PT-2021-15633

Name of the Vulnerable Software and Affected Versions: Firefox for Android versions prior to 86 Description: The issue allows malicious intents from other installed apps to declare webapp manifests for other origins, potentially leading to cross-origin attacks on targeted websites and UI spoofing...

CVE-2021-23976: Improper Restriction of Rendered UI Layers or Frames

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...

CVE-2020-24899

Nagios XI 5.7.2 is affected by a remote code execution RCE vulnerability. An authenticated user can inject additional commands into normal webapp query...

CVE-2020-24899

Nagios XI 5.7.2 is affected by a remote code execution RCE vulnerability. An authenticated user can inject additional commands into normal webapp query...

Remote code execution

Nagios XI 5.7.2 is affected by a remote code execution RCE vulnerability. An authenticated user can inject additional commands into normal webapp query...

CVE-2020-24899

Nagios XI 5.7.2 is affected by a remote code execution RCE vulnerability. An authenticated user can inject additional commands into normal webapp query...

Nagios XI和Nagios 命令注入漏洞

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A remote code execution vulnerability exists in Nagios XI 5.7.2. An attacker can exploit this vulnerability to inject commands into a...

PT-2021-11078

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.7.2 Description: The issue allows an authenticated user to inject additional commands into a normal webapp query, resulting in a remote code execution RCE vulnerability. Recommendations: For Nagios XI version 5.7.2, at the...

h1-ctf: [H1 hackyholidays] CTF Writeup

Hello team, Here is my CTF writeup for HackyHolidays. Main page The main page doesn't contain any interesting stuff, just a few assets. Maybe we will find some known files in webapp root: index.php, .htaccess, robots.txt, ...? robots.txt file exists, and there is the first flag: User-agent:...

Apache Tapestry Information Disclosure (CVE-2020-13953)

An information disclosure vulnerability exists in Apache Tapestry. This vulnerability is due to URL manipulation that allows Java webapp files inside WEB-INF to be listed and downloaded...

CVE-2020-26954

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...

CVE-2020-26954

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...

CVE-2020-26954: Undefined Security Weakness

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...

Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload

Exploit Title: Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload Google Dork: inurl:''comgmapfp'' Date: 2020-03-27 Exploit Author: ThelastVvV Vendor Homepage: https://gmapfp.org/ Version:Version J3.5 /J3.5free Tested on: Ubuntu CVE: CVE-2020-23972 Description: An attacker can...

PT-2020-16569

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 83 Description The issue allows malicious intents from other installed apps to be accepted, enabling manifests from arbitrary file paths and declaring webapp manifests for other origins. This could lead to...

org.apache.tapestry:tapestry-runner (>=5.4-beta-3, <=5.4.5), org.apache.tapestry:tapestry-test (>=5.4-beta-3, <=5.4.5) +29 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.11.v20130520)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.11.v20130520 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.apache.tapestry:tapestry-runner =5.4-beta-3, =5.4-beta-3, =1.4.1, =1.4.3 -...

org.eclipse.jetty.aggregate:jetty-all (7.4.3.v20110701), org.eclipse.jetty.aggregate:jetty-all-server (7.4.3.v20110701) +24 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.4.3.v20110701)

org.eclipse.jetty:jetty-webapp MAVEN version 7.4.3.v20110701 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.3.v20110701 -...

org.apache.camel:camel-example-cxf (2.4.0), org.apache.camel:camel-jetty (2.4.0) +31 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.1.4.v20100610)

org.eclipse.jetty:jetty-webapp MAVEN version 7.1.4.v20100610 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.apache.camel:camel-example-cxf 2.4.0 - org.apache.camel:camel-jetty 2.4.0 -...

com.github.kaitoy.sneo:giane-jetty (>=1.2.0, <=1.2.3), edu.cmu.lti.oaqa.core:baseqa (>=2.0.0, <=2.0.1) +45 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.7.v20120910)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.7.v20120910 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - com.github.kaitoy.sneo:giane-jetty =1.2.0, =2.0.0, =2.5.0, =2.5.0, =2.5.0, =0.0.1, =0.0.1...

com.gu:integration-tools_2.11 (1.7), com.vilt-group.minium:minium-app (>=0.9.0, <=0.9.1) +30 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (8.1.11.v20130520)

org.eclipse.jetty:jetty-webapp MAVEN version 8.1.11.v20130520 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - com.gu:integration-tools2.11 1.7 - com.vilt-group.minium:minium-app =0.9.0, =0.9.1 -...