Exploits

Microsoft Exchange Server Remote Code Execution Vulnerability

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue …

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuratio…

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over…

Microsoft Exchange Server Remote Code Execution Vulnerability

Argument Injection in PHP-CGI

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles ce…

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod …

Microsoft Security Update Guide entry — NVD enrichira.

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup…

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a …

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 befor…

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in erro…

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cry…

Microsoft Exchange Server Remote Code Execution Vulnerability

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute una…

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 t…

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Microsoft SharePoint Server Spoofing Vulnerability

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests…

.NET Framework Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusi…

Skype for Business Elevation of Privilege Vulnerability

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mir…

aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

Microsoft Exchange Server Remote Code Execution Vulnerability

SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious request…

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annot…

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingr…

Microsoft Security Update Guide entry — NVD enrichira.

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a …

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the obsolete GET /api/auth endpoint ca…

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attacke…

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a …

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a …

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers t…