3516 matches found
CVE-2020-3452-Cisco-Scanner
CVE-2020-3452 - Cisco ASA Scanner Сканирование на CVE-2020-3452 - несанкционированный Path Traversal, затрагивающий межсетевые экраны Cisco ASA с AnyConnect https://vulners.com/cve/CVE-2020-3452 Поддерживающие документы:...
suds
개요 "Suds" 웹 서비스 클라이언트는 LGPL로 라이선스된 python용 경량 soap 기반 클라이언트입니다. 자세한 내용은 다음을 참조하십시오: 프로젝트 사이트: https://fedorahosted.org/suds/ 문서: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/ 릴리스 노트: 버전 0.3.6 04-31-09: 하드코딩된 /tmp/suds를 tempfile.gettempdir로 변경하고...
poc_proxylogon
pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 이 스크립트는 원래 celesian이 이 CVE를 익스플로잇하기 위해 만든 것입니다. 그런 다음 SSRF에 취약한 Exchange 서버를 익스플로잇하도록 업데이트했지만, EWS 기능을 통해 셸을 획득합니다. 고객사가 /ecp/DDI/DDIService.svc/ 기능을 비활성화하여 Exchange 서버에 패치를 적용했기 때문입니다. lol 이 스크립트는 여러 환경에서 작동하지 않을 수 있으며, 이 코드는 단순히 환경이...
aws__aws-sdk-java_CVE-2022-31159_1-12-2600
AWS SDK for Java L'AWS SDK for Java consente agli sviluppatori Java di lavorare facilmente con Amazon Web Services e di creare soluzioni scalabili con Amazon S3, Amazon DynamoDB, Amazon Glacier e altri servizi. Consulta l'AWS SDK for Java 2.x per iniziare. In modalità di manutenzione a partire da...
CVE-2026-71053
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Web Services Security. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil...
CVE-2026-71052
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Web Services Security. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile...
CVE-2026-70924
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise...
CVE-2026-61001
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-60737
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
EUVD-2026-61999
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Web Services Security. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agil...
EUVD-2026-61998
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Web Services Security. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile...
EUVD-2026-61871
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise...
EUVD-2026-61300
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
EUVD-2026-61415
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
PT-2026-77456
Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0 Description A flaw in the Web Services Security component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP t...
PT-2026-77915
Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager versions 12.2.1.4.0 Oracle Web Services Manager versions 14.1.2.0.0 Description A flaw in the Web Services Security component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via...
PT-2026-77371
Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0 Description An issue exists in the Web Services Security component of the Oracle Web Services Manager. An unauthenticated attacker with network acces...
PT-2026-78042
Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw exists in the Web Services Security component of the Oracle Agile Engineering Data Management product. A low privileged attacker with network access via HTTP can exploit...
PT-2026-78043
Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw exists in the Web Services Security component of the Oracle Agile Engineering Data Management product. This issue allows an unauthenticated attacker with network access...
EUVD-2026-58074
In Zimbra Collaboration ZCS before 10.1.17, a Cross-Site Request Forgery CSRF vulnerability exists in the Exchange Web Services EWS endpoint of Zimbra Collaboration ZCS due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated...