Request-Forgery-Angriff CSRF auf ein betroffenes...

CVE-2022-41272

CVE-2022-41272 In questo repository, scriveremo brevemente informazioni sulla vulnerabilità CVE-2022-41272. La vulnerabilità esiste sul servizio SAP P4 che viene eseguito sulla porta 5NN04. Dove NN è un numero di istanza, che può essere da 00 a 99. Ci sono funzioni di chiamata remota che un...

Yamcs has DOM XSS in Extension Routing

Attack type: Unauthenticated remote Impact: Execution of arbitrary JavaScript in a user’s browser. Affected components: extension.matcher.ts:12, extension.component.ts:40, app.component.ts:134. Yamcs is vulnerable to cross-site scripting in the /ext URL endpoint. By inputting specially crafted co...

CVE-2026-2699

CVE-2026-2699 — تجاوز المصادقة في Progress ShareFile Storage Zones Controller تجاوز مصادقة حرج CVSS 9.8 في Progress ShareFile Storage Zones Controller SZC المُدار من قبل العميل ≤ 5.12.3. 📋 نظرة عامة CVE-2026-2699 هو ثغرة تجاوز مصادقة شديدة الخطورة تؤثر على الواجهة الإلكترونية لـ Progress ShareFil...

CVE-2018-5951

CVE-2018-5951: Vulnerabilità di Denial of Service in MikroTik RouterOS Riepilogo della vulnerabilità Una vulnerabilità in MikroTik RouterOS consente a un attaccante remoto non autenticato di forzare il riavvio di un router. Ciò viene effettuato inviando un pacchetto della dimensione di 1 byte...

CVE-2021-44228

CVE-2021-44228 Il 9 dicembre 2021 il mondo è venuto a conoscenza di una nuova falla di sicurezza riguardante Log4J. Il punteggio CVSSv3 Common Vulnerability Scoring System della vulnerabilità, è stato valutato pari a 10, rendendola così di livello critico...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

EUVD-2026-67085

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Vulnerabilità DoS di soppressione RADIUS in Cisco ISE 🌐 ⚠️ Panoramica 🚨 Vulnerabilità di denial-of-service DoS ad alta gravità in Cisco Identity Services Engine ISE! 💥 Un attaccante remoto non autenticato può bloccare il dispositivo con pacchetti RADIUS appositamente predisposti...

CVE-2026-68863

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

EUVD-2026-66665

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-68863

Dell PowerProtect One versions 20.1.0.0 and below contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote network access can exploit it with low complexity and no user interaction, resulting in Denial of Service . The CVSS 3.1 score is 7.5 (HIGH) , reflecting ...

CVE-2026-68863

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

EUVD-2026-66349

Any remote client can crash a debugging/non-release build type NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options 17 when UDP payload size is 512. By continuously crashing the serve childs, the remote client can severely hamper or, when...

CVE-2026-19401

Any remote client can crash a debugging/non-release build type NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options 17 when UDP payload size is 512. By continuously crashing the serve childs, the remote client can severely hamper or, when...