CVE-2020-24914

Summary: QCubed PHP object injection in profile.php (affecting all versions including 3.1.1) enables unauthenticated remote code execution by unserializing the POST variable “strProfileData.” The issue stems from PHP object injection in qcubed and is rated CRITICAL (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/...

CVE-2021-27931

LumisXP

CVE-2021-22681

CVE-2021-22681 affects Rockwell Automation Studio 5000 Logix Designer (versions 21+) and RSLogix 5000 (16–20). The issue is “Insufficiently Protected Credentials” (CWE-522): an unauthenticated attacker could bypass the verification key used to confirm Logix controller communication and authentica...

CVE-2021-21978

CVE-2021-21978 - VMware View Planner : VMware View Planner Harness 4.x (before 4.6 SP1) is vulnerable to remote code execution due to improper input validation and lack of authorization on the logupload endpoint. An unauthenticated attacker with network access can upload a crafted file to the log...

CVE-2021-27065

CVE-2021-27065 is an Exchange Server vulnerability enabling remote code execution when paired with CVE-2021-26855 (SSRF). The connected documents describe Attackers chaining CVE-26855 (SSRF) with CVE-27065 to write a webshell via EWS/OWA endpoints, allowing unauthenticated or post-auth execution ...

CVE-2021-26858

CVE-2021-26858 (Microsoft Exchange Server) is discussed in connected material as a post-authentication issue enabling manipulation of voicemail header files. The AVLEONOV writeup explains a crafted header can be parsed to deserialize a malicious ContactInfo object, using a TypedBinaryFormatter wi...

CVE-2021-26855

CVE-2021-26855 is an Exchange Server SSRF vulnerability that enables pre-auth access to Exchange backend and, when chained with CVE-2021-27065, can lead to remote code execution. Public exploitation activity and PoCs (e.g., Nmap http-vuln-cve2021-26855 scripts and curl demonstrations) illustrate ...

CVE-2021-26857

CVE-2021-26857 is an on‑premises Microsoft Exchange Server remote code execution vulnerability in the Unified Messaging deserialization path. The issue involves insecure deserialization of header data (ContactInfo) within voicemail processing, where an attacker could craft a Base64-encoded header...

CVE-2021-27877

CVE-2021-27877 affects Veritas Backup Exec before 21.2, where SHA authentication remains supported but not disabled. This allows a remote attacker to gain unauthorized access to a Backup Exec Agent and execute privileged commands. The vulnerability excerpt notes the issue is exploitable over the ...

CVE-2021-27878

CVE-2021-27878 affects Veritas Backup Exec Remote Agent before 21.2. A flaw in the SHA authentication scheme lets an attacker bypass auth to issue data-management commands and execute arbitrary OS/system commands with high impact on the affected host. The issue is documented across multiple sourc...

CVE-2021-27876

CVE-2021-27876 affects Veritas Backup Exec (BE) Remote Agent/BE Agent prior to 21.2. The SHA-authentication vulnerability allows an attacker to bypass authentication, issue data-management commands on an authenticated channel, and access arbitrary files on the BE Agent system with SYSTEM/root pri...

CVE-2021-25281

The CVE-2021-25281 issue affects SaltStack Salt prior to 3002.5, where salt-api does not honor eauth credentials for the wheel_async client. This auth bypass enables a remote attacker to run wheel modules on the master, potentially granting remote command execution and broader access. Public sour...

CVE-2021-24086

CVE-2021-24086 is a Windows TCP/IP DoS affecting tcpip.sys via IPv6 processing. Public PoCs show remote triggering by crafted IPv6/UDP packets and IPv6 fragment handling, potentially causing kernel memory issues or a crash. The vulnerability was patched by Microsoft in Feb 2021; exploitation deta...

CVE-2021-1732

CVE-2021-1732 is a Windows Win32k local privilege escalation vulnerability. The root cause is a flaw in how the WndExtra field is handled as an offset, enabling an out-of-bounds write that grants SYSTEM privileges. Public exploit activity exists in multiple GitHub repos that demonstrate a local p...

CVE-2021-27670

Summary: CVE-2021-27670 affects Appspace 6.2.4 with a Server-Side Request Forgery (SSRF) flaw in the api/v1/core/proxy/jsonprequest parameter. The connected sources describe the vulnerability and corroborate that exploitable SSRF can lead to access to internal resources and data leakage, with som...

CVE-2021-21974

CVE-2021-21974 is a heap-based overflow in VMware ESXi’s OpenSLP service that can enable remote code execution when an attacker on the same network segment can reach port 427. Affected releases include ESXi 7.x (before ESXi70U1c-17325551), ESXi 6.7 (before 202102401-SG), and ES6.5 (before 2021021...

CVE-2021-21972

CVE-2021-21972 is an unauthenticated remote code execution in VMware vCenter Server via the vROPS vropsplugin UI, triggered by uploading a crafted archive to /ui/vropspluginui/rest/services/uploadova. Affected: vCenter Server 6.5/6.7/7.0 (including Cloud Foundation 4.x/3.x). Impact is arbitrary f...

CVE-2021-21973

CVE-2021-21973 is a VMware vSphere Client (HTML5) SSRF vulnerability in which URL validation for a vCenter Server plugin is improper, allowing an attacker with network access to port 443 to trigger information disclosure via a crafted POST to the vulnerable endpoint. Affected products/versions in...

CVE-2021-27104

CVE-2021-27104 (Accellion FTA) is an OS command execution vulnerability affecting Accellion File Transfer Appliance (FTA) versions 9_12_370 and earlier. It is exploitable via a crafted POST request to various admin endpoints, enabling an attacker to run OS commands on the device. The vulnerabilit...

CVE-2021-27103

The CVE-2021-27103 issue affects Accellion FTA prior to FTA_9_12_416, where SSRF is triggered by a crafted POST to wmProgressstat.html. The connected documents provide concrete context: (1) vulnerability stems from server-side request forgery in the Accellion FTA web interface, (2) remediation is...