Exploit for Improper Authentication in Apache Shiro

Apache Shiro 认证绕过分析（CVE-2020-17523） https://www.anquanke.com/post/id/230935 0x01 漏洞描述 Apache Shiro是一个强大且易用的Java安全框架，执行身份验证、授权、密码和会话管理。使用Shiro的易于理解的API，您可以快速、轻松地获得任何应用程序，从最小的移动应用程序到最大的网络和企业应用程序。 当它和 Spring 结合使用时，在一定权限匹配规则下，攻击者可通过构造特殊的 HTTP 请求包完成身份认证绕过。 影响范围：Apache Shiro 1.7.1 0x02 漏洞环境搭建 shiro 1.7...

UBUNTU-CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

CVE-2021-2029

creationtimestamp| type| source ---|---|--- 2021-01-20 18:27:20+00:00| seen| https://t.me/cibsecurity/22341...

Email-Worm.Win32.Agent.gi Remote Stack Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/74e65773735f977185f6a09f1472ea46.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Agent.gi Vulnerability: Remote Stack Buffer Overflow - UDP Datagram Description:...

CVE-2020-6720

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...

CVE-2020-6673

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...

PT-2021-11820

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.1.0 Description: The issue arises from a 4-byte buffer over-read in the SGIRleDecode function when decoding crafted SGI RLE image files. This occurs due to the mishandling of offsets and length tables...

CVE-2020-24025

creationtimestamp| type| source ---|---|--- 2021-01-11 22:46:11+00:00| seen| https://t.me/cibsecurity/21911...

CVE-2020-24900

creationtimestamp| type| source ---|---|--- 2021-01-07 16:40:41+00:00| seen| https://t.me/cibsecurity/21744...

CVE-2020-24902

creationtimestamp| type| source ---|---|--- 2021-01-07 16:40:28+00:00| seen| https://t.me/cibsecurity/21732...

Trojan.Win32.Bayrob.cgau Insecure Permissions / Privilege Escalation

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/099a169f81089dc493ea300ef0309f70.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Bayrob.cgau Vulnerability: Insecure Permissions EoP SYSTEM Description: Change permissio...

CVE-2020-24673

creationtimestamp| type| source ---|---|--- 2020-12-23 00:54:09+00:00| seen| https://t.me/cibsecurity/21205...

CVE-2019-14483

creationtimestamp| type| source ---|---|--- 2020-12-16 18:41:40+00:00| seen| https://t.me/cibsecurity/20924...

CVE-2020-25183

creationtimestamp| type| source ---|---|--- 2020-12-14 22:39:19+00:00| seen| https://t.me/cibsecurity/20763 2025-05-22 19:45:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17342...

CVE-2020-25107

creationtimestamp| type| source ---|---|--- 2020-12-12 02:36:13+00:00| seen| https://t.me/cibsecurity/20664 2020-12-12 02:39:11+00:00| seen| https://t.me/cibsecurity/20684 2020-12-12 03:25:37+00:00| seen| https://t.me/cibsecurity/20704 2020-12-12 04:07:26+00:00| seen| https://t.me/cibsecurity/207...

CVE-2020-24447

creationtimestamp| type| source ---|---|--- 2020-12-11 07:35:08+00:00| seen| https://t.me/cibsecurity/19771 2020-12-11 07:38:09+00:00| seen| https://t.me/cibsecurity/19791 2020-12-11 08:25:21+00:00| seen| https://t.me/cibsecurity/19811 2020-12-11 09:25:19+00:00| seen| https://t.me/cibsecurity/198...

CVE-2020-17089

creationtimestamp| type| source ---|---|--- 2020-12-10 02:32:57+00:00| seen| https://t.me/cibsecurity/18396 2020-12-10 02:35:58+00:00| seen| https://t.me/cibsecurity/18416 2020-12-10 02:38:51+00:00| seen| https://t.me/cibsecurity/18428 2020-12-10 03:25:13+00:00| seen| https://t.me/cibsecurity/184...

CVE-2020-16961

creationtimestamp| type| source ---|---|--- 2020-12-10 02:32:56+00:00| seen| https://t.me/cibsecurity/18394 2020-12-10 02:35:57+00:00| seen| https://t.me/cibsecurity/18414...

VulnCheck KEV: CVE-2021-1732

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation...

CVE-2020-25675

creationtimestamp| type| source ---|---|--- 2020-12-09 00:36:36+00:00| seen| https://t.me/cibsecurity/17309 2020-12-09 07:34:50+00:00| seen| https://t.me/cibsecurity/17451...