Zabbix items.php file upload |
NAME Zabbix items.php file upload Platforms Affected:Zabbix Zabbix 5.0.17Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Zabbix could allow a remote authenticated...
#threatintel #security #osint
NETGEAR DGND3700 security bypass |
NAME NETGEAR DGND3700 security bypass Platforms Affected:NETGEAR DGND3700v2Risk Level:9.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION NETGEAR DGND3700 could allow a remote attacker to bypass...
Delta Industrial Automation DIAEnergie file upload |
NAME Delta Industrial Automation DIAEnergie file upload Platforms Affected:Delta Industrial Automation DIAEnergieRisk Level:8.8Exploitability:UnprovenConsequences:File Manipulation DESCRIPTION Delta Industrial Automation DIAEnergie could...
MithrilJS mithril.js code execution |
NAME MithrilJS mithril.js code execution Platforms Affected:Node.js Node.jsRisk Level:8.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION MithrilJS mithril.js could allow a remote attacker to execute...
Rufus code execution |
NAME Rufus code execution Platforms Affected:Rufus Rufus 3.17.1846Risk Level:8.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Rufus could allow a local attacker to execute arbitrary...
Prowise code execution |
NAME Prowise code execution Platforms Affected:Prowise Reflect 1.0.9Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Prowise could allow a remote attacker to...
Technitium TMAC code execution |
NAME Technitium TMAC code execution Platforms Affected:Technitium TMAC 6.0.7Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Technitium TMAC could allow a remote...
Dahua ToolBox code execution |
NAME Dahua ToolBox code execution Platforms Affected:Dahua ToolBox 1.010.0000000.0Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Dahua ToolBox could allow a remote...
Axis IP cameras file upload |
NAME Axis IP cameras file upload Platforms Affected:Axis M3044-V 9.80.3.8Risk Level:8.8Exploitability:FunctionalConsequences:Gain Access DESCRIPTION Axis IP cameras could allow a remote...
Node.js toastr module cross-site scripting |
NAME Node.js toastr module cross-site scripting Platforms Affected:Node.js toastr 2.1.4Risk Level:8.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION Node.js toastr module is vulnerable to cross-site...
Auto Spare Parts Management user SQL injection |
NAME Auto Spare Parts Management user SQL injection Platforms Affected:Auto Spare Parts Management Auto Spare Parts Management 1.0Risk Level:9.8Exploitability:HighConsequences:Data Manipulation...
Adobe ColdFusion code execution |
NAME Adobe ColdFusion code execution Platforms Affected:Adobe ColdFusion 11.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Adobe ColdFusion could allow a remote attacker to...
Distributed Data Systems WebHMI code execution |
NAME Distributed Data Systems WebHMI code execution Platforms Affected:Distributed Data Systems WebHMI 4.1Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Distributed Data...
Wondershare MirrorGo ElevationService.exe privilege escalation |
NAME Wondershare MirrorGo ElevationService.exe privilege escalation Platforms Affected:Wondershare Wondershare MirrorGo 2.0.11.346Risk Level:8.4Exploitability:Proof of ConceptConsequences:Gain Privileges DESCRIPTION Wondershare MirrorGo could allow...
Cyclades Serial Console Server privilege escalation |
NAME Cyclades Serial Console Server privilege escalation Platforms Affected:Vertiv Cyclades Serial Console Server 3.3.0Risk Level:8.4Exploitability:Proof of ConceptConsequences:Gain Privileges DESCRIPTION Cyclades...
Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php |
NAME Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php Platforms Affected:Vicidial Vicidial 2.14-783aRisk Level:7.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION Vicidial is vulnerable to SQL injection. A...
Cosmetics and Beauty Product Online Store search SQL injection |
NAME Cosmetics and Beauty Product Online Store search SQL injection Platforms Affected:Sourcecodester Cosmetics and Beauty Product Online Store 1.0Risk Level:9.1Exploitability:HighConsequences:Data...
Samsung Galaxy S21 open redirect |
NAME Samsung Galaxy S21 open redirect Platforms Affected:Samsung Galaxy S21Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Samsung Galaxy S21 could allow a remote...
Zyxel devices ping certificate upload command execution |
NAME Zyxel devices ping certificate upload command execution Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel AMG1302-T11C Zyxel VMG3925-B10C Zyxel VMG8924-B10D...
Zyxel devices /cgi-bin/DAL?oid=login_privilege /cgi-bin/DAL?oid=mgmt_srv security bypass |
NAME Zyxel devices /cgi-bin/DAL?oid=login_privilege /cgi-bin/DAL?oid=mgmt_srv security bypass Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel WSQ20 Zyxel WSQ50 Zyxel AMG1302-T11C Zyxel...
Linux Kernel privilege escalation |
NAME Linux Kernel privilege escalation Platforms Affected:Linux Kernel 5.14 Linux Kernel 5.15 Linux Kernel 5.16Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Linux Kernel...
Zyxel devices libclinkc.so Export_Log zhttpd buffer overflow |
NAME Zyxel devices libclinkc.so Export_Log zhttpd buffer overflow Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel AMG1302-T11C Zyxel VMG3925-B10C Zyxel VMG8924-B10D...
Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php |
NAME Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php Platforms Affected:Vicidial Vicidial 2.14-783aRisk Level:7.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION Vicidial is vulnerable to SQL injection. A...
Telegram for Android flag emojis denial of service |
NAME Telegram for Android flag emojis denial of service Platforms Affected:Telegram Telegram for Android 8.4.4Risk Level:7.8Exploitability:Proof of ConceptConsequences:Denial of Service...
