Lucene search
+L

1342 matches found

GithubExploit
GithubExploit
•added 2021/12/27 5:06 p.m.•335 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228Apache Log4j Remote Code Execution) all log...

10CVSS9.6AI score0.99999EPSS
SaveExploits364
Imperva Blog
Imperva Blog
•added 2021/12/17 6:44 a.m.•110 views

5 Things We’ve Learned About CVE-2021-44228

Over the last week, Imperva Threat Research observed interesting data points related to CVE-2021-44228. Despite new variants being discovered and patched by our team, we wanted to share five interesting things that we’ve learned from analyzing a subset of our overall global network traffic. Attac...

9.3CVSS0.4AI score0.99999EPSS
SaveExploits364
GithubExploit
GithubExploit
•added 2021/12/16 8:02 p.m.•351 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228Apache Log4j Remote Code Execution) all log...

10CVSS9.6AI score0.99999EPSS
SaveExploits364
Imperva Blog
Imperva Blog
•added 2021/12/16 7:08 p.m.•24 views

Ransom DDoS Enters its Fourth Wave

Extortionists target industries with most to lose from an outage Cybercriminals continue to target organizations threatening Denial of Service DDoS attacks in exchange for a ransom payment, traditionally demanded in bitcoin BTC. And it seems that no matter how many times these ransom threat cycle...

0.3AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2021/12/16 8:46 a.m.•427 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 Apache Log4j Remote Code Execution) all lo...

10CVSS9.6AI score0.99999EPSS
SaveExploits364
Imperva Blog
Imperva Blog
•added 2021/12/14 10:55 p.m.•140 views

Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions

Since it was disclosed on Friday, December 11, I have spoken with many customers about CVE-2021-44228 and the ways Imperva is working to ensure that they are protected. Countless others have contacted us with questions about ways to mitigate the impact from the Log4j vulnerability. In the spirit ...

9.3CVSS1.3AI score0.99999EPSS
SaveExploits364
GithubExploit
GithubExploit
•added 2021/12/13 11:34 a.m.•25 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228: Log4j / Log4Shell Security Research Summary...

10CVSS7.1AI score0.99999EPSS
SaveExploits366
GithubExploit
GithubExploit
•added 2021/12/11 1:28 p.m.•384 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Join Community Telegram CVE-2021-4...

10CVSS9.5AI score0.99999EPSS
SaveExploits364
Akamai Blog
Akamai Blog
•added 2021/12/11 11:00 a.m.•12 views

CVE-2021-44228 - Patching is Recommended for Evolving Zero Day Vulnerability in Apache Log4j that allows remote code execution (RCE)

Akamai has been monitoring the rapidly evolving developments of CVE-2021-44228. We have been working closely with our customers and internal application teams to mitigate the risks posed by the threat of unauthorized remote code execution. This includes deploying an update to our existing Apache...

10CVSS9.5AI score0.99999EPSS
SaveExploits364
Akamai Blog
Akamai Blog
•added 2021/12/11 11:00 a.m.•165 views

CVE-2021-44228 - Patching is Recommended for Evolving Zero Day Vulnerability in Apache Log4j that allows remote code execution (RCE)

Akamai has been monitoring the rapidly evolving developments of CVE-2021-44228. We have been working closely with our customers and internal application teams to mitigate the risks posed by the threat of unauthorized remote code execution. This includes deploying an update to our existing Apache...

10CVSS4.7AI score0.99999EPSS
SaveExploits364
GithubExploit
GithubExploit
•added 2021/12/10 10:35 p.m.•773 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

🤝 Show your support - give a ⭐️ if you liked the content | SHARE...

10CVSS9.6AI score0.99999EPSS
SaveExploits369
Hacker One
Hacker One
•added 2021/12/08 6:10 p.m.•24 views

Expedia Group Bug Bounty: Reflected XSS Via origCity Parameter (UPPER Case + WAF Protection Bypass)

Vulnerability description not provided...

7.1AI score
SaveExploits0
OSV
OSV
•added 2021/11/17 8:15 p.m.•23 views

CVE-2021-41277

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...

7.5CVSS6.3AI score
SaveExploits0References3
NVD
NVD
•added 2021/11/17 8:15 p.m.•18 views

CVE-2021-41277

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...

10CVSS0.97178EPSS
SaveExploits5References3
Prion
Prion
•added 2021/11/17 8:15 p.m.•21 views

Design/Logic Flaw

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...

5CVSS7.1AI score0.97178EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
•added 2021/11/17 8:05 p.m.•43 views

CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...

10CVSS9.2AI score0.97178EPSS
SaveExploits5References2
Vulnrichment
Vulnrichment
•added 2021/11/17 8:05 p.m.•19 views

CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...

10CVSS6.8AI score0.97178EPSS
SaveExploits5References2
CVE
CVE
•added 2021/11/17 8:05 p.m.•325 views

CVE-2021-41277

Metabase GeoJSON API Local File Inclusion vulnerability (CVE-2021-41277) affects Metabase prior to version 0.40.5/1.40.5, via the custom GeoJSON map feature where URLs were not validated before loading, enabling local file access (including environment variables). Impact described as local file i...

10CVSS7.3AI score0.97178EPSS
SaveIn wildExploits5References3Affected Software1
Imperva Blog
Imperva Blog
•added 2021/11/16 2:18 p.m.•22 views

Protecting today’s web applications requires more than a firewall

The way organizations build web applications has changed dramatically over the last several years. As a result, many organizations are considering additional security strategies to augment the Web Application Firewall WAF on which they have relied to protect critical digital business operations...

7.3AI score
SaveExploits0
Imperva Blog
Imperva Blog
•added 2021/11/08 7:41 p.m.•26 views

Best practices in WAF gateways to meet the demands of digital transformation

Every day, digital transformation is changing every organization’s threat landscape. As a result, they are facing a dilemma about where and how to deploy their application security solution. One of the most common approaches that organizations take is to deploy a reverse proxy security solution i...

7.1AI score
SaveExploits0
Rows per page
Query Builder