3196 matches found
PT-2021-3879
Name of the Vulnerable Software and Affected Versions Linux versions prior to 2.6.19-rc1 are not specified, but versions since v2.6.19-rc1 are affected. Description The issue is related to a heap out-of-bounds write in the netfilter subsystem of the Linux kernel, specifically in the net/netfilter...
CVE-2021-23371
This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...
PT-2021-11025
Name of the Vulnerable Software and Affected Versions: INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 Description: The issue allows an attacker to obtain sensitive information through the "/cgi-bin/cgiServer.exx" API endpoint. Recommendations: For INTELBRAS TELEFONE IP TIP200 version 60.61.75.2...
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...
PT-2021-18627 · Unknown · Liquidfiles
Name of the Vulnerable Software and Affected Versions: LiquidFiles versions 3.4.15 Description: The issue is related to stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML/JavaScript content,...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a logic issue...
Cross-site Scripting (XSS)
github.com/microcosm-cc/bluemonday is vulnerable to cross-site scripting XSS. An attacker is able to bypass the validation of the script string to inject and execute arbitrary Javascript in a user's browser...
PT-2021-16542 · Unknown · Slow Motion Editor
Name of the Vulnerable Software and Affected Versions: Slow Motion Editor versions prior to 3.5.18.5 Description: The issue allows local attackers to perform unauthorized actions without permission by hijacking the PendingIntent in the Slow Motion Editor. This is due to the use of an unsafe...
Online Faculty Clearance System 1.0 Shell Upload
Exploit Title: Online Faculty Clearance System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/onlineclearance0.zip Version: 1.0 Tested on Windows 10 @Vulnerable Source Code...
Regular Expression Denial Of Service (ReDoS)
html-parse-stringify2 is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious tag via the parse function...
Buffer Overflow
zint:sid is vulnerable to buffer overflow. eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...
CVE-2021-27928
Disclaimer: This data contains information about vulnerable...
Regular Expression Denial Of Service (ReDoS)
ssri is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string when the Integrity metadata is using the strict option. This results in a long processing time which would lead to the application crash...
Use of a Broken or Risky Cryptographic Algorithm
Overview elliptic before version 6.5.4 is vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the derive function actually exists on the secp256k1 curve. This results in the potential for the...
PT-2021-14381 · Synapse +1 · Synapse +1
Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.25.0 Description: A malicious homeserver could redirect requests to their .well-known file to a large file, leading to a denial of service attack where homeservers consume significantly more resources when requesti...
Regular Expression Denial Of Service (ReDoS)
@progfay/scrapbox-parser is vulnerable to Regular Expression Denial Of Service. An insecure regex allows an attacker to crash the application via a malicious URL...
Prototype Pollution
Overview Overview Affected versions of immer are vulnerable to Prototype Pollution. Proof of exploit const applyPatches, enablePatches = require"immer"; enablePatches; let obj = ; console.log"Before : " + obj.polluted; applyPatches, op: 'add', path: "proto", "polluted" , value: "yes" ; //...
exploitdb
This repository is an official collection of exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. It is a repository for exploits and Proof-of-Concepts rather than advisories, making it a valuable resource for those who need...
Information Disclosure
com.squareup, connect is vulnerable to information disclosure. The vulnerability exists due to the shared system temporary directory, allowing contents of the file downloaded by downloadFileFromResponse to be visible to all other users on the local system...