CVE-2021-34571

creationtimestamp| type| source ---|---|--- 2021-09-16 16:21:53+00:00| seen| https://t.me/cibsecurity/28975 2026-02-11 21:09:27+00:00| seen| https://gist.github.com/jonathan-gruber-1/49a25d08fb02011d3bf14466e69f89ba...

PT-2021-6123

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to v1.10WWB09 Beta Description The issue is related to a DoS attack in the web application, allowing a remote unauthenticated attacker to reboot the router by sending a specially crafted URL to an authenticated...

Fortinet FortiSandbox 安全漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. An Access Control Error vulnerability exists in Fortinet FortiSandbox that ste...

Evernote命令注入漏洞

Evernote Impression Notes is a suite of note-taking software for the macOS platform from the American company Evernote. The software allows you to create, manage, synchronize, search, and share notes anytime, anywhere. The Evernote client suffers from a command injection vulnerability that stems...

CVE-2020-11226

creationtimestamp| type| source ---|---|--- 2021-03-17 11:30:52+00:00| seen| https://t.me/cibsecurity/24993 2026-01-20 08:05:00+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2021-21312

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function Home Management Documents Add, or /front/document.form.php...

UBUNTU-CVE-2021-21312

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function Home Management Documents Add, or /front/document.form.php...

CVE-2021-21312 Stored XSS on documents

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function Home Management Documents Add, or /front/document.form.php...

PT-2021-14410 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.4 Description: The issue concerns a vulnerability within the document upload function, specifically the "Web Link" form field, which is not properly sanitized. This allows a malicious user with document upload right...

PT-2020-18515 · Cybermail · Cybermail

Name of the Vulnerable Software and Affected Versions: CyberMail versions 6.x through 7.x Description: The issue allows remote attackers to inject arbitrary script or HTML via a specially crafted URL, potentially leading to cross-site scripting. Recommendations: For versions 6.x through 7.x, upda...

Information disclosure

An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device...

CVE-2019-4743

IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link...

ZTE C520V21 Privilege Permission and Access Control Error Vulnerability

The ZTE C520V21 is a smart webcam from China's ZTE Corporation ZTE. A Permission Permission and Access Control Error vulnerability exists in the ZTE C520V21 version 2.1.14 and earlier versions, which can be exploited by an attacker to access other unauthorized files or resources by creating a URL...

CVE-2019-8995

The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a vulnerability wherein a malicious URL could trick a user...

February 19, 2019—KB4487029 (OS Build 17134.619)

None None...

December 11, 2018—KB4471324 (OS Build 17134.471)

None None...

Infraserver Directory Traversal Vulnerability

infraserver is a RESTful server. A directory traversal vulnerability exists in infraserver. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

DEBIAN-CVE-2018-12564

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on the server that is readable by lavaserver and valid yaml...

Cypserver Directory Traversal Vulnerability

cypserver is a static file server. A directory traversal vulnerability exists in cypserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

Easy Hosting Control Panel Cross-Site Scripting Vulnerability

Easy Hosting Control Panel EHCP is an open source hosting control panel that is used to manage domains, emails, ftp users and more. A cross-site scripting vulnerability exists in EHCP version 0.37.12.b. The vulnerability stems from the program failing to properly validate user input. A remote...