CVE-2020-4901

The CVE-2020-4901 issue affects IBM Robotic Process Automation with Automation Anywhere 11.0. The root cause is an information-disclosure vulnerability enabling an attacker on the network to obtain sensitive data (via username enumeration) and, in some cases, trigger a denial of service. The avai...

CVE-2020-4901

IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992...

Security Bulletin: Information disclosure vulnerability may affect IBM Robotic Process Automation Anywher - CVE-2020-4901

Summary IBM Robotic Process Automation Anywhere is vulnerable to an information disclosure attack Vulnerability Details CVEID: CVE-2020-4901 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow an attacker on the network to obtain sensitive information or cause a denia...

CVE-2020-4901

IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992...

IBM Robotic Process Automation with Automation Anywhere 安全漏洞

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0, which can be exploited by an attacker to obtain sensitive information or cause ...

GitLab Community Edition (CE) 13.10.3 - User Enumeration Exploit

Exploit Title: GitLab Community Edition CE 13.10.3 - User Enumeration Exploit Author: @4D0niiS https://github.com/4D0niiS Vendor Homepage: https://gitlab.com/ Version: 13.10.3 Tested on: Kali Linux 2021.1 !/bin/bash Colors RED='\03338;5;196m' GREEN='\e38;5;47m' NC='\0330m' BOLD='\e1m'...

Issues with Storefront Authentication via iFrame on SharePoint - SSO & Username + Password do not work

Authentication works if you connect directly to Storefront but it fails when accessingStorefront via iFrame on Sharepoint, You might encounter these errors when Authenticating: SSO fails with error "Unable to log on with the account that you used to log on to the computer" Manual Username+Passwor...

CVE-2021-21544

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user...

Authentication flaw

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user...

CVE-2021-21544

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user...

Cacti 1.2.12 - (filter) SQL Injection / Remote Code Execution Exploit

Exploit Title: Cacti 1.2.12 - 'filter' SQL Injection / Remote Code Execution Exploit Author: Leonardo Paiva Vendor Homepage: https://www.cacti.net/ Software Link: https://www.cacti.net/downloads/cacti-1.2.12.tar.gz Version: 1.2.12 Tested on: Ubuntu 20.04 CVE : CVE-2020-14295 Credits: @M4yFly...

Exploit for Improper Authentication in Influxdata Influxdb

InfluxDB Exploit CVE-2019-20933 Exploit for InfluxDB CVE-2019...

safe FME Server 跨站脚本漏洞

safe FME Server is an application from safe Canada. A web data conversion application. A cross-site scripting vulnerability exists in safe FME Server that could allow a remote attacker to inject arbitrary web script or HTML code execution by modifying the username...

CVE-2021-28399

OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function...

CVE-2021-28399

Summary: CVE-2021-28399 affects OrangeHRM 4.7. An unauthenticated attacker can use the Forgot Password function to enumerate valid usernames and associated email addresses. The vulnerability is classified as an information disclosure issue with network access and low attack complexity, as describ...

SEO Panel 4.8.0 - (order_col) Blind SQL Injection Exploit (2)

Exploit Title: SEO Panel 4.8.0 - 'ordercol' Blind SQL Injection 2 Author: nu11secur1ty Testing and Debugging: nu11secur1ty Vendor: https://www.seopanel.org/ Link: https://www.seopanel.org/spdownload/4.8.0 CVE: CVE-2021-28419 + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty CVE-2021-28419...

Orangehrm 安全漏洞

Orangehrm is a human resource management system HRM from Orangehrm, USA. The system supports personnel information management, leave management, attendance management and recruitment management. An information disclosure vulnerability exists in OrangeHRM version 4.7 that could allow an...

Unspecified Vulnerability in Wowza Streaming Engine

Wowza Media Systems Streaming Engine is a suite of streaming media server software from Wowza Media Systems, USA. A security vulnerability exists in Wowza Streaming Engine 4.8.5 and earlier versions. The vulnerability stems from a plaintext password stored in the conf/admin.password file. An...

CVE-2021-31545

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The pagerecentcontributors leaked the existence of certain deleted MediaWiki usernames, related to revdeleted...

ABUS Secvest FUAA50000 信息泄露漏洞

ABUS Secvest FUAA50000 is a wireless remote control from ABUS Germany. An information disclosure vulnerability exists in ABUS Secvest FUAA50000 version 3.01.17, which can be exploited by an attacker to obtain sensitive information, such as usernames and passwords, from the system...