UVI-2021-1002234 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.256 by commit...

Siemens SENTRON powermanager

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SENTRON powermanager Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated local attacker to...

CVE-2020-21656

XYHCMS v3.6 contains a stored cross-site scripting XSS vulnerability in the component xyhai.php?s=/Link/index...

Cross site scripting

XYHCMS v3.6 contains a stored cross-site scripting XSS vulnerability in the component xyhai.php?s=/Link/index...

CVE-2021-20333

Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.1...

Cross site request forgery (csrf)

A cross site request forgery CSRF vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password...

CVE-2020-20586

A cross site request forgery CSRF vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password...

CVE-2019-2389

CVE-2019-2389 affects MongoDB Server via incorrect scoping of kill operations in packaged SysV init scripts. The flaw lets users with write access to the PID file influence kills when the root user stops MongoDB, enabling denial-of-service conditions. Affected are MongoDB Server v4.0 prior to 4.0...

Faraday v3.6 - Collaborative Penetration Test and Vulnerability Management Platform

Here are the main new features and improvements in Faraday v3.6: WelcomeService Now A new way to send vulnerabilities is available! We integrated Faraday with Service Now, giving you more options to work with. Burp plugin was totally revamped We have been working hard to make several changes to...

Cross site scripting

OPT/NET BV NG-NetMS version v3.6-2 and earlier versions contains a Cross Site Scripting XSS vulnerability in /js/libs/jstree/demo/filebrowser/index.php page. The "id" and "operation" GET parameters can be used to inject arbitrary JavaScript which is returned in the page's response that can result...

A Managed Password Cracking Tool: GoCrack

FireEye’s Innovation and Custom Engineering ICE team released a tool called GoCrack that allows red teams to efficiently manage password cracking tasks across multiple GPU servers by providing an easy-to-use, web-based real-time UI to create, view, and manage tasks. Simply deploy a GoCrack server...

MeshCMS v3.6-staticexport2.jsp文件-远程代码执行漏洞

No description provided by source...

74cms v3.6 任意密码重置漏洞

No description provided by source...

74cms v3.6 申请友情链接 XSS漏洞

No description provided by source...

74cms v3.6 (20150817) 设计缺陷导致8处不同文件注入漏洞(gpc=off)

No description provided by source...

LDAP Account Manager Pro 3.6 Cross Site Scripting

Title: ====== LDAP Account Manager Pro v3.6 - Multiple Vulnerabilities Date: ===== 2012-03-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=458 VL-ID: ===== 458 Introduction: ============= LDAP Account Manager Pro is an extended version of LAM which focuses on...

Mozilla Firefox v3.6 URL Spoofing Vulnerability

No description provided by source. Tested on: Windows XP SP2/3 Code : You can trick a user into accessing a malicious website by using the following exploit The first link would be the malicious one. html body div id="mydiv" onmouseover="document.location='http://www.youtube.com/watch?v=oHg5S...

Mozilla Firefox v3.6 URL Spoofing Vulnerability

Exploit for unknown platform in category local exploits =============================================== Mozilla Firefox v3.6 URL Spoofing Vulnerability =============================================== Tested on: Windows XP SP2/3 Code : You can trick a user into accessing a malicious website by usi...

PAD Site Scripts 3.6 - Arbitrary Database Backup

--------------------------------------------------------------- --------------------------------------------------------------- PAD Site Scripts v3.6 Bypass DB Backup Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

PAD Site Scripts 3.6 - Arbitrary Database Backup

PAD Site Scripts 3.6 - Arbitrary Database Backup --------------------------------------------------------------- --------------------------------------------------------------- PAD Site Scripts v3.6 Bypass DB Backup Vulnerability ---------------------------------------------------------------...