Exploits

Microsoft Exchange Server Remote Code Execution Vulnerability

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue …

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuratio…

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over…

Microsoft Exchange Server Remote Code Execution Vulnerability

Argument Injection in PHP-CGI

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles ce…

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod …

Microsoft Security Update Guide entry — NVD enrichira.

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup…

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

Redis Lua Use-After-Free may lead to remote code execution

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Squid vulnerable to information disclosure via authentication credential leakage in error handling

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cry…

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Exchange Server Remote Code Execution Vulnerability

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute una…

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 t…

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Microsoft SharePoint Server Spoofing Vulnerability

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests…

.NET Framework Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusi…

Skype for Business Elevation of Privilege Vulnerability

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mir…

aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

Microsoft Exchange Server Remote Code Execution Vulnerability

SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious request…

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingr…

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annot…

Microsoft Security Update Guide entry — NVD enrichira.

Lua library commands may lead to integer overflow and potential RCE

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the obsolete GET /api/auth endpoint ca…

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Redis is vulnerable to DoS via specially crafted LUA scripts

Redis: Authenticated users can execute LUA scripts as a different user

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers t…