130 matches found
ColumbiaSoft DocumentLocator - Improper Authentication
Instances of ColumbiaSoft's Document Locator prior to version 7.2 SP4 and 2021.1 are vulnerable to an Improper Authentication/SSRF vulnerability. This template identifies vulnerable instances of the ColumbiaSoft Document Locater application by confirming external DNS interaction/lookups by...
CVE-2023-49070
ofbiz-xmlrpc-rce CVE-2023-49070 PoC для pre-auth десериализационного RCE в Apache OFBiz XML-RPC, отслеживаемого как CVE-2023-49070: путь обхода аутентификации открывает доступ к устаревшей конечной точке /webtools/control/xmlrpc, которая десериализует контролируемый злоумышленником Java-объект,...
CVE-2020-9496
CVE-2020-9496 Étant donné que les 2 requêtes liées à xmlrpc dans webtools xmlrpc et ping n'utilisent pas l'authentification, elles sont vulnérables à une désérialisation non sécurisée. Ce problème a été signalé à l'équipe de sécurité par Alvaro Munoz [email protected] de l'équipe GitHub...
VulnCheck KEV: CVE-2018-8033
In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine org.apache.ofbiz.service.engine.HttpEngine.java handles requests for HTTP services via the /webtools/control/httpService endpoint. Both POST and GET requests to the httpService endpoint may contain three parameters: serviceName,...
CVE-2023-51467-EXPLOIT
CVE-2023-51467 - Обход аутентификации в Apache OFBiz Эта уязвимость позволяет злоумышленникам обойти аутентификацию, что приводит к эксплуатации подделки серверных запросов SSRF. При отправке веб-запроса по конкретному пути /webtools/control/ping?USERNAME&PASSWORD=test&requirePasswordChange=Y...
CVE-2026-45187
Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...
CVE-2026-45187
Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...
CVE-2026-45187 Apache OFBiz: Improper Authorization in Scheduled Job Creation Allows Low-Privileged Users to Submit System Jobs
Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...
EUVD-2026-30874
Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...
CVE-2026-45187
Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...
CVE-2026-45187
Apache OFBiz is affected by an Improper Authorization vulnerability in the Webtools component. This flaw specifically occurs during Scheduled Job Creation , where it allows low-privileged users to submit system jobs . This issue impacts all versions prior to 24.09.06 . To remediate this vulnerabi...
CVE-2026-45187: Improper Authorization
Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...
PT-2026-41858
Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...
CVE-2023-31928
A reflected cross-site scripting XSS vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools...
EUVD-2004-1167
Malware in sbrugna...
EUVD-2018-18199
Malware in sbrugna...
EUVD-2009-3884
Malware in sbrugna...
EUVD-2004-1166
Malware in sbrugna...