Lucene search
+L

4540 matches found

Kitploit
Kitploit
added 2021/12/05 11:30 a.m.37 views

AirStrike - Automatically Grab And Crack WPA-2 Handshakes With Distributed Client-Server Architecture

Tool that automates cracking of WPA-2 Wi-Fi credentials using client-server architecture Requirements Airstrike uses Hashcat Brain Architecture, aircrack-ng suite, entr utility and some helper scripts. You can use install.sh script to download all dependencies if you're on system which has an...

7.4AI score
SaveExploits0References1
Fedora
Fedora
added 2021/12/05 1:39 a.m.35 views

[SECURITY] Fedora 34 Update: dmtx-utils-0.7.6-9.fc34.1

libdmtx is open source software for reading and writing Data Matrix 2D bar-codes on Linux, Unix, OS X, Windows, and mobile devices. At its core libdmtx is a shared library, allowing C/C++ programs to use its capabilities without restrictions or overhead. The included utility programs, dmtxread an...

6.9AI score0.0071EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2021/12/05 12:0 a.m.15 views

Fedora: Security Advisory for dmtx-utils (FEDORA-2021-b58af96f33)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.5AI score0.0071EPSS
SaveExploits1References2
Snyk
Snyk
added 2021/11/30 12:44 p.m.7 views

Prototype Pollution

Overview @fabiocaccamo/utils.js is a JavaScript utils for lazy devs. Affected versions of this package are vulnerable to Prototype Pollution via the set and method, which merges the path and value parameters based on the key:value. PoC const utils = require"@fabiocaccamo/utils.js"; const obj = ;...

9.8CVSS8.4AI score0.00843EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.8 views

The vulnerability of the Java library for determining, analyzing, checking, and migrating cron elements in cron-utils, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Java library for determining, analyzing, checking, and migrating cron elements in cron-utils is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.2AI score0.04047EPSS
SaveExploits1References7Affected Software1
Microsoft CVE
Microsoft CVE
added 2021/11/19 8:0 a.m.4 views

In the Linux kernel through 5.15.2 hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.

...

6.7CVSS7AI score0.00513EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2021/11/18 3:3 p.m.34 views

CVE-2021-41269

A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...

10CVSS9.2AI score0.04047EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/11/18 12:0 a.m.4 views

openSUSE: Security Advisory for drbd-utils (openSUSE-SU-2021:3665-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
CNVD
CNVD
added 2021/11/17 12:0 a.m.25 views

Cron Utils Code Injection Vulnerability

Cron Utils is Jmrozanec individual developers of a Java code base for validating , parsing , migrating Cron expressions . A code injection vulnerability exists in Cron Utils that allows an attacker to inject arbitrary Java EL expressions to execute remote code...

10CVSS7.4AI score0.04047EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2021/11/17 12:0 a.m.15 views

openSUSE 15 Security Update : drbd-utils (openSUSE-SU-2021:3665-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:3665-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...

5.6AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/11/17 12:0 a.m.10 views

SUSE SLES15 Security Update : drbd-utils (SUSE-SU-2021:3665-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:3665-1 advisory. - make all binaries position independent basc1185132. - Upgrade to 9.0.18 bsc1189363 build: remove rpm related targets drbdsetup,v84: fix minor compile...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2021/11/16 9:14 a.m.4 views

OPENSUSE-SU-2021:3665-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries position independent basc1185132. - Upgrade to 9.0.18 bsc1189363 build: remove rpm related targets drbdsetup,v84: fix minor compile warnings systemd: resource specific activation systemd: drbd-reactor promoter templates do...

7.1AI score
SaveExploits0References4
OSV
OSV
added 2021/11/16 9:14 a.m.5 views

SUSE-SU-2021:3665-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries position independent basc1185132. - Upgrade to 9.0.18 bsc1189363 build: remove rpm related targets drbdsetup,v84: fix minor compile warnings systemd: resource specific activation systemd: drbd-reactor promoter templates do...

7.1AI score
SaveExploits0References4
Veracode
Veracode
added 2021/11/16 3:47 a.m.20 views

Template Injection

cron-utils is vulnerable to template injection. An attacker can inject arbitrary java EL expressions through the parse function in CronParser.java, leading to remote code execution...

10CVSS6.2AI score0.04047EPSS
SaveExploits1References5Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2021/11/16 12:0 a.m.108 views

Security update for drbd-utils (low)

openSUSE Security Update: Security update for drbd-utils Announcement ID: openSUSE-SU-2021:3665-1 Rating: low References: 1029961 1185132 1189363 SLE-21057 Affected Products: openSUSE Leap 15.3 An update that contains security fixes and contains one feature can now be installed. Description: This...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/11/15 11:27 p.m.29 views

Critical vulnerability found in cron-utils

Impact A Template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. Versions up to 9.1.2 are susceptible to this vulnerability. Please note, that only projects using the @Cron...

10CVSS2.7AI score0.04047EPSS
SaveExploits1References6Affected Software1
vulnersOsv
vulnersOsv
added 2021/11/15 11:27 p.m.4 views

ca.ibodrov.concord:testcontainers-concord (>=0.0.2 <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21 <=0.0.41) +359 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (>=2.0.0 <=9.1.5)

com.cronutils:cron-utils MAVEN version =2.0.0, =0.0.2, =0.0.21, =0.0.1, =1.0.30 - com.baomidou:jobs-spring-boot-starter =1.0.3 - com.cronutils:cron-utils-spring =1.0.1 - com.elastisys:autoscaler.core =5.2.2 - com.elastisys:autoscaler.distro.standard =5.2.2 -...

10CVSS6.7AI score0.04047EPSS
SaveExploits1
NVD
NVD
added 2021/11/15 9:15 p.m.37 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS0.04047EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/11/15 9:15 p.m.4 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS7AI score0.04047EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/11/15 9:15 p.m.23 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

9.8CVSS7.8AI score
SaveExploits0References4
Rows per page
Query Builder