diff --git a/.github/link_audit_state.json b/.github/link_audit_state.json index 014a67e9444..be9e9a17fe4 100644 --- a/.github/link_audit_state.json +++ b/.github/link_audit_state.json @@ -1,4 +1,4 @@ { - "cursor": "0-9194/node-poc-http-smuggling", + "cursor": "0-d3y/CVE-2023-29489", "reference_cursor": "http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Reflected-XSS-in-get-image-php" } diff --git a/1999/CVE-1999-0754.md b/1999/CVE-1999-0754.md index 8f867a3848b..5597b6dd5c4 100644 --- a/1999/CVE-1999-0754.md +++ b/1999/CVE-1999-0754.md @@ -10,7 +10,7 @@ The INN inndstart program allows local users to gain privileges by specifying an ### POC #### Reference -- http://www.redhat.com/corp/support/errata/inn99_05_22.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/1999/CVE-1999-1079.md b/1999/CVE-1999-1079.md index 61b195fed8b..3584de39d93 100644 --- a/1999/CVE-1999-1079.md +++ b/1999/CVE-1999-1079.md @@ -10,7 +10,7 @@ Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by atta ### POC #### Reference -- http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/1999/CVE-1999-1105.md b/1999/CVE-1999-1105.md index 75821893fcf..0639fda01af 100644 --- a/1999/CVE-1999-1105.md +++ b/1999/CVE-1999-1105.md @@ -10,7 +10,7 @@ Windows 95, when Remote Administration and File Sharing for NetWare Networks is ### POC #### Reference -- http://www.zdnet.com/eweek/reviews/1016/tr42bug.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0052.md b/2000/CVE-2000-0052.md index 42c38814c19..c1913f336fd 100644 --- a/2000/CVE-2000-0052.md +++ b/2000/CVE-2000-0052.md @@ -10,7 +10,7 @@ Red Hat userhelper program in the usermode package allows local users to gain ro ### POC #### Reference -- http://www.l0pht.com/advisories/pam_advisory +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0275.md b/2000/CVE-2000-0275.md index a29c7acfaf5..993cf6142ef 100644 --- a/2000/CVE-2000-0275.md +++ b/2000/CVE-2000-0275.md @@ -10,7 +10,7 @@ CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN num ### POC #### Reference -- http://www.l0pht.com/advisories/cc-pinextract.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0384.md b/2000/CVE-2000-0384.md index d8a6e221225..63b64c669ec 100644 --- a/2000/CVE-2000-0384.md +++ b/2000/CVE-2000-0384.md @@ -10,7 +10,7 @@ NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard ### POC #### Reference -- http://www.l0pht.com/advisories/ipivot7180.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0405.md b/2000/CVE-2000-0405.md index 8176857ce4b..94d5e711c03 100644 --- a/2000/CVE-2000-0405.md +++ b/2000/CVE-2000-0405.md @@ -10,7 +10,7 @@ Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary ### POC #### Reference -- http://www.l0pht.com/advisories/asniff_advisory.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0427.md b/2000/CVE-2000-0427.md index 94bd6b3f954..ad497e602af 100644 --- a/2000/CVE-2000-0427.md +++ b/2000/CVE-2000-0427.md @@ -10,7 +10,7 @@ The Aladdin Knowledge Systems eToken device allows attackers with physical acces ### POC #### Reference -- http://www.l0pht.com/advisories/etoken-piepa.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0625.md b/2000/CVE-2000-0625.md index d817025f3e4..76ececcb09e 100644 --- a/2000/CVE-2000-0625.md +++ b/2000/CVE-2000-0625.md @@ -10,7 +10,7 @@ NetZero 3.0 and earlier uses weak encryption for storing a user's login informat ### POC #### Reference -- http://www.l0pht.com/advisories/netzero.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0635.md b/2000/CVE-2000-0635.md index a032853dbb0..e5d78c7ba69 100644 --- a/2000/CVE-2000-0635.md +++ b/2000/CVE-2000-0635.md @@ -10,7 +10,7 @@ The view_page.html sample page in the MiniVend shopping cart program allows remo ### POC #### Reference -- http://www.zdnet.com/zdnn/stories/news/0,4586,2600258,00.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-0660.md b/2000/CVE-2000-0660.md index 7dd1c78f21f..6a72704c202 100644 --- a/2000/CVE-2000-0660.md +++ b/2000/CVE-2000-0660.md @@ -10,7 +10,7 @@ The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbit ### POC #### Reference -- http://www.altn.com/Downloads/WorldClient/Release/RelNotes.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-1220.md b/2000/CVE-2000-1220.md index e189b71dfeb..4395ad1ec66 100644 --- a/2000/CVE-2000-1220.md +++ b/2000/CVE-2000-1220.md @@ -10,7 +10,7 @@ The line printer daemon (lpd) in the lpr package in multiple Linux operating sys ### POC #### Reference -- http://www.l0pht.com/advisories/lpd_advisory +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2000/CVE-2000-1221.md b/2000/CVE-2000-1221.md index 6439832dc68..ef7d7c4a65c 100644 --- a/2000/CVE-2000-1221.md +++ b/2000/CVE-2000-1221.md @@ -10,7 +10,7 @@ The line printer daemon (lpd) in the lpr package in multiple Linux operating sys ### POC #### Reference -- http://www.l0pht.com/advisories/lpd_advisory +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2001/CVE-2001-0465.md b/2001/CVE-2001-0465.md index 1c31bd632f9..dde267978e1 100644 --- a/2001/CVE-2001-0465.md +++ b/2001/CVE-2001-0465.md @@ -10,7 +10,7 @@ TurboTax saves passwords in a temporary file when a user imports investment tax ### POC #### Reference -- http://www.turbotax.com/atr/update/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2001/CVE-2001-1020.md b/2001/CVE-2001-1020.md index 1f32cb66179..127e9fe43bb 100644 --- a/2001/CVE-2001-1020.md +++ b/2001/CVE-2001-1020.md @@ -10,7 +10,7 @@ edit_image.php in Vibechild Directory Manager before 0.91 allows remote attacker ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=51589 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2001/CVE-2001-1231.md b/2001/CVE-2001-1231.md index 5bb296da462..b03ba2e9d67 100644 --- a/2001/CVE-2001-1231.md +++ b/2001/CVE-2001-1231.md @@ -10,7 +10,7 @@ GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote a ### POC #### Reference -- http://support.novell.com/padlock/details.htm +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2002/CVE-2002-1398.md b/2002/CVE-2002-1398.md index 80db83625ed..3f675445d12 100644 --- a/2002/CVE-2002-1398.md +++ b/2002/CVE-2002-1398.md @@ -10,7 +10,7 @@ Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2002_038_postgresql.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2002/CVE-2002-1400.md b/2002/CVE-2002-1400.md index 9592534e972..2826724fbe7 100644 --- a/2002/CVE-2002-1400.md +++ b/2002/CVE-2002-1400.md @@ -10,7 +10,7 @@ Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2002_038_postgresql.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2002/CVE-2002-2246.md b/2002/CVE-2002-2246.md index 096a3ba5005..23a6e53dfd0 100644 --- a/2002/CVE-2002-2246.md +++ b/2002/CVE-2002-2246.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allow ### POC #### Reference -- http://www.deerfield.com/products/visnetic_website/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2003/CVE-2003-0128.md b/2003/CVE-2003-0128.md index 56831754395..149aacd368b 100644 --- a/2003/CVE-2003-0128.md +++ b/2003/CVE-2003-0128.md @@ -10,7 +10,7 @@ The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agen ### POC #### Reference -- http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2003/CVE-2003-0129.md b/2003/CVE-2003-0129.md index 1c8d0368f13..15a83e3ef5b 100644 --- a/2003/CVE-2003-0129.md +++ b/2003/CVE-2003-0129.md @@ -10,7 +10,7 @@ Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to ca ### POC #### Reference -- http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2003/CVE-2003-0130.md b/2003/CVE-2003-0130.md index 6ba9185c93b..fe6546f427f 100644 --- a/2003/CVE-2003-0130.md +++ b/2003/CVE-2003-0130.md @@ -10,7 +10,7 @@ The handle_image function in mail-format.c for Ximian Evolution Mail User Agent ### POC #### Reference -- http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2003/CVE-2003-0141.md b/2003/CVE-2003-0141.md index 5a32948fbb5..f8c02d9141c 100644 --- a/2003/CVE-2003-0141.md +++ b/2003/CVE-2003-0141.md @@ -10,7 +10,7 @@ The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/R ### POC #### Reference -- http://www.coresecurity.com/common/showdoc.php?idx=311&idxseccion=10 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2003/CVE-2003-0504.md b/2003/CVE-2003-0504.md index ba242bd19f0..8813960e332 100644 --- a/2003/CVE-2003-0504.md +++ b/2003/CVE-2003-0504.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 ( ### POC #### Reference -- http://www.security-corporation.com/articles-20030702-005.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2003/CVE-2003-0739.md b/2003/CVE-2003-0739.md index e20f7c64f82..99c6b4ed30f 100644 --- a/2003/CVE-2003-0739.md +++ b/2003/CVE-2003-0739.md @@ -10,7 +10,7 @@ VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users t ### POC #### Reference -- http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1106 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-0224.md b/2004/CVE-2004-0224.md index 439aa0563c7..492ae33bfaa 100644 --- a/2004/CVE-2004-0224.md +++ b/2004/CVE-2004-0224.md @@ -10,7 +10,7 @@ Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=5767 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-0574.md b/2004/CVE-2004-0574.md index 4e1ac1e5d51..7cfdbc85461 100644 --- a/2004/CVE-2004-0574.md +++ b/2004/CVE-2004-0574.md @@ -11,7 +11,6 @@ The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Serv #### Reference - http://marc.info/?l=bugtraq&m=109761632831563&w=2 -- http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036 #### Github diff --git a/2004/CVE-2004-0594.md b/2004/CVE-2004-0594.md index 98eb8a21aa5..0a701d88a4f 100644 --- a/2004/CVE-2004-0594.md +++ b/2004/CVE-2004-0594.md @@ -11,7 +11,6 @@ The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, u #### Reference - http://marc.info/?l=bugtraq&m=108981780109154&w=2 -- http://www.novell.com/linux/security/advisories/2004_21_php4.html #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-0595.md b/2004/CVE-2004-0595.md index 03cb2fca073..12c38cc59df 100644 --- a/2004/CVE-2004-0595.md +++ b/2004/CVE-2004-0595.md @@ -11,7 +11,6 @@ The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not #### Reference - http://marc.info/?l=bugtraq&m=108981780109154&w=2 -- http://www.novell.com/linux/security/advisories/2004_21_php4.html #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-1887.md b/2004/CVE-2004-1887.md index 18649588066..e07f6ef8cc6 100644 --- a/2004/CVE-2004-1887.md +++ b/2004/CVE-2004-1887.md @@ -10,7 +10,7 @@ Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or dow ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=230023 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-2030.md b/2004/CVE-2004-2030.md index f7572266a81..1445a05d6eb 100644 --- a/2004/CVE-2004-2030.md +++ b/2004/CVE-2004-2030.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay bef ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=252060 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-2067.md b/2004/CVE-2004-2067.md index 268e688b9af..d9785248ea9 100644 --- a/2004/CVE-2004-2067.md +++ b/2004/CVE-2004-2067.md @@ -10,7 +10,7 @@ SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Ma ### POC #### Reference -- http://www.jaws.com.mx/index.php?gadget=blog&action=single_view&id=10 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-2366.md b/2004/CVE-2004-2366.md index dde27c4aa25..1c9667110dc 100644 --- a/2004/CVE-2004-2366.md +++ b/2004/CVE-2004-2366.md @@ -10,7 +10,7 @@ Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote ### POC #### Reference -- http://www.cuteftp.com/gsftps/history.asp +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-2471.md b/2004/CVE-2004-2471.md index f0d14a3d416..3111399157d 100644 --- a/2004/CVE-2004-2471.md +++ b/2004/CVE-2004-2471.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=227554 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2004/CVE-2004-2622.md b/2004/CVE-2004-2622.md index 31cb0e9fdec..d78b48e29d7 100644 --- a/2004/CVE-2004-2622.md +++ b/2004/CVE-2004-2622.md @@ -10,7 +10,6 @@ AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authenti ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0410-advisories/index2.html - http://www.securityfocus.com/bid/11498 #### Github diff --git a/2004/CVE-2004-2720.md b/2004/CVE-2004-2720.md index 945eb749df2..2fec0dc1495 100644 --- a/2004/CVE-2004-2720.md +++ b/2004/CVE-2004-2720.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3. #### Reference - http://securityreason.com/securityalert/3200 -- http://www.sec-tec.co.uk/vulnerability/snitzxss.html #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0160.md b/2005/CVE-2005-0160.md index 46c1f9332f9..b230f5eb350 100644 --- a/2005/CVE-2005-0160.md +++ b/2005/CVE-2005-0160.md @@ -10,7 +10,7 @@ Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary cod ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2005_16_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0161.md b/2005/CVE-2005-0161.md index 39180488d10..5e388cdab9d 100644 --- a/2005/CVE-2005-0161.md +++ b/2005/CVE-2005-0161.md @@ -10,7 +10,7 @@ Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to ov ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2005_16_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0398.md b/2005/CVE-2005-0398.md index 4ffa67e5056..7d801f80bcd 100644 --- a/2005/CVE-2005-0398.md +++ b/2005/CVE-2005-0398.md @@ -10,7 +10,7 @@ The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to caus ### POC #### Reference -- http://sourceforge.net/mailarchive/forum.php?thread_id=6787713&forum_id=32000 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0415.md b/2005/CVE-2005-0415.md index eb779dfe12d..ad171b66f60 100644 --- a/2005/CVE-2005-0415.md +++ b/2005/CVE-2005-0415.md @@ -10,7 +10,7 @@ Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote att ### POC #### Reference -- http://sourceforge.net/tracker/index.php?func=detail&aid=1116935&group_id=37219&atid=419458 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0488.md b/2005/CVE-2005-0488.md index 7f780959f4b..edc0ffdb963 100644 --- a/2005/CVE-2005-0488.md +++ b/2005/CVE-2005-0488.md @@ -10,7 +10,7 @@ Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2005_16_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0686.md b/2005/CVE-2005-0686.md index d2a49ebf0c3..55279590d4d 100644 --- a/2005/CVE-2005-0686.md +++ b/2005/CVE-2005-0686.md @@ -10,7 +10,7 @@ Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, ### POC #### Reference -- https://sourceforge.net/project/shownotes.php?release_id=310416 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0888.md b/2005/CVE-2005-0888.md index 3c12634958f..eca297d2a98 100644 --- a/2005/CVE-2005-0888.md +++ b/2005/CVE-2005-0888.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Dou ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=315160 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0961.md b/2005/CVE-2005-0961.md index 1a80a265c0a..3c2722f6e9b 100644 --- a/2005/CVE-2005-0961.md +++ b/2005/CVE-2005-0961.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2005_16_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-0972.md b/2005/CVE-2005-0972.md index 9d6456a2006..2f712c73335 100644 --- a/2005/CVE-2005-0972.md +++ b/2005/CVE-2005-0972.md @@ -10,7 +10,7 @@ Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allo ### POC #### Reference -- http://www.kb.cert.org/vuls/id/185702 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-1202.md b/2005/CVE-2005-1202.md index 9c88e86ab9c..89bf3494d1b 100644 --- a/2005/CVE-2005-1202.md +++ b/2005/CVE-2005-1202.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.0 ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=320768 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-1203.md b/2005/CVE-2005-1203.md index a8924409242..2b17d85c90e 100644 --- a/2005/CVE-2005-1203.md +++ b/2005/CVE-2005-1203.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.0 ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=320768 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-1384.md b/2005/CVE-2005-1384.md index 79e2ec8edc5..45a778d148b 100644 --- a/2005/CVE-2005-1384.md +++ b/2005/CVE-2005-1384.md @@ -11,7 +11,6 @@ Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers t #### Reference - http://marc.info/?l=bugtraq&m=111473522804665&w=2 -- http://pridels0.blogspot.com/2006/03/phpcoin-poc.html #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-1415.md b/2005/CVE-2005-1415.md index 5ee0a53b42b..75224037f6f 100644 --- a/2005/CVE-2005-1415.md +++ b/2005/CVE-2005-1415.md @@ -10,7 +10,7 @@ Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticat ### POC #### Reference -- http://www.cuteftp.com/gsftps/history.asp +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-1495.md b/2005/CVE-2005-1495.md index 9be0a6f8d65..c2d2a0256c3 100644 --- a/2005/CVE-2005-1495.md +++ b/2005/CVE-2005-1495.md @@ -10,7 +10,7 @@ Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user ### POC #### Reference -- http://www.kb.cert.org/vuls/id/777773 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-1712.md b/2005/CVE-2005-1712.md index d035b90606e..ef114ccafb1 100644 --- a/2005/CVE-2005-1712.md +++ b/2005/CVE-2005-1712.md @@ -10,7 +10,7 @@ Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allow ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=328092 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-1713.md b/2005/CVE-2005-1713.md index 528f7e8d9f0..97c5eb1103f 100644 --- a/2005/CVE-2005-1713.md +++ b/2005/CVE-2005-1713.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow rem ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=328092 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-2023.md b/2005/CVE-2005-2023.md index 9de764361a1..0a23f9b9b63 100644 --- a/2005/CVE-2005-2023.md +++ b/2005/CVE-2005-2023.md @@ -10,7 +10,7 @@ The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 do ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2005_16_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-2177.md b/2005/CVE-2005-2177.md index d7b817e68a2..dc9b717ae55 100644 --- a/2005/CVE-2005-2177.md +++ b/2005/CVE-2005-2177.md @@ -10,7 +10,7 @@ Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp i ### POC #### Reference -- http://www.vmware.com/download/esx/esx-254-200610-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-2314.md b/2005/CVE-2005-2314.md index 7eba21dce9e..ec8a242869b 100644 --- a/2005/CVE-2005-2314.md +++ b/2005/CVE-2005-2314.md @@ -10,7 +10,7 @@ inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0507-exploits/phpsftpd.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-2330.md b/2005/CVE-2005-2330.md index 055aab688b3..45e86c16aff 100644 --- a/2005/CVE-2005-2330.md +++ b/2005/CVE-2005-2330.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows ### POC #### Reference -- http://sourceforge.net/mailarchive/message.php?msg_id=12318248 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-2616.md b/2005/CVE-2005-2616.md index bd9ea0d246e..d60b5668281 100644 --- a/2005/CVE-2005-2616.md +++ b/2005/CVE-2005-2616.md @@ -10,7 +10,7 @@ Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3011.md b/2005/CVE-2005-3011.md index 7af30b160bf..f02b81a5173 100644 --- a/2005/CVE-2005-3011.md +++ b/2005/CVE-2005-3011.md @@ -10,7 +10,7 @@ The sort_offline function for texindex in texinfo 4.8 and earlier allows local u ### POC #### Reference -- http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3080.md b/2005/CVE-2005-3080.md index adf928e9379..8cbff79d9a3 100644 --- a/2005/CVE-2005-3080.md +++ b/2005/CVE-2005-3080.md @@ -10,7 +10,7 @@ contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbi ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=358285 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3177.md b/2005/CVE-2005-3177.md index a060c471d57..e16c914ed5e 100644 --- a/2005/CVE-2005-3177.md +++ b/2005/CVE-2005-3177.md @@ -10,7 +10,7 @@ CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and ### POC #### Reference -- http://support.microsoft.com/kb/831374 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3336.md b/2005/CVE-2005-3336.md index d48b2f6efda..51f58fc5da4 100644 --- a/2005/CVE-2005-3336.md +++ b/2005/CVE-2005-3336.md @@ -10,7 +10,7 @@ SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attacker ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=362673 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3337.md b/2005/CVE-2005-3337.md index 1095b9053ab..ed93bbbe73a 100644 --- a/2005/CVE-2005-3337.md +++ b/2005/CVE-2005-3337.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allo ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=362673 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3854.md b/2005/CVE-2005-3854.md index 3904b73d154..1bff640b9aa 100644 --- a/2005/CVE-2005-3854.md +++ b/2005/CVE-2005-3854.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in index.php in EasyPageCMS allows remo ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0511-exploits/EasyPageCMSXSS.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3867.md b/2005/CVE-2005-3867.md index 3d01bb72817..b9f800ed837 100644 --- a/2005/CVE-2005-3867.md +++ b/2005/CVE-2005-3867.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in RevenuePilot Search Engine Script 1. ### POC #### Reference -- http://pridels0.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3915.md b/2005/CVE-2005-3915.md index 3eac84a4adb..2fa55544a9e 100644 --- a/2005/CVE-2005-3915.md +++ b/2005/CVE-2005-3915.md @@ -10,7 +10,7 @@ The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client W ### POC #### Reference -- http://www.clavister.com/support/support_update_ISAKMP.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-3967.md b/2005/CVE-2005-3967.md index dc5f6b6530c..73052fdec6e 100644 --- a/2005/CVE-2005-3967.md +++ b/2005/CVE-2005-3967.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in At ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4351.md b/2005/CVE-2005-4351.md index 222d15507d6..e5210ffa832 100644 --- a/2005/CVE-2005-4351.md +++ b/2005/CVE-2005-4351.md @@ -11,7 +11,6 @@ The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, D #### Reference - http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt -- http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4352.md b/2005/CVE-2005-4352.md index 6fb029c15d2..e2c958deab4 100644 --- a/2005/CVE-2005-4352.md +++ b/2005/CVE-2005-4352.md @@ -10,7 +10,7 @@ The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4398.md b/2005/CVE-2005-4398.md index f47de554174..a1e7c2216de 100644 --- a/2005/CVE-2005-4398.md +++ b/2005/CVE-2005-4398.md @@ -10,7 +10,7 @@ NOTE: the vendor has disputed this issue. Cross-site scripting (XSS) vulnerabil ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/lemoon-xss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4494.md b/2005/CVE-2005-4494.md index d65ad27a385..1f18ee257c1 100644 --- a/2005/CVE-2005-4494.md +++ b/2005/CVE-2005-4494.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/spip-xss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4496.md b/2005/CVE-2005-4496.md index a8ed1c835cb..4064aaea832 100644 --- a/2005/CVE-2005-4496.md +++ b/2005/CVE-2005-4496.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlie ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/syntaxcms-xss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4574.md b/2005/CVE-2005-4574.md index a49f795bb6b..e11e9418ec2 100644 --- a/2005/CVE-2005-4574.md +++ b/2005/CVE-2005-4574.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot C ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4575.md b/2005/CVE-2005-4575.md index 0832e62a949..75c2913a325 100644 --- a/2005/CVE-2005-4575.md +++ b/2005/CVE-2005-4575.md @@ -10,7 +10,7 @@ PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to ob ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4576.md b/2005/CVE-2005-4576.md index a59ac6f2a5a..627b59fce29 100644 --- a/2005/CVE-2005-4576.md +++ b/2005/CVE-2005-4576.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4596.md b/2005/CVE-2005-4596.md index bd6f972f3c6..04ec8e0556a 100644 --- a/2005/CVE-2005-4596.md +++ b/2005/CVE-2005-4596.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/adesguestbook-xss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4598.md b/2005/CVE-2005-4598.md index 4fedb6ddcf8..01c0a9654a5 100644 --- a/2005/CVE-2005-4598.md +++ b/2005/CVE-2005-4598.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allo ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/ooapp-guestbook-xss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4607.md b/2005/CVE-2005-4607.md index 535aadec151..a01c2065133 100644 --- a/2005/CVE-2005-4607.md +++ b/2005/CVE-2005-4607.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earli ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4608.md b/2005/CVE-2005-4608.md index 08c8b07e8d2..7b16308c061 100644 --- a/2005/CVE-2005-4608.md +++ b/2005/CVE-2005-4608.md @@ -10,7 +10,7 @@ SQL injection vulnerability in index.php in BugPort 1.147 allows remote attacker ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4609.md b/2005/CVE-2005-4609.md index 40d563ce31c..cad8404f240 100644 --- a/2005/CVE-2005-4609.md +++ b/2005/CVE-2005-4609.md @@ -10,7 +10,7 @@ index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensiti ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4637.md b/2005/CVE-2005-4637.md index dbf0e5e6dde..e73e62ae1ce 100644 --- a/2005/CVE-2005-4637.md +++ b/2005/CVE-2005-4637.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako Suppo ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4638.md b/2005/CVE-2005-4638.md index 39531b86257..7027d087f0b 100644 --- a/2005/CVE-2005-4638.md +++ b/2005/CVE-2005-4638.md @@ -10,7 +10,7 @@ index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to o ### POC #### Reference -- http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2005/CVE-2005-4835.md b/2005/CVE-2005-4835.md index a7f7b065aaa..100ffa7c5c6 100644 --- a/2005/CVE-2005-4835.md +++ b/2005/CVE-2005-4835.md @@ -10,7 +10,7 @@ The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadW ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0068.md b/2006/CVE-2006-0068.md index df198ca12e8..70222f222c7 100644 --- a/2006/CVE-2006-0068.md +++ b/2006/CVE-2006-0068.md @@ -10,7 +10,7 @@ SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attacker ### POC #### Reference -- http://pridels0.blogspot.com/2006/01/primo-cart-sql-inj.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0164.md b/2006/CVE-2006-0164.md index ac8bd495158..32db5336bdc 100644 --- a/2006/CVE-2006-0164.md +++ b/2006/CVE-2006-0164.md @@ -10,7 +10,7 @@ phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allow ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=384232 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0583.md b/2006/CVE-2006-0583.md index 3e82ce59caa..2cb392da498 100644 --- a/2006/CVE-2006-0583.md +++ b/2006/CVE-2006-0583.md @@ -10,7 +10,7 @@ SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier al ### POC #### Reference -- http://retrogod.altervista.org/Clever_Copy_V3_sql_xpl.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0694.md b/2006/CVE-2006-0694.md index 05517a69ef6..59c0dd881e2 100644 --- a/2006/CVE-2006-0694.md +++ b/2006/CVE-2006-0694.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 al ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=392826 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0695.md b/2006/CVE-2006-0695.md index 66c6b8c3196..4cc12822845 100644 --- a/2006/CVE-2006-0695.md +++ b/2006/CVE-2006-0695.md @@ -10,7 +10,7 @@ Ansilove before 1.03 does not filter uploaded file extensions, which allows remo ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=392826 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0707.md b/2006/CVE-2006-0707.md index 7e3141ae53f..1754866c38a 100644 --- a/2006/CVE-2006-0707.md +++ b/2006/CVE-2006-0707.md @@ -10,7 +10,7 @@ PyBlosxom before 1.3.2, when running on certain webservers, allows remote attack ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=391800 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0922.md b/2006/CVE-2006-0922.md index 368921c9b37..70052a0b55e 100644 --- a/2006/CVE-2006-0922.md +++ b/2006/CVE-2006-0922.md @@ -11,8 +11,6 @@ CubeCart 3.0 through 3.6 does not properly check authorization for an administra #### Reference - http://securityreason.com/securityalert/482 -- http://www.cubecart.com/site/forums/index.php?showtopic=14817 -- http://www.cubecart.com/site/forums/index.php?showtopic=14960 #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-0963.md b/2006/CVE-2006-0963.md index fc398ea2d44..ee2ea202f6c 100644 --- a/2006/CVE-2006-0963.md +++ b/2006/CVE-2006-0963.md @@ -10,7 +10,7 @@ Multiple buffer overflows in STLport 5.0.2 might allow local users to execute ar ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=397543 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1056.md b/2006/CVE-2006-1056.md index 39e91585323..c2c966aa306 100644 --- a/2006/CVE-2006-1056.md +++ b/2006/CVE-2006-1056.md @@ -10,7 +10,7 @@ The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 a ### POC #### Reference -- http://www.vmware.com/download/esx/esx-254-200610-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1096.md b/2006/CVE-2006-1096.md index ea150b5ef03..7878f57361a 100644 --- a/2006/CVE-2006-1096.md +++ b/2006/CVE-2006-1096.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows rem ### POC #### Reference -- http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1098.md b/2006/CVE-2006-1098.md index ede799b3248..ec81fda26f0 100644 --- a/2006/CVE-2006-1098.md +++ b/2006/CVE-2006-1098.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to ### POC #### Reference -- http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1342.md b/2006/CVE-2006-1342.md index 9bdeb744c38..cd718292fc4 100644 --- a/2006/CVE-2006-1342.md +++ b/2006/CVE-2006-1342.md @@ -10,7 +10,7 @@ net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero befor ### POC #### Reference -- http://www.vmware.com/download/esx/esx-254-200610-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1343.md b/2006/CVE-2006-1343.md index edca0efd3c7..66dae773481 100644 --- a/2006/CVE-2006-1343.md +++ b/2006/CVE-2006-1343.md @@ -10,7 +10,7 @@ net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly ### POC #### Reference -- http://www.vmware.com/download/esx/esx-254-200610-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1492.md b/2006/CVE-2006-1492.md index 30f74c4df52..7bbe5c8ec98 100644 --- a/2006/CVE-2006-1492.md +++ b/2006/CVE-2006-1492.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in dir.php in Explorer XP allows remote attack ### POC #### Reference -- http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1493.md b/2006/CVE-2006-1493.md index f5851c0d605..b9e14603b23 100644 --- a/2006/CVE-2006-1493.md +++ b/2006/CVE-2006-1493.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote ### POC #### Reference -- http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1551.md b/2006/CVE-2006-1551.md index d1caf71d3be..1b566605677 100644 --- a/2006/CVE-2006-1551.md +++ b/2006/CVE-2006-1551.md @@ -10,7 +10,7 @@ Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and ear ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1747.md b/2006/CVE-2006-1747.md index c330dad2411..159d306d10f 100644 --- a/2006/CVE-2006-1747.md +++ b/2006/CVE-2006-1747.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remot ### POC #### Reference -- https://www.exploit-db.com/exploits/1658 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1781.md b/2006/CVE-2006-1781.md index 5a144ca4976..5f2ac7ded41 100644 --- a/2006/CVE-2006-1781.md +++ b/2006/CVE-2006-1781.md @@ -10,7 +10,6 @@ PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top ### POC #### Reference -- http://pridels0.blogspot.com/2006/04/monstertoplist.html - https://www.exploit-db.com/exploits/3530 #### Github diff --git a/2006/CVE-2006-1789.md b/2006/CVE-2006-1789.md index c58e4b37fde..6e16de58202 100644 --- a/2006/CVE-2006-1789.md +++ b/2006/CVE-2006-1789.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 an ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1864.md b/2006/CVE-2006-1864.md index b810c614f26..9a4bfff38f0 100644 --- a/2006/CVE-2006-1864.md +++ b/2006/CVE-2006-1864.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows lo ### POC #### Reference -- http://www.vmware.com/download/esx/esx-254-200610-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1922.md b/2006/CVE-2006-1922.md index 0dbbd7a1072..4c62c5cdda7 100644 --- a/2006/CVE-2006-1922.md +++ b/2006/CVE-2006-1922.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in Tota ### POC #### Reference -- http://pridels0.blogspot.com/2006/04/totalcalendar-remote-code-execution.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-1929.md b/2006/CVE-2006-1929.md index aebc37cfa44..209358fd289 100644 --- a/2006/CVE-2006-1929.md +++ b/2006/CVE-2006-1929.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinu ### POC #### Reference -- http://pridels0.blogspot.com/2006/04/i-rater-platinum-remote-file-inclusion.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2071.md b/2006/CVE-2006-2071.md index a0874e041ac..4b0b0ad36b6 100644 --- a/2006/CVE-2006-2071.md +++ b/2006/CVE-2006-2071.md @@ -10,7 +10,7 @@ Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permi ### POC #### Reference -- http://www.vmware.com/download/esx/esx-254-200610-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2181.md b/2006/CVE-2006-2181.md index 5dc912e60b8..cee1c9024d9 100644 --- a/2006/CVE-2006-2181.md +++ b/2006/CVE-2006-2181.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earli ### POC #### Reference -- http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2182.md b/2006/CVE-2006-2182.md index 625ec10ef8f..d67587a7a33 100644 --- a/2006/CVE-2006-2182.md +++ b/2006/CVE-2006-2182.md @@ -10,7 +10,7 @@ Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.ph ### POC #### Reference -- http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2245.md b/2006/CVE-2006-2245.md index fcf350a1c3e..d67de5459d8 100644 --- a/2006/CVE-2006-2245.md +++ b/2006/CVE-2006-2245.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in auction\auction_common.php in Auction ### POC #### Reference -- http://pridels0.blogspot.com/2006/05/phpbb-auction-mod-remote-file.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2315.md b/2006/CVE-2006-2315.md index 633b8503284..3687cad7fe2 100644 --- a/2006/CVE-2006-2315.md +++ b/2006/CVE-2006-2315.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 an ### POC #### Reference -- https://www.exploit-db.com/exploits/1762 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2395.md b/2006/CVE-2006-2395.md index 61eb3c5aec4..61f3874adfa 100644 --- a/2006/CVE-2006-2395.md +++ b/2006/CVE-2006-2395.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in resources/includes/popp.config.loader ### POC #### Reference -- http://pridels0.blogspot.com/2006/05/popphoto-remote-file-inclusion-vuln.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2548.md b/2006/CVE-2006-2548.md index c704a70c39b..eb1b87e2749 100644 --- a/2006/CVE-2006-2548.md +++ b/2006/CVE-2006-2548.md @@ -11,8 +11,6 @@ Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execut #### Reference - http://securityreason.com/securityalert/942 -- http://www.redteam-pentesting.de/advisories/rt-sa-2006-002.php -- http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2550.md b/2006/CVE-2006-2550.md index e970b92ddd5..d91e1717225 100644 --- a/2006/CVE-2006-2550.md +++ b/2006/CVE-2006-2550.md @@ -10,7 +10,7 @@ perlpodder before 0.5 allows remote attackers to execute arbitrary code via shel ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2748.md b/2006/CVE-2006-2748.md index 9c79fa1904f..fce279d5255 100644 --- a/2006/CVE-2006-2748.md +++ b/2006/CVE-2006-2748.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the do_mysql_query function in core.php for Open ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=576483 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2749.md b/2006/CVE-2006-2749.md index 20a0fe60143..10e76dafb7f 100644 --- a/2006/CVE-2006-2749.md +++ b/2006/CVE-2006-2749.md @@ -10,7 +10,7 @@ SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OS ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=576483 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2750.md b/2006/CVE-2006-2750.md index 8991c42616a..bfd51110e69 100644 --- a/2006/CVE-2006-2750.md +++ b/2006/CVE-2006-2750.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core. ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=576483 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2751.md b/2006/CVE-2006-2751.md index 3ac43356710..cd9d9084292 100644 --- a/2006/CVE-2006-2751.md +++ b/2006/CVE-2006-2751.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSI ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=576483 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2757.md b/2006/CVE-2006-2757.md index 6f25c75c637..52264ab6527 100644 --- a/2006/CVE-2006-2757.md +++ b/2006/CVE-2006-2757.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote att ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2861.md b/2006/CVE-2006-2861.md index db50a317e27..bc1d08a63b2 100644 --- a/2006/CVE-2006-2861.md +++ b/2006/CVE-2006-2861.md @@ -10,7 +10,7 @@ SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allo ### POC #### Reference -- http://pridels0.blogspot.com/2006/06/particle-wiki-sql-inj.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2918.md b/2006/CVE-2006-2918.md index 8fdf2c53006..f7ce0d38c59 100644 --- a/2006/CVE-2006-2918.md +++ b/2006/CVE-2006-2918.md @@ -10,7 +10,7 @@ The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and ### POC #### Reference -- http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2936.md b/2006/CVE-2006-2936.md index 5f0d69d1383..6da023fbd5c 100644 --- a/2006/CVE-2006-2936.md +++ b/2006/CVE-2006-2936.md @@ -10,7 +10,7 @@ The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_30_kernel.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2937.md b/2006/CVE-2006-2937.md index a33bc22c2a7..430f23b062e 100644 --- a/2006/CVE-2006-2937.md +++ b/2006/CVE-2006-2937.md @@ -12,12 +12,6 @@ OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to c #### Reference - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://www.ubuntu.com/usn/usn-353-1 -- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-2940.md b/2006/CVE-2006-2940.md index 57680a4aefe..1b30101c1b7 100644 --- a/2006/CVE-2006-2940.md +++ b/2006/CVE-2006-2940.md @@ -12,12 +12,6 @@ OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows at #### Reference - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://www.ubuntu.com/usn/usn-353-1 -- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3222.md b/2006/CVE-2006-3222.md index 8755edd5b14..619b05bca3b 100644 --- a/2006/CVE-2006-3222.md +++ b/2006/CVE-2006-3222.md @@ -10,7 +10,7 @@ The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR ### POC #### Reference -- http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3298.md b/2006/CVE-2006-3298.md index fd4bcc96049..62d01c99cb8 100644 --- a/2006/CVE-2006-3298.md +++ b/2006/CVE-2006-3298.md @@ -10,7 +10,7 @@ Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial ### POC #### Reference -- http://www.security.nnov.ru/Gnews281.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3467.md b/2006/CVE-2006-3467.md index d1010e7d2ae..82d34e858f5 100644 --- a/2006/CVE-2006-3467.md +++ b/2006/CVE-2006-3467.md @@ -10,7 +10,7 @@ Integer overflow in FreeType before 2.2 allows remote attackers to cause a denia ### POC #### Reference -- http://www.vmware.com/download/esx/esx-254-200610-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3589.md b/2006/CVE-2006-3589.md index ab968f1d262..ddc1d114e18 100644 --- a/2006/CVE-2006-3589.md +++ b/2006/CVE-2006-3589.md @@ -10,7 +10,7 @@ vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does ### POC #### Reference -- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3738.md b/2006/CVE-2006-3738.md index a7704b6b6e7..de9712d87e8 100644 --- a/2006/CVE-2006-3738.md +++ b/2006/CVE-2006-3738.md @@ -12,7 +12,6 @@ Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0 #### Reference - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://www.ubuntu.com/usn/usn-353-1 -- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3739.md b/2006/CVE-2006-3739.md index d9372c65ca7..e80e3d367ac 100644 --- a/2006/CVE-2006-3739.md +++ b/2006/CVE-2006-3739.md @@ -10,7 +10,7 @@ Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allo ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3740.md b/2006/CVE-2006-3740.md index 66fb4fe4751..2c1d0e0b12a 100644 --- a/2006/CVE-2006-3740.md +++ b/2006/CVE-2006-3740.md @@ -10,7 +10,7 @@ Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X serve ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3885.md b/2006/CVE-2006-3885.md index 11d024bf73d..b7014b30a49 100644 --- a/2006/CVE-2006-3885.md +++ b/2006/CVE-2006-3885.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 al ### POC #### Reference -- http://www.sec-tec.co.uk/vulnerability/r55w_directory_traversal.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-3933.md b/2006/CVE-2006-3933.md index fdf2c88eb17..2fa0a3b788d 100644 --- a/2006/CVE-2006-3933.md +++ b/2006/CVE-2006-3933.md @@ -10,7 +10,6 @@ Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows ### POC #### Reference -- http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://securityreason.com/securityalert/1302 #### Github diff --git a/2006/CVE-2006-3934.md b/2006/CVE-2006-3934.md index 3dbc72708a9..898b797457d 100644 --- a/2006/CVE-2006-3934.md +++ b/2006/CVE-2006-3934.md @@ -10,7 +10,6 @@ Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms ### POC #### Reference -- http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://securityreason.com/securityalert/1302 #### Github diff --git a/2006/CVE-2006-3935.md b/2006/CVE-2006-3935.md index 4533327a458..86be765fc2b 100644 --- a/2006/CVE-2006-3935.md +++ b/2006/CVE-2006-3935.md @@ -10,7 +10,6 @@ system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does ### POC #### Reference -- http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://securityreason.com/securityalert/1302 #### Github diff --git a/2006/CVE-2006-3936.md b/2006/CVE-2006-3936.md index 86a11dd773d..e6f0b6fec25 100644 --- a/2006/CVE-2006-3936.md +++ b/2006/CVE-2006-3936.md @@ -10,7 +10,6 @@ system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remot ### POC #### Reference -- http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://securityreason.com/securityalert/1302 #### Github diff --git a/2006/CVE-2006-3995.md b/2006/CVE-2006-3995.md index 4d860dc6a10..f8a05fbd6c0 100644 --- a/2006/CVE-2006-3995.md +++ b/2006/CVE-2006-3995.md @@ -11,7 +11,6 @@ Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and po #### Reference - https://www.exploit-db.com/exploits/2089 -- https://www.exploit-db.com/exploits/3553 #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4040.md b/2006/CVE-2006-4040.md index 1fd98e183ed..ed0c05f45c8 100644 --- a/2006/CVE-2006-4040.md +++ b/2006/CVE-2006-4040.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 ### POC #### Reference -- https://www.exploit-db.com/exploits/2093 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4168.md b/2006/CVE-2006-4168.md index 2dfc1b80e62..c70542d5afb 100644 --- a/2006/CVE-2006-4168.md +++ b/2006/CVE-2006-4168.md @@ -10,7 +10,7 @@ Integer overflow in the exif_data_load_data_entry function in libexif/exif-data. ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4262.md b/2006/CVE-2006-4262.md index 17ba59c5bde..324d85e4c06 100644 --- a/2006/CVE-2006-4262.md +++ b/2006/CVE-2006-4262.md @@ -10,7 +10,6 @@ Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attacke ### POC #### Reference -- http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645 #### Github diff --git a/2006/CVE-2006-4334.md b/2006/CVE-2006-4334.md index 50b3636f3d6..eadb53cd172 100644 --- a/2006/CVE-2006-4334.md +++ b/2006/CVE-2006-4334.md @@ -10,7 +10,7 @@ Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to ca ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4335.md b/2006/CVE-2006-4335.md index e60fca5b2be..7dcbde82395 100644 --- a/2006/CVE-2006-4335.md +++ b/2006/CVE-2006-4335.md @@ -10,7 +10,7 @@ Array index error in the make_table function in unlzh.c in the LZH decompression ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4336.md b/2006/CVE-2006-4336.md index 20577d9aec8..f73c3834706 100644 --- a/2006/CVE-2006-4336.md +++ b/2006/CVE-2006-4336.md @@ -10,7 +10,7 @@ Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows con ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4337.md b/2006/CVE-2006-4337.md index 28a2177c116..4d4503976e5 100644 --- a/2006/CVE-2006-4337.md +++ b/2006/CVE-2006-4337.md @@ -10,7 +10,7 @@ Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 al ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4338.md b/2006/CVE-2006-4338.md index e0b2c3a8a7a..8e3a2a6ede6 100644 --- a/2006/CVE-2006-4338.md +++ b/2006/CVE-2006-4338.md @@ -10,7 +10,7 @@ unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4339.md b/2006/CVE-2006-4339.md index f6d85c3b7ed..f6f33362c7d 100644 --- a/2006/CVE-2006-4339.md +++ b/2006/CVE-2006-4339.md @@ -12,12 +12,6 @@ OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using a #### Reference - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://www.redhat.com/support/errata/RHSA-2007-0073.html -- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4343.md b/2006/CVE-2006-4343.md index 3c40604dcd2..63968942e70 100644 --- a/2006/CVE-2006-4343.md +++ b/2006/CVE-2006-4343.md @@ -12,12 +12,6 @@ The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0 #### Reference - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://www.ubuntu.com/usn/usn-353-1 -- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - https://www.exploit-db.com/exploits/4773 #### Github diff --git a/2006/CVE-2006-4810.md b/2006/CVE-2006-4810.md index 51598b07b29..3fc37abc684 100644 --- a/2006/CVE-2006-4810.md +++ b/2006/CVE-2006-4810.md @@ -10,7 +10,7 @@ Buffer overflow in the readline function in util/texindex.c, as used by the (1) ### POC #### Reference -- http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-4853.md b/2006/CVE-2006-4853.md index c3fb1cb9c17..e30787f15c2 100644 --- a/2006/CVE-2006-4853.md +++ b/2006/CVE-2006-4853.md @@ -10,7 +10,6 @@ SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows r ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0609-exploits/haberx.txt - https://www.exploit-db.com/exploits/2371 #### Github diff --git a/2006/CVE-2006-5083.md b/2006/CVE-2006-5083.md index a0e006101d8..f2c9b545d25 100644 --- a/2006/CVE-2006-5083.md +++ b/2006/CVE-2006-5083.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in includes/functions_portal.php in Inte ### POC #### Reference -- https://www.exploit-db.com/exploits/2430 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5159.md b/2006/CVE-2006-5159.md index f90d110f3c1..7b6f6020d0d 100644 --- a/2006/CVE-2006-5159.md +++ b/2006/CVE-2006-5159.md @@ -10,7 +10,7 @@ Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execut ### POC #### Reference -- http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5160.md b/2006/CVE-2006-5160.md index 7350b3071b7..56c3ec5076e 100644 --- a/2006/CVE-2006-5160.md +++ b/2006/CVE-2006-5160.md @@ -10,7 +10,7 @@ Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors ### POC #### Reference -- http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5225.md b/2006/CVE-2006-5225.md index dea32f25621..0213599e3e2 100644 --- a/2006/CVE-2006-5225.md +++ b/2006/CVE-2006-5225.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in AAIportal before 1.4.0 allow remote at ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=451458 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5606.md b/2006/CVE-2006-5606.md index a1f653df19b..1a8d1311801 100644 --- a/2006/CVE-2006-5606.md +++ b/2006/CVE-2006-5606.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in BytesFall Explorer (bfExplorer) 0.0.7. ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2006-007.php?lang=en +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5749.md b/2006/CVE-2006-5749.md index 3b8b7ddccaa..cccd6cb0e43 100644 --- a/2006/CVE-2006-5749.md +++ b/2006/CVE-2006-5749.md @@ -10,7 +10,7 @@ The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Li ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_30_kernel.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5753.md b/2006/CVE-2006-5753.md index 9bb9cc55f4f..12565cb9e3a 100644 --- a/2006/CVE-2006-5753.md +++ b/2006/CVE-2006-5753.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the listxattr system call in Linux kernel, when a " ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_30_kernel.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5767.md b/2006/CVE-2006-5767.md index 8bc22bfadbd..23fc789f586 100644 --- a/2006/CVE-2006-5767.md +++ b/2006/CVE-2006-5767.md @@ -10,7 +10,6 @@ PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=636860 - https://www.exploit-db.com/exploits/2713 #### Github diff --git a/2006/CVE-2006-5803.md b/2006/CVE-2006-5803.md index 0c9207d27d6..8305e77333d 100644 --- a/2006/CVE-2006-5803.md +++ b/2006/CVE-2006-5803.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the m ### POC #### Reference -- https://www.exploit-db.com/exploits/2723 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5862.md b/2006/CVE-2006-5862.md index 59e1a271bb5..ccf0e01114c 100644 --- a/2006/CVE-2006-5862.md +++ b/2006/CVE-2006-5862.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the session mechanism of the web interface ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=461986 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5978.md b/2006/CVE-2006-5978.md index 0724da3f21b..d33efee1e22 100644 --- a/2006/CVE-2006-5978.md +++ b/2006/CVE-2006-5978.md @@ -10,7 +10,7 @@ Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and atta ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=463210 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-5994.md b/2006/CVE-2006-5994.md index 33808ef851d..f46a6ee6c5c 100644 --- a/2006/CVE-2006-5994.md +++ b/2006/CVE-2006-5994.md @@ -10,7 +10,6 @@ Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word ### POC #### Reference -- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9005698&intsrc=hm_list - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 #### Github diff --git a/2006/CVE-2006-6097.md b/2006/CVE-2006-6097.md index 5d1bf7b51cd..59135fbce9d 100644 --- a/2006/CVE-2006-6097.md +++ b/2006/CVE-2006-6097.md @@ -10,7 +10,7 @@ GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attac ### POC #### Reference -- http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6106.md b/2006/CVE-2006-6106.md index ca23e18626a..48f707a57a9 100644 --- a/2006/CVE-2006-6106.md +++ b/2006/CVE-2006-6106.md @@ -10,7 +10,7 @@ Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_30_kernel.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6190.md b/2006/CVE-2006-6190.md index 59a5db781b4..1a33dd0e24c 100644 --- a/2006/CVE-2006-6190.md +++ b/2006/CVE-2006-6190.md @@ -10,7 +10,7 @@ SQL injection vulnerability in anna.pl in Anna^ IRC Bot before 0.30 (aka caprice ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=466517 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6236.md b/2006/CVE-2006-6236.md index f67b0533092..52963817853 100644 --- a/2006/CVE-2006-6236.md +++ b/2006/CVE-2006-6236.md @@ -10,7 +10,7 @@ Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to ### POC #### Reference -- https://www.exploit-db.com/exploits/3040 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6285.md b/2006/CVE-2006-6285.md index 34822b4ce54..2f776292f5e 100644 --- a/2006/CVE-2006-6285.md +++ b/2006/CVE-2006-6285.md @@ -11,7 +11,6 @@ PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge #### Reference - http://attrition.org/pipermail/vim/2006-December/001159.html -- https://www.exploit-db.com/exploits/2868 #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6465.md b/2006/CVE-2006-6465.md index f13059d3ade..c92f6c71b59 100644 --- a/2006/CVE-2006-6465.md +++ b/2006/CVE-2006-6465.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier all ### POC #### Reference -- https://www.exploit-db.com/exploits/2875 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6497.md b/2006/CVE-2006-6497.md index b3ce6e51139..3699bfc289a 100644 --- a/2006/CVE-2006-6497.md +++ b/2006/CVE-2006-6497.md @@ -10,7 +10,6 @@ Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2. ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.ubuntu.com/usn/usn-400-1 #### Github diff --git a/2006/CVE-2006-6498.md b/2006/CVE-2006-6498.md index 298c054b690..8be9242f8d3 100644 --- a/2006/CVE-2006-6498.md +++ b/2006/CVE-2006-6498.md @@ -10,7 +10,6 @@ Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefo ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.ubuntu.com/usn/usn-400-1 #### Github diff --git a/2006/CVE-2006-6499.md b/2006/CVE-2006-6499.md index ab8fcf4b9ad..70ad6bc11d4 100644 --- a/2006/CVE-2006-6499.md +++ b/2006/CVE-2006-6499.md @@ -10,7 +10,6 @@ The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.ubuntu.com/usn/usn-400-1 #### Github diff --git a/2006/CVE-2006-6500.md b/2006/CVE-2006-6500.md index 2b45c470733..67efe3491d9 100644 --- a/2006/CVE-2006-6500.md +++ b/2006/CVE-2006-6500.md @@ -10,7 +10,7 @@ Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6501.md b/2006/CVE-2006-6501.md index a154ae9df48..fa3a039a791 100644 --- a/2006/CVE-2006-6501.md +++ b/2006/CVE-2006-6501.md @@ -10,7 +10,6 @@ Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1. ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.ubuntu.com/usn/usn-400-1 #### Github diff --git a/2006/CVE-2006-6502.md b/2006/CVE-2006-6502.md index ba989a4e108..30aed21f4f3 100644 --- a/2006/CVE-2006-6502.md +++ b/2006/CVE-2006-6502.md @@ -10,7 +10,6 @@ Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.ubuntu.com/usn/usn-400-1 #### Github diff --git a/2006/CVE-2006-6503.md b/2006/CVE-2006-6503.md index 4a4185bd140..22bbeed6532 100644 --- a/2006/CVE-2006-6503.md +++ b/2006/CVE-2006-6503.md @@ -10,7 +10,6 @@ Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.ubuntu.com/usn/usn-400-1 #### Github diff --git a/2006/CVE-2006-6504.md b/2006/CVE-2006-6504.md index 554a6cf9c7a..586040d7e5f 100644 --- a/2006/CVE-2006-6504.md +++ b/2006/CVE-2006-6504.md @@ -10,7 +10,7 @@ Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6505.md b/2006/CVE-2006-6505.md index 7183b52759b..5723f85b763 100644 --- a/2006/CVE-2006-6505.md +++ b/2006/CVE-2006-6505.md @@ -10,7 +10,6 @@ Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and S ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.ubuntu.com/usn/usn-400-1 #### Github diff --git a/2006/CVE-2006-6506.md b/2006/CVE-2006-6506.md index 2320782dc0f..09334a4178a 100644 --- a/2006/CVE-2006-6506.md +++ b/2006/CVE-2006-6506.md @@ -10,7 +10,7 @@ The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL o ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6507.md b/2006/CVE-2006-6507.md index 026251d9263..995b244c94b 100644 --- a/2006/CVE-2006-6507.md +++ b/2006/CVE-2006-6507.md @@ -10,7 +10,7 @@ Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_06_mozilla.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6515.md b/2006/CVE-2006-6515.md index 14dbfb62f5f..97e337cfbaa 100644 --- a/2006/CVE-2006-6515.md +++ b/2006/CVE-2006-6515.md @@ -10,7 +10,7 @@ Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "re ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=469627 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6566.md b/2006/CVE-2006-6566.md index 39ad6bd0640..250924bfcb7 100644 --- a/2006/CVE-2006-6566.md +++ b/2006/CVE-2006-6566.md @@ -11,7 +11,6 @@ PHP remote file inclusion vulnerability in includes/profilcp_constants.php in th #### Reference - https://www.exploit-db.com/exploits/2904 -- https://www.exploit-db.com/exploits/2918 #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6574.md b/2006/CVE-2006-6574.md index bd3b35995bb..37e72cccd09 100644 --- a/2006/CVE-2006-6574.md +++ b/2006/CVE-2006-6574.md @@ -10,7 +10,7 @@ Mantis before 1.1.0a2 does not implement per-item access control for Issue Histo ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=469627 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6696.md b/2006/CVE-2006-6696.md index ba43d352468..bb6e6d9c865 100644 --- a/2006/CVE-2006-6696.md +++ b/2006/CVE-2006-6696.md @@ -11,7 +11,6 @@ Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows #### Reference - http://isc.sans.org/diary.php?n&storyid=1965 -- http://www.security.nnov.ru/Gnews944.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021 #### Github diff --git a/2006/CVE-2006-6959.md b/2006/CVE-2006-6959.md index 2c8da81c972..a23e030bb03 100644 --- a/2006/CVE-2006-6959.md +++ b/2006/CVE-2006-6959.md @@ -10,7 +10,7 @@ WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup- ### POC #### Reference -- http://www.sentinel.gr/advisories/SGA-0001.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6960.md b/2006/CVE-2006-6960.md index 6faf709a081..04d035b8313 100644 --- a/2006/CVE-2006-6960.md +++ b/2006/CVE-2006-6960.md @@ -10,7 +10,7 @@ The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not ### POC #### Reference -- http://www.sentinel.gr/advisories/SGA-0001.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-6961.md b/2006/CVE-2006-6961.md index f8cc95e989c..00b6641abd8 100644 --- a/2006/CVE-2006-6961.md +++ b/2006/CVE-2006-6961.md @@ -10,7 +10,7 @@ WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file cont ### POC #### Reference -- http://www.sentinel.gr/advisories/SGA-0001.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-7006.md b/2006/CVE-2006-7006.md index 28e397182cb..56c6c24fcb8 100644 --- a/2006/CVE-2006-7006.md +++ b/2006/CVE-2006-7006.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Gra ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0606-exploits/Somery.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-7177.md b/2006/CVE-2006-7177.md index 49d7214e6ed..4fa2c8f2111 100644 --- a/2006/CVE-2006-7177.md +++ b/2006/CVE-2006-7177.md @@ -10,7 +10,7 @@ MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-7178.md b/2006/CVE-2006-7178.md index bb83da69a87..75f446be124 100644 --- a/2006/CVE-2006-7178.md +++ b/2006/CVE-2006-7178.md @@ -10,7 +10,7 @@ MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an I ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-7179.md b/2006/CVE-2006-7179.md index 2a2f5742003..55d4676ba0d 100644 --- a/2006/CVE-2006-7179.md +++ b/2006/CVE-2006-7179.md @@ -10,7 +10,7 @@ ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Swit ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-7180.md b/2006/CVE-2006-7180.md index d5bfd8af8fe..990be7dfffc 100644 --- a/2006/CVE-2006-7180.md +++ b/2006/CVE-2006-7180.md @@ -10,7 +10,7 @@ ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-7192.md b/2006/CVE-2006-7192.md index 3c414de2102..a4300c2afac 100644 --- a/2006/CVE-2006-7192.md +++ b/2006/CVE-2006-7192.md @@ -11,7 +11,6 @@ Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* * #### Reference - http://securityreason.com/securityalert/2530 -- http://www.cpni.gov.uk/docs/re-20061020-00710.pdf #### Github No PoCs found on GitHub currently. diff --git a/2006/CVE-2006-7233.md b/2006/CVE-2006-7233.md index 7f866dc2e04..2daf87487d1 100644 --- a/2006/CVE-2006-7233.md +++ b/2006/CVE-2006-7233.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the ad ### POC #### Reference -- http://www.igniterealtime.org/issues/browse/JM-629 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-0061.md b/2007/CVE-2007-0061.md index 2f213603b26..9db7055b744 100644 --- a/2007/CVE-2007-0061.md +++ b/2007/CVE-2007-0061.md @@ -10,12 +10,7 @@ The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x befor ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-0062.md b/2007/CVE-2007-0062.md index 53d8e41b1cc..e89964e63bd 100644 --- a/2007/CVE-2007-0062.md +++ b/2007/CVE-2007-0062.md @@ -10,12 +10,7 @@ Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-0063.md b/2007/CVE-2007-0063.md index 79043a05e92..cb235483f33 100644 --- a/2007/CVE-2007-0063.md +++ b/2007/CVE-2007-0063.md @@ -10,12 +10,7 @@ Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Buil ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-0345.md b/2007/CVE-2007-0345.md index 332b6f35a69..fbc78310476 100644 --- a/2007/CVE-2007-0345.md +++ b/2007/CVE-2007-0345.md @@ -10,7 +10,7 @@ The (1) Activity Monitor.app/Contents/Resources/pmTool, (2) Keychain Access.app/ ### POC #### Reference -- https://www.exploit-db.com/exploits/3136 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-0720.md b/2007/CVE-2007-0720.md index 8d8a53015e9..3c75f3b2f6e 100644 --- a/2007/CVE-2007-0720.md +++ b/2007/CVE-2007-0720.md @@ -10,7 +10,7 @@ The CUPS service on multiple platforms allows remote attackers to cause a denial ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-0930.md b/2007/CVE-2007-0930.md index e1e12d8014c..44941c17e49 100644 --- a/2007/CVE-2007-0930.md +++ b/2007/CVE-2007-0930.md @@ -10,7 +10,7 @@ Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=660919 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-0975.md b/2007/CVE-2007-0975.md index 4471858d21b..10019affc0d 100644 --- a/2007/CVE-2007-0975.md +++ b/2007/CVE-2007-0975.md @@ -10,7 +10,7 @@ Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=660919 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1069.md b/2007/CVE-2007-1069.md index 50d0b884b9b..4b50e4f69eb 100644 --- a/2007/CVE-2007-1069.md +++ b/2007/CVE-2007-1069.md @@ -10,7 +10,7 @@ The memory management in VMware Workstation before 5.5.4 allows attackers to cau ### POC #### Reference -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1337.md b/2007/CVE-2007-1337.md index 17f92717313..c211e9b466a 100644 --- a/2007/CVE-2007-1337.md +++ b/2007/CVE-2007-1337.md @@ -10,7 +10,7 @@ The virtual machine process (VMX) in VMware Workstation before 5.5.4 does not pr ### POC #### Reference -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1357.md b/2007/CVE-2007-1357.md index 352510aec71..37298d809d7 100644 --- a/2007/CVE-2007-1357.md +++ b/2007/CVE-2007-1357.md @@ -10,7 +10,7 @@ The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, an ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_30_kernel.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1558.md b/2007/CVE-2007-1558.md index 42bd855b742..e1f3926dce9 100644 --- a/2007/CVE-2007-1558.md +++ b/2007/CVE-2007-1558.md @@ -10,7 +10,7 @@ The APOP protocol allows remote attackers to guess the first 3 characters of a p ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1580.md b/2007/CVE-2007-1580.md index 21fdc651897..695458aadc1 100644 --- a/2007/CVE-2007-1580.md +++ b/2007/CVE-2007-1580.md @@ -10,7 +10,7 @@ FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) ### POC #### Reference -- https://www.exploit-db.com/exploits/3523 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1592.md b/2007/CVE-2007-1592.md index 74be2f3c88f..5ac134aca57 100644 --- a/2007/CVE-2007-1592.md +++ b/2007/CVE-2007-1592.md @@ -10,7 +10,7 @@ net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_30_kernel.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1658.md b/2007/CVE-2007-1658.md index 9521fa39e52..e4e8433e5ca 100644 --- a/2007/CVE-2007-1658.md +++ b/2007/CVE-2007-1658.md @@ -11,7 +11,6 @@ Windows Mail in Microsoft Windows Vista might allow user-assisted remote attacke #### Reference - http://isc.sans.org/diary.html?storyid=2507 -- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9014194 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034 #### Github diff --git a/2007/CVE-2007-1710.md b/2007/CVE-2007-1710.md index 0b60fb1cc56..971feefa51f 100644 --- a/2007/CVE-2007-1710.md +++ b/2007/CVE-2007-1710.md @@ -10,7 +10,7 @@ The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent at ### POC #### Reference -- https://www.exploit-db.com/exploits/3573 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1744.md b/2007/CVE-2007-1744.md index 8c196de8aaf..38c6c840149 100644 --- a/2007/CVE-2007-1744.md +++ b/2007/CVE-2007-1744.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the Shared Folders feature for VMware Works ### POC #### Reference -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1876.md b/2007/CVE-2007-1876.md index 46e1268ddf4..c95e77022a2 100644 --- a/2007/CVE-2007-1876.md +++ b/2007/CVE-2007-1876.md @@ -10,7 +10,7 @@ VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit ### POC #### Reference -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1877.md b/2007/CVE-2007-1877.md index 32159e851a1..d906b0a6b29 100644 --- a/2007/CVE-2007-1877.md +++ b/2007/CVE-2007-1877.md @@ -10,7 +10,7 @@ VMware Workstation before 5.5.4 allows attackers to cause a denial of service ag ### POC #### Reference -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1935.md b/2007/CVE-2007-1935.md index 2a3b895dbb3..dd719687e88 100644 --- a/2007/CVE-2007-1935.md +++ b/2007/CVE-2007-1935.md @@ -10,7 +10,7 @@ PHP file inclusion vulnerability in admin/index.php in ScarAdControl (ScarAdCont ### POC #### Reference -- https://www.exploit-db.com/exploits/3682 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1936.md b/2007/CVE-2007-1936.md index 9888335143d..a9ede4a78e5 100644 --- a/2007/CVE-2007-1936.md +++ b/2007/CVE-2007-1936.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl (S ### POC #### Reference -- https://www.exploit-db.com/exploits/3682 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1976.md b/2007/CVE-2007-1976.md index f78d1077e96..39264998f28 100644 --- a/2007/CVE-2007-1976.md +++ b/2007/CVE-2007-1976.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and ### POC #### Reference -- https://www.exploit-db.com/exploits/3642 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-1981.md b/2007/CVE-2007-1981.md index 5565bd9b821..f91a6d22396 100644 --- a/2007/CVE-2007-1981.md +++ b/2007/CVE-2007-1981.md @@ -10,7 +10,7 @@ The safevoid_vsnprintf function in Metamod-P 1.19p29 and earlier on Windows allo ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=498782 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2017.md b/2007/CVE-2007-2017.md index 0ae44467cb1..136c26e2bb1 100644 --- a/2007/CVE-2007-2017.md +++ b/2007/CVE-2007-2017.md @@ -10,7 +10,7 @@ siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authe ### POC #### Reference -- http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2018.md b/2007/CVE-2007-2018.md index 266ed77e9c1..ddcf77430be 100644 --- a/2007/CVE-2007-2018.md +++ b/2007/CVE-2007-2018.md @@ -10,7 +10,7 @@ SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allo ### POC #### Reference -- http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2315.md b/2007/CVE-2007-2315.md index 6dcac4b2400..0cddec453a4 100644 --- a/2007/CVE-2007-2315.md +++ b/2007/CVE-2007-2315.md @@ -10,7 +10,7 @@ MiniShare 1.5.4, and possibly earlier, allows remote attackers to cause a denial ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=685448 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2447.md b/2007/CVE-2007-2447.md index f7a013c6c29..8ce101f78cd 100644 --- a/2007/CVE-2007-2447.md +++ b/2007/CVE-2007-2447.md @@ -11,7 +11,6 @@ The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote #### Reference - http://securityreason.com/securityalert/2700 -- http://www.novell.com/linux/security/advisories/2007_14_sr.html #### Github - https://github.com/0xKn/CVE-2007-2447 diff --git a/2007/CVE-2007-2550.md b/2007/CVE-2007-2550.md index 369c9442b53..bd3a765bb0e 100644 --- a/2007/CVE-2007-2550.md +++ b/2007/CVE-2007-2550.md @@ -11,7 +11,6 @@ Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remot #### Reference - http://securityreason.com/securityalert/2678 -- http://www.cubecart.com/site/forums/index.php?s=0cbaa8a2f26fc573d1fc888285f610b1&showtopic=27418 #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2601.md b/2007/CVE-2007-2601.md index abe2f4a121a..57cbb17713e 100644 --- a/2007/CVE-2007-2601.md +++ b/2007/CVE-2007-2601.md @@ -10,7 +10,7 @@ Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer ### POC #### Reference -- https://www.exploit-db.com/exploits/3889 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2645.md b/2007/CVE-2007-2645.md index e4f5e4ad0a8..0ede2f86c2e 100644 --- a/2007/CVE-2007-2645.md +++ b/2007/CVE-2007-2645.md @@ -10,7 +10,7 @@ Integer overflow in the exif_data_load_data_entry function in exif-data.c in lib ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2790.md b/2007/CVE-2007-2790.md index e86521302bb..d4c169c7109 100644 --- a/2007/CVE-2007-2790.md +++ b/2007/CVE-2007-2790.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in shopcontent.asp in VP-ASP Shopping C #### Reference - http://securityreason.com/securityalert/2728 -- http://www.vpasp.com/helpnotes/fixes.asp?version=v650 #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2829.md b/2007/CVE-2007-2829.md index 3b7c028df72..dbad9c83d80 100644 --- a/2007/CVE-2007-2829.md +++ b/2007/CVE-2007-2829.md @@ -10,7 +10,7 @@ The 802.11 network stack in net80211/ieee80211_input.c in MadWifi before 0.9.3.1 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2830.md b/2007/CVE-2007-2830.md index d37e19ed8d5..b764e3bf796 100644 --- a/2007/CVE-2007-2830.md +++ b/2007/CVE-2007-2830.md @@ -10,7 +10,7 @@ The ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remo ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2831.md b/2007/CVE-2007-2831.md index cd38504819b..df8eaf7d84e 100644 --- a/2007/CVE-2007-2831.md +++ b/2007/CVE-2007-2831.md @@ -10,7 +10,7 @@ Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioct ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2948.md b/2007/CVE-2007-2948.md index d139446883d..fbc62cfcefd 100644 --- a/2007/CVE-2007-2948.md +++ b/2007/CVE-2007-2948.md @@ -10,7 +10,7 @@ Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2958.md b/2007/CVE-2007-2958.md index d524663bf89..0fc69ef1645 100644 --- a/2007/CVE-2007-2958.md +++ b/2007/CVE-2007-2958.md @@ -11,7 +11,6 @@ Format string vulnerability in the inc_put_error function in src/inc.c in Sylphe #### Reference - http://bugs.gentoo.org/show_bug.cgi?id=190104 -- http://www.novell.com/linux/security/advisories/2007_20_sr.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-2975.md b/2007/CVE-2007-2975.md index 1f09ddb37fe..2dc32884eca 100644 --- a/2007/CVE-2007-2975.md +++ b/2007/CVE-2007-2975.md @@ -10,7 +10,7 @@ The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfi ### POC #### Reference -- http://www.igniterealtime.org/issues/browse/JM-1049 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3010.md b/2007/CVE-2007-3010.md index ce167339e4c..db358bce094 100644 --- a/2007/CVE-2007-3010.md +++ b/2007/CVE-2007-3010.md @@ -11,7 +11,6 @@ masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communic #### Reference - http://marc.info/?l=full-disclosure&m=119002152126755&w=2 -- http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3011.md b/2007/CVE-2007-3011.md index aef0d89059c..6170f2f9555 100644 --- a/2007/CVE-2007-3011.md +++ b/2007/CVE-2007-3011.md @@ -11,7 +11,6 @@ The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers S #### Reference - http://securityreason.com/securityalert/2858 -- http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3012.md b/2007/CVE-2007-3012.md index 38943b26dfd..c0cf2eb3110 100644 --- a/2007/CVE-2007-3012.md +++ b/2007/CVE-2007-3012.md @@ -10,7 +10,7 @@ The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allow ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3013.md b/2007/CVE-2007-3013.md index 758d61deca4..679b33333d3 100644 --- a/2007/CVE-2007-3013.md +++ b/2007/CVE-2007-3013.md @@ -10,7 +10,7 @@ SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows re ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2007-004.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3014.md b/2007/CVE-2007-3014.md index e0c78eeade7..776719f78b2 100644 --- a/2007/CVE-2007-3014.md +++ b/2007/CVE-2007-3014.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver b ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2007-005.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3017.md b/2007/CVE-2007-3017.md index f159d91960d..348a2168210 100644 --- a/2007/CVE-2007-3017.md +++ b/2007/CVE-2007-3017.md @@ -10,7 +10,7 @@ The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only fi ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2007-006.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3018.md b/2007/CVE-2007-3018.md index d04ba5efb1b..fe00027f197 100644 --- a/2007/CVE-2007-3018.md +++ b/2007/CVE-2007-3018.md @@ -10,7 +10,7 @@ activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation abi ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2007-007.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3132.md b/2007/CVE-2007-3132.md index 969849a92f0..6063aa65882 100644 --- a/2007/CVE-2007-3132.md +++ b/2007/CVE-2007-3132.md @@ -10,7 +10,7 @@ Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, wit ### POC #### Reference -- http://www.symantec.com/avcenter/security/Content/2007.06.05b.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3142.md b/2007/CVE-2007-3142.md index ae9da631e77..022524834ab 100644 --- a/2007/CVE-2007-3142.md +++ b/2007/CVE-2007-3142.md @@ -10,7 +10,7 @@ Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof t ### POC #### Reference -- http://www.0x000000.com/?i=334 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3143.md b/2007/CVE-2007-3143.md index 4b37665d223..d57a10a50a3 100644 --- a/2007/CVE-2007-3143.md +++ b/2007/CVE-2007-3143.md @@ -10,7 +10,7 @@ Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to sp ### POC #### Reference -- http://www.0x000000.com/?i=334 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3144.md b/2007/CVE-2007-3144.md index 0795f726288..7c993114bc2 100644 --- a/2007/CVE-2007-3144.md +++ b/2007/CVE-2007-3144.md @@ -10,7 +10,7 @@ Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spo ### POC #### Reference -- http://www.0x000000.com/?i=334 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3145.md b/2007/CVE-2007-3145.md index d55f7da55ec..add9bea0542 100644 --- a/2007/CVE-2007-3145.md +++ b/2007/CVE-2007-3145.md @@ -10,7 +10,7 @@ Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof ### POC #### Reference -- http://www.0x000000.com/?i=334 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3257.md b/2007/CVE-2007-3257.md index 5f95df80e12..a76a9b077cc 100644 --- a/2007/CVE-2007-3257.md +++ b/2007/CVE-2007-3257.md @@ -10,7 +10,7 @@ Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1. ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3372.md b/2007/CVE-2007-3372.md index 75d1c5c4ea8..b6a1edad7cc 100644 --- a/2007/CVE-2007-3372.md +++ b/2007/CVE-2007-3372.md @@ -10,7 +10,7 @@ The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of se ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3456.md b/2007/CVE-2007-3456.md index 03945d195ee..42596079449 100644 --- a/2007/CVE-2007-3456.md +++ b/2007/CVE-2007-3456.md @@ -10,7 +10,7 @@ Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote a ### POC #### Reference -- http://www.mindedsecurity.com/labs/advisories/MSA01110707 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3495.md b/2007/CVE-2007-3495.md index 242e78ebbf4..8be3740e26e 100644 --- a/2007/CVE-2007-3495.md +++ b/2007/CVE-2007-3495.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communic #### Reference - http://securityreason.com/securityalert/2849 -- http://www.csnc.ch/advisory/sap02.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3496.md b/2007/CVE-2007-3496.md index aa859d8c3a3..1e98293ccf6 100644 --- a/2007/CVE-2007-3496.md +++ b/2007/CVE-2007-3496.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in S #### Reference - http://securityreason.com/securityalert/2850 -- http://www.csnc.ch/advisory/sap01.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3671.md b/2007/CVE-2007-3671.md index 29df115b008..87934769137 100644 --- a/2007/CVE-2007-3671.md +++ b/2007/CVE-2007-3671.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecifi ### POC #### Reference -- http://www.immunityinc.com/downloads/0day_IPO.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3803.md b/2007/CVE-2007-3803.md index e70cd735638..ff7ffe87310 100644 --- a/2007/CVE-2007-3803.md +++ b/2007/CVE-2007-3803.md @@ -10,8 +10,7 @@ The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properl ### POC #### Reference -- http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf -- http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3804.md b/2007/CVE-2007-3804.md index 68ecf9ad9e9..065ec8f0b85 100644 --- a/2007/CVE-2007-3804.md +++ b/2007/CVE-2007-3804.md @@ -10,8 +10,7 @@ The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8. ### POC #### Reference -- http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf -- http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3805.md b/2007/CVE-2007-3805.md index c0983e6fe07..021a643e053 100644 --- a/2007/CVE-2007-3805.md +++ b/2007/CVE-2007-3805.md @@ -10,8 +10,7 @@ The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does n ### POC #### Reference -- http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf -- http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-3812.md b/2007/CVE-2007-3812.md index ba5ca96968a..a5196d0cbeb 100644 --- a/2007/CVE-2007-3812.md +++ b/2007/CVE-2007-3812.md @@ -10,7 +10,7 @@ SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows rem ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0707-exploits/cmscout.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4045.md b/2007/CVE-2007-4045.md index a1e7ad2ef9a..57927e71f9d 100644 --- a/2007/CVE-2007-4045.md +++ b/2007/CVE-2007-4045.md @@ -10,7 +10,7 @@ The CUPS service, as used in SUSE Linux before 20070720 and other Linux distribu ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_14_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4059.md b/2007/CVE-2007-4059.md index 85f0676dfb9..9cb205d9a18 100644 --- a/2007/CVE-2007-4059.md +++ b/2007/CVE-2007-4059.md @@ -10,12 +10,6 @@ Absolute path traversal vulnerability in a certain ActiveX control in IntraProce ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - https://www.exploit-db.com/exploits/4240 #### Github diff --git a/2007/CVE-2007-4155.md b/2007/CVE-2007-4155.md index eadb27fb539..215b2a02de8 100644 --- a/2007/CVE-2007-4155.md +++ b/2007/CVE-2007-4155.md @@ -10,12 +10,6 @@ Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - https://www.exploit-db.com/exploits/4245 #### Github diff --git a/2007/CVE-2007-4233.md b/2007/CVE-2007-4233.md index 7c6878a1144..090bca5ffa9 100644 --- a/2007/CVE-2007-4233.md +++ b/2007/CVE-2007-4233.md @@ -10,7 +10,7 @@ Multiple unspecified vulnerabilities in Camera Life before 2.6 allow attackers t ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=721006 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4234.md b/2007/CVE-2007-4234.md index 89f32ba6a91..b947290342d 100644 --- a/2007/CVE-2007-4234.md +++ b/2007/CVE-2007-4234.md @@ -10,7 +10,7 @@ Unspecified vulnerability in Camera Life before 2.6 allows remote attackers to d ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=721006 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4282.md b/2007/CVE-2007-4282.md index 305660e3aac..0ea0f8d72df 100644 --- a/2007/CVE-2007-4282.md +++ b/2007/CVE-2007-4282.md @@ -10,7 +10,7 @@ The "Extended properties for entries" (entryproperties) plugin in serendipity_ev ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=722867 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4351.md b/2007/CVE-2007-4351.md index d20aeb75150..4b96ba7bf02 100644 --- a/2007/CVE-2007-4351.md +++ b/2007/CVE-2007-4351.md @@ -10,7 +10,7 @@ Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows re ### POC #### Reference -- http://www.cups.org/str.php?L2561 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4385.md b/2007/CVE-2007-4385.md index b0ecaba463d..df65ad38234 100644 --- a/2007/CVE-2007-4385.md +++ b/2007/CVE-2007-4385.md @@ -10,7 +10,6 @@ OWASP Stinger before 2.5 allows remote attackers to bypass input validation rout ### POC #### Reference -- http://o0o.nu/~meder/o0o_bypassing_servlet_input_validation_filters.txt - http://securityreason.com/securityalert/3035 #### Github diff --git a/2007/CVE-2007-4496.md b/2007/CVE-2007-4496.md index ae1d2d43c28..c51de2563d7 100644 --- a/2007/CVE-2007-4496.md +++ b/2007/CVE-2007-4496.md @@ -10,12 +10,7 @@ Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4497.md b/2007/CVE-2007-4497.md index 57738fef24c..f57c7cd0a2b 100644 --- a/2007/CVE-2007-4497.md +++ b/2007/CVE-2007-4497.md @@ -10,12 +10,7 @@ Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4664.md b/2007/CVE-2007-4664.md index 87ab60ef806..eaded0cdad7 100644 --- a/2007/CVE-2007-4664.md +++ b/2007/CVE-2007-4664.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the (1) attach database and (2) create database fun ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=535898 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4665.md b/2007/CVE-2007-4665.md index b5e470d05e5..d81c8930f73 100644 --- a/2007/CVE-2007-4665.md +++ b/2007/CVE-2007-4665.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote a ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=535898 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4666.md b/2007/CVE-2007-4666.md index a6a74230e91..0ec83e5c73b 100644 --- a/2007/CVE-2007-4666.md +++ b/2007/CVE-2007-4666.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superse ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=535898 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4667.md b/2007/CVE-2007-4667.md index e95a7b41a4d..c5b09f7e722 100644 --- a/2007/CVE-2007-4667.md +++ b/2007/CVE-2007-4667.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows re ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=535898 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4668.md b/2007/CVE-2007-4668.md index 72b64439854..b4426a55df5 100644 --- a/2007/CVE-2007-4668.md +++ b/2007/CVE-2007-4668.md @@ -10,7 +10,6 @@ Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote a ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=535898 - http://tracker.firebirdsql.org/browse/CORE-1312 #### Github diff --git a/2007/CVE-2007-4669.md b/2007/CVE-2007-4669.md index 29dfc0476a0..d3db4f9ac59 100644 --- a/2007/CVE-2007-4669.md +++ b/2007/CVE-2007-4669.md @@ -10,7 +10,7 @@ The Services API in Firebird before 2.0.2 allows remote authenticated users with ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=535898 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-4727.md b/2007/CVE-2007-4727.md index 5fe67d11f32..14908f1a4c5 100644 --- a/2007/CVE-2007-4727.md +++ b/2007/CVE-2007-4727.md @@ -11,7 +11,6 @@ Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in t #### Reference - http://securityreason.com/securityalert/3127 -- http://www.novell.com/linux/security/advisories/2007_20_sr.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5023.md b/2007/CVE-2007-5023.md index 7dae661c7c8..d5ed879b200 100644 --- a/2007/CVE-2007-5023.md +++ b/2007/CVE-2007-5023.md @@ -10,12 +10,7 @@ Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5. ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5024.md b/2007/CVE-2007-5024.md index 0050de79fe4..c67d1ee063a 100644 --- a/2007/CVE-2007-5024.md +++ b/2007/CVE-2007-5024.md @@ -10,7 +10,7 @@ EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unsp ### POC #### Reference -- http://www.vmware.com/support/server/doc/releasenotes_server.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5025.md b/2007/CVE-2007-5025.md index 42aba011249..2954de2e81a 100644 --- a/2007/CVE-2007-5025.md +++ b/2007/CVE-2007-5025.md @@ -10,7 +10,7 @@ Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows atta ### POC #### Reference -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5135.md b/2007/CVE-2007-5135.md index 2dad46195c3..054eaad06c6 100644 --- a/2007/CVE-2007-5135.md +++ b/2007/CVE-2007-5135.md @@ -11,7 +11,6 @@ Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0 #### Reference - http://securityreason.com/securityalert/3179 -- http://www.novell.com/linux/security/advisories/2007_20_sr.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5137.md b/2007/CVE-2007-5137.md index eb529e84f7b..ff80286c8a8 100644 --- a/2007/CVE-2007-5137.md +++ b/2007/CVE-2007-5137.md @@ -10,7 +10,7 @@ Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_20_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5195.md b/2007/CVE-2007-5195.md index 5ec14096ad4..0a95de7d4cc 100644 --- a/2007/CVE-2007-5195.md +++ b/2007/CVE-2007-5195.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the SSL implementation in Groupwise client system i ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_20_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5196.md b/2007/CVE-2007-5196.md index 0786f55da2f..5fabce67b43 100644 --- a/2007/CVE-2007-5196.md +++ b/2007/CVE-2007-5196.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the SSL implementation in Groupwise client system i ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_20_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5200.md b/2007/CVE-2007-5200.md index 73fd8007f0e..39745f6fbf6 100644 --- a/2007/CVE-2007-5200.md +++ b/2007/CVE-2007-5200.md @@ -10,7 +10,7 @@ hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10. ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2007_20_sr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5269.md b/2007/CVE-2007-5269.md index 3097cd0c05a..bb6f89b5d0a 100644 --- a/2007/CVE-2007-5269.md +++ b/2007/CVE-2007-5269.md @@ -13,11 +13,6 @@ Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow rem - http://bugs.gentoo.org/show_bug.cgi?id=195261 - http://www.coresecurity.com/?action=item&id=2148 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5361.md b/2007/CVE-2007-5361.md index f726d92d55e..832e312b955 100644 --- a/2007/CVE-2007-5361.md +++ b/2007/CVE-2007-5361.md @@ -10,7 +10,7 @@ The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier ca ### POC #### Reference -- http://www.csnc.ch/static/advisory/csnc/alcatel_omnipcx_enterprise_audio_rerouting_vulnerability_v1.0.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5438.md b/2007/CVE-2007-5438.md index 837e46f173f..ec609ba9f81 100644 --- a/2007/CVE-2007-5438.md +++ b/2007/CVE-2007-5438.md @@ -11,12 +11,6 @@ Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware #### Reference - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5503.md b/2007/CVE-2007-5503.md index 2e4c2130198..8ffc687d280 100644 --- a/2007/CVE-2007-5503.md +++ b/2007/CVE-2007-5503.md @@ -11,9 +11,6 @@ Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers t #### Reference - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5591.md b/2007/CVE-2007-5591.md index 4a37e071180..3df7aee52cb 100644 --- a/2007/CVE-2007-5591.md +++ b/2007/CVE-2007-5591.md @@ -10,7 +10,7 @@ The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabi ### POC #### Reference -- http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5617.md b/2007/CVE-2007-5617.md index 2b3c55a895e..ec3c6fb13b8 100644 --- a/2007/CVE-2007-5617.md +++ b/2007/CVE-2007-5617.md @@ -10,10 +10,7 @@ Unspecified vulnerability in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0 ### POC #### Reference -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5618.md b/2007/CVE-2007-5618.md index 5a475c8b752..1a5cd46f7fc 100644 --- a/2007/CVE-2007-5618.md +++ b/2007/CVE-2007-5618.md @@ -10,11 +10,7 @@ Unquoted Windows search path vulnerability in the Authorization and other servic ### POC #### Reference -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5619.md b/2007/CVE-2007-5619.md index d8b5a9ba634..bf86cd62189 100644 --- a/2007/CVE-2007-5619.md +++ b/2007/CVE-2007-5619.md @@ -10,7 +10,7 @@ Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to ### POC #### Reference -- http://www.vmware.com/support/server/doc/releasenotes_server.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5635.md b/2007/CVE-2007-5635.md index a1c32e46510..f2e437499a5 100644 --- a/2007/CVE-2007-5635.md +++ b/2007/CVE-2007-5635.md @@ -10,7 +10,7 @@ Multiple unspecified vulnerabilities in Salford Software Support Incident Tracke ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=547027 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5636.md b/2007/CVE-2007-5636.md index d9a6badb958..b52603e9c78 100644 --- a/2007/CVE-2007-5636.md +++ b/2007/CVE-2007-5636.md @@ -10,7 +10,7 @@ Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers ### POC #### Reference -- http://www.csnc.ch/static/advisory/csnc/nortel_UNIStim_IP_softphone_buffer-overflow_v1.0.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5637.md b/2007/CVE-2007-5637.md index abec19a033a..5a0c6d081b1 100644 --- a/2007/CVE-2007-5637.md +++ b/2007/CVE-2007-5637.md @@ -10,7 +10,7 @@ The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel prod ### POC #### Reference -- http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5638.md b/2007/CVE-2007-5638.md index 12d86a86361..f2563d89c4c 100644 --- a/2007/CVE-2007-5638.md +++ b/2007/CVE-2007-5638.md @@ -10,7 +10,7 @@ The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel prod ### POC #### Reference -- http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5639.md b/2007/CVE-2007-5639.md index c2a3e51b196..1ff68e865f8 100644 --- a/2007/CVE-2007-5639.md +++ b/2007/CVE-2007-5639.md @@ -11,7 +11,6 @@ The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, #### Reference - http://securityreason.com/securityalert/3273 -- http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5640.md b/2007/CVE-2007-5640.md index 6e6e0f11b95..fc806c772f2 100644 --- a/2007/CVE-2007-5640.md +++ b/2007/CVE-2007-5640.md @@ -10,7 +10,7 @@ The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel prod ### POC #### Reference -- http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5753.md b/2007/CVE-2007-5753.md index 9619046dbc9..5bdadc78440 100644 --- a/2007/CVE-2007-5753.md +++ b/2007/CVE-2007-5753.md @@ -10,7 +10,7 @@ Unspecified vulnerability in Light FMan PHP (lfman or lightfman) before 2.0rc1 h ### POC #### Reference -- http://sourceforge.net/forum/forum.php?forum_id=749157 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5803.md b/2007/CVE-2007-5803.md index e23596ed485..7e436d57ed0 100644 --- a/2007/CVE-2007-5803.md +++ b/2007/CVE-2007-5803.md @@ -10,7 +10,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios be ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=600377 - http://sourceforge.net/project/shownotes.php?release_id=600377&group_id=26589 #### Github diff --git a/2007/CVE-2007-5811.md b/2007/CVE-2007-5811.md index 4918d72a9e8..967514e62f1 100644 --- a/2007/CVE-2007-5811.md +++ b/2007/CVE-2007-5811.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences ### POC #### Reference -- https://www.exploit-db.com/exploits/4590 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5816.md b/2007/CVE-2007-5816.md index d6c530cc352..ef2c5455506 100644 --- a/2007/CVE-2007-5816.md +++ b/2007/CVE-2007-5816.md @@ -10,7 +10,7 @@ dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obt ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5817.md b/2007/CVE-2007-5817.md index 7c17c39dbe8..e2ff0e0bb11 100644 --- a/2007/CVE-2007-5817.md +++ b/2007/CVE-2007-5817.md @@ -10,7 +10,7 @@ dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to per ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5838.md b/2007/CVE-2007-5838.md index 9fe507bdc6a..465acb6ba63 100644 --- a/2007/CVE-2007-5838.md +++ b/2007/CVE-2007-5838.md @@ -10,7 +10,7 @@ Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows loca ### POC #### Reference -- http://www.symantec.com/avcenter/security/Content/2007.10.31a.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5849.md b/2007/CVE-2007-5849.md index 02ba4f7d601..686854bb8b8 100644 --- a/2007/CVE-2007-5849.md +++ b/2007/CVE-2007-5849.md @@ -10,7 +10,7 @@ Integer underflow in the asn1_get_string function in the SNMP back end (backend/ ### POC #### Reference -- http://www.cups.org/str.php?L2589 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-5982.md b/2007/CVE-2007-5982.md index 64606ebcb27..ec65a020c05 100644 --- a/2007/CVE-2007-5982.md +++ b/2007/CVE-2007-5982.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0711-exploits/x7-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-6338.md b/2007/CVE-2007-6338.md index 7e4f9a770ba..53c7899764c 100644 --- a/2007/CVE-2007-6338.md +++ b/2007/CVE-2007-6338.md @@ -10,7 +10,7 @@ SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0712-exploits/trivantis-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2007/CVE-2007-6357.md b/2007/CVE-2007-6357.md index 2eb492669d6..c4ca0e54722 100644 --- a/2007/CVE-2007-6357.md +++ b/2007/CVE-2007-6357.md @@ -10,7 +10,7 @@ Stack-based buffer overflow in Microsoft Office Access allows remote, user-assis ### POC #### Reference -- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9052538&source=rss_topic17 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-0085.md b/2008/CVE-2008-0085.md index cafa17abbc9..d36482eb7a4 100644 --- a/2008/CVE-2008-0085.md +++ b/2008/CVE-2008-0085.md @@ -11,7 +11,6 @@ SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 #### Github diff --git a/2008/CVE-2008-0086.md b/2008/CVE-2008-0086.md index 24340d99ea7..fe6b86ec995 100644 --- a/2008/CVE-2008-0086.md +++ b/2008/CVE-2008-0086.md @@ -11,7 +11,6 @@ Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 D #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 #### Github diff --git a/2008/CVE-2008-0106.md b/2008/CVE-2008-0106.md index e12a730deb9..6c47866ef90 100644 --- a/2008/CVE-2008-0106.md +++ b/2008/CVE-2008-0106.md @@ -11,7 +11,6 @@ Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Editi #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 #### Github diff --git a/2008/CVE-2008-0107.md b/2008/CVE-2008-0107.md index 3fa0befe564..ad01fcf5db7 100644 --- a/2008/CVE-2008-0107.md +++ b/2008/CVE-2008-0107.md @@ -11,7 +11,6 @@ Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Deskto #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 #### Github diff --git a/2008/CVE-2008-0300.md b/2008/CVE-2008-0300.md index 2c712e2e715..e7231623b99 100644 --- a/2008/CVE-2008-0300.md +++ b/2008/CVE-2008-0300.md @@ -10,7 +10,6 @@ mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitr ### POC #### Reference -- http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php - https://www.exploit-db.com/exploits/5232 #### Github diff --git a/2008/CVE-2008-0301.md b/2008/CVE-2008-0301.md index 349b2e79440..4395eb4ec67 100644 --- a/2008/CVE-2008-0301.md +++ b/2008/CVE-2008-0301.md @@ -12,7 +12,6 @@ Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers #### Reference - http://marc.info/?l=full-disclosure&m=120523564611595&w=2 - http://securityreason.com/securityalert/3728 -- http://www.redteam-pentesting.de/advisories/rt-sa-2008-002.php - https://www.exploit-db.com/exploits/5233 #### Github diff --git a/2008/CVE-2008-0374.md b/2008/CVE-2008-0374.md index af50c217fff..74a985a2b9a 100644 --- a/2008/CVE-2008-0374.md +++ b/2008/CVE-2008-0374.md @@ -10,7 +10,7 @@ OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 s ### POC #### Reference -- http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-0375.md b/2008/CVE-2008-0375.md index 6bc1a1cd403..6e97eb805da 100644 --- a/2008/CVE-2008-0375.md +++ b/2008/CVE-2008-0375.md @@ -10,7 +10,7 @@ Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System ### POC #### Reference -- http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-0385.md b/2008/CVE-2008-0385.md index d7461503aa7..56a3a82f5b5 100644 --- a/2008/CVE-2008-0385.md +++ b/2008/CVE-2008-0385.md @@ -11,7 +11,6 @@ SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows re #### Reference - http://securityreason.com/securityalert/3707 -- http://www.csnc.ch/misc/files/advisories/CVE-2008-0385.txt #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-0455.md b/2008/CVE-2008-0455.md index a26ee89d62c..624bcf4b5f3 100644 --- a/2008/CVE-2008-0455.md +++ b/2008/CVE-2008-0455.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Ap #### Reference - http://securityreason.com/securityalert/3575 -- http://www.mindedsecurity.com/MSA01150108.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-0456.md b/2008/CVE-2008-0456.md index 57eb0a0aabb..3c5aec45149 100644 --- a/2008/CVE-2008-0456.md +++ b/2008/CVE-2008-0456.md @@ -11,7 +11,6 @@ CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Se #### Reference - http://securityreason.com/securityalert/3575 -- http://www.mindedsecurity.com/MSA01150108.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-0508.md b/2008/CVE-2008-0508.md index 7edcad03a8e..da141eb6383 100644 --- a/2008/CVE-2008-0508.md +++ b/2008/CVE-2008-0508.md @@ -10,7 +10,6 @@ Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.ph ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0801-advisories/deans-xsrf.txt - http://securityreason.com/securityalert/3595 #### Github diff --git a/2008/CVE-2008-0659.md b/2008/CVE-2008-0659.md index 558fa4e4513..868553ed77f 100644 --- a/2008/CVE-2008-0659.md +++ b/2008/CVE-2008-0659.md @@ -10,7 +10,6 @@ Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUplo ### POC #### Reference -- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483 - https://www.exploit-db.com/exploits/5025 #### Github diff --git a/2008/CVE-2008-0660.md b/2008/CVE-2008-0660.md index 663abae12df..7798ccb5640 100644 --- a/2008/CVE-2008-0660.md +++ b/2008/CVE-2008-0660.md @@ -10,7 +10,6 @@ Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ### POC #### Reference -- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483 - https://www.exploit-db.com/exploits/5049 #### Github diff --git a/2008/CVE-2008-0923.md b/2008/CVE-2008-0923.md index 009f1ab3505..0e818918b2c 100644 --- a/2008/CVE-2008-0923.md +++ b/2008/CVE-2008-0923.md @@ -12,10 +12,6 @@ Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1 #### Reference - http://securityreason.com/securityalert/3700 - http://www.coresecurity.com/?action=item&id=2129 -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-0960.md b/2008/CVE-2008-0960.md index 387ce78ce6d..fd7c1b5095e 100644 --- a/2008/CVE-2008-0960.md +++ b/2008/CVE-2008-0960.md @@ -11,7 +11,6 @@ SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3. #### Reference - http://securityreason.com/securityalert/3933 -- http://sourceforge.net/forum/forum.php?forum_id=833770 - http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml - http://www.ubuntu.com/usn/usn-685-1 - https://bugzilla.redhat.com/show_bug.cgi?id=447974 diff --git a/2008/CVE-2008-1310.md b/2008/CVE-2008-1310.md index c15f7706440..cc8dda910bd 100644 --- a/2008/CVE-2008-1310.md +++ b/2008/CVE-2008-1310.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt36 ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1312.md b/2008/CVE-2008-1312.md index 21c740f98da..e4fd6533af3 100644 --- a/2008/CVE-2008-1312.md +++ b/2008/CVE-2008-1312.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool S ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-09.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1340.md b/2008/CVE-2008-1340.md index da903f0ae6f..0fa1ed5be32 100644 --- a/2008/CVE-2008-1340.md +++ b/2008/CVE-2008-1340.md @@ -10,8 +10,7 @@ Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x befor ### POC #### Reference -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1361.md b/2008/CVE-2008-1361.md index 7546f8a3a9f..926603b6ede 100644 --- a/2008/CVE-2008-1361.md +++ b/2008/CVE-2008-1361.md @@ -10,11 +10,7 @@ VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0. ### POC #### Reference -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1362.md b/2008/CVE-2008-1362.md index 2802f757886..66d8caef2b1 100644 --- a/2008/CVE-2008-1362.md +++ b/2008/CVE-2008-1362.md @@ -10,11 +10,7 @@ VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0. ### POC #### Reference -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1363.md b/2008/CVE-2008-1363.md index 831d9b832ca..a97b95f414d 100644 --- a/2008/CVE-2008-1363.md +++ b/2008/CVE-2008-1363.md @@ -10,11 +10,7 @@ VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0. ### POC #### Reference -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1364.md b/2008/CVE-2008-1364.md index 55ef1d83c96..35a3b042635 100644 --- a/2008/CVE-2008-1364.md +++ b/2008/CVE-2008-1364.md @@ -10,9 +10,7 @@ Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before ### POC #### Reference -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1392.md b/2008/CVE-2008-1392.md index 3f9b53dac23..cfddf42ba86 100644 --- a/2008/CVE-2008-1392.md +++ b/2008/CVE-2008-1392.md @@ -10,8 +10,7 @@ The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x befor ### POC #### Reference -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1545.md b/2008/CVE-2008-1545.md index 07a59b5286b..2abcba1ad22 100644 --- a/2008/CVE-2008-1545.md +++ b/2008/CVE-2008-1545.md @@ -11,7 +11,6 @@ The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet E #### Reference - http://securityreason.com/securityalert/3786 -- http://www.mindedsecurity.com/MSA01240108.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1610.md b/2008/CVE-2008-1610.md index a2cab018cc5..79f511f00c7 100644 --- a/2008/CVE-2008-1610.md +++ b/2008/CVE-2008-1610.md @@ -10,7 +10,6 @@ Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote ### POC #### Reference -- http://www.offensive-security.com/0day/quick-tftp-poc.py.txt - https://www.exploit-db.com/exploits/5315 #### Github diff --git a/2008/CVE-2008-1728.md b/2008/CVE-2008-1728.md index 7dc8cc00260..e884faa2f21 100644 --- a/2008/CVE-2008-1728.md +++ b/2008/CVE-2008-1728.md @@ -10,7 +10,7 @@ ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authe ### POC #### Reference -- http://www.igniterealtime.org/issues/browse/JM-1289 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1806.md b/2008/CVE-2008-1806.md index c0895def191..6e2447f270e 100644 --- a/2008/CVE-2008-1806.md +++ b/2008/CVE-2008-1806.md @@ -13,11 +13,6 @@ Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to - http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 - http://www.ubuntu.com/usn/usn-643-1 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1807.md b/2008/CVE-2008-1807.md index 60121fa39e6..9c911ee4777 100644 --- a/2008/CVE-2008-1807.md +++ b/2008/CVE-2008-1807.md @@ -13,11 +13,6 @@ FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary co - http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 - http://www.ubuntu.com/usn/usn-643-1 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-1808.md b/2008/CVE-2008-1808.md index cac590e1884..714f3a526e9 100644 --- a/2008/CVE-2008-1808.md +++ b/2008/CVE-2008-1808.md @@ -13,11 +13,6 @@ Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent att - http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 - http://www.ubuntu.com/usn/usn-643-1 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-2131.md b/2008/CVE-2008-2131.md index b453574ce65..d8a05a5816a 100644 --- a/2008/CVE-2008-2131.md +++ b/2008/CVE-2008-2131.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in mvnForum 1.1 GA allows remote authen #### Reference - http://securityreason.com/securityalert/3862 -- http://users.own-hero.net/~decoder/advisories/mvnforum-jsxss.txt #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-2236.md b/2008/CVE-2008-2236.md index 291a2084843..6082154a932 100644 --- a/2008/CVE-2008-2236.md +++ b/2008/CVE-2008-2236.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=630149 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-2486.md b/2008/CVE-2008-2486.md index 14c9e3f1ff4..2bff5fb0b80 100644 --- a/2008/CVE-2008-2486.md +++ b/2008/CVE-2008-2486.md @@ -10,7 +10,7 @@ Unspecified vulnerability in eMule Plus before 1.2d has unknown impact and attac ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=600155 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-2511.md b/2008/CVE-2008-2511.md index 05d2b98fefc..b672b3169a2 100644 --- a/2008/CVE-2008-2511.md +++ b/2008/CVE-2008-2511.md @@ -10,7 +10,6 @@ Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka ### POC #### Reference -- http://retrogod.altervista.org/9sg_CA_poc.html - https://www.exploit-db.com/exploits/5682 #### Github diff --git a/2008/CVE-2008-3231.md b/2008/CVE-2008-3231.md index 6a44121a435..7502a384bcd 100644 --- a/2008/CVE-2008-3231.md +++ b/2008/CVE-2008-3231.md @@ -10,7 +10,7 @@ xine-lib before 1.1.15 allows remote attackers to cause a denial of service (cra ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=619869 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3260.md b/2008/CVE-2008-3260.md index b75463dfca4..6da76971fce 100644 --- a/2008/CVE-2008-3260.md +++ b/2008/CVE-2008-3260.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 a #### Reference - http://securityreason.com/securityalert/4020 -- http://sourceforge.net/project/shownotes.php?release_id=613634 #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3261.md b/2008/CVE-2008-3261.md index 3901f698bae..af2fc8f4243 100644 --- a/2008/CVE-2008-3261.md +++ b/2008/CVE-2008-3261.md @@ -11,7 +11,6 @@ Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8. #### Reference - http://securityreason.com/securityalert/4020 -- http://sourceforge.net/project/shownotes.php?release_id=613634 #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3262.md b/2008/CVE-2008-3262.md index d766099ed41..0a8d0d85228 100644 --- a/2008/CVE-2008-3262.md +++ b/2008/CVE-2008-3262.md @@ -11,7 +11,6 @@ Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allow #### Reference - http://securityreason.com/securityalert/4020 -- http://sourceforge.net/project/shownotes.php?release_id=613634 #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3358.md b/2008/CVE-2008-3358.md index 9f791942273..dba0038da1f 100644 --- a/2008/CVE-2008-3358.md +++ b/2008/CVE-2008-3358.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CVE-2008-3358.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3513.md b/2008/CVE-2008-3513.md index b48b41313b1..3b5422ca5d4 100644 --- a/2008/CVE-2008-3513.md +++ b/2008/CVE-2008-3513.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows r ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/phpnukebook-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3561.md b/2008/CVE-2008-3561.md index bf0ad78e64f..e878050fe55 100644 --- a/2008/CVE-2008-3561.md +++ b/2008/CVE-2008-3561.md @@ -10,7 +10,7 @@ SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/powergap-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3640.md b/2008/CVE-2008-3640.md index b716dab02c9..36a1eeb10a2 100644 --- a/2008/CVE-2008-3640.md +++ b/2008/CVE-2008-3640.md @@ -10,7 +10,7 @@ Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 al ### POC #### Reference -- http://www.cups.org/str.php?L2919 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3682.md b/2008/CVE-2008-3682.md index 988c7635404..0595240f9ec 100644 --- a/2008/CVE-2008-3682.md +++ b/2008/CVE-2008-3682.md @@ -10,7 +10,7 @@ SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attacke ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/phprealty-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3691.md b/2008/CVE-2008-3691.md index eb3abf28a0b..000faeb1253 100644 --- a/2008/CVE-2008-3691.md +++ b/2008/CVE-2008-3691.md @@ -12,12 +12,6 @@ Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5 #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3692.md b/2008/CVE-2008-3692.md index 5ab451abba3..8b94e4f9115 100644 --- a/2008/CVE-2008-3692.md +++ b/2008/CVE-2008-3692.md @@ -12,12 +12,6 @@ Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5 #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3693.md b/2008/CVE-2008-3693.md index 56938120c60..f73bf1eb3c2 100644 --- a/2008/CVE-2008-3693.md +++ b/2008/CVE-2008-3693.md @@ -12,12 +12,6 @@ Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5 #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3694.md b/2008/CVE-2008-3694.md index eaf87aececd..a28c5fc9cef 100644 --- a/2008/CVE-2008-3694.md +++ b/2008/CVE-2008-3694.md @@ -12,12 +12,6 @@ Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5 #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3695.md b/2008/CVE-2008-3695.md index bdb4c322254..83c1db160f8 100644 --- a/2008/CVE-2008-3695.md +++ b/2008/CVE-2008-3695.md @@ -12,12 +12,6 @@ Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5 #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3696.md b/2008/CVE-2008-3696.md index 1c58efee440..d632af0091a 100644 --- a/2008/CVE-2008-3696.md +++ b/2008/CVE-2008-3696.md @@ -12,12 +12,6 @@ Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5 #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3697.md b/2008/CVE-2008-3697.md index e67619eb6c6..87d6f5c6d74 100644 --- a/2008/CVE-2008-3697.md +++ b/2008/CVE-2008-3697.md @@ -12,7 +12,6 @@ An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3698.md b/2008/CVE-2008-3698.md index e541b887701..8c96ddb8871 100644 --- a/2008/CVE-2008-3698.md +++ b/2008/CVE-2008-3698.md @@ -12,12 +12,6 @@ Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5. #### Reference - http://securityreason.com/securityalert/4202 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3719.md b/2008/CVE-2008-3719.md index 0f4ba425774..fdbd6e03219 100644 --- a/2008/CVE-2008-3719.md +++ b/2008/CVE-2008-3719.md @@ -10,7 +10,6 @@ SQL injection vulnerability in directory.php in SFS Affiliate Directory allows r ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/affildir-sql.txt - https://www.exploit-db.com/exploits/6270 #### Github diff --git a/2008/CVE-2008-3725.md b/2008/CVE-2008-3725.md index 5650b42e330..3f736257cfc 100644 --- a/2008/CVE-2008-3725.md +++ b/2008/CVE-2008-3725.md @@ -10,7 +10,6 @@ SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows r ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/adboard-sql.txt - https://www.exploit-db.com/exploits/6271 #### Github diff --git a/2008/CVE-2008-3886.md b/2008/CVE-2008-3886.md index a9d26010058..262b70c7b06 100644 --- a/2008/CVE-2008-3886.md +++ b/2008/CVE-2008-3886.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in index.php in dotProject 2 ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3887.md b/2008/CVE-2008-3887.md index 0e494f85bbb..8a03c814aa0 100644 --- a/2008/CVE-2008-3887.md +++ b/2008/CVE-2008-3887.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1 ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3892.md b/2008/CVE-2008-3892.md index 3130d5c6afb..7e7e3db6c47 100644 --- a/2008/CVE-2008-3892.md +++ b/2008/CVE-2008-3892.md @@ -11,12 +11,6 @@ Buffer overflow in a certain ActiveX control in the COM API in VMware Workstatio #### Reference - http://securityreason.com/securityalert/4202 -- http://www.vmware.com/support/ace/doc/releasenotes_ace.html -- http://www.vmware.com/support/player/doc/releasenotes_player.html -- http://www.vmware.com/support/player2/doc/releasenotes_player2.html -- http://www.vmware.com/support/server/doc/releasenotes_server.html -- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - https://www.exploit-db.com/exploits/6345 #### Github diff --git a/2008/CVE-2008-3937.md b/2008/CVE-2008-3937.md index 58cbd203ad7..1a92145bd6f 100644 --- a/2008/CVE-2008-3937.md +++ b/2008/CVE-2008-3937.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Dat ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-3938.md b/2008/CVE-2008-3938.md index 2a24a041321..00a3cf14ce8 100644 --- a/2008/CVE-2008-3938.md +++ b/2008/CVE-2008-3938.md @@ -10,7 +10,7 @@ Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4040.md b/2008/CVE-2008-4040.md index 9088de98be7..2d138035d4d 100644 --- a/2008/CVE-2008-4040.md +++ b/2008/CVE-2008-4040.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the Kyocera Command Center in Kyocera FS-11 ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/kyocera-traversal.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4045.md b/2008/CVE-2008-4045.md index 10a756b2a04..85802ec3584 100644 --- a/2008/CVE-2008-4045.md +++ b/2008/CVE-2008-4045.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42 allow remote a ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/atmail542-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4046.md b/2008/CVE-2008-4046.md index f7eed254d17..9f2bd673ec2 100644 --- a/2008/CVE-2008-4046.md +++ b/2008/CVE-2008-4046.md @@ -10,7 +10,7 @@ SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/elitecms-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4055.md b/2008/CVE-2008-4055.md index bb30a9a07b3..ef993987d76 100644 --- a/2008/CVE-2008-4055.md +++ b/2008/CVE-2008-4055.md @@ -10,7 +10,7 @@ SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/millionpixel-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4143.md b/2008/CVE-2008-4143.md index 01b54955986..3179dd16594 100644 --- a/2008/CVE-2008-4143.md +++ b/2008/CVE-2008-4143.md @@ -10,7 +10,7 @@ SQL injection vulnerability in category_search.php in RazorCommerce Shopping Car ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/razorcommerce-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4178.md b/2008/CVE-2008-4178.md index c4c23800bb5..06b9c572c59 100644 --- a/2008/CVE-2008-4178.md +++ b/2008/CVE-2008-4178.md @@ -10,8 +10,6 @@ SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt -- http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt - http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt - https://www.exploit-db.com/exploits/6946 - https://www.exploit-db.com/exploits/6947 diff --git a/2008/CVE-2008-4349.md b/2008/CVE-2008-4349.md index a1c8bb452d5..adb0c11c12c 100644 --- a/2008/CVE-2008-4349.md +++ b/2008/CVE-2008-4349.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranew ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/paranews-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4458.md b/2008/CVE-2008-4458.md index 2b10c4f796d..9bf84065425 100644 --- a/2008/CVE-2008-4458.md +++ b/2008/CVE-2008-4458.md @@ -10,7 +10,7 @@ SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Scr ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/ephpb2b-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4525.md b/2008/CVE-2008-4525.md index 409f594e8e8..6a2a6ff81c0 100644 --- a/2008/CVE-2008-4525.md +++ b/2008/CVE-2008-4525.md @@ -10,7 +10,7 @@ SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attacker ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/ampjuke-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4601.md b/2008/CVE-2008-4601.md index 07ccb4d6f3e..436304f5dae 100644 --- a/2008/CVE-2008-4601.md +++ b/2008/CVE-2008-4601.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5. ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/habaricms-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-4647.md b/2008/CVE-2008-4647.md index 8839b554882..1a351df8402 100644 --- a/2008/CVE-2008-4647.md +++ b/2008/CVE-2008-4647.md @@ -10,7 +10,7 @@ SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attacke ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/sweetcms-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5037.md b/2008/CVE-2008-5037.md index 5ca49565959..8a9529f4fd7 100644 --- a/2008/CVE-2008-5037.md +++ b/2008/CVE-2008-5037.md @@ -10,7 +10,7 @@ SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows re ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/elkagroup-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5064.md b/2008/CVE-2008-5064.md index df4b1c03c32..ddfe060e5d2 100644 --- a/2008/CVE-2008-5064.md +++ b/2008/CVE-2008-5064.md @@ -10,7 +10,7 @@ SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote atta ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/hhwebsoccer-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5126.md b/2008/CVE-2008-5126.md index 44169639c8a..52bff3fce57 100644 --- a/2008/CVE-2008-5126.md +++ b/2008/CVE-2008-5126.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows r ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0811-exploits/boutikone-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5127.md b/2008/CVE-2008-5127.md index e990596654f..be5425d49ba 100644 --- a/2008/CVE-2008-5127.md +++ b/2008/CVE-2008-5127.md @@ -10,7 +10,6 @@ Ocean12 Contact Manager Pro 1.02 stores sensitive information under the web root ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt - https://www.exploit-db.com/exploits/7244 #### Github diff --git a/2008/CVE-2008-5128.md b/2008/CVE-2008-5128.md index 8ee8a351539..b89bb580df3 100644 --- a/2008/CVE-2008-5128.md +++ b/2008/CVE-2008-5128.md @@ -10,7 +10,7 @@ Ocean12 Membership Manager Pro stores sensitive information under the web root w ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5129.md b/2008/CVE-2008-5129.md index 15e8e32b056..65515697a0c 100644 --- a/2008/CVE-2008-5129.md +++ b/2008/CVE-2008-5129.md @@ -10,7 +10,7 @@ Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root wi ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5130.md b/2008/CVE-2008-5130.md index be503969620..896f19df096 100644 --- a/2008/CVE-2008-5130.md +++ b/2008/CVE-2008-5130.md @@ -10,7 +10,7 @@ Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web ro ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5186.md b/2008/CVE-2008-5186.md index c4fd6d1f9c6..75a4425755d 100644 --- a/2008/CVE-2008-5186.md +++ b/2008/CVE-2008-5186.md @@ -10,7 +10,7 @@ The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=637321 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5211.md b/2008/CVE-2008-5211.md index 7ba109d87b4..20f133a3bf0 100644 --- a/2008/CVE-2008-5211.md +++ b/2008/CVE-2008-5211.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when th #### Reference - http://securityreason.com/securityalert/4629 -- http://users.own-hero.net/~decoder/advisories/sphider134-xss.txt #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5233.md b/2008/CVE-2008-5233.md index 111b359f59f..d1703ea0440 100644 --- a/2008/CVE-2008-5233.md +++ b/2008/CVE-2008-5233.md @@ -11,7 +11,6 @@ xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of #### Reference - http://securityreason.com/securityalert/4648 -- http://sourceforge.net/project/shownotes.php?release_id=619869 #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5234.md b/2008/CVE-2008-5234.md index eb40282e4e5..47173c40501 100644 --- a/2008/CVE-2008-5234.md +++ b/2008/CVE-2008-5234.md @@ -11,7 +11,6 @@ Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions befo #### Reference - http://securityreason.com/securityalert/4648 -- http://sourceforge.net/project/shownotes.php?release_id=619869 #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5235.md b/2008/CVE-2008-5235.md index 72ee22d4267..20489465a7c 100644 --- a/2008/CVE-2008-5235.md +++ b/2008/CVE-2008-5235.md @@ -10,7 +10,7 @@ Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=619869 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5236.md b/2008/CVE-2008-5236.md index 22aa649e4c8..2fe03712a7c 100644 --- a/2008/CVE-2008-5236.md +++ b/2008/CVE-2008-5236.md @@ -11,7 +11,6 @@ Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and ea #### Reference - http://securityreason.com/securityalert/4648 -- http://sourceforge.net/project/shownotes.php?release_id=619869 #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5238.md b/2008/CVE-2008-5238.md index 05a65413245..44ed6152cea 100644 --- a/2008/CVE-2008-5238.md +++ b/2008/CVE-2008-5238.md @@ -11,7 +11,6 @@ Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1 #### Reference - http://securityreason.com/securityalert/4648 -- http://sourceforge.net/project/shownotes.php?release_id=619869 #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5244.md b/2008/CVE-2008-5244.md index 898050cc7d4..3e6564f8c37 100644 --- a/2008/CVE-2008-5244.md +++ b/2008/CVE-2008-5244.md @@ -10,7 +10,7 @@ Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attac ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=619869 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5245.md b/2008/CVE-2008-5245.md index a1d36b9d47a..2adb0e50ed2 100644 --- a/2008/CVE-2008-5245.md +++ b/2008/CVE-2008-5245.md @@ -10,7 +10,7 @@ xine-lib before 1.1.15 performs V4L video frame preallocation before ascertainin ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=619869 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5246.md b/2008/CVE-2008-5246.md index 02399537c28..6fdc818a355 100644 --- a/2008/CVE-2008-5246.md +++ b/2008/CVE-2008-5246.md @@ -10,7 +10,7 @@ Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote atta ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=619869 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5248.md b/2008/CVE-2008-5248.md index 59812f164be..aaeea3b3261 100644 --- a/2008/CVE-2008-5248.md +++ b/2008/CVE-2008-5248.md @@ -10,7 +10,7 @@ xine-lib before 1.1.15 allows remote attackers to cause a denial of service (cra ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=619869 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5416.md b/2008/CVE-2008-5416.md index 7dbea758c2b..ce1247739f7 100644 --- a/2008/CVE-2008-5416.md +++ b/2008/CVE-2008-5416.md @@ -12,7 +12,6 @@ Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.203 #### Reference - http://securityreason.com/securityalert/4706 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-004 - https://www.exploit-db.com/exploits/7501 diff --git a/2008/CVE-2008-5493.md b/2008/CVE-2008-5493.md index 10c9d2661a4..099b5e5001e 100644 --- a/2008/CVE-2008-5493.md +++ b/2008/CVE-2008-5493.md @@ -10,7 +10,6 @@ SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0811-exploits/wholesale-sql.txt - http://securityreason.com/securityalert/4720 - https://www.exploit-db.com/exploits/7134 diff --git a/2008/CVE-2008-5943.md b/2008/CVE-2008-5943.md index e357eaef76c..fc954bb551c 100644 --- a/2008/CVE-2008-5943.md +++ b/2008/CVE-2008-5943.md @@ -10,7 +10,7 @@ Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5944.md b/2008/CVE-2008-5944.md index 4452161016b..1a1b33d973f 100644 --- a/2008/CVE-2008-5944.md +++ b/2008/CVE-2008-5944.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) a ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5970.md b/2008/CVE-2008-5970.md index 48e47b0565f..ac7db42b0f5 100644 --- a/2008/CVE-2008-5970.md +++ b/2008/CVE-2008-5970.md @@ -10,7 +10,7 @@ SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-5971.md b/2008/CVE-2008-5971.md index f96a27239e6..f94efbd7ffb 100644 --- a/2008/CVE-2008-5971.md +++ b/2008/CVE-2008-5971.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6026.md b/2008/CVE-2008-6026.md index 2daf98a0ad2..f3f30110c1c 100644 --- a/2008/CVE-2008-6026.md +++ b/2008/CVE-2008-6026.md @@ -10,7 +10,7 @@ SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attacker ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6040.md b/2008/CVE-2008-6040.md index 73853fff903..1182f7551d6 100644 --- a/2008/CVE-2008-6040.md +++ b/2008/CVE-2008-6040.md @@ -10,7 +10,7 @@ SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allo ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6052.md b/2008/CVE-2008-6052.md index 9df9bbf2b29..87586d1b3f2 100644 --- a/2008/CVE-2008-6052.md +++ b/2008/CVE-2008-6052.md @@ -10,7 +10,7 @@ PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root wit ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/prelearn-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6053.md b/2008/CVE-2008-6053.md index dce99d6ed6e..9a1d60175f8 100644 --- a/2008/CVE-2008-6053.md +++ b/2008/CVE-2008-6053.md @@ -10,7 +10,7 @@ PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/preresume-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6054.md b/2008/CVE-2008-6054.md index fead2767d85..61ff0b96225 100644 --- a/2008/CVE-2008-6054.md +++ b/2008/CVE-2008-6054.md @@ -10,7 +10,7 @@ PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web ro ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/precourier-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6055.md b/2008/CVE-2008-6055.md index dd2ce17957d..c8e06e3a9d5 100644 --- a/2008/CVE-2008-6055.md +++ b/2008/CVE-2008-6055.md @@ -10,7 +10,7 @@ PreProjects Pre Classified Listings stores pclasp.mdb under the web root with in ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/preaspclass-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6101.md b/2008/CVE-2008-6101.md index 8ae29d64ba1..ee1e5087c70 100644 --- a/2008/CVE-2008-6101.md +++ b/2008/CVE-2008-6101.md @@ -10,7 +10,6 @@ SQL injection vulnerability in click.php in Adult Banner Exchange Website allows ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/abe-sql.txt - https://www.exploit-db.com/exploits/6909 - https://www.exploit-db.com/exploits/9387 diff --git a/2008/CVE-2008-6104.md b/2008/CVE-2008-6104.md index 90595e99f51..3eb23ef42eb 100644 --- a/2008/CVE-2008-6104.md +++ b/2008/CVE-2008-6104.md @@ -10,7 +10,7 @@ SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/a4desk-sqldisclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6110.md b/2008/CVE-2008-6110.md index 8a3e8721256..2a89e71612f 100644 --- a/2008/CVE-2008-6110.md +++ b/2008/CVE-2008-6110.md @@ -10,7 +10,7 @@ Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=640424 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6113.md b/2008/CVE-2008-6113.md index fc2702bd46d..8fc6105c1e8 100644 --- a/2008/CVE-2008-6113.md +++ b/2008/CVE-2008-6113.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.90 allows r ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=640424 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6218.md b/2008/CVE-2008-6218.md index e450e02b142..4a05e979da9 100644 --- a/2008/CVE-2008-6218.md +++ b/2008/CVE-2008-6218.md @@ -10,7 +10,7 @@ Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.3 ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=635837 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6325.md b/2008/CVE-2008-6325.md index 052162104b9..f1e07b28c63 100644 --- a/2008/CVE-2008-6325.md +++ b/2008/CVE-2008-6325.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Scrip ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/classifieds-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6364.md b/2008/CVE-2008-6364.md index 8bdaee178c8..ecb1ed5c60b 100644 --- a/2008/CVE-2008-6364.md +++ b/2008/CVE-2008-6364.md @@ -10,7 +10,6 @@ SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner E ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/bej-sql.txt - https://www.exploit-db.com/exploits/7425 #### Github diff --git a/2008/CVE-2008-6366.md b/2008/CVE-2008-6366.md index 1ba79286997..031c20d6a24 100644 --- a/2008/CVE-2008-6366.md +++ b/2008/CVE-2008-6366.md @@ -10,7 +10,6 @@ SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Softwa ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/affiliatesj-sql.txt - https://www.exploit-db.com/exploits/7423 #### Github diff --git a/2008/CVE-2008-6368.md b/2008/CVE-2008-6368.md index a26ebdbedbb..b17b0e161ed 100644 --- a/2008/CVE-2008-6368.md +++ b/2008/CVE-2008-6368.md @@ -10,7 +10,7 @@ SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remot ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6385.md b/2008/CVE-2008-6385.md index 5548826bfee..02dc1ce9168 100644 --- a/2008/CVE-2008-6385.md +++ b/2008/CVE-2008-6385.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 a ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0812-exploits/revsense-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6470.md b/2008/CVE-2008-6470.md index 81583bfe279..8808408fe29 100644 --- a/2008/CVE-2008-6470.md +++ b/2008/CVE-2008-6470.md @@ -10,7 +10,7 @@ Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=627530 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6508.md b/2008/CVE-2008-6508.md index 1809af9be44..7eef23935a6 100644 --- a/2008/CVE-2008-6508.md +++ b/2008/CVE-2008-6508.md @@ -10,8 +10,6 @@ Directory traversal vulnerability in the AuthCheck filter in the Admin Console i ### POC #### Reference -- http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt -- http://www.igniterealtime.org/issues/browse/JM-1489 - https://www.exploit-db.com/exploits/7075 #### Github diff --git a/2008/CVE-2008-6509.md b/2008/CVE-2008-6509.md index 73eeefc532e..f930ae51bc4 100644 --- a/2008/CVE-2008-6509.md +++ b/2008/CVE-2008-6509.md @@ -10,8 +10,6 @@ SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and e ### POC #### Reference -- http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt -- http://www.igniterealtime.org/issues/browse/JM-1488 - https://www.exploit-db.com/exploits/7075 #### Github diff --git a/2008/CVE-2008-6510.md b/2008/CVE-2008-6510.md index 5f9feb8a4af..6240176e24f 100644 --- a/2008/CVE-2008-6510.md +++ b/2008/CVE-2008-6510.md @@ -10,8 +10,6 @@ Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Op ### POC #### Reference -- http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt -- http://www.igniterealtime.org/issues/browse/JM-629 - https://www.exploit-db.com/exploits/7075 #### Github diff --git a/2008/CVE-2008-6511.md b/2008/CVE-2008-6511.md index 8dfa1859644..ef03eb61e4d 100644 --- a/2008/CVE-2008-6511.md +++ b/2008/CVE-2008-6511.md @@ -10,7 +10,6 @@ Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows r ### POC #### Reference -- http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt - https://www.exploit-db.com/exploits/7075 #### Github diff --git a/2008/CVE-2008-6797.md b/2008/CVE-2008-6797.md index aa4b2a31623..ea613109092 100644 --- a/2008/CVE-2008-6797.md +++ b/2008/CVE-2008-6797.md @@ -10,7 +10,7 @@ The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords i ### POC #### Reference -- http://www.mitel.com/resources/NuPoint_and_Exchange.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6799.md b/2008/CVE-2008-6799.md index 6a5854019b9..cfcfafb61f8 100644 --- a/2008/CVE-2008-6799.md +++ b/2008/CVE-2008-6799.md @@ -10,7 +10,7 @@ connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role fil ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0810-exploits/flashchat-bypass.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6868.md b/2008/CVE-2008-6868.md index 95a84587a5f..51b19990d7d 100644 --- a/2008/CVE-2008-6868.md +++ b/2008/CVE-2008-6868.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6876.md b/2008/CVE-2008-6876.md index 65ac51702ab..e0d4bb92af6 100644 --- a/2008/CVE-2008-6876.md +++ b/2008/CVE-2008-6876.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allow ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6924.md b/2008/CVE-2008-6924.md index 9d058656e0e..8704bc69554 100644 --- a/2008/CVE-2008-6924.md +++ b/2008/CVE-2008-6924.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0807-exploits/esyndicat-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-6953.md b/2008/CVE-2008-6953.md index f69a87db732..87348d2e9e9 100644 --- a/2008/CVE-2008-6953.md +++ b/2008/CVE-2008-6953.md @@ -10,7 +10,6 @@ Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions befo ### POC #### Reference -- http://retrogod.altervista.org/9sg_oovoo_url_poc.html - https://www.exploit-db.com/exploits/7090 #### Github diff --git a/2008/CVE-2008-6994.md b/2008/CVE-2008-6994.md index 69632c0a867..7f4494967e8 100644 --- a/2008/CVE-2008-6994.md +++ b/2008/CVE-2008-6994.md @@ -10,7 +10,6 @@ Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function ### POC #### Reference -- http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599 - https://www.exploit-db.com/exploits/6365 - https://www.exploit-db.com/exploits/6367 diff --git a/2008/CVE-2008-6999.md b/2008/CVE-2008-6999.md index 0617c2f7a58..71fec7edbfa 100644 --- a/2008/CVE-2008-6999.md +++ b/2008/CVE-2008-6999.md @@ -10,7 +10,7 @@ phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-7000.md b/2008/CVE-2008-7000.md index 99efe47ec6d..e983a23a3fc 100644 --- a/2008/CVE-2008-7000.md +++ b/2008/CVE-2008-7000.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows re ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-7008.md b/2008/CVE-2008-7008.md index 4bd0a8ace1e..4584b0438cc 100644 --- a/2008/CVE-2008-7008.md +++ b/2008/CVE-2008-7008.md @@ -10,7 +10,7 @@ HyperStop Web Host Directory 1.2 allows remote attackers to bypass authenticatio ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0809-exploits/webhost-database.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2008/CVE-2008-7183.md b/2008/CVE-2008-7183.md index 0e12544f332..673c507714a 100644 --- a/2008/CVE-2008-7183.md +++ b/2008/CVE-2008-7183.md @@ -10,7 +10,7 @@ PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0806-exploits/evacms-rfi.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-0496.md b/2009/CVE-2009-0496.md index 91c5d83f388..a90d5deefc7 100644 --- a/2009/CVE-2009-0496.md +++ b/2009/CVE-2009-0496.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire #### Reference - http://www.coresecurity.com/content/openfire-multiple-vulnerabilities -- http://www.igniterealtime.org/issues/browse/JM-1506 #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-0640.md b/2009/CVE-2009-0640.md index 04f623b39bd..3351b8fcbe2 100644 --- a/2009/CVE-2009-0640.md +++ b/2009/CVE-2009-0640.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the administrative web server in Swann DVR4 ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-0644.md b/2009/CVE-2009-0644.md index 4bc6b419e34..6482fdf73a9 100644 --- a/2009/CVE-2009-0644.md +++ b/2009/CVE-2009-0644.md @@ -10,7 +10,7 @@ The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-0648.md b/2009/CVE-2009-0648.md index e0450636770..d7cf27d12ae 100644 --- a/2009/CVE-2009-0648.md +++ b/2009/CVE-2009-0648.md @@ -10,7 +10,7 @@ Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users h ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-0760.md b/2009/CVE-2009-0760.md index 8acf5329afe..b9936a1ba1b 100644 --- a/2009/CVE-2009-0760.md +++ b/2009/CVE-2009-0760.md @@ -10,7 +10,6 @@ Team Board 1.x and 2.x stores sensitive information under the web root with insu ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0902-exploits/teamboard-ddxss.txt - https://www.exploit-db.com/exploits/7982 #### Github diff --git a/2009/CVE-2009-0879.md b/2009/CVE-2009-0879.md index db4938426bc..f985d9a4ed4 100644 --- a/2009/CVE-2009-0879.md +++ b/2009/CVE-2009-0879.md @@ -11,7 +11,6 @@ The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows #### Reference - https://www.exploit-db.com/exploits/8190 -- https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8 #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-0880.md b/2009/CVE-2009-0880.md index ffb5fe042d6..7bb891f9d79 100644 --- a/2009/CVE-2009-0880.md +++ b/2009/CVE-2009-0880.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the CIM server in IBM Director before 5.20. ### POC #### Reference -- https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-0893.md b/2009/CVE-2009-0893.md index 55d0219cae8..e4422638d65 100644 --- a/2009/CVE-2009-0893.md +++ b/2009/CVE-2009-0893.md @@ -10,7 +10,7 @@ Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore l ### POC #### Reference -- https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1048.md b/2009/CVE-2009-1048.md index 6df2f07346c..cc089beb760 100644 --- a/2009/CVE-2009-1048.md +++ b/2009/CVE-2009-1048.md @@ -10,7 +10,7 @@ The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370 ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1060.md b/2009/CVE-2009-1060.md index d8df320828c..ecbe2fb5303 100644 --- a/2009/CVE-2009-1060.md +++ b/2009/CVE-2009-1060.md @@ -10,7 +10,7 @@ Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attac ### POC #### Reference -- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1225.md b/2009/CVE-2009-1225.md index c45c70f6db2..5bbeca6a03e 100644 --- a/2009/CVE-2009-1225.md +++ b/2009/CVE-2009-1225.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0903-exploits/turnkeyebook-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1262.md b/2009/CVE-2009-1262.md index 7376af7d947..1ffaa5658c6 100644 --- a/2009/CVE-2009-1262.md +++ b/2009/CVE-2009-1262.md @@ -10,7 +10,7 @@ Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlie ### POC #### Reference -- http://www.layereddefense.com/FortiClient02Apr.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1301.md b/2009/CVE-2009-1301.md index ba06cc8887e..2a46e5cc3c7 100644 --- a/2009/CVE-2009-1301.md +++ b/2009/CVE-2009-1301.md @@ -10,7 +10,7 @@ Integer signedness error in the store_id3_text function in the ID3v2 code in mpg ### POC #### Reference -- http://sourceforge.net/project/shownotes.php?release_id=673696 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1377.md b/2009/CVE-2009-1377.md index 5377cee1016..1de211a4652 100644 --- a/2009/CVE-2009-1377.md +++ b/2009/CVE-2009-1377.md @@ -10,7 +10,6 @@ The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0 ### POC #### Reference -- http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - http://www.ubuntu.com/usn/USN-792-1 diff --git a/2009/CVE-2009-1378.md b/2009/CVE-2009-1378.md index 1e880541860..290d49766d9 100644 --- a/2009/CVE-2009-1378.md +++ b/2009/CVE-2009-1378.md @@ -10,7 +10,6 @@ Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1 ### POC #### Reference -- http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - http://www.ubuntu.com/usn/USN-792-1 - https://www.exploit-db.com/exploits/8720 diff --git a/2009/CVE-2009-1379.md b/2009/CVE-2009-1379.md index add262d2dd8..bbdabda27f8 100644 --- a/2009/CVE-2009-1379.md +++ b/2009/CVE-2009-1379.md @@ -10,7 +10,6 @@ Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ### POC #### Reference -- http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - http://www.ubuntu.com/usn/USN-792-1 diff --git a/2009/CVE-2009-1387.md b/2009/CVE-2009-1387.md index 9b2e3f2b412..023c76dda12 100644 --- a/2009/CVE-2009-1387.md +++ b/2009/CVE-2009-1387.md @@ -10,7 +10,6 @@ The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before ### POC #### Reference -- http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - http://www.ubuntu.com/usn/USN-792-1 diff --git a/2009/CVE-2009-1434.md b/2009/CVE-2009-1434.md index 29afd0c6c49..6b7e579f0be 100644 --- a/2009/CVE-2009-1434.md +++ b/2009/CVE-2009-1434.md @@ -10,7 +10,7 @@ Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows r ### POC #### Reference -- http://sourceforge.net/mailarchive/forum.php?thread_name=49F61C4E.2040806%40lavrsen.dk&forum_name=foswiki-announce +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1479.md b/2009/CVE-2009-1479.md index e05506a8284..a2fc8c09b2b 100644 --- a/2009/CVE-2009-1479.md +++ b/2009/CVE-2009-1479.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in client/desktop/default.htm in Boxalino befo ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CVE-2009-1479-Boxalino-Directory_Traversal.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1492.md b/2009/CVE-2009-1492.md index 92fa8e09ff7..7731651cfd7 100644 --- a/2009/CVE-2009-1492.md +++ b/2009/CVE-2009-1492.md @@ -10,7 +10,6 @@ The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt - https://www.exploit-db.com/exploits/8569 #### Github diff --git a/2009/CVE-2009-1493.md b/2009/CVE-2009-1493.md index 909e2cede87..4b95f119562 100644 --- a/2009/CVE-2009-1493.md +++ b/2009/CVE-2009-1493.md @@ -10,7 +10,6 @@ The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt - https://www.exploit-db.com/exploits/8570 #### Github diff --git a/2009/CVE-2009-1635.md b/2009/CVE-2009-1635.md index 11ec232f25d..2f8c02adabf 100644 --- a/2009/CVE-2009-1635.md +++ b/2009/CVE-2009-1635.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component i ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-1762.md b/2009/CVE-2009-1762.md index b667de08cac..1b77d3c8443 100644 --- a/2009/CVE-2009-1762.md +++ b/2009/CVE-2009-1762.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2032.md b/2009/CVE-2009-2032.md index 5e203b33b58..852d8c301a1 100644 --- a/2009/CVE-2009-2032.md +++ b/2009/CVE-2009-2032.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downlo ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2082.md b/2009/CVE-2009-2082.md index 40546682f72..851ff485334 100644 --- a/2009/CVE-2009-2082.md +++ b/2009/CVE-2009-2082.md @@ -10,7 +10,7 @@ SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Le ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2404.md b/2009/CVE-2009-2404.md index 7536af7984f..3a8d26ffa33 100644 --- a/2009/CVE-2009-2404.md +++ b/2009/CVE-2009-2404.md @@ -10,7 +10,6 @@ Heap-based buffer overflow in a regular-expression parser in Mozilla Network Sec ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html #### Github diff --git a/2009/CVE-2009-2408.md b/2009/CVE-2009-2408.md index fc8b947fb53..0f83f4876ca 100644 --- a/2009/CVE-2009-2408.md +++ b/2009/CVE-2009-2408.md @@ -11,7 +11,6 @@ Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Th #### Reference - http://isc.sans.org/diary.html?storyid=7003 -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2423.md b/2009/CVE-2009-2423.md index f9a546f3d13..7d65b7aaffd 100644 --- a/2009/CVE-2009-2423.md +++ b/2009/CVE-2009-2423.md @@ -10,7 +10,7 @@ SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote att ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2424.md b/2009/CVE-2009-2424.md index f51403300a0..ec998dfe75b 100644 --- a/2009/CVE-2009-2424.md +++ b/2009/CVE-2009-2424.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2427.md b/2009/CVE-2009-2427.md index d7cd29ff76d..9d74a33d53f 100644 --- a/2009/CVE-2009-2427.md +++ b/2009/CVE-2009-2427.md @@ -10,7 +10,7 @@ SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attac ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0907-exploits/jobbr-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2428.md b/2009/CVE-2009-2428.md index 6f375e3546a..0e6a94ede2c 100644 --- a/2009/CVE-2009-2428.md +++ b/2009/CVE-2009-2428.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote at ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0907-exploits/tausch-sql.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2569.md b/2009/CVE-2009-2569.md index f0abeefd1e6..97cd8e6c9f2 100644 --- a/2009/CVE-2009-2569.md +++ b/2009/CVE-2009-2569.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (V ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2581.md b/2009/CVE-2009-2581.md index 504dc992d50..565246bcb05 100644 --- a/2009/CVE-2009-2581.md +++ b/2009/CVE-2009-2581.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNew ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2693.md b/2009/CVE-2009-2693.md index 9e85c0a6e80..330ea041bed 100644 --- a/2009/CVE-2009-2693.md +++ b/2009/CVE-2009-2693.md @@ -11,7 +11,6 @@ Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0. #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2841.md b/2009/CVE-2009-2841.md index 639cb53bab5..f4423f89c36 100644 --- a/2009/CVE-2009-2841.md +++ b/2009/CVE-2009-2841.md @@ -10,7 +10,7 @@ The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebC ### POC #### Reference -- http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabilities-111109 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2901.md b/2009/CVE-2009-2901.md index bf78fac6b1a..9e6735391e8 100644 --- a/2009/CVE-2009-2901.md +++ b/2009/CVE-2009-2901.md @@ -11,7 +11,6 @@ The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 throu #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2902.md b/2009/CVE-2009-2902.md index 44a9ad27b61..887de809af8 100644 --- a/2009/CVE-2009-2902.md +++ b/2009/CVE-2009-2902.md @@ -11,7 +11,6 @@ Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0. #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-2959.md b/2009/CVE-2009-2959.md index 0582fb0bda2..9fb9b0c3405 100644 --- a/2009/CVE-2009-2959.md +++ b/2009/CVE-2009-2959.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the waterfall web status view (statu ### POC #### Reference -- http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3069.md b/2009/CVE-2009-3069.md index 17d1a4a4418..3b254b00ace 100644 --- a/2009/CVE-2009-3069.md +++ b/2009/CVE-2009-3069.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3070.md b/2009/CVE-2009-3070.md index 2fd6a472bf2..6037dd14688 100644 --- a/2009/CVE-2009-3070.md +++ b/2009/CVE-2009-3070.md @@ -10,7 +10,7 @@ Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox be ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3071.md b/2009/CVE-2009-3071.md index b9f31361101..adc1306f19d 100644 --- a/2009/CVE-2009-3071.md +++ b/2009/CVE-2009-3071.md @@ -10,7 +10,7 @@ Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox be ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3072.md b/2009/CVE-2009-3072.md index 9bf785efb08..c03a1343aa0 100644 --- a/2009/CVE-2009-3072.md +++ b/2009/CVE-2009-3072.md @@ -10,7 +10,6 @@ Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox be ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html - https://bugzilla.mozilla.org/show_bug.cgi?id=501900 #### Github diff --git a/2009/CVE-2009-3073.md b/2009/CVE-2009-3073.md index 3500ac269db..615ae6b8378 100644 --- a/2009/CVE-2009-3073.md +++ b/2009/CVE-2009-3073.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x befo ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3074.md b/2009/CVE-2009-3074.md index 8ecd7d8f815..345c68cdea1 100644 --- a/2009/CVE-2009-3074.md +++ b/2009/CVE-2009-3074.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3075.md b/2009/CVE-2009-3075.md index 3015f0c5cce..a6be8d7916e 100644 --- a/2009/CVE-2009-3075.md +++ b/2009/CVE-2009-3075.md @@ -10,7 +10,7 @@ Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3076.md b/2009/CVE-2009-3076.md index dcc484591fa..6814c50248c 100644 --- a/2009/CVE-2009-3076.md +++ b/2009/CVE-2009-3076.md @@ -10,7 +10,7 @@ Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associ ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3077.md b/2009/CVE-2009-3077.md index 109d21d0fd3..a5a3258ed58 100644 --- a/2009/CVE-2009-3077.md +++ b/2009/CVE-2009-3077.md @@ -10,7 +10,7 @@ Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3078.md b/2009/CVE-2009-3078.md index a6b642e7b14..8490e4223ea 100644 --- a/2009/CVE-2009-3078.md +++ b/2009/CVE-2009-3078.md @@ -10,7 +10,7 @@ Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x befo ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3079.md b/2009/CVE-2009-3079.md index 712aa440acb..672d96c108a 100644 --- a/2009/CVE-2009-3079.md +++ b/2009/CVE-2009-3079.md @@ -10,7 +10,7 @@ Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5 ### POC #### Reference -- http://www.novell.com/linux/security/advisories/2009_48_firefox.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3389.md b/2009/CVE-2009-3389.md index 6476095e786..efb57fe83d0 100644 --- a/2009/CVE-2009-3389.md +++ b/2009/CVE-2009-3389.md @@ -10,7 +10,7 @@ Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla ### POC #### Reference -- http://www.theora.org/news/#libtheora-1.1.0 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3548.md b/2009/CVE-2009-3548.md index 3d21eb6a77a..31a6e8bfa50 100644 --- a/2009/CVE-2009-3548.md +++ b/2009/CVE-2009-3548.md @@ -11,7 +11,6 @@ The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5. #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3553.md b/2009/CVE-2009-3553.md index 88bcc4afc30..d7be6a65196 100644 --- a/2009/CVE-2009-3553.md +++ b/2009/CVE-2009-3553.md @@ -10,7 +10,7 @@ Use-after-free vulnerability in the abstract file-descriptor handling interface ### POC #### Reference -- http://www.cups.org/str.php?L3200 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-3555.md b/2009/CVE-2009-3555.md index 3b6ebc7036f..67cd1c0ce79 100644 --- a/2009/CVE-2009-3555.md +++ b/2009/CVE-2009-3555.md @@ -22,7 +22,6 @@ The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Micr - http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html - http://www.vmware.com/security/advisories/VMSA-2010-0019.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 diff --git a/2009/CVE-2009-3622.md b/2009/CVE-2009-3622.md index cf3b390a82a..9a6b09ce3e5 100644 --- a/2009/CVE-2009-3622.md +++ b/2009/CVE-2009-3622.md @@ -11,7 +11,6 @@ Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8 #### Reference - http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/ -- http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html - https://bugzilla.redhat.com/show_bug.cgi?id=530056 #### Github diff --git a/2009/CVE-2009-4505.md b/2009/CVE-2009-4505.md index e3030d88ea8..6f25b2c73c3 100644 --- a/2009/CVE-2009-4505.md +++ b/2009/CVE-2009-4505.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Mod ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CVE-2009-4505_opencms_oamp_comments_module_xss_cyrill_brunschwiler.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-4926.md b/2009/CVE-2009-4926.md index f98873a4382..4588f9d0182 100644 --- a/2009/CVE-2009-4926.md +++ b/2009/CVE-2009-4926.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (f ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0904-exploits/ocm30-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2009/CVE-2009-4934.md b/2009/CVE-2009-4934.md index fd0fe41a1a6..7c3ee70f5c4 100644 --- a/2009/CVE-2009-4934.md +++ b/2009/CVE-2009-4934.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 al ### POC #### Reference -- http://packetstorm.linuxsecurity.com/0904-exploits/opp20-xss.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0082.md b/2010/CVE-2010-0082.md index 6737627807e..c5b3cf2f5b8 100644 --- a/2010/CVE-2010-0082.md +++ b/2010/CVE-2010-0082.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and - http://ubuntu.com/usn/usn-923-1 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0084.md b/2010/CVE-2010-0084.md index 99ff3df5df7..16fee2e2302 100644 --- a/2010/CVE-2010-0084.md +++ b/2010/CVE-2010-0084.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0085.md b/2010/CVE-2010-0085.md index afbf2504b87..5bddc2d595e 100644 --- a/2010/CVE-2010-0085.md +++ b/2010/CVE-2010-0085.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0087.md b/2010/CVE-2010-0087.md index fc7f043f5ad..7365add5c39 100644 --- a/2010/CVE-2010-0087.md +++ b/2010/CVE-2010-0087.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracl - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0088.md b/2010/CVE-2010-0088.md index a5ca201e9e6..6b290c6160a 100644 --- a/2010/CVE-2010-0088.md +++ b/2010/CVE-2010-0088.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0089.md b/2010/CVE-2010-0089.md index 3b3da5ee59b..511a0c61024 100644 --- a/2010/CVE-2010-0089.md +++ b/2010/CVE-2010-0089.md @@ -12,7 +12,6 @@ Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracl #### Reference - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0090.md b/2010/CVE-2010-0090.md index d8f95f35043..854a0c27e10 100644 --- a/2010/CVE-2010-0090.md +++ b/2010/CVE-2010-0090.md @@ -12,7 +12,6 @@ Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracl #### Reference - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0091.md b/2010/CVE-2010-0091.md index e8e773f2a15..4e1118f6163 100644 --- a/2010/CVE-2010-0091.md +++ b/2010/CVE-2010-0091.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0092.md b/2010/CVE-2010-0092.md index abbe9b1d889..bc94d5e92c6 100644 --- a/2010/CVE-2010-0092.md +++ b/2010/CVE-2010-0092.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://ubuntu.com/usn/usn-923-1 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0093.md b/2010/CVE-2010-0093.md index 230497ad00b..b55d979da1b 100644 --- a/2010/CVE-2010-0093.md +++ b/2010/CVE-2010-0093.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://ubuntu.com/usn/usn-923-1 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0094.md b/2010/CVE-2010-0094.md index 02841d1629a..503d4f1166c 100644 --- a/2010/CVE-2010-0094.md +++ b/2010/CVE-2010-0094.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0095.md b/2010/CVE-2010-0095.md index 75a6a345750..b323a5a64ed 100644 --- a/2010/CVE-2010-0095.md +++ b/2010/CVE-2010-0095.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0433.md b/2010/CVE-2010-0433.md index fb8a8385969..7a0e704f107 100644 --- a/2010/CVE-2010-0433.md +++ b/2010/CVE-2010-0433.md @@ -11,7 +11,6 @@ The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, wh #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0483.md b/2010/CVE-2010-0483.md index d3517eb6329..74d14b518ee 100644 --- a/2010/CVE-2010-0483.md +++ b/2010/CVE-2010-0483.md @@ -11,7 +11,6 @@ vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, X #### Reference - http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt -- http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk - http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/ #### Github diff --git a/2010/CVE-2010-0740.md b/2010/CVE-2010-0740.md index 4a1df50a274..47bcfa24f04 100644 --- a/2010/CVE-2010-0740.md +++ b/2010/CVE-2010-0740.md @@ -11,7 +11,6 @@ The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m al #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0754.md b/2010/CVE-2010-0754.md index b17b9f1fabb..ae9c7048732 100644 --- a/2010/CVE-2010-0754.md +++ b/2010/CVE-2010-0754.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in #### Reference - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-006.txt #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0837.md b/2010/CVE-2010-0837.md index 8671cd9a656..6a46ac9d4ef 100644 --- a/2010/CVE-2010-0837.md +++ b/2010/CVE-2010-0837.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java fo - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0838.md b/2010/CVE-2010-0838.md index e93cb6e6ec2..ee9277731b3 100644 --- a/2010/CVE-2010-0838.md +++ b/2010/CVE-2010-0838.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java fo - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0839.md b/2010/CVE-2010-0839.md index e5af8b7d78f..f6d08d2a88f 100644 --- a/2010/CVE-2010-0839.md +++ b/2010/CVE-2010-0839.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the Sound component in Oracle Java SE and Java for - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0840.md b/2010/CVE-2010-0840.md index 09def77c359..a5851314e6f 100644 --- a/2010/CVE-2010-0840.md +++ b/2010/CVE-2010-0840.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0841.md b/2010/CVE-2010-0841.md index 02467a98e63..ca9c6ab8e8d 100644 --- a/2010/CVE-2010-0841.md +++ b/2010/CVE-2010-0841.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java fo - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0842.md b/2010/CVE-2010-0842.md index d7334494d65..5f9eb4501f0 100644 --- a/2010/CVE-2010-0842.md +++ b/2010/CVE-2010-0842.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the Sound component in Oracle Java SE and Java for - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0843.md b/2010/CVE-2010-0843.md index 088a2c85c6a..2b3f1076955 100644 --- a/2010/CVE-2010-0843.md +++ b/2010/CVE-2010-0843.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the Sound component in Oracle Java SE and Java for - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0844.md b/2010/CVE-2010-0844.md index a2e4d5d0ddb..39a3bdfb3b6 100644 --- a/2010/CVE-2010-0844.md +++ b/2010/CVE-2010-0844.md @@ -12,7 +12,6 @@ Unspecified vulnerability in the Sound component in Oracle Java SE and Java for #### Reference - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0845.md b/2010/CVE-2010-0845.md index 18a1faf818d..65eef329e4a 100644 --- a/2010/CVE-2010-0845.md +++ b/2010/CVE-2010-0845.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and - http://ubuntu.com/usn/usn-923-1 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0846.md b/2010/CVE-2010-0846.md index dbacf0ddeb7..bbb50783700 100644 --- a/2010/CVE-2010-0846.md +++ b/2010/CVE-2010-0846.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java fo - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0847.md b/2010/CVE-2010-0847.md index 9cdca583721..82a142a024c 100644 --- a/2010/CVE-2010-0847.md +++ b/2010/CVE-2010-0847.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java fo - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0848.md b/2010/CVE-2010-0848.md index 76e190fafa5..290d40a4174 100644 --- a/2010/CVE-2010-0848.md +++ b/2010/CVE-2010-0848.md @@ -14,7 +14,6 @@ Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java fo - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0849.md b/2010/CVE-2010-0849.md index 1d55d5e50c4..da52c528b05 100644 --- a/2010/CVE-2010-0849.md +++ b/2010/CVE-2010-0849.md @@ -13,7 +13,6 @@ Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java fo - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0850.md b/2010/CVE-2010-0850.md index 121ba453254..b38858e0308 100644 --- a/2010/CVE-2010-0850.md +++ b/2010/CVE-2010-0850.md @@ -12,7 +12,6 @@ Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java fo #### Reference - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-0886.md b/2010/CVE-2010-0886.md index 585ea4fb721..cfbd9b3764b 100644 --- a/2010/CVE-2010-0886.md +++ b/2010/CVE-2010-0886.md @@ -11,7 +11,6 @@ Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Jav #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-1109.md b/2010/CVE-2010-1109.md index b4c608e8088..7d521b7035c 100644 --- a/2010/CVE-2010-1109.md +++ b/2010/CVE-2010-1109.md @@ -11,7 +11,6 @@ Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magi #### Reference - http://packetstormsecurity.org/1001-exploits/phpmysport-sqlaccess.txt -- http://phpmysport.sourceforge.net/en/forum/bugs/sujet_2851.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-1110.md b/2010/CVE-2010-1110.md index 18b9725f6e6..4451fd506be 100644 --- a/2010/CVE-2010-1110.md +++ b/2010/CVE-2010-1110.md @@ -11,7 +11,6 @@ Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote a #### Reference - http://packetstormsecurity.org/1001-exploits/phpmysport-sqlaccess.txt -- http://phpmysport.sourceforge.net/en/forum/bugs/sujet_2851.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-1157.md b/2010/CVE-2010-1157.md index 31259d7d73c..24284c0d57b 100644 --- a/2010/CVE-2010-1157.md +++ b/2010/CVE-2010-1157.md @@ -11,7 +11,6 @@ Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote a #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-1429.md b/2010/CVE-2010-1429.md index 06afb59ab64..7d42e41b701 100644 --- a/2010/CVE-2010-1429.md +++ b/2010/CVE-2010-1429.md @@ -10,7 +10,7 @@ Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 befor ### POC #### Reference -- https://www.exploit-db.com/exploits/44009/ +No PoCs from references. #### Github - https://github.com/JameelNabbo/Jboss4.2XPOC diff --git a/2010/CVE-2010-1818.md b/2010/CVE-2010-1818.md index 3b19380e7da..b8dda037ada 100644 --- a/2010/CVE-2010-1818.md +++ b/2010/CVE-2010-1818.md @@ -10,7 +10,7 @@ The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, ### POC #### Reference -- http://threatpost.com/en_us/blogs/new-remote-flaw-apple-quicktime-bypasses-aslr-and-dep-083010 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-1851.md b/2010/CVE-2010-1851.md index f70f2b52212..62fe362364d 100644 --- a/2010/CVE-2010-1851.md +++ b/2010/CVE-2010-1851.md @@ -10,7 +10,7 @@ Google Chrome, when the Invisible Hand extension is enabled, uses cookies during ### POC #### Reference -- http://www.cnet.com/8301-31361_1-20004265-254.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-1852.md b/2010/CVE-2010-1852.md index daab619fe77..8c430621402 100644 --- a/2010/CVE-2010-1852.md +++ b/2010/CVE-2010-1852.md @@ -10,7 +10,7 @@ Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses ### POC #### Reference -- http://www.cnet.com/8301-31361_1-20004265-254.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-2227.md b/2010/CVE-2010-2227.md index 2a0fcd1717a..01b9a367cb1 100644 --- a/2010/CVE-2010-2227.md +++ b/2010/CVE-2010-2227.md @@ -11,7 +11,6 @@ Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does no #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-2273.md b/2010/CVE-2010-2273.md index 4f5d500d5fc..659a42d97fc 100644 --- a/2010/CVE-2010-2273.md +++ b/2010/CVE-2010-2273.md @@ -10,7 +10,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, ### POC #### Reference -- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/ #### Github diff --git a/2010/CVE-2010-2274.md b/2010/CVE-2010-2274.md index 08f365aa81d..0b2cee90f36 100644 --- a/2010/CVE-2010-2274.md +++ b/2010/CVE-2010-2274.md @@ -10,7 +10,7 @@ Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before ### POC #### Reference -- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-2275.md b/2010/CVE-2010-2275.md index 795fc0b0035..9d63c732d9b 100644 --- a/2010/CVE-2010-2275.md +++ b/2010/CVE-2010-2275.md @@ -10,7 +10,6 @@ Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo T ### POC #### Reference -- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/ #### Github diff --git a/2010/CVE-2010-2276.md b/2010/CVE-2010-2276.md index 81a6f283d25..195fdbfc23b 100644 --- a/2010/CVE-2010-2276.md +++ b/2010/CVE-2010-2276.md @@ -10,7 +10,7 @@ The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x ### POC #### Reference -- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-2491.md b/2010/CVE-2010-2491.md index e2fc28dcc5a..d638943fdcf 100644 --- a/2010/CVE-2010-2491.md +++ b/2010/CVE-2010-2491.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4. #### Reference - http://roundup.svn.sourceforge.net/viewvc/roundup?view=revision&revision=4486 -- http://sourceforge.net/mailarchive/message.php?msg_name=AANLkTimIYtyRzTAReGmTSCEqPYBvwkkxrP6YKrdVm_nU%40mail.gmail.com #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-2772.md b/2010/CVE-2010-2772.md index 69c59083f65..96c07d4dd27 100644 --- a/2010/CVE-2010-2772.md +++ b/2010/CVE-2010-2772.md @@ -10,7 +10,7 @@ Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which a ### POC #### Reference -- http://www.wired.com/threatlevel/2010/07/siemens-scada/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-2928.md b/2010/CVE-2010-2928.md index f4de6fdfeaa..17ede0992fd 100644 --- a/2010/CVE-2010-2928.md +++ b/2010/CVE-2010-2928.md @@ -11,7 +11,6 @@ The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Up #### Reference - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-3332.md b/2010/CVE-2010-3332.md index bafa8128229..ad26cd0f8d1 100644 --- a/2010/CVE-2010-3332.md +++ b/2010/CVE-2010-3332.md @@ -10,7 +10,7 @@ Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, ### POC #### Reference -- http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-3888.md b/2010/CVE-2010-3888.md index 16d89964bf2..8d15b469680 100644 --- a/2010/CVE-2010-3888.md +++ b/2010/CVE-2010-3888.md @@ -10,7 +10,6 @@ Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local ### POC #### Reference -- http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061 - http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities #### Github diff --git a/2010/CVE-2010-3889.md b/2010/CVE-2010-3889.md index 09eecd68f58..3c8c354d07d 100644 --- a/2010/CVE-2010-3889.md +++ b/2010/CVE-2010-3889.md @@ -10,7 +10,6 @@ Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local ### POC #### Reference -- http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061 - http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities #### Github diff --git a/2010/CVE-2010-4230.md b/2010/CVE-2010-4230.md index 02ba0d27283..113ba20ea23 100644 --- a/2010/CVE-2010-4230.md +++ b/2010/CVE-2010-4230.md @@ -11,7 +11,6 @@ Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-20 #### Reference - http://www.exploit-db.com/exploits/15504 -- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4231.md b/2010/CVE-2010-4231.md index abfa02ebe33..c5f1dcc39df 100644 --- a/2010/CVE-2010-4231.md +++ b/2010/CVE-2010-4231.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the web-based administration interface on t ### POC #### Reference -- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt +No PoCs from references. #### Github - https://github.com/K3ysTr0K3R/CVE-2010-4231-EXPLOIT diff --git a/2010/CVE-2010-4232.md b/2010/CVE-2010-4232.md index 9f4be766c15..ac96d5aee3f 100644 --- a/2010/CVE-2010-4232.md +++ b/2010/CVE-2010-4232.md @@ -10,7 +10,7 @@ The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera ### POC #### Reference -- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4233.md b/2010/CVE-2010-4233.md index be52c42a401..accca309b90 100644 --- a/2010/CVE-2010-4233.md +++ b/2010/CVE-2010-4233.md @@ -10,7 +10,7 @@ The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC ### POC #### Reference -- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4234.md b/2010/CVE-2010-4234.md index 88ce4dc4ebc..2aed20742a8 100644 --- a/2010/CVE-2010-4234.md +++ b/2010/CVE-2010-4234.md @@ -10,7 +10,7 @@ The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Meg ### POC #### Reference -- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4257.md b/2010/CVE-2010-4257.md index 75931e2c78a..74c74afba04 100644 --- a/2010/CVE-2010-4257.md +++ b/2010/CVE-2010-4257.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the do_trackbacks function in wp-includes/comment ### POC #### Reference -- http://www.xakep.ru/magazine/xa/124/052/1.asp +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4276.md b/2010/CVE-2010-4276.md index d09a816ab39..b3886897b6b 100644 --- a/2010/CVE-2010-4276.md +++ b/2010/CVE-2010-4276.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function ### POC #### Reference -- http://www.conviso.com.br/livezilla-cross-site-scripting-vulnerability-cve-2010-4276/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4595.md b/2010/CVE-2010-4595.md index 8fac2ddca74..5ae372c6583 100644 --- a/2010/CVE-2010-4595.md +++ b/2010/CVE-2010-4595.md @@ -10,7 +10,7 @@ The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the htt ### POC #### Reference -- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ86207 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4804.md b/2010/CVE-2010-4804.md index e3767f9582e..01c078aa41e 100644 --- a/2010/CVE-2010-4804.md +++ b/2010/CVE-2010-4804.md @@ -10,7 +10,7 @@ The Android browser in Android before 2.3.4 allows remote attackers to obtain SD ### POC #### Reference -- http://www.csc.ncsu.edu/faculty/jiang/nexuss.html +No PoCs from references. #### Github - https://github.com/thomascannon/android-cve-2010-4804 diff --git a/2010/CVE-2010-4950.md b/2010/CVE-2010-4950.md index 48836800c6f..649f8649d84 100644 --- a/2010/CVE-2010-4950.md +++ b/2010/CVE-2010-4950.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4951.md b/2010/CVE-2010-4951.md index 96f1259e2a2..125dfc3711b 100644 --- a/2010/CVE-2010-4951.md +++ b/2010/CVE-2010-4951.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbo ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4952.md b/2010/CVE-2010-4952.md index c92bffabdbb..24e9909a7ee 100644 --- a/2010/CVE-2010-4952.md +++ b/2010/CVE-2010-4952.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the FE user statistic (festat) extension before 0 ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4953.md b/2010/CVE-2010-4953.md index 51aa9aa86ad..7e584597cce 100644 --- a/2010/CVE-2010-4953.md +++ b/2010/CVE-2010-4953.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4956.md b/2010/CVE-2010-4956.md index b4394cac9b9..8e4084dea7f 100644 --- a/2010/CVE-2010-4956.md +++ b/2010/CVE-2010-4956.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4957.md b/2010/CVE-2010-4957.md index 8c244bafeb0..076a0bd272e 100644 --- a/2010/CVE-2010-4957.md +++ b/2010/CVE-2010-4957.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension be ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4960.md b/2010/CVE-2010-4960.md index dd3c9d10e9e..c57fd57a679 100644 --- a/2010/CVE-2010-4960.md +++ b/2010/CVE-2010-4960.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages o ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4961.md b/2010/CVE-2010-4961.md index 15b2d5ca394..d12d17a96f5 100644 --- a/2010/CVE-2010-4961.md +++ b/2010/CVE-2010-4961.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1. ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-4962.md b/2010/CVE-2010-4962.md index 0a152befe46..ee36a41bb17 100644 --- a/2010/CVE-2010-4962.md +++ b/2010/CVE-2010-4962.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 ### POC #### Reference -- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2010/CVE-2010-5203.md b/2010/CVE-2010-5203.md index 9e49ae3fe58..8e0c75476d9 100644 --- a/2010/CVE-2010-5203.md +++ b/2010/CVE-2010-5203.md @@ -10,7 +10,7 @@ Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client b ### POC #### Reference -- http://www.ncp-e.com/fileadmin/pdf/service_support/NCP_Client_Vulnerability_Statement_EN.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1049.md b/2011/CVE-2011-1049.md index 74f7fd15b64..4f78c591a68 100644 --- a/2011/CVE-2011-1049.md +++ b/2011/CVE-2011-1049.md @@ -10,7 +10,7 @@ Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 ### POC #### Reference -- https://www.hex-rays.com/vulnfix.shtml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1050.md b/2011/CVE-2011-1050.md index fac6895791e..f97868d3931 100644 --- a/2011/CVE-2011-1050.md +++ b/2011/CVE-2011-1050.md @@ -10,7 +10,7 @@ Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and ### POC #### Reference -- https://www.hex-rays.com/vulnfix.shtml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1051.md b/2011/CVE-2011-1051.md index 6e9291ac360..e7eae29a977 100644 --- a/2011/CVE-2011-1051.md +++ b/2011/CVE-2011-1051.md @@ -10,7 +10,7 @@ Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro ### POC #### Reference -- https://www.hex-rays.com/vulnfix.shtml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1052.md b/2011/CVE-2011-1052.md index 14b6b2ffb10..ba9e8c74e40 100644 --- a/2011/CVE-2011-1052.md +++ b/2011/CVE-2011-1052.md @@ -10,7 +10,7 @@ Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and ### POC #### Reference -- https://www.hex-rays.com/vulnfix.shtml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1053.md b/2011/CVE-2011-1053.md index 11da227d5d9..44250f4881c 100644 --- a/2011/CVE-2011-1053.md +++ b/2011/CVE-2011-1053.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5. ### POC #### Reference -- https://www.hex-rays.com/vulnfix.shtml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1054.md b/2011/CVE-2011-1054.md index 04db6f6b07e..58f0d949a51 100644 --- a/2011/CVE-2011-1054.md +++ b/2011/CVE-2011-1054.md @@ -10,7 +10,7 @@ Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 a ### POC #### Reference -- https://www.hex-rays.com/vulnfix.shtml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1096.md b/2011/CVE-2011-1096.md index ecb7ac52d70..39c1684db79 100644 --- a/2011/CVE-2011-1096.md +++ b/2011/CVE-2011-1096.md @@ -10,8 +10,7 @@ The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) com ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html -- http://www.csoonline.com/article/692366/widely-used-encryption-standard-is-insecure-say-experts +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1345.md b/2011/CVE-2011-1345.md index 5e2bf9cd0f7..a9a156e72d3 100644 --- a/2011/CVE-2011-1345.md +++ b/2011/CVE-2011-1345.md @@ -11,7 +11,6 @@ Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memo #### Reference - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 -- https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1346.md b/2011/CVE-2011-1346.md index eedc2d9c865..4dc2cb51f2a 100644 --- a/2011/CVE-2011-1346.md +++ b/2011/CVE-2011-1346.md @@ -11,7 +11,6 @@ Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows r #### Reference - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 -- https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1347.md b/2011/CVE-2011-1347.md index ee9389b5733..c9b875ac111 100644 --- a/2011/CVE-2011-1347.md +++ b/2011/CVE-2011-1347.md @@ -12,7 +12,6 @@ Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows r #### Reference - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 -- https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1671.md b/2011/CVE-2011-1671.md index 47f81a8bf19..da17e7a6f54 100644 --- a/2011/CVE-2011-1671.md +++ b/2011/CVE-2011-1671.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb #### Reference - http://securityreason.com/securityalert/8196 -- http://www.mavitunasecurity.com/XSS-vulnerability-in-Tracks/ #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1723.md b/2011/CVE-2011-1723.md index a9dde5e927b..430cdd08ffa 100644 --- a/2011/CVE-2011-1723.md +++ b/2011/CVE-2011-1723.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redm #### Reference - http://securityreason.com/securityalert/8211 -- http://www.mavitunasecurity.com/XSS-vulnerability-in-Redmine/ #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-1838.md b/2011/CVE-2011-1838.md index 49274724e88..900ab55a161 100644 --- a/2011/CVE-2011-1838.md +++ b/2011/CVE-2011-1838.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki #### Reference - http://securityreason.com/securityalert/8257 -- http://www.mavitunasecurity.com/XSS-vulnerability-in-Twiki/ #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-2161.md b/2011/CVE-2011-2161.md index afc1d66f6e7..8aa1a354b65 100644 --- a/2011/CVE-2011-2161.md +++ b/2011/CVE-2011-2161.md @@ -11,7 +11,6 @@ The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as #### Reference - http://ffmpeg.mplayerhq.hu/ -- http://packetstorm.linuxsecurity.com/1103-exploits/vlc105-dos.txt #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-2382.md b/2011/CVE-2011-2382.md index a13e1d288b8..d0fb7283168 100644 --- a/2011/CVE-2011-2382.md +++ b/2011/CVE-2011-2382.md @@ -12,7 +12,6 @@ Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does no #### Reference - http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt - http://ju12.tistory.com/attachment/cfile4.uf@151FAB4C4DDC9E0002A6FE.ppt -- http://www.networkworld.com/community/node/74259 - http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/ - http://www.youtube.com/watch?v=V95CX-3JpK0 - http://www.youtube.com/watch?v=VsSkcnIFCxM diff --git a/2011/CVE-2011-2383.md b/2011/CVE-2011-2383.md index b546d50642a..805153053b0 100644 --- a/2011/CVE-2011-2383.md +++ b/2011/CVE-2011-2383.md @@ -12,7 +12,6 @@ Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone #### Reference - http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt - http://ju12.tistory.com/attachment/cfile4.uf@151FAB4C4DDC9E0002A6FE.ppt -- http://www.networkworld.com/community/node/74259 - http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/ - http://www.youtube.com/watch?v=V95CX-3JpK0 - http://www.youtube.com/watch?v=VsSkcnIFCxM diff --git a/2011/CVE-2011-3402.md b/2011/CVE-2011-3402.md index 150836bd78d..219911a358d 100644 --- a/2011/CVE-2011-3402.md +++ b/2011/CVE-2011-3402.md @@ -10,7 +10,6 @@ Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in t ### POC #### Reference -- http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two - http://www.symantec.com/connect/w32-duqu_status-updates_installer-zero-day-exploit - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087 diff --git a/2011/CVE-2011-3988.md b/2011/CVE-2011-3988.md index 5bfac1b3e80..9272728c93d 100644 --- a/2011/CVE-2011-3988.md +++ b/2011/CVE-2011-3988.md @@ -10,7 +10,7 @@ SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through ### POC #### Reference -- http://www.ec-cube.net/release/detail.php?release_id=286 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-4314.md b/2011/CVE-2011-4314.md index ee73a646bf4..fdde7fe7381 100644 --- a/2011/CVE-2011-4314.md +++ b/2011/CVE-2011-4314.md @@ -10,7 +10,7 @@ message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss En ### POC #### Reference -- http://openid.net/2011/05/05/attribute-exchange-security-alert/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2011/CVE-2011-5082.md b/2011/CVE-2011-5082.md index be081272f89..7345167aaa8 100644 --- a/2011/CVE-2011-5082.md +++ b/2011/CVE-2011-5082.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 11122 ### POC #### Reference -- http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-0825.md b/2012/CVE-2012-0825.md index 4a4e63dff40..811b63c2e88 100644 --- a/2012/CVE-2012-0825.md +++ b/2012/CVE-2012-0825.md @@ -10,7 +10,7 @@ Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchan ### POC #### Reference -- http://openid.net/2011/05/05/attribute-exchange-security-alert/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-0900.md b/2012/CVE-2012-0900.md index e76a659d357..f243e95d183 100644 --- a/2012/CVE-2012-0900.md +++ b/2012/CVE-2012-0900.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow ### POC #### Reference -- http://www.darksecurity.de/advisories/SSCHADV2011-042.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-0929.md b/2012/CVE-2012-0929.md index dcf5b6540a2..0adcb017a39 100644 --- a/2012/CVE-2012-0929.md +++ b/2012/CVE-2012-0929.md @@ -10,7 +10,7 @@ Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote ### POC #### Reference -- https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-0930.md b/2012/CVE-2012-0930.md index 37e87f97b39..6ceba9e0a1b 100644 --- a/2012/CVE-2012-0930.md +++ b/2012/CVE-2012-0930.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum P ### POC #### Reference -- https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-0931.md b/2012/CVE-2012-0931.md index a15a3eadd47..e8075710797 100644 --- a/2012/CVE-2012-0931.md +++ b/2012/CVE-2012-0931.md @@ -10,7 +10,7 @@ Schneider Electric Modicon Quantum PLC does not perform authentication between t ### POC #### Reference -- https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-10042.md b/2012/CVE-2012-10042.md index 367711b8106..97a621cdcc5 100644 --- a/2012/CVE-2012-10042.md +++ b/2012/CVE-2012-10042.md @@ -12,7 +12,6 @@ Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in #### Reference - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/sflog_upload_exec.rb - https://www.exploit-db.com/exploits/19626 -- https://www.vulncheck.com/advisories/sflog-cms-arbitrary-file-upload-rce #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-1224.md b/2012/CVE-2012-1224.md index 7cd97ef932e..ef786c791f2 100644 --- a/2012/CVE-2012-1224.md +++ b/2012/CVE-2012-1224.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentL ### POC #### Reference -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-1467.md b/2012/CVE-2012-1467.md index 10054a33796..7070b9edaf7 100644 --- a/2012/CVE-2012-1467.md +++ b/2012/CVE-2012-1467.md @@ -11,7 +11,6 @@ Multiple directory traversal vulnerabilities in the iBrowser plugin library, as #### Reference - http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 -- https://www.htbridge.com/advisory/HTB23079 #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-1468.md b/2012/CVE-2012-1468.md index 6cff5b9a102..4e93b4f5216 100644 --- a/2012/CVE-2012-1468.md +++ b/2012/CVE-2012-1468.md @@ -11,7 +11,6 @@ Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows r #### Reference - http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 -- https://www.htbridge.com/advisory/HTB23079 #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-1469.md b/2012/CVE-2012-1469.md index 9647e2fc528..0e05bcb88da 100644 --- a/2012/CVE-2012-1469.md +++ b/2012/CVE-2012-1469.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems befo #### Reference - http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 -- https://www.htbridge.com/advisory/HTB23079 #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-1824.md b/2012/CVE-2012-1824.md index bd600ad62f9..43e106ca2d4 100644 --- a/2012/CVE-2012-1824.md +++ b/2012/CVE-2012-1824.md @@ -10,7 +10,7 @@ Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 ### POC #### Reference -- http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-1911.md b/2012/CVE-2012-1911.md index 95910a322af..d2479571469 100644 --- a/2012/CVE-2012-1911.md +++ b/2012/CVE-2012-1911.md @@ -11,7 +11,6 @@ Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier al #### Reference - http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929 -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt - http://www.exploit-db.com/exploits/18578 #### Github diff --git a/2012/CVE-2012-1912.md b/2012/CVE-2012-1912.md index 7668ef90986..0580142d4e1 100644 --- a/2012/CVE-2012-1912.md +++ b/2012/CVE-2012-1912.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book #### Reference - http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929 -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt - http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html - http://www.exploit-db.com/exploits/18578 diff --git a/2012/CVE-2012-2099.md b/2012/CVE-2012-2099.md index a5147937310..1b4a9f79936 100644 --- a/2012/CVE-2012-2099.md +++ b/2012/CVE-2012-2099.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow rem ### POC #### Reference -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-2763.md b/2012/CVE-2012-2763.md index bef451681c8..e6c06312a39 100644 --- a/2012/CVE-2012-2763.md +++ b/2012/CVE-2012-2763.md @@ -11,7 +11,6 @@ Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/sc #### Reference - http://www.openwall.com/lists/oss-security/2012/05/31/1 -- http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-2904.md b/2012/CVE-2012-2904.md index 99402b29c0b..6b548a39ed9 100644 --- a/2012/CVE-2012-2904.md +++ b/2012/CVE-2012-2904.md @@ -10,7 +10,7 @@ player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-si ### POC #### Reference -- http://www.longtailvideo.com/support/forums/jw-player/bug-reports/26699/xss-exists-in-debug-functionality +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-3137.md b/2012/CVE-2012-3137.md index 6a8c616eea9..836f0c3eca9 100644 --- a/2012/CVE-2012-3137.md +++ b/2012/CVE-2012-3137.md @@ -11,7 +11,6 @@ The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0 #### Reference - http://arstechnica.com/security/2012/09/oracle-database-stealth-password-cracking-vulnerability/ -- http://threatpost.com/en_us/blogs/flaw-oracle-logon-protocol-leads-easy-password-cracking-092012?utm_source=Threatpost&utm_medium=Tabs&utm_campaign=Today%27s+Most+Popular - http://www.darkreading.com/authentication/167901072/security/application-security/240007643/attack-easily-cracks-oracle-database-passwords.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html diff --git a/2012/CVE-2012-3236.md b/2012/CVE-2012-3236.md index 41cf06df69b..3d2552023dc 100644 --- a/2012/CVE-2012-3236.md +++ b/2012/CVE-2012-3236.md @@ -11,7 +11,6 @@ fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of serv #### Reference - http://www.exploit-db.com/exploits/19482 -- http://www.reactionpenetrationtesting.co.uk/FIT-file-handling-dos.html #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-3434.md b/2012/CVE-2012-3434.md index 9fbc79cb8fd..5bfcc57edcd 100644 --- a/2012/CVE-2012-3434.md +++ b/2012/CVE-2012-3434.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Co ### POC #### Reference -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-3585.md b/2012/CVE-2012-3585.md index 0195750723d..c0981c995de 100644 --- a/2012/CVE-2012-3585.md +++ b/2012/CVE-2012-3585.md @@ -10,7 +10,7 @@ Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the ### POC #### Reference -- http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4226.md b/2012/CVE-2012-4226.md index 549410cc39f..4b5424f422c 100644 --- a/2012/CVE-2012-4226.md +++ b/2012/CVE-2012-4226.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin #### Reference - http://packetstormsecurity.com/files/115463/WordPress-Quick-Post-Widget-1.9.1-Cross-Site-Scripting.html -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4240.md b/2012/CVE-2012-4240.md index 4447f448e5c..6999619372f 100644 --- a/2012/CVE-2012-4240.md +++ b/2012/CVE-2012-4240.md @@ -10,7 +10,7 @@ SQL injection vulnerability in modules/calendar/json.php in Group-Office communi ### POC #### Reference -- http://www.reactionpenetrationtesting.co.uk/group-office-sqli.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4431.md b/2012/CVE-2012-4431.md index 853fc88e96b..3beae292209 100644 --- a/2012/CVE-2012-4431.md +++ b/2012/CVE-2012-4431.md @@ -10,7 +10,7 @@ org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x befor ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github - https://github.com/imjdl/CVE-2012-4431 diff --git a/2012/CVE-2012-4529.md b/2012/CVE-2012-4529.md index 199f2cadef1..e9cf285c7cc 100644 --- a/2012/CVE-2012-4529.md +++ b/2012/CVE-2012-4529.md @@ -10,7 +10,7 @@ The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4532.md b/2012/CVE-2012-4532.md index 15fe8ed8f18..e867879664b 100644 --- a/2012/CVE-2012-4532.md +++ b/2012/CVE-2012-4532.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.p ### POC #### Reference -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-014.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4572.md b/2012/CVE-2012-4572.md index 2cad9b3ee73..082c5f79d34 100644 --- a/2012/CVE-2012-4572.md +++ b/2012/CVE-2012-4572.md @@ -10,7 +10,7 @@ Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Porta ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4601.md b/2012/CVE-2012-4601.md index aa322040572..853d48dde8e 100644 --- a/2012/CVE-2012-4601.md +++ b/2012/CVE-2012-4601.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 al ### POC #### Reference -- http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;a=commit;h=3e1ed3c02122eae182f076daabe903b0c8837971 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4602.md b/2012/CVE-2012-4602.md index 408d38ad618..15a0934e1b5 100644 --- a/2012/CVE-2012-4602.md +++ b/2012/CVE-2012-4602.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_use ### POC #### Reference -- http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;a=commit;h=3e1ed3c02122eae182f076daabe903b0c8837971 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4681.md b/2012/CVE-2012-4681.md index 6b94b1e6ab5..582525fe237 100644 --- a/2012/CVE-2012-4681.md +++ b/2012/CVE-2012-4681.md @@ -11,7 +11,6 @@ Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Orac #### Reference - http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html -- https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day #### Github - https://github.com/ZH3FENG/PoCs-CVE_2012_4681 diff --git a/2012/CVE-2012-4929.md b/2012/CVE-2012-4929.md index a87afdc355c..7456706c1f9 100644 --- a/2012/CVE-2012-4929.md +++ b/2012/CVE-2012-4929.md @@ -11,13 +11,10 @@ The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, #### Reference - http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor -- http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312 -- http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512 - http://www.theregister.co.uk/2012/09/14/crime_tls_attack/ - http://www.ubuntu.com/usn/USN-1898-1 - https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls - https://github.com/mpgn/CRIME-poc -- https://threatpost.com/en_us/blogs/demo-crime-tls-attack-091212 #### Github - https://github.com/SECURED-FP7/secured-psa-reencrypt diff --git a/2012/CVE-2012-4930.md b/2012/CVE-2012-4930.md index a7bee27b831..96894b6401e 100644 --- a/2012/CVE-2012-4930.md +++ b/2012/CVE-2012-4930.md @@ -10,7 +10,6 @@ The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and ### POC #### Reference -- http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312 - http://www.theregister.co.uk/2012/09/14/crime_tls_attack/ - https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls diff --git a/2012/CVE-2012-4956.md b/2012/CVE-2012-4956.md index e3157918c42..72f2edb4364 100644 --- a/2012/CVE-2012-4956.md +++ b/2012/CVE-2012-4956.md @@ -10,7 +10,7 @@ Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4957.md b/2012/CVE-2012-4957.md index 5c69ef4b22e..4c69cfb218b 100644 --- a/2012/CVE-2012-4957.md +++ b/2012/CVE-2012-4957.md @@ -10,7 +10,7 @@ Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1. ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4958.md b/2012/CVE-2012-4958.md index ab059899eec..fc5766d939e 100644 --- a/2012/CVE-2012-4958.md +++ b/2012/CVE-2012-4958.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4959.md b/2012/CVE-2012-4959.md index 6ef2998dbc8..9aa207402a6 100644 --- a/2012/CVE-2012-4959.md +++ b/2012/CVE-2012-4959.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-4988.md b/2012/CVE-2012-4988.md index d7dc0814443..b001e75635b 100644 --- a/2012/CVE-2012-4988.md +++ b/2012/CVE-2012-4988.md @@ -11,7 +11,6 @@ Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossles #### Reference - http://seclists.org/fulldisclosure/2012/Oct/36 -- http://www.reactionpenetrationtesting.co.uk/xnview-jls-heap.html - https://www.exploit-db.com/exploits/21741/ #### Github diff --git a/2012/CVE-2012-5575.md b/2012/CVE-2012-5575.md index 9219f18f68a..df79251f78d 100644 --- a/2012/CVE-2012-5575.md +++ b/2012/CVE-2012-5575.md @@ -10,7 +10,7 @@ Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7 ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github - https://github.com/tafamace/CVE-2012-5575 diff --git a/2012/CVE-2012-5913.md b/2012/CVE-2012-5913.md index 6962454002a..58c376c02dc 100644 --- a/2012/CVE-2012-5913.md +++ b/2012/CVE-2012-5913.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress I #### Reference - http://packetstormsecurity.org/files/111249/WordPress-Integrator-1.32-Cross-Site-Scripting.html -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-010.txt #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-5920.md b/2012/CVE-2012-5920.md index 765a73e9408..3ab0e57ad16 100644 --- a/2012/CVE-2012-5920.md +++ b/2012/CVE-2012-5920.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-0187.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-6498.md b/2012/CVE-2012-6498.md index 9f363eac0fd..5aa370a47f5 100644 --- a/2012/CVE-2012-6498.md +++ b/2012/CVE-2012-6498.md @@ -10,7 +10,6 @@ Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earl ### POC #### Reference -- http://thaicert.or.th/alerts/admin/2012/al2012ad025.html - http://www.youtube.com/watch?v=CfvTCSS3LGY #### Github diff --git a/2012/CVE-2012-6520.md b/2012/CVE-2012-6520.md index 0c73c58d51a..1cc4b92318d 100644 --- a/2012/CVE-2012-6520.md +++ b/2012/CVE-2012-6520.md @@ -10,7 +10,6 @@ Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 ### POC #### Reference -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt - http://www.openwall.com/lists/oss-security/2012/04/13/4 - http://www.openwall.com/lists/oss-security/2012/04/15/1 diff --git a/2012/CVE-2012-6528.md b/2012/CVE-2012-6528.md index d5ac03e8091..35e0d1157ef 100644 --- a/2012/CVE-2012-6528.md +++ b/2012/CVE-2012-6528.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow r ### POC #### Reference -- http://www.darksecurity.de/advisories/2012/SSCHADV2012-002.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-6636.md b/2012/CVE-2012-6636.md index 7129964babf..14867884424 100644 --- a/2012/CVE-2012-6636.md +++ b/2012/CVE-2012-6636.md @@ -10,7 +10,7 @@ The Android API before 17 does not properly restrict the WebView.addJavascriptIn ### POC #### Reference -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2012/CVE-2012-6637.md b/2012/CVE-2012-6637.md index 4983731f0b5..e58874ef0d6 100644 --- a/2012/CVE-2012-6637.md +++ b/2012/CVE-2012-6637.md @@ -12,7 +12,6 @@ Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anc #### Reference - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt - http://seclists.org/bugtraq/2014/Jan/96 -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-0156.md b/2013/CVE-2013-0156.md index 5e3ddfe86eb..f988afa2c91 100644 --- a/2013/CVE-2013-0156.md +++ b/2013/CVE-2013-0156.md @@ -11,7 +11,6 @@ active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0. #### Reference - http://www.insinuator.net/2013/01/rails-yaml/ -- https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156 #### Github - https://github.com/R3dKn33-zz/CVE-2013-0156 diff --git a/2013/CVE-2013-0169.md b/2013/CVE-2013-0169.md index d2a8d5389d0..e2950eeb985 100644 --- a/2013/CVE-2013-0169.md +++ b/2013/CVE-2013-0169.md @@ -11,7 +11,6 @@ The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenS #### Reference - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 -- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf #### Github - https://github.com/wearohat/lucky13 diff --git a/2013/CVE-2013-0422.md b/2013/CVE-2013-0422.md index c38c92ce7dc..639eeb3b09e 100644 --- a/2013/CVE-2013-0422.md +++ b/2013/CVE-2013-0422.md @@ -14,7 +14,6 @@ Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attacker - http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/ - http://seclists.org/bugtraq/2013/Jan/48 - https://partners.immunityinc.com/idocs/Java%20MBeanInstantiator.findClass%200day%20Analysis.pdf -- https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013 - https://www-304.ibm.com/connections/blogs/PSIRT/entry/oracle_java_7_security_manager_bypass_vulnerability_cve_2013_04224?lang=en_us #### Github diff --git a/2013/CVE-2013-0805.md b/2013/CVE-2013-0805.md index 63ba3024a5a..8b021dfd7a8 100644 --- a/2013/CVE-2013-0805.md +++ b/2013/CVE-2013-0805.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in the search feature in iTo #### Reference - http://packetstormsecurity.com/files/119767/iTop-Cross-Site-Scripting.html -- https://www.csnc.ch/misc/files/advisories/CVE-2013-0805.txt #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1393.md b/2013/CVE-2013-1393.md index ed78c6d48a3..ec9b5f252fc 100644 --- a/2013/CVE-2013-1393.md +++ b/2013/CVE-2013-1393.md @@ -12,7 +12,6 @@ Cross-site scripting (XSS) vulnerability in the CurvyCorners module 6.x-1.x and #### Reference - http://packetstormsecurity.com/files/119766/Drupal-CurvyCorners-6.x-7.x-Cross-Site-Scripting.html - http://packetstormsecurity.com/files/119814/CurvyCorners-Cross-Site-Scripting.html -- http://www.csnc.ch/misc/files/advisories/CVE-2013-1393.txt #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1413.md b/2013/CVE-2013-1413.md index 9f55fcc4527..e5023719347 100644 --- a/2013/CVE-2013-1413.md +++ b/2013/CVE-2013-1413.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9. ### POC #### Reference -- http://www.csnc.ch/en/modules/news/news_0076.html_533560828.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1450.md b/2013/CVE-2013-1450.md index da120459523..fc969efaac8 100644 --- a/2013/CVE-2013-1450.md +++ b/2013/CVE-2013-1450.md @@ -10,7 +10,6 @@ Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has t ### POC #### Reference -- http://pastebin.com/raw.php?i=rz9BcBey - http://www.youtube.com/ChristianHaiderPoC - http://www.youtube.com/watch?v=TPqagWAvo8U diff --git a/2013/CVE-2013-1451.md b/2013/CVE-2013-1451.md index e10afaed134..7439a38b253 100644 --- a/2013/CVE-2013-1451.md +++ b/2013/CVE-2013-1451.md @@ -10,7 +10,6 @@ Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has t ### POC #### Reference -- http://pastebin.com/raw.php?i=rz9BcBey - http://www.youtube.com/ChristianHaiderPoC - http://www.youtube.com/watch?v=TPqagWAvo8U diff --git a/2013/CVE-2013-1489.md b/2013/CVE-2013-1489.md index 244a2575f56..9150f22daf9 100644 --- a/2013/CVE-2013-1489.md +++ b/2013/CVE-2013-1489.md @@ -11,7 +11,6 @@ Unspecified vulnerability in the Java Runtime Environment (JRE) component in Ora #### Reference - http://seclists.org/fulldisclosure/2013/Jan/241 -- http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/ - http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/ diff --git a/2013/CVE-2013-1618.md b/2013/CVE-2013-1618.md index c1e9190f003..32ed46c372e 100644 --- a/2013/CVE-2013-1618.md +++ b/2013/CVE-2013-1618.md @@ -10,7 +10,7 @@ The TLS implementation in Opera before 12.13 does not properly consider timing s ### POC #### Reference -- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1619.md b/2013/CVE-2013-1619.md index 823ccbec780..d48dd34a898 100644 --- a/2013/CVE-2013-1619.md +++ b/2013/CVE-2013-1619.md @@ -10,7 +10,6 @@ The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x ### POC #### Reference -- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://www.ubuntu.com/usn/USN-1752-1 #### Github diff --git a/2013/CVE-2013-1620.md b/2013/CVE-2013-1620.md index f1eb1b7ac55..669bf70c51b 100644 --- a/2013/CVE-2013-1620.md +++ b/2013/CVE-2013-1620.md @@ -11,7 +11,6 @@ The TLS implementation in Mozilla Network Security Services (NSS) does not prope #### Reference - http://seclists.org/fulldisclosure/2014/Dec/23 -- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html diff --git a/2013/CVE-2013-1621.md b/2013/CVE-2013-1621.md index 31dc734a898..f7427d804d2 100644 --- a/2013/CVE-2013-1621.md +++ b/2013/CVE-2013-1621.md @@ -10,7 +10,7 @@ Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote ### POC #### Reference -- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1623.md b/2013/CVE-2013-1623.md index 74f032b60bf..251cec1d501 100644 --- a/2013/CVE-2013-1623.md +++ b/2013/CVE-2013-1623.md @@ -10,7 +10,7 @@ The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly ### POC #### Reference -- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1624.md b/2013/CVE-2013-1624.md index 909291c524a..aa09be94c34 100644 --- a/2013/CVE-2013-1624.md +++ b/2013/CVE-2013-1624.md @@ -10,7 +10,7 @@ The TLS implementation in the Bouncy Castle Java library before 1.48 and C# libr ### POC #### Reference -- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1641.md b/2013/CVE-2013-1641.md index 82dca0d8233..3a02ae0cdd5 100644 --- a/2013/CVE-2013-1641.md +++ b/2013/CVE-2013-1641.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in the zip download functionality in QuiXplore ### POC #### Reference -- https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-030.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1642.md b/2013/CVE-2013-1642.md index 14c8ab9d16e..db34d278ca5 100644 --- a/2013/CVE-2013-1642.md +++ b/2013/CVE-2013-1642.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in QuiXplorer before 2.5.5 a ### POC #### Reference -- https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-030.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-1921.md b/2013/CVE-2013-1921.md index 0fe90367a1c..9329794b37f 100644 --- a/2013/CVE-2013-1921.md +++ b/2013/CVE-2013-1921.md @@ -10,7 +10,7 @@ PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1 ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-20003.md b/2013/CVE-2013-20003.md index 1b3b9b7c382..e8ceda744b4 100644 --- a/2013/CVE-2013-20003.md +++ b/2013/CVE-2013-20003.md @@ -11,7 +11,6 @@ Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 secur #### Reference - https://orangecyberdefense.com/global/blog/sensepost/blackhat-conference-z-wave-security/ -- https://sensepost.com/cms/resources/conferences/2013/bh_zwave/Security%20Evaluation%20of%20Z-Wave_WP.pdf #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2067.md b/2013/CVE-2013-2067.md index 69c411dd4ad..9e6897dc53e 100644 --- a/2013/CVE-2013-2067.md +++ b/2013/CVE-2013-2067.md @@ -10,7 +10,6 @@ java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authen ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html diff --git a/2013/CVE-2013-2102.md b/2013/CVE-2013-2102.md index 29f4f0181e2..86a41a3ffaf 100644 --- a/2013/CVE-2013-2102.md +++ b/2013/CVE-2013-2102.md @@ -10,7 +10,7 @@ The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGrou ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2160.md b/2013/CVE-2013-2160.md index 990c6d6ff0d..ed98ce308f5 100644 --- a/2013/CVE-2013-2160.md +++ b/2013/CVE-2013-2160.md @@ -10,7 +10,7 @@ The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2172.md b/2013/CVE-2013-2172.md index 2526715c38b..793ac0161f4 100644 --- a/2013/CVE-2013-2172.md +++ b/2013/CVE-2013-2172.md @@ -10,7 +10,6 @@ jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html diff --git a/2013/CVE-2013-2566.md b/2013/CVE-2013-2566.md index d6339ce9c19..3f61aac4882 100644 --- a/2013/CVE-2013-2566.md +++ b/2013/CVE-2013-2566.md @@ -10,7 +10,6 @@ The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single ### POC #### Reference -- http://www.isg.rhul.ac.uk/tls/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html diff --git a/2013/CVE-2013-2585.md b/2013/CVE-2013-2585.md index 338c71bca2d..9bd0dd35c3b 100644 --- a/2013/CVE-2013-2585.md +++ b/2013/CVE-2013-2585.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x before 6 ### POC #### Reference -- http://www.isecauditors.com/advisories-2013#2013-004 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2621.md b/2013/CVE-2013-2621.md index 560f89eacb5..8fad234f639 100644 --- a/2013/CVE-2013-2621.md +++ b/2013/CVE-2013-2621.md @@ -10,7 +10,7 @@ Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 al ### POC #### Reference -- https://www.isecauditors.com/advisories-2013#2013-009 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2623.md b/2013/CVE-2013-2623.md index 7393d59b029..79bfc6466cf 100644 --- a/2013/CVE-2013-2623.md +++ b/2013/CVE-2013-2623.md @@ -10,7 +10,7 @@ Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inj ### POC #### Reference -- https://www.isecauditors.com/advisories-2013#2013-009 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2624.md b/2013/CVE-2013-2624.md index 12c3ecda91c..aa372dbaaf9 100644 --- a/2013/CVE-2013-2624.md +++ b/2013/CVE-2013-2624.md @@ -10,7 +10,7 @@ Telean before 1.3.1 contains a full path disclosure vulnerability which could al ### POC #### Reference -- https://www.isecauditors.com/advisories-2013#2013-009 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2627.md b/2013/CVE-2013-2627.md index 5ba00879a13..e087d022fa4 100644 --- a/2013/CVE-2013-2627.md +++ b/2013/CVE-2013-2627.md @@ -10,7 +10,7 @@ SQL injection vulnerability in action.php in Leed (Light Feed), possibly before ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2628.md b/2013/CVE-2013-2628.md index 11e65698f86..56624568e98 100644 --- a/2013/CVE-2013-2628.md +++ b/2013/CVE-2013-2628.md @@ -10,7 +10,7 @@ Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2629.md b/2013/CVE-2013-2629.md index dd5189a01f2..85a36348ad5 100644 --- a/2013/CVE-2013-2629.md +++ b/2013/CVE-2013-2629.md @@ -10,7 +10,7 @@ Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-2631.md b/2013/CVE-2013-2631.md index b73b840d175..021852145c7 100644 --- a/2013/CVE-2013-2631.md +++ b/2013/CVE-2013-2631.md @@ -11,7 +11,6 @@ TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerabi #### Reference - https://packetstormsecurity.com/files/121128/TinyWebGallery-1.8.9-Path-Disclosure.html -- https://www.isecauditors.com/advisories-2013#2013-012 #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3591.md b/2013/CVE-2013-3591.md index 03a4ba29fd1..ba1ccf635af 100644 --- a/2013/CVE-2013-3591.md +++ b/2013/CVE-2013-3591.md @@ -11,7 +11,7 @@ vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulne ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3617.md b/2013/CVE-2013-3617.md index 21392a00af3..a13a00efad1 100644 --- a/2013/CVE-2013-3617.md +++ b/2013/CVE-2013-3617.md @@ -11,7 +11,6 @@ The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated u #### Reference - http://www.kb.cert.org/vuls/id/533894 -- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3628.md b/2013/CVE-2013-3628.md index c8ca3dc5cb8..aa0370915ce 100644 --- a/2013/CVE-2013-3628.md +++ b/2013/CVE-2013-3628.md @@ -10,7 +10,7 @@ Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3629.md b/2013/CVE-2013-3629.md index 4ca65ad831f..685b3afd03f 100644 --- a/2013/CVE-2013-3629.md +++ b/2013/CVE-2013-3629.md @@ -10,7 +10,7 @@ ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3630.md b/2013/CVE-2013-3630.md index d37ee6bed90..a408997d6bb 100644 --- a/2013/CVE-2013-3630.md +++ b/2013/CVE-2013-3630.md @@ -11,7 +11,6 @@ Moodle through 2.5.2 allows remote authenticated administrators to execute arbit #### Reference - http://packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html -- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3631.md b/2013/CVE-2013-3631.md index f5977eeac4d..2040d952632 100644 --- a/2013/CVE-2013-3631.md +++ b/2013/CVE-2013-3631.md @@ -11,7 +11,6 @@ NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute ar #### Reference - http://www.kb.cert.org/vuls/id/326830 -- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3632.md b/2013/CVE-2013-3632.md index 450b03f6e73..4def8275c67 100644 --- a/2013/CVE-2013-3632.md +++ b/2013/CVE-2013-3632.md @@ -10,7 +10,7 @@ The Cron service in rpc.php in OpenMediaVault allows remote authenticated users ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-3720.md b/2013/CVE-2013-3720.md index 2b7d5b806f2..b8be90fe265 100644 --- a/2013/CVE-2013-3720.md +++ b/2013/CVE-2013-3720.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plu ### POC #### Reference -- http://www.darksecurity.de/advisories/2013/SSCHADV2013-004.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-4112.md b/2013/CVE-2013-4112.md index c07a76bef6b..aec34c9ad40 100644 --- a/2013/CVE-2013-4112.md +++ b/2013/CVE-2013-4112.md @@ -10,7 +10,7 @@ The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x bef ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-4128.md b/2013/CVE-2013-4128.md index 366f8337b41..b4e95e4ce7a 100644 --- a/2013/CVE-2013-4128.md +++ b/2013/CVE-2013-4128.md @@ -10,7 +10,7 @@ Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cach ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-4213.md b/2013/CVE-2013-4213.md index 3b2a6effa45..a37d970a2ad 100644 --- a/2013/CVE-2013-4213.md +++ b/2013/CVE-2013-4213.md @@ -10,7 +10,7 @@ Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cach ### POC #### Reference -- http://rhn.redhat.com/errata/RHSA-2013-1437.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-4258.md b/2013/CVE-2013-4258.md index 9e004fde1ba..b67badeb08f 100644 --- a/2013/CVE-2013-4258.md +++ b/2013/CVE-2013-4258.md @@ -11,7 +11,6 @@ Format string vulnerability in the osLogMsg function in server/os/aulog.c in Net #### Reference - http://radscan.com/pipermail/nas/2013-August/001270.html -- http://sourceforge.net/mailarchive/forum.php?thread_name=E1Rp1rP-00038Z-VJ%40sfp-svn-6.v30.ch3.sourceforge.com&forum_name=nas-commits #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-6021.md b/2013/CVE-2013-6021.md index 01098cfd62b..2af08a338e1 100644 --- a/2013/CVE-2013-6021.md +++ b/2013/CVE-2013-6021.md @@ -11,7 +11,6 @@ Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows rem #### Reference - http://www.kb.cert.org/vuls/id/233990 -- https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/ #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-6027.md b/2013/CVE-2013-6027.md index 513d85cda1e..5e66ec83fb3 100644 --- a/2013/CVE-2013-6027.md +++ b/2013/CVE-2013-6027.md @@ -10,7 +10,7 @@ Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs o ### POC #### Reference -- http://pastebin.com/raw.php?i=vbiG42VD +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-6117.md b/2013/CVE-2013-6117.md index ec7957eadfd..6dc390fe0e5 100644 --- a/2013/CVE-2013-6117.md +++ b/2013/CVE-2013-6117.md @@ -10,7 +10,6 @@ Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authen ### POC #### Reference -- http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html - http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html - http://seclists.org/bugtraq/2013/Nov/62 - http://www.exploit-db.com/exploits/29673 diff --git a/2013/CVE-2013-6229.md b/2013/CVE-2013-6229.md index 050603b164d..28ceab7bf4d 100644 --- a/2013/CVE-2013-6229.md +++ b/2013/CVE-2013-6229.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0 ### POC #### Reference -- http://www.isecauditors.com/advisories-2013#2013-014 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-7127.md b/2013/CVE-2013-7127.md index 68fb77c64ec..367f68b71e2 100644 --- a/2013/CVE-2013-7127.md +++ b/2013/CVE-2013-7127.md @@ -10,7 +10,7 @@ Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in ### POC #### Reference -- http://www.securelist.com/en/blog/8168/Loophole_in_Safari +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2013/CVE-2013-7144.md b/2013/CVE-2013-7144.md index 254bb8e2d66..4b8acd9493a 100644 --- a/2013/CVE-2013-7144.md +++ b/2013/CVE-2013-7144.md @@ -10,7 +10,7 @@ LINE 3.2.1.83 and earlier on Windows and 3.2.1 and earlier on OS X does not veri ### POC #### Reference -- https://www.thaicert.or.th/papers/general/2013/pa2013ge010.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-0160.md b/2014/CVE-2014-0160.md index a84329b192f..c9f08534384 100644 --- a/2014/CVE-2014-0160.md +++ b/2014/CVE-2014-0160.md @@ -17,7 +17,6 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - https://hackerone.com/reports/6626 - https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html -- https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd #### Github - https://github.com/0x90/CVE-2014-0160 diff --git a/2014/CVE-2014-0196.md b/2014/CVE-2014-0196.md index e6f1bc9e194..ae001b0bfe9 100644 --- a/2014/CVE-2014-0196.md +++ b/2014/CVE-2014-0196.md @@ -10,7 +10,6 @@ The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14 ### POC #### Reference -- http://pastebin.com/raw.php?i=yTSFUBgZ - http://www.exploit-db.com/exploits/33516 - https://bugzilla.redhat.com/show_bug.cgi?id=1094232 diff --git a/2014/CVE-2014-0332.md b/2014/CVE-2014-0332.md index 70594cf8825..1c1a4e5e418 100644 --- a/2014/CVE-2014-0332.md +++ b/2014/CVE-2014-0332.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS befor #### Reference - http://www.kb.cert.org/vuls/id/727318 -- http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_XSS_Resolved_in_7.1_SP2_and_7.2.pdf #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-0781.md b/2014/CVE-2014-0781.md index ff1d77d6370..fd45e31051c 100644 --- a/2014/CVE-2014-0781.md +++ b/2014/CVE-2014-0781.md @@ -10,7 +10,6 @@ Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a #### Github diff --git a/2014/CVE-2014-0783.md b/2014/CVE-2014-0783.md index b341fbc111e..ce7706689e4 100644 --- a/2014/CVE-2014-0783.md +++ b/2014/CVE-2014-0783.md @@ -10,7 +10,6 @@ Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 a ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a #### Github diff --git a/2014/CVE-2014-0784.md b/2014/CVE-2014-0784.md index a4e9b418e20..7a1391707c3 100644 --- a/2014/CVE-2014-0784.md +++ b/2014/CVE-2014-0784.md @@ -10,7 +10,6 @@ Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 ### POC #### Reference -- https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a #### Github diff --git a/2014/CVE-2014-0792.md b/2014/CVE-2014-0792.md index b1301ba6c24..420a3d418af 100644 --- a/2014/CVE-2014-0792.md +++ b/2014/CVE-2014-0792.md @@ -10,7 +10,7 @@ Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitr ### POC #### Reference -- https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-10033.md b/2014/CVE-2014-10033.md index b8153b91f53..f56a7062176 100644 --- a/2014/CVE-2014-10033.md +++ b/2014/CVE-2014-10033.md @@ -11,7 +11,6 @@ SQL injection vulnerability in the update_zone function in catalog/admin/geo_zon #### Reference - http://www.exploit-db.com/exploits/31515 -- http://www.secgeek.net/oscommerce-v2x-sql-injection-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-10398.md b/2014/CVE-2014-10398.md index 90a3ad2d462..604aaef675c 100644 --- a/2014/CVE-2014-10398.md +++ b/2014/CVE-2014-10398.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Syst ### POC #### Reference -- https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1237.md b/2014/CVE-2014-1237.md index 5011373fd47..2a40a58edd9 100644 --- a/2014/CVE-2014-1237.md +++ b/2014/CVE-2014-1237.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 all #### Reference - http://packetstormsecurity.com/files/125062 -- http://www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-doit_Cross-site_Scripting_-_XSS.txt #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-125121.md b/2014/CVE-2014-125121.md index af2361c79b0..b26328b6810 100644 --- a/2014/CVE-2014-125121.md +++ b/2014/CVE-2014-125121.md @@ -14,7 +14,6 @@ Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances ar #### Reference - https://www.exploit-db.com/exploits/32440 -- https://www.vulncheck.com/advisories/array-networks-vapv-vxag-default-credential-privilege-escalation #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1372.md b/2014/CVE-2014-1372.md index 38d1cfdd5c8..17ab436c46c 100644 --- a/2014/CVE-2014-1372.md +++ b/2014/CVE-2014-1372.md @@ -10,7 +10,7 @@ Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read oper ### POC #### Reference -- https://code.google.com/p/google-security-research/issues/detail?id=18 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1597.md b/2014/CVE-2014-1597.md index b4eaf2ded25..fdb5597ae0b 100644 --- a/2014/CVE-2014-1597.md +++ b/2014/CVE-2014-1597.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the CMDB web application in synetics i-doit pro b ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CVE-2014-1597_i-doit_SQL_Injection.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1881.md b/2014/CVE-2014-1881.md index 1d1a6ad0c94..07edfe8049d 100644 --- a/2014/CVE-2014-1881.md +++ b/2014/CVE-2014-1881.md @@ -12,7 +12,6 @@ Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remo #### Reference - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt - http://seclists.org/bugtraq/2014/Jan/96 -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1882.md b/2014/CVE-2014-1882.md index 2568cb1c9d7..f4a6be4e881 100644 --- a/2014/CVE-2014-1882.md +++ b/2014/CVE-2014-1882.md @@ -12,7 +12,6 @@ Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remo #### Reference - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt - http://seclists.org/bugtraq/2014/Jan/96 -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1883.md b/2014/CVE-2014-1883.md index 4f53f5a5271..572d3ad193a 100644 --- a/2014/CVE-2014-1883.md +++ b/2014/CVE-2014-1883.md @@ -12,7 +12,6 @@ Adobe PhoneGap before 2.6.0 on Android uses the shouldOverrideUrlLoading callbac #### Reference - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt - http://seclists.org/bugtraq/2014/Jan/96 -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1884.md b/2014/CVE-2014-1884.md index c39f44a22f3..79e8b7fc7d0 100644 --- a/2014/CVE-2014-1884.md +++ b/2014/CVE-2014-1884.md @@ -12,7 +12,6 @@ Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows #### Reference - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt - http://seclists.org/bugtraq/2014/Jan/96 -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1885.md b/2014/CVE-2014-1885.md index a687bb7504a..9def4f4b64d 100644 --- a/2014/CVE-2014-1885.md +++ b/2014/CVE-2014-1885.md @@ -10,7 +10,7 @@ The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is ### POC #### Reference -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1886.md b/2014/CVE-2014-1886.md index d63d64a6c1d..5ae791cecba 100644 --- a/2014/CVE-2014-1886.md +++ b/2014/CVE-2014-1886.md @@ -10,7 +10,7 @@ The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earli ### POC #### Reference -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1887.md b/2014/CVE-2014-1887.md index 85d27b30474..c6098d5f54d 100644 --- a/2014/CVE-2014-1887.md +++ b/2014/CVE-2014-1887.md @@ -10,7 +10,7 @@ The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or ea ### POC #### Reference -- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-1912.md b/2014/CVE-2014-1912.md index 9fb22635721..67fb5b8daea 100644 --- a/2014/CVE-2014-1912.md +++ b/2014/CVE-2014-1912.md @@ -11,7 +11,6 @@ Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c i #### Reference - http://bugs.python.org/issue20246 -- http://pastebin.com/raw.php?i=GHXSmNEg - http://www.exploit-db.com/exploits/31875 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html diff --git a/2014/CVE-2014-2034.md b/2014/CVE-2014-2034.md index 1a1d2d41296..3cdb8f842c3 100644 --- a/2014/CVE-2014-2034.md +++ b/2014/CVE-2014-2034.md @@ -10,7 +10,7 @@ Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allo ### POC #### Reference -- https://support.sonatype.com/entries/42374566-CVE-2014-2034-Nexus-Security-Advisory-REST-API +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-2087.md b/2014/CVE-2014-2087.md index 94477d12b14..d988184f682 100644 --- a/2014/CVE-2014-2087.md +++ b/2014/CVE-2014-2087.md @@ -11,7 +11,6 @@ Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function i #### Reference - http://seclists.org/fulldisclosure/2014/Mar/137 -- https://www.rcesecurity.com/2014/03/cve-2014-2087-free-download-manager-cdownloads_deleted-updatedownload-remote-code-execution #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-2265.md b/2014/CVE-2014-2265.md index 11660273ae0..6378ec8ecdd 100644 --- a/2014/CVE-2014-2265.md +++ b/2014/CVE-2014-2265.md @@ -10,7 +10,7 @@ Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the C ### POC #### Reference -- http://www.hedgehogsecurity.co.uk/2014/02/26/contactform7-vulnerability/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3182.md b/2014/CVE-2014-3182.md index 888d04ed76a..d958162909a 100644 --- a/2014/CVE-2014-3182.md +++ b/2014/CVE-2014-3182.md @@ -10,7 +10,7 @@ Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech- ### POC #### Reference -- https://code.google.com/p/google-security-research/issues/detail?id=89 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3248.md b/2014/CVE-2014-3248.md index 8363b34817d..e356eea35b8 100644 --- a/2014/CVE-2014-3248.md +++ b/2014/CVE-2014-3248.md @@ -10,7 +10,7 @@ Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppe ### POC #### Reference -- http://puppetlabs.com/security/cve/cve-2014-3248 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3249.md b/2014/CVE-2014-3249.md index 79c7a652ffa..c640fae20ff 100644 --- a/2014/CVE-2014-3249.md +++ b/2014/CVE-2014-3249.md @@ -10,7 +10,7 @@ Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive ### POC #### Reference -- http://puppetlabs.com/security/cve/cve-2014-3249 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3250.md b/2014/CVE-2014-3250.md index 50c97a0e2b4..d23e9898447 100644 --- a/2014/CVE-2014-3250.md +++ b/2014/CVE-2014-3250.md @@ -10,7 +10,7 @@ The default vhost configuration file in Puppet before 3.6.2 does not include the ### POC #### Reference -- https://puppet.com/security/cve/CVE-2014-3250 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3251.md b/2014/CVE-2014-3251.md index 5b219f6a13d..b51304b9581 100644 --- a/2014/CVE-2014-3251.md +++ b/2014/CVE-2014-3251.md @@ -10,7 +10,7 @@ The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 a ### POC #### Reference -- http://puppetlabs.com/security/cve/cve-2014-3251 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3482.md b/2014/CVE-2014-3482.md index d3899abaca3..932025467e1 100644 --- a/2014/CVE-2014-3482.md +++ b/2014/CVE-2014-3482.md @@ -10,7 +10,6 @@ SQL injection vulnerability in activerecord/lib/active_record/connection_adapter ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J - https://hackerone.com/reports/28449 #### Github diff --git a/2014/CVE-2014-3483.md b/2014/CVE-2014-3483.md index 1fc125eec26..b45d9fcebae 100644 --- a/2014/CVE-2014-3483.md +++ b/2014/CVE-2014-3483.md @@ -10,7 +10,6 @@ SQL injection vulnerability in activerecord/lib/active_record/connection_adapter ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J - https://hackerone.com/reports/28450 #### Github diff --git a/2014/CVE-2014-3505.md b/2014/CVE-2014-3505.md index fedd97e16ff..9da1b5bcf30 100644 --- a/2014/CVE-2014-3505.md +++ b/2014/CVE-2014-3505.md @@ -10,7 +10,7 @@ Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9 ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3506.md b/2014/CVE-2014-3506.md index 80c0546595d..b228df81d56 100644 --- a/2014/CVE-2014-3506.md +++ b/2014/CVE-2014-3506.md @@ -10,7 +10,7 @@ d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 befo ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3507.md b/2014/CVE-2014-3507.md index 1f4010fe937..6d18fe5d3fe 100644 --- a/2014/CVE-2014-3507.md +++ b/2014/CVE-2014-3507.md @@ -10,7 +10,6 @@ Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9. ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm - https://kc.mcafee.com/corporate/index?page=content&id=SB10109 #### Github diff --git a/2014/CVE-2014-3508.md b/2014/CVE-2014-3508.md index 4caea71b428..4a31c1adb2d 100644 --- a/2014/CVE-2014-3508.md +++ b/2014/CVE-2014-3508.md @@ -10,7 +10,6 @@ The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9 ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 #### Github diff --git a/2014/CVE-2014-3509.md b/2014/CVE-2014-3509.md index 2b9a9b3d877..a7390704457 100644 --- a/2014/CVE-2014-3509.md +++ b/2014/CVE-2014-3509.md @@ -10,7 +10,6 @@ Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenS ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 #### Github diff --git a/2014/CVE-2014-3510.md b/2014/CVE-2014-3510.md index 1e7e3874832..9e1f383d972 100644 --- a/2014/CVE-2014-3510.md +++ b/2014/CVE-2014-3510.md @@ -10,7 +10,7 @@ The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-3511.md b/2014/CVE-2014-3511.md index df541368f30..35179415ea6 100644 --- a/2014/CVE-2014-3511.md +++ b/2014/CVE-2014-3511.md @@ -10,7 +10,6 @@ The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://kc.mcafee.com/corporate/index?page=content&id=SB10084 diff --git a/2014/CVE-2014-3512.md b/2014/CVE-2014-3512.md index e95105b2e53..840ab8847e3 100644 --- a/2014/CVE-2014-3512.md +++ b/2014/CVE-2014-3512.md @@ -10,7 +10,7 @@ Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in O ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-4196.md b/2014/CVE-2014-4196.md index 2f36e3fe609..47a04e08c62 100644 --- a/2014/CVE-2014-4196.md +++ b/2014/CVE-2014-4196.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in bsi.dll in Bank Soft Systems (BSS) R ### POC #### Reference -- https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-4197.md b/2014/CVE-2014-4197.md index 2731fce6e3f..f1e370ce28f 100644 --- a/2014/CVE-2014-4197.md +++ b/2014/CVE-2014-4197.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client ### POC #### Reference -- https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-4198.md b/2014/CVE-2014-4198.md index 0c576f93af4..55f6a9cf0ae 100644 --- a/2014/CVE-2014-4198.md +++ b/2014/CVE-2014-4198.md @@ -10,7 +10,7 @@ A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Cli ### POC #### Reference -- https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-4395.md b/2014/CVE-2014-4395.md index b85cb2ab876..631ed9b13cb 100644 --- a/2014/CVE-2014-4395.md +++ b/2014/CVE-2014-4395.md @@ -10,7 +10,7 @@ An unspecified integrated graphics driver routine in the Intel Graphics Driver s ### POC #### Reference -- https://code.google.com/p/google-security-research/issues/detail?id=29 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-4402.md b/2014/CVE-2014-4402.md index 4c3473b532e..ce6c5407368 100644 --- a/2014/CVE-2014-4402.md +++ b/2014/CVE-2014-4402.md @@ -10,7 +10,7 @@ An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks pr ### POC #### Reference -- https://code.google.com/p/google-security-research/issues/detail?id=33 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-4736.md b/2014/CVE-2014-4736.md index ff403a252a6..5e1e6c2cf34 100644 --- a/2014/CVE-2014-4736.md +++ b/2014/CVE-2014-4736.md @@ -11,7 +11,6 @@ SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to e #### Reference - http://packetstormsecurity.com/files/127594/E2-2844-SQL-Injection.html -- https://www.htbridge.com/advisory/HTB23222 #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-5139.md b/2014/CVE-2014-5139.md index ffca30a7651..7263b7ff768 100644 --- a/2014/CVE-2014-5139.md +++ b/2014/CVE-2014-5139.md @@ -10,7 +10,7 @@ The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i ### POC #### Reference -- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm +No PoCs from references. #### Github - https://github.com/uthrasri/CVE-2014-5139 diff --git a/2014/CVE-2014-5542.md b/2014/CVE-2014-5542.md index 7409c17890e..edf7c745ad0 100644 --- a/2014/CVE-2014-5542.md +++ b/2014/CVE-2014-5542.md @@ -11,7 +11,6 @@ The Hidden Object Mystery (aka air.com.differencegames.hodetectivemysteryfree) a #### Reference - http://www.kb.cert.org/vuls/id/582497 -- http://www.kb.cert.org/vuls/id/638641 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing #### Github diff --git a/2014/CVE-2014-5641.md b/2014/CVE-2014-5641.md index 67637d31aa5..351e6a1a6a5 100644 --- a/2014/CVE-2014-5641.md +++ b/2014/CVE-2014-5641.md @@ -11,7 +11,6 @@ The Cloud Manager (aka com.ileaf.cloud_manager) application 1.6 for Android does #### Reference - http://www.kb.cert.org/vuls/id/582497 -- http://www.kb.cert.org/vuls/id/714937 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing #### Github diff --git a/2014/CVE-2014-5696.md b/2014/CVE-2014-5696.md index 0444063c34c..6c5425f9408 100644 --- a/2014/CVE-2014-5696.md +++ b/2014/CVE-2014-5696.md @@ -10,7 +10,6 @@ The Sonic 4 Episode II LITE (aka com.sega.sonic4ep2lite) application 2.3 for And ### POC #### Reference -- http://www.kb.cert.org/vuls/id/148041 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing diff --git a/2014/CVE-2014-6284.md b/2014/CVE-2014-6284.md index ec4af9ce600..e297b739c18 100644 --- a/2014/CVE-2014-6284.md +++ b/2014/CVE-2014-6284.md @@ -10,7 +10,7 @@ SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-6779.md b/2014/CVE-2014-6779.md index 35fc234dee6..1627ebc27ba 100644 --- a/2014/CVE-2014-6779.md +++ b/2014/CVE-2014-6779.md @@ -11,7 +11,6 @@ The Cart App (aka com.virtecha.mobilewallet) application 1.5 for Android does no #### Reference - http://www.kb.cert.org/vuls/id/582497 -- http://www.kb.cert.org/vuls/id/781201 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing #### Github diff --git a/2014/CVE-2014-6900.md b/2014/CVE-2014-6900.md index c3eda93302f..d48c8d88ae8 100644 --- a/2014/CVE-2014-6900.md +++ b/2014/CVE-2014-6900.md @@ -10,7 +10,6 @@ The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) applicatio ### POC #### Reference -- http://www.kb.cert.org/vuls/id/363289 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing diff --git a/2014/CVE-2014-7715.md b/2014/CVE-2014-7715.md index fc4a9742742..d98f14b705f 100644 --- a/2014/CVE-2014-7715.md +++ b/2014/CVE-2014-7715.md @@ -11,7 +11,6 @@ The GIGA HOBBY (aka com.innopage.store.gigahobby) application 1.0.6 for Android #### Reference - http://www.kb.cert.org/vuls/id/582497 -- http://www.kb.cert.org/vuls/id/714673 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing #### Github diff --git a/2014/CVE-2014-7818.md b/2014/CVE-2014-7818.md index c63f03df3e4..8df08effd57 100644 --- a/2014/CVE-2014-7818.md +++ b/2014/CVE-2014-7818.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/s ### POC #### Reference -- https://puppet.com/security/cve/cve-2014-7829 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-7829.md b/2014/CVE-2014-7829.md index 5a932a7870d..ffae97e86a5 100644 --- a/2014/CVE-2014-7829.md +++ b/2014/CVE-2014-7829.md @@ -11,7 +11,6 @@ Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/s #### Reference - https://hackerone.com/reports/43440 -- https://puppet.com/security/cve/cve-2014-7829 #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-7952.md b/2014/CVE-2014-7952.md index 29c118967a8..861e9b65df4 100644 --- a/2014/CVE-2014-7952.md +++ b/2014/CVE-2014-7952.md @@ -12,7 +12,6 @@ The backup mechanism in the adb tool in Android might allow attackers to inject #### Reference - http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html - http://seclists.org/fulldisclosure/2015/Jul/46 -- http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability - https://github.com/irsl/ADB-Backup-APK-Injection/ #### Github diff --git a/2014/CVE-2014-8315.md b/2014/CVE-2014-8315.md index eb76754d3c6..bd14880e33a 100644 --- a/2014/CVE-2014-8315.md +++ b/2014/CVE-2014-8315.md @@ -10,7 +10,7 @@ polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with d ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CSNC-2013-016_SAP_BusinessObjects_Explorer_Port-Scanning.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-8316.md b/2014/CVE-2014-8316.md index a4342ade9c6..b1ef50e8c40 100644 --- a/2014/CVE-2014-8316.md +++ b/2014/CVE-2014-8316.md @@ -11,7 +11,6 @@ XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjec #### Reference - http://packetstormsecurity.com/files/128633/SAP-BusinessObjects-Explorer-14.0.5-XXE-Injection.html -- http://www.csnc.ch/misc/files/advisories/CSNC-2013-018_SAP_BusinessObjects_Explorer_XXE.txt #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-8540.md b/2014/CVE-2014-8540.md index 1e4c4c61d6f..520e4c52244 100644 --- a/2014/CVE-2014-8540.md +++ b/2014/CVE-2014-8540.md @@ -10,7 +10,7 @@ The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated gu ### POC #### Reference -- https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-9389.md b/2014/CVE-2014-9389.md index e9d25077ecb..cf3789277df 100644 --- a/2014/CVE-2014-9389.md +++ b/2014/CVE-2014-9389.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 ### POC #### Reference -- https://support.sonatype.com/entries/84705937-CVE-2014-9389-Nexus-Security-Advisory-Directory-Traversal +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-9438.md b/2014/CVE-2014-9438.md index 362bc523d71..e8f268be074 100644 --- a/2014/CVE-2014-9438.md +++ b/2014/CVE-2014-9438.md @@ -11,7 +11,6 @@ Cross-site request forgery (CSRF) vulnerability in the Moderator Control Panel i #### Reference - http://packetstormsecurity.com/files/129619/vBulletin-Moderator-Control-Panel-4.2.2-CSRF.html -- https://rstforums.com/forum/88810-csrf-vbulletin-modcp.rst #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-9458.md b/2014/CVE-2014-9458.md index 89416fb1728..817fd56331d 100644 --- a/2014/CVE-2014-9458.md +++ b/2014/CVE-2014-9458.md @@ -10,8 +10,7 @@ Heap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before ### POC #### Reference -- https://www.hex-rays.com/bugbounty.shtml -- https://www.hex-rays.com/vulnfix.shtml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-9568.md b/2014/CVE-2014-9568.md index de1eb5d7e85..5308fc43baf 100644 --- a/2014/CVE-2014-9568.md +++ b/2014/CVE-2014-9568.md @@ -10,7 +10,7 @@ puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in t ### POC #### Reference -- http://puppetlabs.com/security/cve/cve-2014-9568 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-9673.md b/2014/CVE-2014-9673.md index bbc435ab9b1..e870cbbdf19 100644 --- a/2014/CVE-2014-9673.md +++ b/2014/CVE-2014-9673.md @@ -10,7 +10,6 @@ Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c ### POC #### Reference -- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=35252ae9aa1dd9343e9f4884e9ddb1fee10ef415 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html #### Github diff --git a/2014/CVE-2014-9709.md b/2014/CVE-2014-9709.md index 21ef87676ec..3dde2e4b2c1 100644 --- a/2014/CVE-2014-9709.md +++ b/2014/CVE-2014-9709.md @@ -12,7 +12,6 @@ The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP bef #### Reference - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html -- https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43 #### Github No PoCs found on GitHub currently. diff --git a/2014/CVE-2014-9717.md b/2014/CVE-2014-9717.md index 9bf2e97b654..edafe838b34 100644 --- a/2014/CVE-2014-9717.md +++ b/2014/CVE-2014-9717.md @@ -11,7 +11,6 @@ fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 sys #### Reference - http://www.openwall.com/lists/oss-security/2015/04/17/4 -- https://groups.google.com/forum/message/raw?msg=linux.kernel/HnegnbXk0Vs/RClojwJzAFEJ #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-0235.md b/2015/CVE-2015-0235.md index 2de0d8108cf..0dda41d3372 100644 --- a/2015/CVE-2015-0235.md +++ b/2015/CVE-2015-0235.md @@ -38,7 +38,6 @@ Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2 - https://kc.mcafee.com/corporate/index?page=content&id=SB10100 - https://seclists.org/bugtraq/2019/Jun/14 - https://security.netapp.com/advisory/ntap-20150127-0001/ -- https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt #### Github - https://github.com/aaronfay/CVE-2015-0235-test diff --git a/2015/CVE-2015-10106.md b/2015/CVE-2015-10106.md index 25624f6613a..d1c49baa47e 100644 --- a/2015/CVE-2015-10106.md +++ b/2015/CVE-2015-10106.md @@ -18,7 +18,7 @@ In mback2k mh_httpbl Extension bis 1.1.7 für TYPO3 wurde eine Schwachstelle ent ### POC #### Reference -- https://typo3.org/article/typo3-ext-sa-2015-021 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-1029.md b/2015/CVE-2015-1029.md index 9d1f3ef6ea0..dd3e6010baf 100644 --- a/2015/CVE-2015-1029.md +++ b/2015/CVE-2015-1029.md @@ -10,7 +10,7 @@ The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5. ### POC #### Reference -- http://puppetlabs.com/security/cve/cve-2015-1029 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-1158.md b/2015/CVE-2015-1158.md index 7db225f2987..6720f604068 100644 --- a/2015/CVE-2015-1158.md +++ b/2015/CVE-2015-1158.md @@ -12,7 +12,6 @@ The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs i #### Reference - http://www.kb.cert.org/vuls/id/810572 - http://www.ubuntu.com/usn/USN-2629-1 -- https://www.cups.org/str.php?L4609 - https://www.exploit-db.com/exploits/37336/ - https://www.exploit-db.com/exploits/41233/ diff --git a/2015/CVE-2015-1159.md b/2015/CVE-2015-1159.md index 15194c55f4e..ade450c97c4 100644 --- a/2015/CVE-2015-1159.md +++ b/2015/CVE-2015-1159.md @@ -12,7 +12,6 @@ Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/tem #### Reference - http://www.kb.cert.org/vuls/id/810572 - http://www.ubuntu.com/usn/USN-2629-1 -- https://www.cups.org/str.php?L4609 #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-1349.md b/2015/CVE-2015-1349.md index 7eb3435cf8d..ad85bb47455 100644 --- a/2015/CVE-2015-1349.md +++ b/2015/CVE-2015-1349.md @@ -10,7 +10,6 @@ named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P ### POC #### Reference -- https://kb.isc.org/article/AA-01235 - https://kc.mcafee.com/corporate/index?page=content&id=SB10116 #### Github diff --git a/2015/CVE-2015-1503.md b/2015/CVE-2015-1503.md index e8344ce71e7..87728bce84b 100644 --- a/2015/CVE-2015-1503.md +++ b/2015/CVE-2015-1503.md @@ -12,7 +12,6 @@ Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 #### Reference - http://packetstormsecurity.com/files/147505/IceWarp-Mail-Server-Directory-Traversal.html - https://www.exploit-db.com/exploits/44587/ -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-001/?fid=5614 #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-1536.md b/2015/CVE-2015-1536.md index 13e00709247..8fe4157a82f 100644 --- a/2015/CVE-2015-1536.md +++ b/2015/CVE-2015-1536.md @@ -10,7 +10,7 @@ Integer overflow in the Bitmap_createFromParcel function in core/jni/android/gra ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-1538.md b/2015/CVE-2015-1538.md index 986923b836e..86c940d4e5a 100644 --- a/2015/CVE-2015-1538.md +++ b/2015/CVE-2015-1538.md @@ -11,7 +11,6 @@ Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTa #### Reference - http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ - https://www.exploit-db.com/exploits/38124/ #### Github diff --git a/2015/CVE-2015-1539.md b/2015/CVE-2015-1539.md index 188b2dbbff9..3d73cb91f37 100644 --- a/2015/CVE-2015-1539.md +++ b/2015/CVE-2015-1539.md @@ -10,7 +10,7 @@ Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-1541.md b/2015/CVE-2015-1541.md index 1d1b0b047cf..99d9e1f5c0b 100644 --- a/2015/CVE-2015-1541.md +++ b/2015/CVE-2015-1541.md @@ -10,7 +10,7 @@ The AppWidgetServiceImpl implementation in com/android/server/appwidget/AppWidge ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-1855.md b/2015/CVE-2015-1855.md index 5c9e924af86..f3c92f13df6 100644 --- a/2015/CVE-2015-1855.md +++ b/2015/CVE-2015-1855.md @@ -12,7 +12,7 @@ verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchl ### POC #### Reference -- https://puppetlabs.com/security/cve/cve-2015-1855 +No PoCs from references. #### Github - https://github.com/vpereira/CVE-2015-1855 diff --git a/2015/CVE-2015-2857.md b/2015/CVE-2015-2857.md index 8f4ae04e765..c0a40031a7a 100644 --- a/2015/CVE-2015-2857.md +++ b/2015/CVE-2015-2857.md @@ -11,7 +11,6 @@ Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to #### Reference - http://packetstormsecurity.com/files/132665/Accellion-FTA-getStatus-verify_oauth_token-Command-Execution.html -- https://community.rapid7.com/community/metasploit/blog/2015/07/10/r7-2015-08-accellion-file-transfer-appliance-vulnerabilities-cve-2015-2856-cve-2015-2857 - https://www.exploit-db.com/exploits/37597/ #### Github diff --git a/2015/CVE-2015-3443.md b/2015/CVE-2015-3443.md index 998135e4c94..e7cb3dd97cd 100644 --- a/2015/CVE-2015-3443.md +++ b/2015/CVE-2015-3443.md @@ -10,7 +10,6 @@ Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secr ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CVE-2015-3443_Thycotic_Secret_Server_XSS.TXT - https://www.exploit-db.com/exploits/37394/ #### Github diff --git a/2015/CVE-2015-3824.md b/2015/CVE-2015-3824.md index 0d7d6a1052e..f278beec7af 100644 --- a/2015/CVE-2015-3824.md +++ b/2015/CVE-2015-3824.md @@ -10,7 +10,7 @@ The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3826.md b/2015/CVE-2015-3826.md index 8a0b7120cbc..85b29d37c0a 100644 --- a/2015/CVE-2015-3826.md +++ b/2015/CVE-2015-3826.md @@ -10,7 +10,7 @@ The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstage ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3827.md b/2015/CVE-2015-3827.md index 6a8d8217d31..87a26dfd65a 100644 --- a/2015/CVE-2015-3827.md +++ b/2015/CVE-2015-3827.md @@ -10,7 +10,7 @@ The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3828.md b/2015/CVE-2015-3828.md index 384d1bc4be8..e53f327859c 100644 --- a/2015/CVE-2015-3828.md +++ b/2015/CVE-2015-3828.md @@ -10,7 +10,7 @@ The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstage ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3829.md b/2015/CVE-2015-3829.md index 04a3d620250..616bed21784 100644 --- a/2015/CVE-2015-3829.md +++ b/2015/CVE-2015-3829.md @@ -10,7 +10,7 @@ Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cp ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3831.md b/2015/CVE-2015-3831.md index 679fa4ff724..3e77cf5750c 100644 --- a/2015/CVE-2015-3831.md +++ b/2015/CVE-2015-3831.md @@ -10,7 +10,7 @@ Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedi ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3832.md b/2015/CVE-2015-3832.md index f8ac3fe1c3a..e8e064a33b4 100644 --- a/2015/CVE-2015-3832.md +++ b/2015/CVE-2015-3832.md @@ -10,7 +10,7 @@ Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android bef ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3833.md b/2015/CVE-2015-3833.md index 05cfa9df520..608da9cccde 100644 --- a/2015/CVE-2015-3833.md +++ b/2015/CVE-2015-3833.md @@ -11,7 +11,6 @@ The getRunningAppProcesses function in services/core/java/com/android/server/am/ #### Reference - http://stackoverflow.com/questions/24625936/getrunningtasks-doesnt-work-in-android-l -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3834.md b/2015/CVE-2015-3834.md index 46d966ead92..385b698bb15 100644 --- a/2015/CVE-2015-3834.md +++ b/2015/CVE-2015-3834.md @@ -10,7 +10,7 @@ Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/ ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3835.md b/2015/CVE-2015-3835.md index 9e25e238f37..258e2b46819 100644 --- a/2015/CVE-2015-3835.md +++ b/2015/CVE-2015-3835.md @@ -10,7 +10,7 @@ Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInsta ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3836.md b/2015/CVE-2015-3836.md index 555a164e109..d2419483be7 100644 --- a/2015/CVE-2015-3836.md +++ b/2015/CVE-2015-3836.md @@ -10,7 +10,7 @@ The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-E ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3837.md b/2015/CVE-2015-3837.md index 10d26e49058..4dd8f2334d2 100644 --- a/2015/CVE-2015-3837.md +++ b/2015/CVE-2015-3837.md @@ -10,7 +10,7 @@ The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3842.md b/2015/CVE-2015-3842.md index 93f7da67287..ae4dc8e5cfc 100644 --- a/2015/CVE-2015-3842.md +++ b/2015/CVE-2015-3842.md @@ -10,7 +10,7 @@ Multiple heap-based buffer overflows in libeffects in the Audio Policy Service i ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3843.md b/2015/CVE-2015-3843.md index 106bb03aa58..c8a812c7f55 100644 --- a/2015/CVE-2015-3843.md +++ b/2015/CVE-2015-3843.md @@ -10,7 +10,7 @@ The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3844.md b/2015/CVE-2015-3844.md index e6b972053d5..cbbe9784210 100644 --- a/2015/CVE-2015-3844.md +++ b/2015/CVE-2015-3844.md @@ -10,7 +10,7 @@ The getProcessRecordLocked method in services/core/java/com/android/server/am/Ac ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-3860.md b/2015/CVE-2015-3860.md index 901606e32dc..53e24dae717 100644 --- a/2015/CVE-2015-3860.md +++ b/2015/CVE-2015-3860.md @@ -10,7 +10,7 @@ packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android ### POC #### Reference -- http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-4045.md b/2015/CVE-2015-4045.md index 70fc2079154..b3510491ad2 100644 --- a/2015/CVE-2015-4045.md +++ b/2015/CVE-2015-4045.md @@ -10,7 +10,6 @@ The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 ### POC #### Reference -- https://sysdream.com/uploads/media/default/0001/01/8c6a70098657b4474fe7abe9bcdd5e73b234b610.pdf - https://www.alienvault.com/forums/discussion/5127/ #### Github diff --git a/2015/CVE-2015-4046.md b/2015/CVE-2015-4046.md index 1f24666f400..6658d57d7ea 100644 --- a/2015/CVE-2015-4046.md +++ b/2015/CVE-2015-4046.md @@ -10,7 +10,6 @@ The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authe ### POC #### Reference -- https://sysdream.com/uploads/media/default/0001/01/8c6a70098657b4474fe7abe9bcdd5e73b234b610.pdf - https://www.alienvault.com/forums/discussion/5127/ #### Github diff --git a/2015/CVE-2015-4620.md b/2015/CVE-2015-4620.md index b9019165f41..c478a16bfb6 100644 --- a/2015/CVE-2015-4620.md +++ b/2015/CVE-2015-4620.md @@ -10,7 +10,6 @@ name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x befor ### POC #### Reference -- https://kb.isc.org/article/AA-01306 - https://kc.mcafee.com/corporate/index?page=content&id=SB10124 #### Github diff --git a/2015/CVE-2015-5211.md b/2015/CVE-2015-5211.md index c01977a11aa..abd90ffaad8 100644 --- a/2015/CVE-2015-5211.md +++ b/2015/CVE-2015-5211.md @@ -10,7 +10,7 @@ Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2. ### POC #### Reference -- https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-5248.md b/2015/CVE-2015-5248.md index 870f8cefbf0..ab80fcda504 100644 --- a/2015/CVE-2015-5248.md +++ b/2015/CVE-2015-5248.md @@ -11,7 +11,6 @@ Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile App #### Reference - https://bugzilla.redhat.com/show_bug.cgi?id=1272326 -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-017/?fid=7150 #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-5372.md b/2015/CVE-2015-5372.md index 9ca2d9af69d..c8d3c47c0ab 100644 --- a/2015/CVE-2015-5372.md +++ b/2015/CVE-2015-5372.md @@ -11,7 +11,6 @@ The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when #### Reference - http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html -- http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-5477.md b/2015/CVE-2015-5477.md index 82b6bfb1a9c..d01173c1fde 100644 --- a/2015/CVE-2015-5477.md +++ b/2015/CVE-2015-5477.md @@ -14,8 +14,6 @@ named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote - http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html -- https://kb.isc.org/article/AA-01272 -- https://kb.isc.org/article/AA-01306 - https://kc.mcafee.com/corporate/index?page=content&id=SB10126 - https://www.exploit-db.com/exploits/37721/ - https://www.exploit-db.com/exploits/37723/ diff --git a/2015/CVE-2015-5722.md b/2015/CVE-2015-5722.md index 0c3f9ecf3b5..b3b92cbcc15 100644 --- a/2015/CVE-2015-5722.md +++ b/2015/CVE-2015-5722.md @@ -12,7 +12,6 @@ buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 al #### Reference - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html -- https://kb.isc.org/article/AA-01306 - https://kc.mcafee.com/corporate/index?page=content&id=SB10134 #### Github diff --git a/2015/CVE-2015-5986.md b/2015/CVE-2015-5986.md index 96b28b07581..b3dbd11c80c 100644 --- a/2015/CVE-2015-5986.md +++ b/2015/CVE-2015-5986.md @@ -10,7 +10,6 @@ openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.1 ### POC #### Reference -- https://kb.isc.org/article/AA-01306 - https://kc.mcafee.com/corporate/index?page=content&id=SB10134 #### Github diff --git a/2015/CVE-2015-6575.md b/2015/CVE-2015-6575.md index 45847cd7eb9..64d59802ccc 100644 --- a/2015/CVE-2015-6575.md +++ b/2015/CVE-2015-6575.md @@ -10,7 +10,7 @@ SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not proper ### POC #### Reference -- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-6922.md b/2015/CVE-2015-6922.md index 1d7656dd454..ef6cfc6d93a 100644 --- a/2015/CVE-2015-6922.md +++ b/2015/CVE-2015-6922.md @@ -11,7 +11,6 @@ Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0. #### Reference - http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.html -- https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-Advisory - https://www.exploit-db.com/exploits/38351/ #### Github diff --git a/2015/CVE-2015-6940.md b/2015/CVE-2015-6940.md index 7b55ac58742..ccc262e59b4 100644 --- a/2015/CVE-2015-6940.md +++ b/2015/CVE-2015-6940.md @@ -11,7 +11,6 @@ The GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, a #### Reference - http://packetstormsecurity.com/files/133601/Pentaho-5.2.x-BA-Suite-PDI-Information-Disclosure.html -- https://support.pentaho.com/entries/78884125-Security-Vulnerability-Announcement-Feb-2015 #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-6971.md b/2015/CVE-2015-6971.md index 437b47aea8b..d108d2c83f8 100644 --- a/2015/CVE-2015-6971.md +++ b/2015/CVE-2015-6971.md @@ -10,7 +10,7 @@ Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allo ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-018/?fid=7172 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-7297.md b/2015/CVE-2015-7297.md index 8fd0e491ea3..55b5dfaf7fc 100644 --- a/2015/CVE-2015-7297.md +++ b/2015/CVE-2015-7297.md @@ -13,7 +13,6 @@ SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/38797/ -- https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ #### Github - https://github.com/Cappricio-Securities/CVE-2015-7297 diff --git a/2015/CVE-2015-7707.md b/2015/CVE-2015-7707.md index f1f94a2a89c..408e90f5616 100644 --- a/2015/CVE-2015-7707.md +++ b/2015/CVE-2015-7707.md @@ -11,7 +11,6 @@ Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain admini #### Reference - http://packetstormsecurity.com/files/133559/Openfire-3.10.2-Privilege-Escalation.html -- https://igniterealtime.org/issues/browse/OF-941 - https://www.exploit-db.com/exploits/38190/ #### Github diff --git a/2015/CVE-2015-7857.md b/2015/CVE-2015-7857.md index 130c666c21a..39303b72a4d 100644 --- a/2015/CVE-2015-7857.md +++ b/2015/CVE-2015-7857.md @@ -13,7 +13,6 @@ SQL injection vulnerability in the getListQuery function in administrator/compon - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/38797/ -- https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ #### Github - https://github.com/Ciber1401/Mai diff --git a/2015/CVE-2015-7858.md b/2015/CVE-2015-7858.md index 212eab1edc7..04dd58f542d 100644 --- a/2015/CVE-2015-7858.md +++ b/2015/CVE-2015-7858.md @@ -13,7 +13,6 @@ SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/38797/ -- https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ #### Github - https://github.com/Ciber1401/Mai diff --git a/2015/CVE-2015-8249.md b/2015/CVE-2015-8249.md index b1c751ad2cb..d61e28d13b7 100644 --- a/2015/CVE-2015-8249.md +++ b/2015/CVE-2015-8249.md @@ -11,7 +11,6 @@ The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 #### Reference - http://packetstormsecurity.com/files/134806/ManageEngine-Desktop-Central-9-FileUploadServlet-ConnectionId.html -- https://community.rapid7.com/community/infosec/blog/2015/12/14/r7-2015-22-manageengine-desktop-central-9-fileuploadservlet-connectionid-vulnerability-cve-2015-8249 - https://www.exploit-db.com/exploits/38982/ #### Github diff --git a/2015/CVE-2015-8606.md b/2015/CVE-2015-8606.md index 71e59e4a493..344beb2679a 100644 --- a/2015/CVE-2015-8606.md +++ b/2015/CVE-2015-8606.md @@ -15,7 +15,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framew - http://www.openwall.com/lists/oss-security/2015/12/17/11 - http://www.openwall.com/lists/oss-security/2015/12/18/5 - http://www.silverstripe.org/download/security-releases/ss-2015-026 -- https://cybersecurityworks.com/zerodays/cve-2015-8606-silverstripe.html #### Github No PoCs found on GitHub currently. diff --git a/2015/CVE-2015-9229.md b/2015/CVE-2015-9229.md index 084db157cb3..5ad60b26a3a 100644 --- a/2015/CVE-2015-9229.md +++ b/2015/CVE-2015-9229.md @@ -10,7 +10,6 @@ In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2. ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2015-9229-nextgen-gallery.html - https://github.com/cybersecurityworks/Disclosed/issues/5 #### Github diff --git a/2015/CVE-2015-9230.md b/2015/CVE-2015-9230.md index 56c9b548b2a..61ee79f0e27 100644 --- a/2015/CVE-2015-9230.md +++ b/2015/CVE-2015-9230.md @@ -12,7 +12,6 @@ In the admin/db-backup-security/db-backup-security.php page in the BulletProof S #### Reference - http://www.openwall.com/lists/oss-security/2015/10/27/3 - https://cxsecurity.com/issue/WLB-2016010011 -- https://cybersecurityworks.com/zerodays/cve-2015-9230-bulletproof.html - https://forum.ait-pro.com/forums/topic/bps-changelog/ - https://github.com/cybersecurityworks/Disclosed/issues/3 - https://packetstormsecurity.com/files/135125/BulletProof-Security-.52.4-Cross-Site-Scripting.html diff --git a/2015/CVE-2015-9260.md b/2015/CVE-2015-9260.md index e80334aba79..03988376a59 100644 --- a/2015/CVE-2015-9260.md +++ b/2015/CVE-2015-9260.md @@ -10,7 +10,6 @@ An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) att ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2015-9260-bedita.html - https://github.com/bedita/bedita/issues/755#issuecomment-148036760 - https://github.com/cybersecurityworks/Disclosed/issues/8 diff --git a/2015/CVE-2015-9410.md b/2015/CVE-2015-9410.md index a491158e0ae..b5a28fa06bd 100644 --- a/2015/CVE-2015-9410.md +++ b/2015/CVE-2015-9410.md @@ -10,7 +10,6 @@ The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2015-9410-blubrry.html - https://github.com/cybersecurityworks/Disclosed/issues/7 #### Github diff --git a/2015/CVE-2015-9537.md b/2015/CVE-2015-9537.md index ef85175bdd7..a3e4e764b97 100644 --- a/2015/CVE-2015-9537.md +++ b/2015/CVE-2015-9537.md @@ -10,7 +10,6 @@ The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues i ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2015-9537-nextgen.html - https://github.com/cybersecurityworks/Disclosed/issues/1 - https://www.openwall.com/lists/oss-security/2015/10/27/4 diff --git a/2015/CVE-2015-9538.md b/2015/CVE-2015-9538.md index 63256d1d701..b32eb2777b8 100644 --- a/2015/CVE-2015-9538.md +++ b/2015/CVE-2015-9538.md @@ -11,7 +11,6 @@ The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Trav #### Reference - https://cxsecurity.com/issue/WLB-2015080165 -- https://cybersecurityworks.com/zerodays/cve-2015-9538-nextgen.html - https://github.com/cybersecurityworks/Disclosed/issues/2 - https://packetstormsecurity.com/files/135114/WordPress-NextGEN-Gallery-2.1.15-Cross-Site-Scripting-Path-Traversal.html - https://www.openwall.com/lists/oss-security/2015/08/28/4 diff --git a/2015/CVE-2015-9539.md b/2015/CVE-2015-9539.md index 88fe6458d49..e749cc72854 100644 --- a/2015/CVE-2015-9539.md +++ b/2015/CVE-2015-9539.md @@ -10,7 +10,6 @@ The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contac ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2015-9539-fastsecure.html - https://github.com/cybersecurityworks/Disclosed/issues/4 - https://www.openwall.com/lists/oss-security/2015/10/27/2 diff --git a/2015/CVE-2015-9549.md b/2015/CVE-2015-9549.md index 216ed091264..e6d2962ef9f 100644 --- a/2015/CVE-2015-9549.md +++ b/2015/CVE-2015-9549.md @@ -10,7 +10,6 @@ A reflected Cross-site Scripting (XSS) vulnerability exists in OcPortal 9.0.20 v ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2015-9549-ocportal.html - https://github.com/cybersecurityworks/Disclosed/issues/11 - https://www.openwall.com/lists/oss-security/2015/12/19/2 diff --git a/2016/CVE-2016-0007.md b/2016/CVE-2016-0007.md index ffadf1c27ae..7f8d7589fcd 100644 --- a/2016/CVE-2016-0007.md +++ b/2016/CVE-2016-0007.md @@ -10,7 +10,6 @@ The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 S ### POC #### Reference -- https://code.google.com/p/google-security-research/issues/detail?id=589 - https://www.exploit-db.com/exploits/39310/ - https://www.exploit-db.com/exploits/39311/ diff --git a/2016/CVE-2016-0955.md b/2016/CVE-2016-0955.md index 023397066ae..72361a6df27 100644 --- a/2016/CVE-2016-0955.md +++ b/2016/CVE-2016-0955.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 ### POC #### Reference -- http://www.csnc.ch/misc/files/advisories/CVE-2016-0955_AEM-XSS.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-1000007.md b/2016/CVE-2016-1000007.md index 9070258bcc5..05fc49c613f 100644 --- a/2016/CVE-2016-1000007.md +++ b/2016/CVE-2016-1000007.md @@ -10,7 +10,7 @@ Pagure 2.2.1 XSS in raw file endpoint ### POC #### Reference -- https://pagure.io/pagure/c/070d63983fe5daef92005ea33d3b8c693c224c77.patch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-10367.md b/2016/CVE-2016-10367.md index 33584d23a26..fecfdc3552f 100644 --- a/2016/CVE-2016-10367.md +++ b/2016/CVE-2016-10367.md @@ -10,7 +10,7 @@ In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-10368.md b/2016/CVE-2016-10368.md index 458e0325c72..74027a3cb4b 100644 --- a/2016/CVE-2016-10368.md +++ b/2016/CVE-2016-10368.md @@ -10,7 +10,7 @@ Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, pr ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-10517.md b/2016/CVE-2016-10517.md index e98516acd4f..9677e6c1721 100644 --- a/2016/CVE-2016-10517.md +++ b/2016/CVE-2016-10517.md @@ -10,7 +10,6 @@ networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it ### POC #### Reference -- https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES - https://www.reddit.com/r/redis/comments/5r8wxn/redis_327_is_out_important_security_fixes_inside/ #### Github diff --git a/2016/CVE-2016-10710.md b/2016/CVE-2016-10710.md index da2637389e5..3d3caf8f257 100644 --- a/2016/CVE-2016-10710.md +++ b/2016/CVE-2016-10710.md @@ -10,7 +10,7 @@ Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate th ### POC #### Reference -- http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-1077.md b/2016/CVE-2016-1077.md index 4f117af10cb..aa1efbc3873 100644 --- a/2016/CVE-2016-1077.md +++ b/2016/CVE-2016-1077.md @@ -11,7 +11,6 @@ Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic b #### Reference - http://packetstormsecurity.com/files/137035/Adobe-Reader-DC-15.010.20060-Memory-Corruption.html -- https://0patch.blogspot.com/2016/06/writing-0patch-for-acrobat-readers-use.html - https://www.exploit-db.com/exploits/39799/ #### Github diff --git a/2016/CVE-2016-11014.md b/2016/CVE-2016-11014.md index 4f07549bd56..996b51c6d3a 100644 --- a/2016/CVE-2016-11014.md +++ b/2016/CVE-2016-11014.md @@ -10,7 +10,6 @@ NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because th ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2016-11014-netgear.html - https://github.com/cybersecurityworks/Disclosed/issues/14 - https://lists.openwall.net/full-disclosure/2016/01/11/5 - https://packetstormsecurity.com/files/135216/Netgear-1.0.0.24-Bypass-Improper-Session-Management.html diff --git a/2016/CVE-2016-11015.md b/2016/CVE-2016-11015.md index 6a5963603fe..9f8ec192e3d 100644 --- a/2016/CVE-2016-11015.md +++ b/2016/CVE-2016-11015.md @@ -10,7 +10,6 @@ NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :Inte ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2016-11015-netgear.html - https://github.com/cybersecurityworks/Disclosed/issues/13 - https://lists.openwall.net/full-disclosure/2016/01/11/4 - https://packetstormsecurity.com/files/135215/Netgear-1.0.0.24-Cross-Site-Request-Forgery.html diff --git a/2016/CVE-2016-11016.md b/2016/CVE-2016-11016.md index 101d1e8e9d8..fe9cf7f37e7 100644 --- a/2016/CVE-2016-11016.md +++ b/2016/CVE-2016-11016.md @@ -10,7 +10,6 @@ NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS. ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2016-11016-netgear.html - https://github.com/cybersecurityworks/Disclosed/issues/12 - https://lists.openwall.net/full-disclosure/2016/01/11/1 - https://packetstormsecurity.com/files/135194/Netgear-1.0.0.24-Cross-Site-Scripting.html diff --git a/2016/CVE-2016-1909.md b/2016/CVE-2016-1909.md index 23f0080f799..3e04e872d83 100644 --- a/2016/CVE-2016-1909.md +++ b/2016/CVE-2016-1909.md @@ -11,7 +11,6 @@ Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x b #### Reference - http://packetstormsecurity.com/files/135225/FortiGate-OS-5.0.7-SSH-Backdoor.html -- https://www.exploit-db.com/exploits/39224/ #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-2541.md b/2016/CVE-2016-2541.md index 68bae84ada6..0e4531c8c63 100644 --- a/2016/CVE-2016-2541.md +++ b/2016/CVE-2016-2541.md @@ -10,7 +10,7 @@ Audacity before 2.1.2 allows remote attackers to cause a denial of service (memo ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-15-118 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-3129.md b/2016/CVE-2016-3129.md index 0edb25bc8a2..bee93cfba32 100644 --- a/2016/CVE-2016-3129.md +++ b/2016/CVE-2016-3129.md @@ -10,7 +10,7 @@ A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobilit ### POC #### Reference -- http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-3134.md b/2016/CVE-2016-3134.md index 45742904e46..83205f17449 100644 --- a/2016/CVE-2016-3134.md +++ b/2016/CVE-2016-3134.md @@ -14,7 +14,6 @@ The netfilter subsystem in the Linux kernel through 4.5.2 does not validate cert - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.ubuntu.com/usn/USN-2930-2 - http://www.ubuntu.com/usn/USN-2932-1 -- https://code.google.com/p/google-security-research/issues/detail?id=758 #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-3135.md b/2016/CVE-2016-3135.md index d81d7d67fdd..fcc7863d0ab 100644 --- a/2016/CVE-2016-3135.md +++ b/2016/CVE-2016-3135.md @@ -12,7 +12,6 @@ Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c #### Reference - http://www.ubuntu.com/usn/USN-2930-2 - http://www.ubuntu.com/usn/USN-3056-1 -- https://code.google.com/p/google-security-research/issues/detail?id=758 #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-3351.md b/2016/CVE-2016-3351.md index cc6be56b9ee..9547fb86f36 100644 --- a/2016/CVE-2016-3351.md +++ b/2016/CVE-2016-3351.md @@ -10,7 +10,7 @@ Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attacke ### POC #### Reference -- https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-3363.md b/2016/CVE-2016-3363.md index 87796b52a64..029bb34c2f9 100644 --- a/2016/CVE-2016-3363.md +++ b/2016/CVE-2016-3363.md @@ -10,8 +10,7 @@ Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Exc ### POC #### Reference -- https://medium.com/%40steventseeley/ms16-107-microsoft-office-excel-eof-record-type-confusion-remote-code-execution-vulnerability-1105d52764ff -- https://medium.com/@steventseeley/ms16-107-microsoft-office-excel-eof-record-type-confusion-remote-code-execution-vulnerability-1105d52764ff +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-3403.md b/2016/CVE-2016-3403.md index 3aa9fec4655..cade8763a9e 100644 --- a/2016/CVE-2016-3403.md +++ b/2016/CVE-2016-3403.md @@ -11,7 +11,6 @@ Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console #### Reference - http://seclists.org/fulldisclosure/2017/Jan/30 -- https://sysdream.com/news/lab/2017-01-12-cve-2016-3403-multiple-csrf-in-zimbra-administration-interface/ #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-3740.md b/2016/CVE-2016-3740.md index 4f3c53dc298..365f8c313f3 100644 --- a/2016/CVE-2016-3740.md +++ b/2016/CVE-2016-3740.md @@ -10,7 +10,6 @@ Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_ ### POC #### Reference -- https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html - https://www.foxitsoftware.com/support/security-bulletins.php #### Github diff --git a/2016/CVE-2016-4803.md b/2016/CVE-2016-4803.md index ca065815914..3b3416325f3 100644 --- a/2016/CVE-2016-4803.md +++ b/2016/CVE-2016-4803.md @@ -11,7 +11,6 @@ CRLF injection vulnerability in the send email functionality in dotCMS before 3. #### Reference - http://seclists.org/fulldisclosure/2016/May/69 -- https://dotcms.com/docs/latest/change-log#release-3.3.2 - https://security.elarlang.eu/cve-2016-4803-dotcms-email-header-injection-vulnerability-full-disclosure.html #### Github diff --git a/2016/CVE-2016-5051.md b/2016/CVE-2016-5051.md index 904d7c41d2c..1a291736e5a 100644 --- a/2016/CVE-2016-5051.md +++ b/2016/CVE-2016-5051.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext u ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5052.md b/2016/CVE-2016-5052.md index 2bc38eed2fe..940d97393ec 100644 --- a/2016/CVE-2016-5052.md +++ b/2016/CVE-2016-5052.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning. ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5053.md b/2016/CVE-2016-5053.md index 3af8b9d0a78..90fae0dbb2f 100644 --- a/2016/CVE-2016-5053.md +++ b/2016/CVE-2016-5053.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5054.md b/2016/CVE-2016-5054.md index eb339a33d8b..bb493ae9994 100644 --- a/2016/CVE-2016-5054.md +++ b/2016/CVE-2016-5054.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay. ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5055.md b/2016/CVE-2016-5055.md index 1b80bd77a64..d4581a5d97f 100644 --- a/2016/CVE-2016-5055.md +++ b/2016/CVE-2016-5055.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username fiel ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5056.md b/2016/CVE-2016-5056.md index 182e7052f82..c911a88cc34 100644 --- a/2016/CVE-2016-5056.md +++ b/2016/CVE-2016-5056.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5057.md b/2016/CVE-2016-5057.md index d7c168b638e..1390f8ee03e 100644 --- a/2016/CVE-2016-5057.md +++ b/2016/CVE-2016-5057.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning. ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5058.md b/2016/CVE-2016-5058.md index 756dda05e6f..109e45d01a7 100644 --- a/2016/CVE-2016-5058.md +++ b/2016/CVE-2016-5058.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay. ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5059.md b/2016/CVE-2016-5059.md index 9de632719d6..1e6b1eb14be 100644 --- a/2016/CVE-2016-5059.md +++ b/2016/CVE-2016-5059.md @@ -10,7 +10,7 @@ OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain s ### POC #### Reference -- https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5248.md b/2016/CVE-2016-5248.md index 4d671b2797f..1603c3243ac 100644 --- a/2016/CVE-2016-5248.md +++ b/2016/CVE-2016-5248.md @@ -10,7 +10,7 @@ The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center be ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-5249.md b/2016/CVE-2016-5249.md index 656ff6d4f83..e3ff10fb501 100644 --- a/2016/CVE-2016-5249.md +++ b/2016/CVE-2016-5249.md @@ -10,7 +10,7 @@ Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitr ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-7172.md b/2016/CVE-2016-7172.md index 7d0fea266f5..dc7c0916ff7 100644 --- a/2016/CVE-2016-7172.md +++ b/2016/CVE-2016-7172.md @@ -10,7 +10,7 @@ NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which ### POC #### Reference -- https://kb.netapp.com/support/s/article/NTAP-20161220-0001 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-7980.md b/2016/CVE-2016-7980.md index 97f57343969..8d886f36b98 100644 --- a/2016/CVE-2016-7980.md +++ b/2016/CVE-2016-7980.md @@ -11,7 +11,6 @@ Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php i #### Reference - http://www.openwall.com/lists/oss-security/2016/10/12/6 -- https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-exec-code-cross-site-request-forgery-cve-2016-7980/ #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-7982.md b/2016/CVE-2016-7982.md index 72e51095e30..c2bcb2473b1 100644 --- a/2016/CVE-2016-7982.md +++ b/2016/CVE-2016-7982.md @@ -11,7 +11,6 @@ Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 a #### Reference - http://www.openwall.com/lists/oss-security/2016/10/12/8 -- https://sysdream.com/news/lab/2016-10-19-spip-3-1-1-3-1-2-file-enumeration-path-traversal-cve-2016-7982/ #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-7998.md b/2016/CVE-2016-7998.md index 532fdf66e33..376f1202380 100644 --- a/2016/CVE-2016-7998.md +++ b/2016/CVE-2016-7998.md @@ -10,7 +10,7 @@ The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote auth ### POC #### Reference -- https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-template-compiler-composer-php-code-execution-cve-2016-7998/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-7999.md b/2016/CVE-2016-7999.md index 690b2963cfd..f9b10007118 100644 --- a/2016/CVE-2016-7999.md +++ b/2016/CVE-2016-7999.md @@ -11,7 +11,6 @@ ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to #### Reference - http://www.openwall.com/lists/oss-security/2016/10/12/10 -- https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-server-side-request-forgery-cve-2016-7999/ #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-9271.md b/2016/CVE-2016-9271.md index a4a21791722..3fa79f3af3c 100644 --- a/2016/CVE-2016-9271.md +++ b/2016/CVE-2016-9271.md @@ -10,7 +10,7 @@ Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 ### POC #### Reference -- https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_210 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2016/CVE-2016-9957.md b/2016/CVE-2016-9957.md index e768aee1815..7a53dbbf38f 100644 --- a/2016/CVE-2016-9957.md +++ b/2016/CVE-2016-9957.md @@ -10,7 +10,6 @@ Stack-based buffer overflow in game-music-emu before 0.6.1. ### POC #### Reference -- https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html #### Github diff --git a/2016/CVE-2016-9958.md b/2016/CVE-2016-9958.md index dd709362b49..930b0ec91fa 100644 --- a/2016/CVE-2016-9958.md +++ b/2016/CVE-2016-9958.md @@ -10,7 +10,6 @@ game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory ### POC #### Reference -- https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html #### Github diff --git a/2016/CVE-2016-9959.md b/2016/CVE-2016-9959.md index 6ce0b2ca6eb..a0c2f4c117b 100644 --- a/2016/CVE-2016-9959.md +++ b/2016/CVE-2016-9959.md @@ -10,7 +10,6 @@ game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8- ### POC #### Reference -- https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html #### Github diff --git a/2016/CVE-2016-9960.md b/2016/CVE-2016-9960.md index 2c049ac622c..97214ff1a31 100644 --- a/2016/CVE-2016-9960.md +++ b/2016/CVE-2016-9960.md @@ -10,7 +10,6 @@ game-music-emu before 0.6.1 allows local users to cause a denial of service (div ### POC #### Reference -- https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html #### Github diff --git a/2016/CVE-2016-9961.md b/2016/CVE-2016-9961.md index af3290d6efc..04a0ea9eec0 100644 --- a/2016/CVE-2016-9961.md +++ b/2016/CVE-2016-9961.md @@ -10,7 +10,6 @@ game-music-emu before 0.6.1 mishandles unspecified integer values. ### POC #### Reference -- https://bitbucket.org/mpyne/game-music-emu/wiki/Home - https://scarybeastsecurity.blogspot.cz/2016/12/redux-compromising-linux-using-snes.html #### Github diff --git a/2017/CVE-2017-0022.md b/2017/CVE-2017-0022.md index b4e0ae6c6a2..711e94375cc 100644 --- a/2017/CVE-2017-0022.md +++ b/2017/CVE-2017-0022.md @@ -10,7 +10,7 @@ Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows ### POC #### Reference -- https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-0037.md b/2017/CVE-2017-0037.md index c4eb1ab0083..3dba2ec58b7 100644 --- a/2017/CVE-2017-0037.md +++ b/2017/CVE-2017-0037.md @@ -10,7 +10,6 @@ Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion i ### POC #### Reference -- https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html - https://www.exploit-db.com/exploits/41454/ - https://www.exploit-db.com/exploits/42354/ - https://www.exploit-db.com/exploits/43125/ diff --git a/2017/CVE-2017-0038.md b/2017/CVE-2017-0038.md index ebca8c8d281..e28e887601e 100644 --- a/2017/CVE-2017-0038.md +++ b/2017/CVE-2017-0038.md @@ -10,7 +10,6 @@ gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Win ### POC #### Reference -- https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html - https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS - https://www.exploit-db.com/exploits/41363/ diff --git a/2017/CVE-2017-0283.md b/2017/CVE-2017-0283.md index 75afd0d0e66..10511c2662f 100644 --- a/2017/CVE-2017-0283.md +++ b/2017/CVE-2017-0283.md @@ -10,7 +10,6 @@ Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Win ### POC #### Reference -- https://0patch.blogspot.com/2017/07/0patching-quick-brown-fox-of-cve-2017.html - https://www.exploit-db.com/exploits/42234/ #### Github diff --git a/2017/CVE-2017-0290.md b/2017/CVE-2017-0290.md index 217a735b793..3e5ce9ab492 100644 --- a/2017/CVE-2017-0290.md +++ b/2017/CVE-2017-0290.md @@ -10,7 +10,6 @@ The Microsoft Malware Protection Engine running on Microsoft Forefront and Micro ### POC #### Reference -- https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html - https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/ - https://www.exploit-db.com/exploits/41975/ diff --git a/2017/CVE-2017-1000029.md b/2017/CVE-2017-1000029.md index 6ae1817dbdd..9b35e02e2ef 100644 --- a/2017/CVE-2017-1000029.md +++ b/2017/CVE-2017-1000029.md @@ -10,7 +10,7 @@ Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to L ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-1000030.md b/2017/CVE-2017-1000030.md index fc5c0e45cf6..1e5145d3c49 100644 --- a/2017/CVE-2017-1000030.md +++ b/2017/CVE-2017-1000030.md @@ -10,7 +10,7 @@ Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to J ### POC #### Reference -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-1000221.md b/2017/CVE-2017-1000221.md index 995c8b2a1e6..d7a881c8ce1 100644 --- a/2017/CVE-2017-1000221.md +++ b/2017/CVE-2017-1000221.md @@ -10,7 +10,7 @@ In Opencast 2.2.3 and older if user names overlap, the Opencast search service u ### POC #### Reference -- https://opencast.jira.com/browse/MH-11862 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-10952.md b/2017/CVE-2017-10952.md index 47e4a1663d9..f42157a0141 100644 --- a/2017/CVE-2017-10952.md +++ b/2017/CVE-2017-10952.md @@ -10,7 +10,7 @@ This vulnerability allows remote attackers to execute arbitrary code on vulnerab ### POC #### Reference -- https://0patch.blogspot.com/2017/08/0patching-foxit-readers-saveas-0day-cve.html +No PoCs from references. #### Github - https://github.com/afbase/CVE-2017-10952 diff --git a/2017/CVE-2017-11321.md b/2017/CVE-2017-11321.md index 1badc98c940..4ea0d5db80f 100644 --- a/2017/CVE-2017-11321.md +++ b/2017/CVE-2017-11321.md @@ -10,7 +10,6 @@ The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows ### POC #### Reference -- https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/ - https://www.exploit-db.com/exploits/42937/ #### Github diff --git a/2017/CVE-2017-11322.md b/2017/CVE-2017-11322.md index 04b64dbc700..bb3d41f2fd6 100644 --- a/2017/CVE-2017-11322.md +++ b/2017/CVE-2017-11322.md @@ -10,7 +10,6 @@ The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allow ### POC #### Reference -- https://sysdream.com/news/lab/2017-09-29-cve-2017-11322-ucopia-wireless-appliance-5-1-8-privileges-escalation/ - https://www.exploit-db.com/exploits/42936/ #### Github diff --git a/2017/CVE-2017-11826.md b/2017/CVE-2017-11826.md index f774ce31274..74228639305 100644 --- a/2017/CVE-2017-11826.md +++ b/2017/CVE-2017-11826.md @@ -10,7 +10,6 @@ Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010 ### POC #### Reference -- https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html - https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/ #### Github diff --git a/2017/CVE-2017-11882.md b/2017/CVE-2017-11882.md index d8c3ff8fdaa..1eab2da2292 100644 --- a/2017/CVE-2017-11882.md +++ b/2017/CVE-2017-11882.md @@ -11,8 +11,6 @@ Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Micr #### Reference - http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882 -- https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html -- https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html - https://github.com/embedi/CVE-2017-11882 - https://github.com/rxwx/CVE-2017-11882 - https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/ diff --git a/2017/CVE-2017-12879.md b/2017/CVE-2017-12879.md index 9e8d9379e7d..3dda488d636 100644 --- a/2017/CVE-2017-12879.md +++ b/2017/CVE-2017-12879.md @@ -10,7 +10,6 @@ Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functi ### POC #### Reference -- https://drive.google.com/open?id=0B6WbMqXSfqQFODZHUGtLdzU3eDA - https://youtu.be/QOLdH2oey8Q #### Github diff --git a/2017/CVE-2017-12972.md b/2017/CVE-2017-12972.md index 849011bb10f..6066fa7f21c 100644 --- a/2017/CVE-2017-12972.md +++ b/2017/CVE-2017-12972.md @@ -11,7 +11,6 @@ In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converti #### Reference - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c -- https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt #### Github diff --git a/2017/CVE-2017-12973.md b/2017/CVE-2017-12973.md index 827d2fd22c8..cd21c391f37 100644 --- a/2017/CVE-2017-12973.md +++ b/2017/CVE-2017-12973.md @@ -11,7 +11,6 @@ Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HM #### Reference - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6a29f10f723f406eb25555f55842c59a43a38912 -- https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/223/aescbc-return-immediately-on-invalid-hmac - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt #### Github diff --git a/2017/CVE-2017-12974.md b/2017/CVE-2017-12974.md index 9253c1062b1..a83779325c0 100644 --- a/2017/CVE-2017-12974.md +++ b/2017/CVE-2017-12974.md @@ -11,7 +11,6 @@ Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring th #### Reference - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f3a7a801f0c6b078899fed9226368eb7b44e2b2f -- https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/217/explicit-check-for-ec-public-key-on-curve - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt #### Github diff --git a/2017/CVE-2017-14530.md b/2017/CVE-2017-14530.md index bee4d28b7c3..761c69aa5e5 100644 --- a/2017/CVE-2017-14530.md +++ b/2017/CVE-2017-14530.md @@ -10,7 +10,6 @@ WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has C ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2017-14530-crony.html - https://github.com/cybersecurityworks/Disclosed/issues/9 #### Github diff --git a/2017/CVE-2017-14535.md b/2017/CVE-2017-14535.md index 83f96cc6d26..4e43d8ed6a6 100644 --- a/2017/CVE-2017-14535.md +++ b/2017/CVE-2017-14535.md @@ -12,7 +12,6 @@ trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang pa #### Reference - http://packetstormsecurity.com/files/162854/Trixbox-2.8.0.4-Remote-Code-Execution.html - https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/ -- https://www.linkedin.com/pulse/trixbox-os-command-injection-vulnerability-sachin-wagh-ceh-ecsa-/?published=t #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-14651.md b/2017/CVE-2017-14651.md index 77453de4aeb..54ce98c18d2 100644 --- a/2017/CVE-2017-14651.md +++ b/2017/CVE-2017-14651.md @@ -10,7 +10,6 @@ WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajax ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/15 #### Github diff --git a/2017/CVE-2017-14723.md b/2017/CVE-2017-14723.md index f71e72df30a..2aceda330c5 100644 --- a/2017/CVE-2017-14723.md +++ b/2017/CVE-2017-14723.md @@ -10,8 +10,7 @@ Before version 4.8.2, WordPress mishandled % characters and additional placehold ### POC #### Reference -- https://medium.com/websec/wordpress-sqli-bbb2afcc8e94 -- https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e +No PoCs from references. #### Github - https://github.com/Byebyesky/IT-Security-Projekt diff --git a/2017/CVE-2017-14797.md b/2017/CVE-2017-14797.md index c63868ba0d1..323c6c677d2 100644 --- a/2017/CVE-2017-14797.md +++ b/2017/CVE-2017-14797.md @@ -10,7 +10,7 @@ Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1 ### POC #### Reference -- https://www.tiferrei.com/philips-we-need-to-talk +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15134.md b/2017/CVE-2017-15134.md index 1f038fa800e..83e228a9814 100644 --- a/2017/CVE-2017-15134.md +++ b/2017/CVE-2017-15134.md @@ -10,7 +10,7 @@ A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3 ### POC #### Reference -- https://pagure.io/389-ds-base/c/6aa2acdc3cad9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15365.md b/2017/CVE-2017-15365.md index 6b2493648c6..74d971ee0b4 100644 --- a/2017/CVE-2017-15365.md +++ b/2017/CVE-2017-15365.md @@ -11,7 +11,6 @@ sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 an #### Reference - https://www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/ -- https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.19-29.22-3.html #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15680.md b/2017/CVE-2017-15680.md index f08fe070f81..a0dec5f4f25 100644 --- a/2017/CVE-2017-15680.md +++ b/2017/CVE-2017-15680.md @@ -10,7 +10,7 @@ In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows un ### POC #### Reference -- https://docs.craftercms.org/en/3.0/security/advisory.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15681.md b/2017/CVE-2017-15681.md index c00a9c65e71..90efccd96f3 100644 --- a/2017/CVE-2017-15681.md +++ b/2017/CVE-2017-15681.md @@ -10,7 +10,7 @@ In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists w ### POC #### Reference -- https://docs.craftercms.org/en/3.0/security/advisory.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15682.md b/2017/CVE-2017-15682.md index 3efdbf7ed35..dfcf35b3dfb 100644 --- a/2017/CVE-2017-15682.md +++ b/2017/CVE-2017-15682.md @@ -10,7 +10,7 @@ In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to injec ### POC #### Reference -- https://docs.craftercms.org/en/3.0/security/advisory.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15683.md b/2017/CVE-2017-15683.md index 9cf041b9754..9aa486936a8 100644 --- a/2017/CVE-2017-15683.md +++ b/2017/CVE-2017-15683.md @@ -10,7 +10,7 @@ In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to creat ### POC #### Reference -- https://docs.craftercms.org/en/3.0/security/advisory.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15684.md b/2017/CVE-2017-15684.md index 0ded4062157..5cd18aa4f81 100644 --- a/2017/CVE-2017-15684.md +++ b/2017/CVE-2017-15684.md @@ -10,7 +10,7 @@ Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which a ### POC #### Reference -- https://docs.craftercms.org/en/3.0/security/advisory.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15685.md b/2017/CVE-2017-15685.md index 25205d7c119..b3d4107daec 100644 --- a/2017/CVE-2017-15685.md +++ b/2017/CVE-2017-15685.md @@ -10,7 +10,7 @@ Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An u ### POC #### Reference -- https://docs.craftercms.org/en/3.0/security/advisory.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-15686.md b/2017/CVE-2017-15686.md index ac260dcb371..d3cc25a91c8 100644 --- a/2017/CVE-2017-15686.md +++ b/2017/CVE-2017-15686.md @@ -10,7 +10,7 @@ Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), whi ### POC #### Reference -- https://docs.craftercms.org/en/3.0/security/advisory.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-16249.md b/2017/CVE-2017-16249.md index fbc603f946d..2bc548f29df 100644 --- a/2017/CVE-2017-16249.md +++ b/2017/CVE-2017-16249.md @@ -12,8 +12,6 @@ The Debut embedded http server contains a remotely exploitable denial of service #### Reference - http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html - https://www.exploit-db.com/exploits/43119/ -- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211 -- https://www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-Brother-Printers/?page=1&year=0&month=0&LangType=1033 #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-17023.md b/2017/CVE-2017-17023.md index fe26aa8e188..9f053fa7ef3 100644 --- a/2017/CVE-2017-17023.md +++ b/2017/CVE-2017-17023.md @@ -10,7 +10,7 @@ The Sophos UTM VPN endpoint interacts with client software provided by NPC Engin ### POC #### Reference -- https://www.ncp-e.com/fileadmin/pdf/service_support/release_notes/NCP_Secure_Clients/NCP_Secure_Entry_Client/NCP_RN_Win_Secure_Entry_Client_11_14_r42039_en.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-17446.md b/2017/CVE-2017-17446.md index feabe1304d5..c73cf09bc78 100644 --- a/2017/CVE-2017-17446.md +++ b/2017/CVE-2017-17446.md @@ -10,7 +10,6 @@ The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Em ### POC #### Reference -- https://bitbucket.org/mpyne/game-music-emu/issues/14/addresssanitizer-negative-size-param-size - https://bugs.debian.org/883691 #### Github diff --git a/2017/CVE-2017-17499.md b/2017/CVE-2017-17499.md index 192590a88d9..535ecb25a23 100644 --- a/2017/CVE-2017-17499.md +++ b/2017/CVE-2017-17499.md @@ -10,7 +10,7 @@ ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magi ### POC #### Reference -- https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=33078&sid=5fbb164c3830293138917f9b14264ed1 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-17721.md b/2017/CVE-2017-17721.md index b634fc68f80..c324fe8ff3f 100644 --- a/2017/CVE-2017-17721.md +++ b/2017/CVE-2017-17721.md @@ -10,7 +10,6 @@ CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL inj ### POC #### Reference -- https://0day.today/exploit/29277 - https://cxsecurity.com/issue/WLB-2017120155 - https://packetstormsecurity.com/files/145511/BEIMS-ContractorWeb-5.18.0.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43379/ diff --git a/2017/CVE-2017-18486.md b/2017/CVE-2017-18486.md index d1747d6777f..51fa7ebf68c 100644 --- a/2017/CVE-2017-18486.md +++ b/2017/CVE-2017-18486.md @@ -12,7 +12,6 @@ Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges beca #### Reference - https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html - https://www.exploit-db.com/exploits/42776 -- https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-20189.md b/2017/CVE-2017-20189.md index 23203b74c3b..296624e29d8 100644 --- a/2017/CVE-2017-20189.md +++ b/2017/CVE-2017-20189.md @@ -12,7 +12,6 @@ In Clojure before 1.9.0, classes can be used to construct a serialized object th #### Reference - https://clojure.atlassian.net/browse/CLJ-2204 - https://github.com/frohoff/ysoserial/pull/68/files -- https://hackmd.io/%40fe1w0/HyefvRQKp - https://hackmd.io/@fe1w0/HyefvRQKp - https://security.snyk.io/vuln/SNYK-JAVA-ORGCLOJURE-5740378 diff --git a/2017/CVE-2017-2176.md b/2017/CVE-2017-2176.md index f4dd162bd43..36c0e3f05d4 100644 --- a/2017/CVE-2017-2176.md +++ b/2017/CVE-2017-2176.md @@ -17,7 +17,7 @@ Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jas ### POC #### Reference -- http://www.mod.go.jp/asdf/information/index.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-2178.md b/2017/CVE-2017-2178.md index 04166dfdf86..a6f6c62ffc6 100644 --- a/2017/CVE-2017-2178.md +++ b/2017/CVE-2017-2178.md @@ -10,7 +10,7 @@ Untrusted search path vulnerability in Installer of electronic tendering and bid ### POC #### Reference -- http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-2208.md b/2017/CVE-2017-2208.md index 420f6bdbb02..fc5ad6e9592 100644 --- a/2017/CVE-2017-2208.md +++ b/2017/CVE-2017-2208.md @@ -10,7 +10,7 @@ Untrusted search path vulnerability in Installer of Electronic tendering and bid ### POC #### Reference -- http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-2779.md b/2017/CVE-2017-2779.md index c7ea6595aa9..f8a49600252 100644 --- a/2017/CVE-2017-2779.md +++ b/2017/CVE-2017-2779.md @@ -10,7 +10,7 @@ An exploitable memory corruption vulnerability exists in the RSRC segment parsin ### POC #### Reference -- https://0patch.blogspot.com/2017/09/0patching-rsrc-arbitrary-null-write.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-3195.md b/2017/CVE-2017-3195.md index 9ef6c474422..8fe136adcf1 100644 --- a/2017/CVE-2017-3195.md +++ b/2017/CVE-2017-3195.md @@ -11,7 +11,6 @@ Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 ### POC #### Reference -- http://redr2e.com/commvault-edge-cve-2017-3195/ - https://www.exploit-db.com/exploits/41823/ - https://www.kb.cert.org/vuls/id/214283 diff --git a/2017/CVE-2017-3196.md b/2017/CVE-2017-3196.md index 0ce06269b5b..6ce71ab0926 100644 --- a/2017/CVE-2017-3196.md +++ b/2017/CVE-2017-3196.md @@ -11,7 +11,6 @@ PCAUSA Rawether framework does not properly validate BPF data, allowing a crafte #### Reference - http://blog.rewolf.pl/blog/?p=1778 -- https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/ - https://www.kb.cert.org/vuls/id/600671 #### Github diff --git a/2017/CVE-2017-3221.md b/2017/CVE-2017-3221.md index eca050742de..37c96432e94 100644 --- a/2017/CVE-2017-3221.md +++ b/2017/CVE-2017-3221.md @@ -10,7 +10,7 @@ Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers ### POC #### Reference -- http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-3222.md b/2017/CVE-2017-3222.md index fb2cd3fbc5d..d7183b7b404 100644 --- a/2017/CVE-2017-3222.md +++ b/2017/CVE-2017-3222.md @@ -10,7 +10,7 @@ Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full admi ### POC #### Reference -- http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-3823.md b/2017/CVE-2017-3823.md index be96a235ac3..2416c8289e7 100644 --- a/2017/CVE-2017-3823.md +++ b/2017/CVE-2017-3823.md @@ -10,7 +10,7 @@ An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chro ### POC #### Reference -- https://0patch.blogspot.com/2017/01/micropatching-remote-code-execution-in.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-3881.md b/2017/CVE-2017-3881.md index bf9b73740bb..ecccfba7bcc 100644 --- a/2017/CVE-2017-3881.md +++ b/2017/CVE-2017-3881.md @@ -11,7 +11,6 @@ A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code i #### Reference - https://www.exploit-db.com/exploits/41872/ -- https://www.exploit-db.com/exploits/41874/ #### Github - https://github.com/1337g/CVE-2017-3881 diff --git a/2017/CVE-2017-4918.md b/2017/CVE-2017-4918.md index 5f8db02e655..6a443c1f21a 100644 --- a/2017/CVE-2017-4918.md +++ b/2017/CVE-2017-4918.md @@ -12,7 +12,7 @@ VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command ### POC #### Reference -- https://www.vmware.com/security/advisories/VMSA-2017-0011.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-4924.md b/2017/CVE-2017-4924.md index 6a154c4724f..dc8c1d5adeb 100644 --- a/2017/CVE-2017-4924.md +++ b/2017/CVE-2017-4924.md @@ -14,7 +14,7 @@ VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x bef ### POC #### Reference -- https://0patch.blogspot.com/2017/10/micropatching-hypervisor-with-running.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-4930.md b/2017/CVE-2017-4930.md index b793f9673e6..37f83573161 100644 --- a/2017/CVE-2017-4930.md +++ b/2017/CVE-2017-4930.md @@ -10,7 +10,7 @@ VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could a ### POC #### Reference -- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-4931.md b/2017/CVE-2017-4931.md index 07d983f069e..e356135b2e6 100644 --- a/2017/CVE-2017-4931.md +++ b/2017/CVE-2017-4931.md @@ -10,7 +10,7 @@ VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could a ### POC #### Reference -- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-4932.md b/2017/CVE-2017-4932.md index cf91f2d0842..16c7b802edb 100644 --- a/2017/CVE-2017-4932.md +++ b/2017/CVE-2017-4932.md @@ -10,7 +10,7 @@ VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability tha ### POC #### Reference -- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-5218.md b/2017/CVE-2017-5218.md index 065c83cccb1..894029fa7fb 100644 --- a/2017/CVE-2017-5218.md +++ b/2017/CVE-2017-5218.md @@ -10,7 +10,7 @@ A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_Docum ### POC #### Reference -- http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-5219.md b/2017/CVE-2017-5219.md index 9704cc518f7..20460c75b5c 100644 --- a/2017/CVE-2017-5219.md +++ b/2017/CVE-2017-5219.md @@ -10,7 +10,7 @@ An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager fun ### POC #### Reference -- http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-5461.md b/2017/CVE-2017-5461.md index b15e49ae640..08ded47d3a9 100644 --- a/2017/CVE-2017-5461.md +++ b/2017/CVE-2017-5461.md @@ -15,7 +15,6 @@ Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x bef - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1344380 -- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.4_release_notes - https://www.oracle.com//security-alerts/cpujul2021.html #### Github diff --git a/2017/CVE-2017-5869.md b/2017/CVE-2017-5869.md index f2ec5b9997c..6c8a7270510 100644 --- a/2017/CVE-2017-5869.md +++ b/2017/CVE-2017-5869.md @@ -11,7 +11,6 @@ Directory traversal vulnerability in the file import feature in Nuxeo Platform 6 #### Reference - http://www.openwall.com/lists/oss-security/2017/03/23/6 -- https://sysdream.com/news/lab/2017-03-23-cve-2017-5869-nuxeo-platform-remote-code-execution/ - https://www.exploit-db.com/exploits/41748/ #### Github diff --git a/2017/CVE-2017-5870.md b/2017/CVE-2017-5870.md index 3bffca68bb6..6378760dae0 100644 --- a/2017/CVE-2017-5870.md +++ b/2017/CVE-2017-5870.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow re #### Reference - http://www.openwall.com/lists/oss-security/2017/05/03/8 -- https://sysdream.com/news/lab/2017-05-03-cve-2017-5870-multiple-xss-vulnerabilities-in-vimbadmin/ #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-5871.md b/2017/CVE-2017-5871.md index 970159e7f92..9e04ce7197b 100644 --- a/2017/CVE-2017-5871.md +++ b/2017/CVE-2017-5871.md @@ -10,7 +10,7 @@ Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirec ### POC #### Reference -- https://sysdream.com/news/lab/2017-11-20-cve-2017-5871-odoo-url-redirection-to-distrusted-site-open-redirect/ +No PoCs from references. #### Github - https://github.com/1337rokudenashi/CVE-2017-5871 diff --git a/2017/CVE-2017-5872.md b/2017/CVE-2017-5872.md index 4757579129f..422e11f0f4e 100644 --- a/2017/CVE-2017-5872.md +++ b/2017/CVE-2017-5872.md @@ -10,7 +10,7 @@ The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 ### POC #### Reference -- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=42 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-5992.md b/2017/CVE-2017-5992.md index 3771a74af51..e3024d8e9f0 100644 --- a/2017/CVE-2017-5992.md +++ b/2017/CVE-2017-5992.md @@ -10,7 +10,6 @@ Openpyxl 2.4.1 resolves external entities by default, which allows remote attack ### POC #### Reference -- https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854442 #### Github diff --git a/2017/CVE-2017-6087.md b/2017/CVE-2017-6087.md index 3e7399911cb..7ddfd140bdb 100644 --- a/2017/CVE-2017-6087.md +++ b/2017/CVE-2017-6087.md @@ -11,7 +11,6 @@ EyesOfNetwork ("EON") 5.0 and earlier allows remote authenticated users to execu #### Reference - http://www.openwall.com/lists/oss-security/2017/03/23/5 -- https://sysdream.com/news/lab/2017-03-14-cve-2017-6087-eon-5-0-remote-code-execution/ - https://www.exploit-db.com/exploits/41746/ #### Github diff --git a/2017/CVE-2017-6088.md b/2017/CVE-2017-6088.md index 52da80bc634..f73e0310980 100644 --- a/2017/CVE-2017-6088.md +++ b/2017/CVE-2017-6088.md @@ -11,7 +11,6 @@ Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlie #### Reference - http://www.openwall.com/lists/oss-security/2017/03/23/4 -- https://sysdream.com/news/lab/2017-03-14-cve-2017-6088-eon-5-0-multiple-sql-injection/ - https://www.exploit-db.com/exploits/41747/ #### Github diff --git a/2017/CVE-2017-6089.md b/2017/CVE-2017-6089.md index 70df43a7c7b..dc59aa91d21 100644 --- a/2017/CVE-2017-6089.md +++ b/2017/CVE-2017-6089.md @@ -10,7 +10,6 @@ SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attacke ### POC #### Reference -- https://sysdream.com/news/lab/2017-09-29-cve-2017-6089-phpcollab-2-5-1-multiple-sql-injections-unauthenticated/ - https://www.exploit-db.com/exploits/42935/ #### Github diff --git a/2017/CVE-2017-6090.md b/2017/CVE-2017-6090.md index 831a0944375..f47f479b9f7 100644 --- a/2017/CVE-2017-6090.md +++ b/2017/CVE-2017-6090.md @@ -10,7 +10,6 @@ Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2. ### POC #### Reference -- https://sysdream.com/news/lab/2017-09-29-cve-2017-6090-phpcollab-2-5-1-arbitrary-file-upload-unauthenticated/ - https://www.exploit-db.com/exploits/42934/ - https://www.exploit-db.com/exploits/43519/ diff --git a/2017/CVE-2017-6526.md b/2017/CVE-2017-6526.md index 8d65b24bf4e..6a0c94ee15c 100644 --- a/2017/CVE-2017-6526.md +++ b/2017/CVE-2017-6526.md @@ -11,7 +11,6 @@ An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to #### Reference - https://www.exploit-db.com/exploits/41578/ -- https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-6527.md b/2017/CVE-2017-6527.md index 5f6591b3c86..602fedd59f4 100644 --- a/2017/CVE-2017-6527.md +++ b/2017/CVE-2017-6527.md @@ -11,7 +11,6 @@ An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to #### Reference - https://www.exploit-db.com/exploits/41578/ -- https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-6528.md b/2017/CVE-2017-6528.md index e5685688572..18c1a2e753d 100644 --- a/2017/CVE-2017-6528.md +++ b/2017/CVE-2017-6528.md @@ -11,7 +11,6 @@ An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by pl #### Reference - https://www.exploit-db.com/exploits/41578/ -- https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-6529.md b/2017/CVE-2017-6529.md index 20a7d4a951a..26103df042a 100644 --- a/2017/CVE-2017-6529.md +++ b/2017/CVE-2017-6529.md @@ -11,7 +11,6 @@ An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to #### Reference - https://www.exploit-db.com/exploits/41578/ -- https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-7237.md b/2017/CVE-2017-7237.md index b450aedcf5c..2f661d7dc80 100644 --- a/2017/CVE-2017-7237.md +++ b/2017/CVE-2017-7237.md @@ -11,7 +11,6 @@ The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows #### Reference - http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER-ACCESS-CONTROL-FILE-OVERWRITE.txt -- https://community.spiceworks.com/support/inventory/docs/network-config#security - https://www.exploit-db.com/exploits/41825/ #### Github diff --git a/2017/CVE-2017-7269.md b/2017/CVE-2017-7269.md index 28379b1b792..0961f6933a8 100644 --- a/2017/CVE-2017-7269.md +++ b/2017/CVE-2017-7269.md @@ -10,7 +10,6 @@ Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in In ### POC #### Reference -- https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html - https://medium.com/@iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812 - https://www.exploit-db.com/exploits/41738/ - https://www.exploit-db.com/exploits/41992/ diff --git a/2017/CVE-2017-7646.md b/2017/CVE-2017-7646.md index dc2bfab27c7..a7a49f4b728 100644 --- a/2017/CVE-2017-7646.md +++ b/2017/CVE-2017-7646.md @@ -10,7 +10,7 @@ SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticat ### POC #### Reference -- https://thwack.solarwinds.com/thread/111223 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-7647.md b/2017/CVE-2017-7647.md index b4954ebf19e..f208e1bcf4c 100644 --- a/2017/CVE-2017-7647.md +++ b/2017/CVE-2017-7647.md @@ -10,7 +10,7 @@ SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticat ### POC #### Reference -- https://thwack.solarwinds.com/thread/111223 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-7722.md b/2017/CVE-2017-7722.md index 998e60d1db9..6508ebd553d 100644 --- a/2017/CVE-2017-7722.md +++ b/2017/CVE-2017-7722.md @@ -10,7 +10,7 @@ In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is ### POC #### Reference -- https://thwack.solarwinds.com/thread/111223 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-7985.md b/2017/CVE-2017-7985.md index cbe55e78cba..6f102350310 100644 --- a/2017/CVE-2017-7985.md +++ b/2017/CVE-2017-7985.md @@ -10,7 +10,7 @@ In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multiby ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-17-107 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-7997.md b/2017/CVE-2017-7997.md index 48e92602580..6a3c6ec2426 100644 --- a/2017/CVE-2017-7997.md +++ b/2017/CVE-2017-7997.md @@ -11,7 +11,6 @@ Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote atta #### Reference - http://seclists.org/fulldisclosure/2018/Jan/14 -- https://sysdream.com/news/lab/2018-01-02-cve-2017-7997-gespage-sql-injection-vulnerability/ - https://www.exploit-db.com/exploits/43447/ #### Github diff --git a/2017/CVE-2017-7998.md b/2017/CVE-2017-7998.md index 9d43b79f395..6a072ba669d 100644 --- a/2017/CVE-2017-7998.md +++ b/2017/CVE-2017-7998.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allo #### Reference - http://seclists.org/fulldisclosure/2018/Jan/13 -- https://sysdream.com/news/lab/2018-01-02-cve-2017-7998-gespage-stored-cross-site-scripting-xss-vulnerability/ #### Github - https://github.com/homjxi0e/CVE-2017-7998 diff --git a/2017/CVE-2017-8869.md b/2017/CVE-2017-8869.md index 30a59709c6b..93ad1713ce2 100644 --- a/2017/CVE-2017-8869.md +++ b/2017/CVE-2017-8869.md @@ -10,7 +10,7 @@ Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arb ### POC #### Reference -- https://www.exploit-db.com/exploits/42384/ +No PoCs from references. #### Github - https://github.com/tankist0x01/CVE-2017-8869 diff --git a/2017/CVE-2017-9100.md b/2017/CVE-2017-9100.md index 3d6f4619bd2..02d9903d487 100644 --- a/2017/CVE-2017-9100.md +++ b/2017/CVE-2017-9100.md @@ -10,7 +10,6 @@ login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers ### POC #### Reference -- http://touhidshaikh.com/blog/poc/d-link-dir600-auth-bypass/ - https://www.exploit-db.com/exploits/42039/ - https://www.youtube.com/watch?v=waIJKWCpyNQ diff --git a/2017/CVE-2017-9243.md b/2017/CVE-2017-9243.md index f85fd708db9..bc7e14dc4f6 100644 --- a/2017/CVE-2017-9243.md +++ b/2017/CVE-2017-9243.md @@ -10,7 +10,6 @@ Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on ### POC #### Reference -- http://touhidshaikh.com/blog/poc/qwr-1104-wireless-n-router-xss/ - https://www.exploit-db.com/exploits/42075/ #### Github diff --git a/2017/CVE-2017-9370.md b/2017/CVE-2017-9370.md index e388cd7f140..db0ae45a844 100644 --- a/2017/CVE-2017-9370.md +++ b/2017/CVE-2017-9370.md @@ -14,7 +14,7 @@ An information disclosure / elevation of privilege vulnerability in the BlackBer ### POC #### Reference -- http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045350 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-9425.md b/2017/CVE-2017-9425.md index 20aae5d4558..c8b641dbd2d 100644 --- a/2017/CVE-2017-9425.md +++ b/2017/CVE-2017-9425.md @@ -10,7 +10,6 @@ The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.p ### POC #### Reference -- http://touhidshaikh.com/blog/poc/facetag-ext-piwigo-stored-xss/ - https://www.exploit-db.com/exploits/42098/ - https://www.youtube.com/watch?v=_ha7XBT_Omo diff --git a/2017/CVE-2017-9426.md b/2017/CVE-2017-9426.md index 7a6cb4e2525..f44fbb539cd 100644 --- a/2017/CVE-2017-9426.md +++ b/2017/CVE-2017-9426.md @@ -10,7 +10,6 @@ ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the im ### POC #### Reference -- http://touhidshaikh.com/blog/poc/facetag-extension-piwigo-sqli/ - https://www.exploit-db.com/exploits/42094/ - https://www.youtube.com/watch?v=MVCe_zYtFsQ diff --git a/2017/CVE-2017-9447.md b/2017/CVE-2017-9447.md index 027198a472e..9ea20115edd 100644 --- a/2017/CVE-2017-9447.md +++ b/2017/CVE-2017-9447.md @@ -10,7 +10,7 @@ In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 161 ### POC #### Reference -- https://www.exploit-db.com/exploits/442321/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2017/CVE-2017-9506.md b/2017/CVE-2017-9506.md index f107caa7727..2ae17f48d7f 100644 --- a/2017/CVE-2017-9506.md +++ b/2017/CVE-2017-9506.md @@ -11,7 +11,6 @@ The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before versi #### Reference - https://ecosystem.atlassian.net/browse/OAUTH-344 -- https://medium.com/bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bca2c3 #### Github - https://github.com/labsbots/CVE-2017-9506 diff --git a/2017/CVE-2017-9962.md b/2017/CVE-2017-9962.md index 769e6a02626..62f315affbe 100644 --- a/2017/CVE-2017-9962.md +++ b/2017/CVE-2017-9962.md @@ -10,7 +10,7 @@ Schneider Electric's ClearSCADA versions released prior to August 2017 are susce ### POC #### Reference -- http://www.schneider-electric.com/en/download/document/SEVD-2017-264-01/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-0802.md b/2018/CVE-2018-0802.md index 120eea34aa1..a128fda3500 100644 --- a/2018/CVE-2018-0802.md +++ b/2018/CVE-2018-0802.md @@ -10,7 +10,6 @@ Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Offic ### POC #### Reference -- https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html - https://github.com/rxwx/CVE-2018-0802 - https://github.com/zldww2011/CVE-2018-0802_POC - https://research.checkpoint.com/another-office-equation-rce-vulnerability/ diff --git a/2018/CVE-2018-1000049.md b/2018/CVE-2018-1000049.md index 463f8faef6c..951c79fbc95 100644 --- a/2018/CVE-2018-1000049.md +++ b/2018/CVE-2018-1000049.md @@ -12,8 +12,6 @@ Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code exec #### Reference - http://packetstormsecurity.com/files/147678/Nanopool-Claymore-Dual-Miner-7.3-Remote-Code-Execution.html - http://packetstormsecurity.com/files/148578/Nanopool-Claymore-Dual-Miner-APIs-Remote-Code-Execution.html -- https://reversebrain.github.io/2018/02/01/Claymore-Dual-Miner-Remote-Code-Execution -- https://reversebrain.github.io/2018/02/01/Claymore-Dual-Miner-Remote-Code-Execution/ - https://www.exploit-db.com/exploits/44638/ - https://www.exploit-db.com/exploits/45044/ diff --git a/2018/CVE-2018-1000136.md b/2018/CVE-2018-1000136.md index 6b0c869c49f..409c3a95f93 100644 --- a/2018/CVE-2018-1000136.md +++ b/2018/CVE-2018-1000136.md @@ -10,7 +10,7 @@ Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 ### POC #### Reference -- https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2018-1000136---Electron-nodeIntegration-Bypass/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-1000172.md b/2018/CVE-2018-1000172.md index 302c9c1c248..343ed633c62 100644 --- a/2018/CVE-2018-1000172.md +++ b/2018/CVE-2018-1000172.md @@ -10,7 +10,7 @@ Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripti ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-17-215 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-1000998.md b/2018/CVE-2018-1000998.md index c052c73676a..122e8b9c925 100644 --- a/2018/CVE-2018-1000998.md +++ b/2018/CVE-2018-1000998.md @@ -10,7 +10,7 @@ FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability i ### POC #### Reference -- https://www.kvakil.me/posts/cvsweb/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10092.md b/2018/CVE-2018-10092.md index 8fe42239f8c..1363c7d32a3 100644 --- a/2018/CVE-2018-10092.md +++ b/2018/CVE-2018-10092.md @@ -11,7 +11,6 @@ The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute #### Reference - http://www.openwall.com/lists/oss-security/2018/05/21/2 -- https://sysdream.com/news/lab/2018-05-21-cve-2018-10092-dolibarr-admin-panel-authenticated-remote-code-execution-rce-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10094.md b/2018/CVE-2018-10094.md index b4c5f9dc1a3..c635e55e9e9 100644 --- a/2018/CVE-2018-10094.md +++ b/2018/CVE-2018-10094.md @@ -11,7 +11,6 @@ SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to #### Reference - http://www.openwall.com/lists/oss-security/2018/05/21/1 -- https://sysdream.com/news/lab/2018-05-21-cve-2018-10094-dolibarr-sql-injection-vulnerability/ - https://www.exploit-db.com/exploits/44805/ #### Github diff --git a/2018/CVE-2018-10095.md b/2018/CVE-2018-10095.md index 27ec416e298..23b76cbda76 100644 --- a/2018/CVE-2018-10095.md +++ b/2018/CVE-2018-10095.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote #### Reference - http://www.openwall.com/lists/oss-security/2018/05/21/3 -- https://sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10252.md b/2018/CVE-2018-10252.md index ff1a041de82..40b1c38e0af 100644 --- a/2018/CVE-2018-10252.md +++ b/2018/CVE-2018-10252.md @@ -10,7 +10,7 @@ An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The adm ### POC #### Reference -- https://actiontecsupport.zendesk.com/hc/en-us/articles/115000432163-WCB6200Q-Firmware-Upgrade +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10403.md b/2018/CVE-2018-10403.md index 0b337732118..6fcd4250e24 100644 --- a/2018/CVE-2018-10403.md +++ b/2018/CVE-2018-10403.md @@ -10,7 +10,7 @@ An issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously cra ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10404.md b/2018/CVE-2018-10404.md index 20da05ecaef..0b6a13617a8 100644 --- a/2018/CVE-2018-10404.md +++ b/2018/CVE-2018-10404.md @@ -10,7 +10,7 @@ An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYo ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10405.md b/2018/CVE-2018-10405.md index b21a7a4dbe9..e40ec3d413b 100644 --- a/2018/CVE-2018-10405.md +++ b/2018/CVE-2018-10405.md @@ -10,7 +10,7 @@ An issue was discovered in Google Santa and molcodesignchecker. A maliciously cr ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10406.md b/2018/CVE-2018-10406.md index 7859773ab39..0732833d09a 100644 --- a/2018/CVE-2018-10406.md +++ b/2018/CVE-2018-10406.md @@ -10,7 +10,7 @@ An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fa ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10407.md b/2018/CVE-2018-10407.md index 37328af7443..55b37a92e6f 100644 --- a/2018/CVE-2018-10407.md +++ b/2018/CVE-2018-10407.md @@ -10,7 +10,7 @@ An issue was discovered in Carbon Black Cb Response. A maliciously crafted Unive ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10408.md b/2018/CVE-2018-10408.md index b2ae6282e5a..60659b2d6c1 100644 --- a/2018/CVE-2018-10408.md +++ b/2018/CVE-2018-10408.md @@ -10,7 +10,7 @@ An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binar ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10470.md b/2018/CVE-2018-10470.md index b1a6c08a77c..3cdbeea75d4 100644 --- a/2018/CVE-2018-10470.md +++ b/2018/CVE-2018-10470.md @@ -10,7 +10,7 @@ Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-10575.md b/2018/CVE-2018-10575.md index ba78512bcf3..4ec06be1808 100644 --- a/2018/CVE-2018-10575.md +++ b/2018/CVE-2018-10575.md @@ -10,7 +10,6 @@ An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmw ### POC #### Reference -- https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000LIy - https://www.exploit-db.com/exploits/45409/ #### Github diff --git a/2018/CVE-2018-10576.md b/2018/CVE-2018-10576.md index 6fafd338984..0ae02473ed8 100644 --- a/2018/CVE-2018-10576.md +++ b/2018/CVE-2018-10576.md @@ -10,7 +10,6 @@ An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmw ### POC #### Reference -- https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000LIy - https://www.exploit-db.com/exploits/45409/ #### Github diff --git a/2018/CVE-2018-11218.md b/2018/CVE-2018-11218.md index 185fde23433..f08abc3b3af 100644 --- a/2018/CVE-2018-11218.md +++ b/2018/CVE-2018-11218.md @@ -11,7 +11,6 @@ Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in #### Reference - https://github.com/antirez/redis/commit/52a00201fca331217c3b4b8b634f6a0f57d6b7d3 -- https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html #### Github diff --git a/2018/CVE-2018-11219.md b/2018/CVE-2018-11219.md index 34d03a13dba..ce4837fdbc1 100644 --- a/2018/CVE-2018-11219.md +++ b/2018/CVE-2018-11219.md @@ -10,7 +10,6 @@ An Integer Overflow issue was discovered in the struct library in the Lua subsys ### POC #### Reference -- https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html #### Github diff --git a/2018/CVE-2018-11235.md b/2018/CVE-2018-11235.md index 5a7680e96d1..a6b07622ebe 100644 --- a/2018/CVE-2018-11235.md +++ b/2018/CVE-2018-11235.md @@ -11,7 +11,6 @@ In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before #### Reference - https://marc.info/?l=git&m=152761328506724&w=2 -- https://www.exploit-db.com/exploits/44822/ #### Github - https://github.com/AnonymKing/CVE-2017-1000117 diff --git a/2018/CVE-2018-11237.md b/2018/CVE-2018-11237.md index 61ee567f151..0cc76714a60 100644 --- a/2018/CVE-2018-11237.md +++ b/2018/CVE-2018-11237.md @@ -10,7 +10,6 @@ An AVX-512-optimized implementation of the mempcpy function in the GNU C Library ### POC #### Reference -- https://www.exploit-db.com/exploits/44750/ - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html #### Github diff --git a/2018/CVE-2018-11311.md b/2018/CVE-2018-11311.md index 5bdb7ae60b6..ecf2a4fbdd0 100644 --- a/2018/CVE-2018-11311.md +++ b/2018/CVE-2018-11311.md @@ -11,7 +11,6 @@ A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' #### Reference - https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password -- https://www.exploit-db.com/exploits/44656/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-1132.md b/2018/CVE-2018-1132.md index b1d271408db..ad6ddf7a585 100644 --- a/2018/CVE-2018-1132.md +++ b/2018/CVE-2018-1132.md @@ -10,7 +10,7 @@ A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inj ### POC #### Reference -- https://www.exploit-db.com/exploits/44747/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-1149.md b/2018/CVE-2018-1149.md index ef8313b4158..d7df7863736 100644 --- a/2018/CVE-2018-1149.md +++ b/2018/CVE-2018-1149.md @@ -11,7 +11,6 @@ cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute #### Reference - https://github.com/tenable/poc/tree/master/nuuo/nvrmini2 -- https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf - https://www.tenable.com/security/research/tra-2018-25 #### Github diff --git a/2018/CVE-2018-11491.md b/2018/CVE-2018-11491.md index cf3c7164bbe..16e599a5a7a 100644 --- a/2018/CVE-2018-11491.md +++ b/2018/CVE-2018-11491.md @@ -10,7 +10,7 @@ ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, le ### POC #### Reference -- https://mars-cheng.github.io/blog/2018/CVE-2018-11491/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-11492.md b/2018/CVE-2018-11492.md index a743dcab3c3..25e4c2a92eb 100644 --- a/2018/CVE-2018-11492.md +++ b/2018/CVE-2018-11492.md @@ -11,7 +11,6 @@ ASUS HG100 devices allow denial of service via an IPv4 packet flood. #### Reference - http://packetstormsecurity.com/files/152542/ASUS-HG100-Denial-Of-Service.html -- https://mars-cheng.github.io/blog/2018/CVE-2018-11492/ - https://www.exploit-db.com/exploits/46720/ #### Github diff --git a/2018/CVE-2018-1150.md b/2018/CVE-2018-1150.md index e95f87788c3..06bbc49a7f9 100644 --- a/2018/CVE-2018-1150.md +++ b/2018/CVE-2018-1150.md @@ -10,7 +10,6 @@ NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthen ### POC #### Reference -- https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf - https://www.tenable.com/security/research/tra-2018-25 #### Github diff --git a/2018/CVE-2018-11692.md b/2018/CVE-2018-11692.md index 115f146c888..3b5570ec672 100644 --- a/2018/CVE-2018-11692.md +++ b/2018/CVE-2018-11692.md @@ -10,7 +10,7 @@ An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices ### POC #### Reference -- https://www.exploit-db.com/exploits/44844/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-11711.md b/2018/CVE-2018-11711.md index 37854ce82aa..1fe530f23df 100644 --- a/2018/CVE-2018-11711.md +++ b/2018/CVE-2018-11711.md @@ -10,7 +10,7 @@ A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF22 ### POC #### Reference -- https://www.exploit-db.com/exploits/44845/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12048.md b/2018/CVE-2018-12048.md index a10ba386a77..3fdba172446 100644 --- a/2018/CVE-2018-12048.md +++ b/2018/CVE-2018-12048.md @@ -10,7 +10,7 @@ A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web inte ### POC #### Reference -- https://www.exploit-db.com/exploits/44885/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12049.md b/2018/CVE-2018-12049.md index aa60273ebf6..0736975cbf1 100644 --- a/2018/CVE-2018-12049.md +++ b/2018/CVE-2018-12049.md @@ -10,7 +10,7 @@ A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web i ### POC #### Reference -- https://www.exploit-db.com/exploits/44886/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12071.md b/2018/CVE-2018-12071.md index b4f30f983f6..7b058c793d4 100644 --- a/2018/CVE-2018-12071.md +++ b/2018/CVE-2018-12071.md @@ -10,7 +10,7 @@ A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_ ### POC #### Reference -- https://www.codeigniter.com/user_guide/changelog.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12326.md b/2018/CVE-2018-12326.md index ad7093f385f..900702aaadc 100644 --- a/2018/CVE-2018-12326.md +++ b/2018/CVE-2018-12326.md @@ -10,7 +10,6 @@ Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allow ### POC #### Reference -- https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://www.exploit-db.com/exploits/44904/ #### Github diff --git a/2018/CVE-2018-12353.md b/2018/CVE-2018-12353.md index fa53f522ec7..ae6e124c52b 100644 --- a/2018/CVE-2018-12353.md +++ b/2018/CVE-2018-12353.md @@ -10,7 +10,7 @@ Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business ### POC #### Reference -- https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12354.md b/2018/CVE-2018-12354.md index 2d6eacc7273..670a1245e40 100644 --- a/2018/CVE-2018-12354.md +++ b/2018/CVE-2018-12354.md @@ -10,7 +10,7 @@ Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by ### POC #### Reference -- https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12355.md b/2018/CVE-2018-12355.md index 13bbf392f16..72ce33a55f4 100644 --- a/2018/CVE-2018-12355.md +++ b/2018/CVE-2018-12355.md @@ -10,7 +10,7 @@ Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to ### POC #### Reference -- https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12651.md b/2018/CVE-2018-12651.md index 0e52cb96373..3bdbc51e376 100644 --- a/2018/CVE-2018-12651.md +++ b/2018/CVE-2018-12651.md @@ -10,7 +10,7 @@ A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin ### POC #### Reference -- https://www.knowcybersec.com/2018/12/CVE-2018-12651-reflected-XSS.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12652.md b/2018/CVE-2018-12652.md index 61ded15f25b..39fdb9aae39 100644 --- a/2018/CVE-2018-12652.md +++ b/2018/CVE-2018-12652.md @@ -10,7 +10,7 @@ A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin ### POC #### Reference -- https://www.knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-12653.md b/2018/CVE-2018-12653.md index 76f3d17440d..0ba85ffab5b 100644 --- a/2018/CVE-2018-12653.md +++ b/2018/CVE-2018-12653.md @@ -11,7 +11,6 @@ A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5. #### Reference - http://packetstormsecurity.com/files/155244/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html -- https://www.knowcybersec.com/2019/02/CVE-2018-12653-reflected-XSS.html #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-1270.md b/2018/CVE-2018-1270.md index 2d2ceeb435c..0b78451510f 100644 --- a/2018/CVE-2018-1270.md +++ b/2018/CVE-2018-1270.md @@ -13,7 +13,6 @@ Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 a - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://pivotal.io/security/cve-2018-1270 -- https://www.exploit-db.com/exploits/44796/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html diff --git a/2018/CVE-2018-13060.md b/2018/CVE-2018-13060.md index 7423a7c70a8..30ec96dc2b0 100644 --- a/2018/CVE-2018-13060.md +++ b/2018/CVE-2018-13060.md @@ -11,7 +11,6 @@ Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue. #### Reference - https://sysdream.com/news/lab/ -- https://sysdream.com/news/lab/2019-10-25-cve-2018-13060-easy-appointments-captcha-bypass/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-13063.md b/2018/CVE-2018-13063.md index ff883024c5f..8bb0f929c64 100644 --- a/2018/CVE-2018-13063.md +++ b/2018/CVE-2018-13063.md @@ -11,7 +11,6 @@ Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of #### Reference - https://sysdream.com/news/lab/ -- https://sysdream.com/news/lab/2019-10-25-cve-2018-13063-easy-appointments-multiple-confidential-information-leakage/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-13065.md b/2018/CVE-2018-13065.md index 6eccfa3eb8b..d5b652599a8 100644 --- a/2018/CVE-2018-13065.md +++ b/2018/CVE-2018-13065.md @@ -12,7 +12,6 @@ ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a th #### Reference - https://github.com/SpiderLabs/ModSecurity/issues/1829 - https://hackings8n.blogspot.com/2018/07/cve-2018-13065-modsecurity-300-has-xss.html -- https://www.exploit-db.com/exploits/44970/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-13111.md b/2018/CVE-2018-13111.md index 15a4711cbad..966b91d9897 100644 --- a/2018/CVE-2018-13111.md +++ b/2018/CVE-2018-13111.md @@ -10,7 +10,7 @@ There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Came ### POC #### Reference -- https://hackinganarchy.wordpress.com/2018/09/20/cve-2018-13111/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-13140.md b/2018/CVE-2018-13140.md index 1c77f1cdb87..f22420d36e3 100644 --- a/2018/CVE-2018-13140.md +++ b/2018/CVE-2018-13140.md @@ -12,7 +12,6 @@ Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution #### Reference - http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html - http://seclists.org/fulldisclosure/2018/Sep/38 -- https://sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-13256.md b/2018/CVE-2018-13256.md index ae396d076e2..59982973c25 100644 --- a/2018/CVE-2018-13256.md +++ b/2018/CVE-2018-13256.md @@ -11,7 +11,6 @@ PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname par #### Reference - https://gkaim.com/cve-2018-13256-vikas-chaudhary/ -- https://www.exploit-db.com/exploits/45125/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-13390.md b/2018/CVE-2018-13390.md index 3d2f0f84d64..959257baa8e 100644 --- a/2018/CVE-2018-13390.md +++ b/2018/CVE-2018-13390.md @@ -11,7 +11,7 @@ Unauthenticated access to cloudtoken daemon on Linux via network from version 0. ### POC #### Reference -- https://bitbucket.org/atlassian/cloudtoken/wiki/CVE-2018-13390%20-%20Exposed%20credentials%20in%20daemon%20mode%20on%20Linux +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-13832.md b/2018/CVE-2018-13832.md index e2406584bd4..2650a8c7e5e 100644 --- a/2018/CVE-2018-13832.md +++ b/2018/CVE-2018-13832.md @@ -10,7 +10,6 @@ Multiple Persistent cross-site scripting (XSS) issues in the Techotronic all-in- ### POC #### Reference -- https://hackpuntes.com/cve-2018-13832-wordpress-plugin-all-in-one-favicon-4-6-autenticado-multiples-cross-site-scripting-persistentes/ - https://www.exploit-db.com/exploits/45056/ #### Github diff --git a/2018/CVE-2018-13877.md b/2018/CVE-2018-13877.md index f0c04c022f8..7bd0cf361e3 100644 --- a/2018/CVE-2018-13877.md +++ b/2018/CVE-2018-13877.md @@ -10,7 +10,7 @@ The doPayouts() function of the smart contract implementation for MegaCryptoPoli ### POC #### Reference -- https://medium.com/coinmonks/denial-of-service-dos-attack-on-megacryptopolis-an-ethereum-game-cve-2018-13877-cdd7f7ef8b08 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14082.md b/2018/CVE-2018-14082.md index 5fdfe13dbec..2043f6c3a5d 100644 --- a/2018/CVE-2018-14082.md +++ b/2018/CVE-2018-14082.md @@ -11,7 +11,6 @@ PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has Cross-site Scripting (XSS) #### Reference - https://gkaim.com/cve-2018-14082-vikas-chaudhary/ -- https://www.exploit-db.com/exploits/45141/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14430.md b/2018/CVE-2018-14430.md index 3da6a08ef8b..1c930a42f77 100644 --- a/2018/CVE-2018-14430.md +++ b/2018/CVE-2018-14430.md @@ -10,7 +10,6 @@ The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via th ### POC #### Reference -- https://hackpuntes.com/cve-2018-14430-wordpress-plugin-multi-step-form-125-multiples-xss-reflejados/ - https://wpvulndb.com/vulnerabilities/9106 #### Github diff --git a/2018/CVE-2018-14541.md b/2018/CVE-2018-14541.md index a9823760aa1..829b3be90c1 100644 --- a/2018/CVE-2018-14541.md +++ b/2018/CVE-2018-14541.md @@ -11,7 +11,6 @@ PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the Fir #### Reference - https://gkaim.com/cve-2018-14541-vikas-chaudhary/ -- https://www.exploit-db.com/exploits/45140/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14922.md b/2018/CVE-2018-14922.md index 64f4f7b2514..995992a57ec 100644 --- a/2018/CVE-2018-14922.md +++ b/2018/CVE-2018-14922.md @@ -11,7 +11,6 @@ Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow r #### Reference - http://packetstormsecurity.com/files/148836/Monstra-Dev-3.0.4-Cross-Site-Scripting.html -- https://www.exploit-db.com/exploits/45156/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14924.md b/2018/CVE-2018-14924.md index af677fa7fb8..396f0f50962 100644 --- a/2018/CVE-2018-14924.md +++ b/2018/CVE-2018-14924.md @@ -10,7 +10,7 @@ Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14925.md b/2018/CVE-2018-14925.md index e9b7819e147..1c79474c570 100644 --- a/2018/CVE-2018-14925.md +++ b/2018/CVE-2018-14925.md @@ -10,7 +10,7 @@ Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a s ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14926.md b/2018/CVE-2018-14926.md index e093273af22..26af585b44d 100644 --- a/2018/CVE-2018-14926.md +++ b/2018/CVE-2018-14926.md @@ -10,7 +10,7 @@ Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSen ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14927.md b/2018/CVE-2018-14927.md index 68f4b6339ba..33c023b4cd2 100644 --- a/2018/CVE-2018-14927.md +++ b/2018/CVE-2018-14927.md @@ -10,7 +10,7 @@ Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system fi ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14928.md b/2018/CVE-2018-14928.md index 5a1623c273a..be151de6bca 100644 --- a/2018/CVE-2018-14928.md +++ b/2018/CVE-2018-14928.md @@ -10,7 +10,7 @@ ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-14929.md b/2018/CVE-2018-14929.md index f3405f9c2e8..a26d2718a9c 100644 --- a/2018/CVE-2018-14929.md +++ b/2018/CVE-2018-14929.md @@ -10,7 +10,7 @@ Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by t ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-15514.md b/2018/CVE-2018-15514.md index e0d3839273a..70665ba163a 100644 --- a/2018/CVE-2018-15514.md +++ b/2018/CVE-2018-15514.md @@ -10,7 +10,6 @@ HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and ### POC #### Reference -- https://docs.docker.com/docker-for-windows/release-notes/ - https://srcincite.io/blog/2018/08/31/you-cant-contain-me-analyzing-and-exploiting-an-elevation-of-privilege-in-docker-for-windows.html #### Github diff --git a/2018/CVE-2018-15546.md b/2018/CVE-2018-15546.md index f370a2a0579..14a16b9e456 100644 --- a/2018/CVE-2018-15546.md +++ b/2018/CVE-2018-15546.md @@ -10,7 +10,7 @@ Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scriptin ### POC #### Reference -- https://medium.com/@mrnikhilsri/stored-cross-site-scripting-in-prizmdoc-13-3-and-before-cve-2018-15546-1938191845c5 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-15571.md b/2018/CVE-2018-15571.md index 30b3b790251..05489f82dfb 100644 --- a/2018/CVE-2018-15571.md +++ b/2018/CVE-2018-15571.md @@ -10,7 +10,6 @@ The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection. ### POC #### Reference -- https://hackpuntes.com/cve-2018-15571-wordpress-plugin-export-users-to-csv-1-1-1-csv-injection/ - https://www.exploit-db.com/exploits/45206/ #### Github diff --git a/2018/CVE-2018-15692.md b/2018/CVE-2018-15692.md index b56c811e650..63e2dc2a686 100644 --- a/2018/CVE-2018-15692.md +++ b/2018/CVE-2018-15692.md @@ -10,7 +10,7 @@ Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated us ### POC #### Reference -- https://www.kpmg.de/noindex/advisories/KPMG-2018-002.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-15693.md b/2018/CVE-2018-15693.md index 0bc40081de1..4380bbcd668 100644 --- a/2018/CVE-2018-15693.md +++ b/2018/CVE-2018-15693.md @@ -10,7 +10,7 @@ Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated us ### POC #### Reference -- https://www.kpmg.de/noindex/advisories/KPMG-2018-001.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-15873.md b/2018/CVE-2018-15873.md index c22a9b8988a..768894a850e 100644 --- a/2018/CVE-2018-15873.md +++ b/2018/CVE-2018-15873.md @@ -10,7 +10,7 @@ A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter. ### POC #### Reference -- https://hackpuntes.com/cve-2018-15873-sentrifugo-hrms-3-2-blind-sql-injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-15917.md b/2018/CVE-2018-15917.md index 4d874c1ea6f..60849cbc897 100644 --- a/2018/CVE-2018-15917.md +++ b/2018/CVE-2018-15917.md @@ -11,7 +11,6 @@ Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attack #### Reference - https://github.com/bbalet/jorani/issues/254 -- https://hackpuntes.com/cve-2018-15917-jorani-leave-management-system-0-6-5-cross-site-scripting-persistente/ - https://www.exploit-db.com/exploits/45338/ #### Github diff --git a/2018/CVE-2018-15918.md b/2018/CVE-2018-15918.md index a0a05e87882..20dbf6fa547 100644 --- a/2018/CVE-2018-15918.md +++ b/2018/CVE-2018-15918.md @@ -11,7 +11,6 @@ An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a us #### Reference - https://github.com/bbalet/jorani/issues/254 -- https://hackpuntes.com/cve-2018-15918-jorani-leave-management-system-0-6-5-sql-injection/ - https://www.exploit-db.com/exploits/45340/ #### Github diff --git a/2018/CVE-2018-16225.md b/2018/CVE-2018-16225.md index ea6aefaed77..09b57cde5ca 100644 --- a/2018/CVE-2018-16225.md +++ b/2018/CVE-2018-16225.md @@ -10,7 +10,7 @@ The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic f ### POC #### Reference -- https://blog.francescoservida.ch/2018/09/16/cve-2018-16225-public-disclosure-qbee-camera-vulnerability/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-16656.md b/2018/CVE-2018-16656.md index b5d52634c15..c3e4fa7cdc8 100644 --- a/2018/CVE-2018-16656.md +++ b/2018/CVE-2018-16656.md @@ -10,7 +10,7 @@ DoBox_CstmBox_Info.model.htm on Kyocera TASKalfa 4002i and 6002i devices allows ### POC #### Reference -- https://mars-cheng.github.io/blog/2019/CVE-2018-16656 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-16803.md b/2018/CVE-2018-16803.md index e9e97631bdd..7b1ee0380cd 100644 --- a/2018/CVE-2018-16803.md +++ b/2018/CVE-2018-16803.md @@ -11,7 +11,6 @@ In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers #### Reference - https://www.linkedin.com/feed/update/urn:li:activity:6489145511902212096/ -- https://www.websec.nl/news.php #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-16821.md b/2018/CVE-2018-16821.md index 7fcd82c63f0..56dd69c8db8 100644 --- a/2018/CVE-2018-16821.md +++ b/2018/CVE-2018-16821.md @@ -10,7 +10,7 @@ SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.p ### POC #### Reference -- http://www.seacms.net/thread-6249-1-1.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-17305.md b/2018/CVE-2018-17305.md index ef9abcd2935..4dcc42f6fe1 100644 --- a/2018/CVE-2018-17305.md +++ b/2018/CVE-2018-17305.md @@ -10,7 +10,7 @@ UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the ### POC #### Reference -- https://www.uipath.com/product/release-notes/uipath-v2018.1.7 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18207.md b/2018/CVE-2018-18207.md index c9356881b60..faa1229a5a3 100644 --- a/2018/CVE-2018-18207.md +++ b/2018/CVE-2018-18207.md @@ -10,7 +10,7 @@ Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file par ### POC #### Reference -- https://0day.today/exploit/description/31282 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18208.md b/2018/CVE-2018-18208.md index 85fbec70e60..ad6ca17f6e0 100644 --- a/2018/CVE-2018-18208.md +++ b/2018/CVE-2018-18208.md @@ -10,7 +10,7 @@ Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_s ### POC #### Reference -- https://0day.today/exploit/description/31282 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18322.md b/2018/CVE-2018-18322.md index b369ba59b3c..46beb361ea4 100644 --- a/2018/CVE-2018-18322.md +++ b/2018/CVE-2018-18322.md @@ -10,7 +10,6 @@ CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection v ### POC #### Reference -- https://0day.today/exploit/31304 - https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/45610/ diff --git a/2018/CVE-2018-18323.md b/2018/CVE-2018-18323.md index 794b24eeceb..b7007950b43 100644 --- a/2018/CVE-2018-18323.md +++ b/2018/CVE-2018-18323.md @@ -10,7 +10,6 @@ CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusio ### POC #### Reference -- https://0day.today/exploit/31304 - https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/45610/ diff --git a/2018/CVE-2018-18324.md b/2018/CVE-2018-18324.md index 8ec6cec9882..53cc80e97dc 100644 --- a/2018/CVE-2018-18324.md +++ b/2018/CVE-2018-18324.md @@ -10,7 +10,6 @@ CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/f ### POC #### Reference -- https://0day.today/exploit/31304 - https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/45610/ diff --git a/2018/CVE-2018-18472.md b/2018/CVE-2018-18472.md index 19b76a1cd1a..df7296bccec 100644 --- a/2018/CVE-2018-18472.md +++ b/2018/CVE-2018-18472.md @@ -10,7 +10,6 @@ Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a ro ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo - https://www.wizcase.com/blog/hack-2018/ #### Github diff --git a/2018/CVE-2018-18478.md b/2018/CVE-2018-18478.md index 5f4d84072c4..016562a9d01 100644 --- a/2018/CVE-2018-18478.md +++ b/2018/CVE-2018-18478.md @@ -11,7 +11,6 @@ Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remot #### Reference - https://github.com/librenms/librenms/issues/9170 -- https://hackpuntes.com/cve-2018-18478-libre-nms-1-43-cross-site-scripting-persistente/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18535.md b/2018/CVE-2018-18535.md index b099b300136..589e1afea1e 100644 --- a/2018/CVE-2018-18535.md +++ b/2018/CVE-2018-18535.md @@ -12,7 +12,6 @@ The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes func #### Reference - http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2018/Dec/34 -- https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilities #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18536.md b/2018/CVE-2018-18536.md index 8ca6c44aaa1..6b9489c4948 100644 --- a/2018/CVE-2018-18536.md +++ b/2018/CVE-2018-18536.md @@ -12,7 +12,6 @@ The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier #### Reference - http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2018/Dec/34 -- https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilities #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18537.md b/2018/CVE-2018-18537.md index 99a675ed176..8974462f2bc 100644 --- a/2018/CVE-2018-18537.md +++ b/2018/CVE-2018-18537.md @@ -12,7 +12,6 @@ The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a pat #### Reference - http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2018/Dec/34 -- https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilities #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18656.md b/2018/CVE-2018-18656.md index 1fbe2b83be6..2ed133cd193 100644 --- a/2018/CVE-2018-18656.md +++ b/2018/CVE-2018-18656.md @@ -10,7 +10,7 @@ The PureVPN client before 6.1.0 for Windows stores Login Credentials (username a ### POC #### Reference -- https://www.trustwave.com/Resources/SpiderLabs-Blog/Credential-Leak-Flaws-in-Windows-PureVPN-Client/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-18809.md b/2018/CVE-2018-18809.md index 52613ff8062..4ba3f1e1b93 100644 --- a/2018/CVE-2018-18809.md +++ b/2018/CVE-2018-18809.md @@ -27,7 +27,6 @@ The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports L - http://packetstormsecurity.com/files/154406/Tibco-JasperSoft-Path-Traversal.html - http://seclists.org/fulldisclosure/2019/Sep/17 - http://www.tibco.com/services/support/advisories -- https://cybersecurityworks.com/zerodays/cve-2018-18809-tibco.html - https://security.elarlang.eu/cve-2018-18809-path-traversal-in-tibco-jaspersoft.html #### Github diff --git a/2018/CVE-2018-18922.md b/2018/CVE-2018-18922.md index 096d232e329..37ba07bf9e3 100644 --- a/2018/CVE-2018-18922.md +++ b/2018/CVE-2018-18922.md @@ -10,8 +10,6 @@ add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator ### POC #### Reference -- https://0day.today/exploit/31658 -- https://hackpuntes.com/cve-2018-18922-ticketly-1-0-escalacion-de-privilegios-crear-cuenta-administrador/ - https://medium.com/%40javierolmedo/cve-2018-18922-ticketly-1-0-privilege-escalation-add-admin-4d1b3696f367 - https://medium.com/@javierolmedo/cve-2018-18922-ticketly-1-0-privilege-escalation-add-admin-4d1b3696f367 - https://www.exploit-db.com/exploits/45892 diff --git a/2018/CVE-2018-18923.md b/2018/CVE-2018-18923.md index 24ad4843f13..8ec7ca83a7f 100644 --- a/2018/CVE-2018-18923.md +++ b/2018/CVE-2018-18923.md @@ -10,7 +10,6 @@ AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities throu ### POC #### Reference -- https://hackpuntes.com/cve-2018-18923-ticketly-1-0-multiples-sql-injections/ - https://www.exploit-db.com/exploits/45902/ #### Github diff --git a/2018/CVE-2018-19150.md b/2018/CVE-2018-19150.md index 48d3e51d51c..e788bff783f 100644 --- a/2018/CVE-2018-19150.md +++ b/2018/CVE-2018-19150.md @@ -11,7 +11,6 @@ Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdfforge PDF Arc #### Reference - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2018-09-19-pdf-architect-corruption.md -- https://nafiez.github.io/security/integer/2018/09/18/pdf-architect-corruption.html #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-19275.md b/2018/CVE-2018-19275.md index 7e39dab83c6..e940c73d74a 100644 --- a/2018/CVE-2018-19275.md +++ b/2018/CVE-2018-19275.md @@ -10,7 +10,7 @@ The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Su ### POC #### Reference -- https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-190002001-v10.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-19320.md b/2018/CVE-2018-19320.md index 804f95e2c49..d8ae0df57f4 100644 --- a/2018/CVE-2018-19320.md +++ b/2018/CVE-2018-19320.md @@ -11,7 +11,6 @@ The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRA #### Reference - http://seclists.org/fulldisclosure/2018/Dec/39 -- https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities #### Github - https://github.com/ASkyeye/CVE-2018-19320 diff --git a/2018/CVE-2018-19321.md b/2018/CVE-2018-19321.md index 744f200932a..d0072bd2d99 100644 --- a/2018/CVE-2018-19321.md +++ b/2018/CVE-2018-19321.md @@ -11,7 +11,6 @@ The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earli #### Reference - http://seclists.org/fulldisclosure/2018/Dec/39 -- https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities #### Github - https://github.com/nanabingies/CVE-2018-19321 diff --git a/2018/CVE-2018-19322.md b/2018/CVE-2018-19322.md index aa2cb3f6654..3df9acf4352 100644 --- a/2018/CVE-2018-19322.md +++ b/2018/CVE-2018-19322.md @@ -11,7 +11,6 @@ The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earli #### Reference - http://seclists.org/fulldisclosure/2018/Dec/39 -- https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-19323.md b/2018/CVE-2018-19323.md index ac458d043eb..b43ca2bf932 100644 --- a/2018/CVE-2018-19323.md +++ b/2018/CVE-2018-19323.md @@ -11,7 +11,6 @@ The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRA #### Reference - http://seclists.org/fulldisclosure/2018/Dec/39 -- https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities #### Github - https://github.com/BKreisel/CVE-2018-1932X diff --git a/2018/CVE-2018-19651.md b/2018/CVE-2018-19651.md index 3a9fd6a533c..c8c60433ef5 100644 --- a/2018/CVE-2018-19651.md +++ b/2018/CVE-2018-19651.md @@ -10,7 +10,7 @@ admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server ### POC #### Reference -- https://medium.com/@namhb/ssrf-to-lfi-in-interspire-email-marketer-698a748462a9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-19828.md b/2018/CVE-2018-19828.md index c0a603535f9..e8c1f1558e0 100644 --- a/2018/CVE-2018-19828.md +++ b/2018/CVE-2018-19828.md @@ -10,7 +10,6 @@ Artica Integria IMS 5.0.83 has XSS via the search_string parameter. ### POC #### Reference -- https://hackpuntes.com/cve-2018-19828-integria-ims-5-0-83-cross-site-scripting-reflejado/ - https://www.exploit-db.com/exploits/46012/ #### Github diff --git a/2018/CVE-2018-19829.md b/2018/CVE-2018-19829.md index 9f24f8ffce1..1af5982eabd 100644 --- a/2018/CVE-2018-19829.md +++ b/2018/CVE-2018-19829.md @@ -10,7 +10,6 @@ Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resultin ### POC #### Reference -- https://hackpuntes.com/cve-2018-19829-integria-ims-5-0-83-cross-site-request-forgery/ - https://www.exploit-db.com/exploits/46013/ #### Github diff --git a/2018/CVE-2018-19855.md b/2018/CVE-2018-19855.md index 18a3a3fca1a..6448790865a 100644 --- a/2018/CVE-2018-19855.md +++ b/2018/CVE-2018-19855.md @@ -10,7 +10,7 @@ UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit e ### POC #### Reference -- https://www.uipath.com/product/release-notes +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-20334.md b/2018/CVE-2018-20334.md index fbcc1e63acb..77eb6382b14 100644 --- a/2018/CVE-2018-20334.md +++ b/2018/CVE-2018-20334.md @@ -10,7 +10,7 @@ An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start ### POC #### Reference -- https://starlabs.sg/advisories/18-20334/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-20335.md b/2018/CVE-2018-20335.md index 24295e37a3f..b9fb39efbd5 100644 --- a/2018/CVE-2018-20335.md +++ b/2018/CVE-2018-20335.md @@ -10,7 +10,7 @@ An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user ca ### POC #### Reference -- https://starlabs.sg/advisories/18-20335/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-20336.md b/2018/CVE-2018-20336.md index 1a5465204fe..778c7edf8f2 100644 --- a/2018/CVE-2018-20336.md +++ b/2018/CVE-2018-20336.md @@ -10,7 +10,7 @@ An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buf ### POC #### Reference -- https://starlabs.sg/advisories/18-20336/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-20432.md b/2018/CVE-2018-20432.md index 48468053c97..27914cec4e5 100644 --- a/2018/CVE-2018-20432.md +++ b/2018/CVE-2018-20432.md @@ -11,7 +11,6 @@ D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentia #### Reference - http://packetstormsecurity.com/files/159058/COVR-3902-1.01B0-Hardcoded-Credentials.html -- https://cybersecurityworks.com/zerodays/cve-2018-20432-dlink.html #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2452.md b/2018/CVE-2018-2452.md index 044fed52a55..8b923a164dc 100644 --- a/2018/CVE-2018-2452.md +++ b/2018/CVE-2018-2452.md @@ -16,7 +16,6 @@ The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7 #### Reference - https://launchpad.support.sap.com/#/notes/2623846 -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2454.md b/2018/CVE-2018-2454.md index ec5bc81ae33..c0ebf5e63df 100644 --- a/2018/CVE-2018-2454.md +++ b/2018/CVE-2018-2454.md @@ -15,7 +15,7 @@ SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (i ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2455.md b/2018/CVE-2018-2455.md index 1a8e5b54663..c611be76fe3 100644 --- a/2018/CVE-2018-2455.md +++ b/2018/CVE-2018-2455.md @@ -15,7 +15,7 @@ SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (i ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2457.md b/2018/CVE-2018-2457.md index 135dba90412..46f2ad08c71 100644 --- a/2018/CVE-2018-2457.md +++ b/2018/CVE-2018-2457.md @@ -10,7 +10,7 @@ Under certain conditions SAP Adaptive Server Enterprise, version 16.0, allows so ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2458.md b/2018/CVE-2018-2458.md index f5fca78ea59..8440db466e1 100644 --- a/2018/CVE-2018-2458.md +++ b/2018/CVE-2018-2458.md @@ -11,7 +11,7 @@ Under certain conditions, Crystal Report using SAP Business One, versions 9.2 an ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2459.md b/2018/CVE-2018-2459.md index 9b048336b20..6add4f59f97 100644 --- a/2018/CVE-2018-2459.md +++ b/2018/CVE-2018-2459.md @@ -10,7 +10,7 @@ Users of an SAP Mobile Platform (version 3.0) Offline OData application, which u ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2460.md b/2018/CVE-2018-2460.md index 03d58c2b56b..383823eac44 100644 --- a/2018/CVE-2018-2460.md +++ b/2018/CVE-2018-2460.md @@ -10,7 +10,7 @@ SAP Business One Android application, version 1.2, does not verify the certifica ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2461.md b/2018/CVE-2018-2461.md index 7efc6ac8f28..304f19e51a8 100644 --- a/2018/CVE-2018-2461.md +++ b/2018/CVE-2018-2461.md @@ -10,7 +10,7 @@ Missing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2462.md b/2018/CVE-2018-2462.md index 6d1b844e89a..9dee8c9e82f 100644 --- a/2018/CVE-2018-2462.md +++ b/2018/CVE-2018-2462.md @@ -14,7 +14,7 @@ In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7. ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2463.md b/2018/CVE-2018-2463.md index eeaebc1cf26..a3f365ce484 100644 --- a/2018/CVE-2018-2463.md +++ b/2018/CVE-2018-2463.md @@ -10,7 +10,7 @@ The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vul ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2464.md b/2018/CVE-2018-2464.md index 66054c5b470..e1d3f64f02a 100644 --- a/2018/CVE-2018-2464.md +++ b/2018/CVE-2018-2464.md @@ -14,7 +14,7 @@ SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2465.md b/2018/CVE-2018-2465.md index 2194def5563..bdd3ced79e4 100644 --- a/2018/CVE-2018-2465.md +++ b/2018/CVE-2018-2465.md @@ -11,7 +11,7 @@ SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model ODat ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2466.md b/2018/CVE-2018-2466.md index da2605d1885..854e5cf7f8a 100644 --- a/2018/CVE-2018-2466.md +++ b/2018/CVE-2018-2466.md @@ -10,7 +10,7 @@ In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2467.md b/2018/CVE-2018-2467.md index 818454e8055..9b9303ee855 100644 --- a/2018/CVE-2018-2467.md +++ b/2018/CVE-2018-2467.md @@ -11,7 +11,7 @@ In the Software Development Kit in SAP BusinessObjects BI Platform Servers, vers ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2468.md b/2018/CVE-2018-2468.md index c524702730c..30e512f2e7d 100644 --- a/2018/CVE-2018-2468.md +++ b/2018/CVE-2018-2468.md @@ -11,7 +11,7 @@ Under certain conditions the backup server in SAP Adaptive Server Enterprise (AS ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2469.md b/2018/CVE-2018-2469.md index 95b94a51273..c35ad89dba5 100644 --- a/2018/CVE-2018-2469.md +++ b/2018/CVE-2018-2469.md @@ -11,7 +11,7 @@ Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2470.md b/2018/CVE-2018-2470.md index a27bfe632c1..93b2c6f78cc 100644 --- a/2018/CVE-2018-2470.md +++ b/2018/CVE-2018-2470.md @@ -14,7 +14,7 @@ In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2471.md b/2018/CVE-2018-2471.md index 2cfae2f59d8..b93b27d15a2 100644 --- a/2018/CVE-2018-2471.md +++ b/2018/CVE-2018-2471.md @@ -11,7 +11,7 @@ Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2472.md b/2018/CVE-2018-2472.md index dbe4cf63f93..17f31ffe16e 100644 --- a/2018/CVE-2018-2472.md +++ b/2018/CVE-2018-2472.md @@ -11,7 +11,7 @@ SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligen ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2473.md b/2018/CVE-2018-2473.md index 55875c4e3d2..11740d4b477 100644 --- a/2018/CVE-2018-2473.md +++ b/2018/CVE-2018-2473.md @@ -11,7 +11,7 @@ SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2474.md b/2018/CVE-2018-2474.md index 23923261b5c..130f14926eb 100644 --- a/2018/CVE-2018-2474.md +++ b/2018/CVE-2018-2474.md @@ -10,7 +10,7 @@ SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application all ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2475.md b/2018/CVE-2018-2475.md index d4d93c0b1bd..1f83bcf4949 100644 --- a/2018/CVE-2018-2475.md +++ b/2018/CVE-2018-2475.md @@ -10,7 +10,7 @@ Following the Gardener architecture, the Kubernetes apiserver of a Gardener mana ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2476.md b/2018/CVE-2018-2476.md index 95cea911597..3a0754334cc 100644 --- a/2018/CVE-2018-2476.md +++ b/2018/CVE-2018-2476.md @@ -12,7 +12,7 @@ Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.3 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2477.md b/2018/CVE-2018-2477.md index dc66136a621..7a956298455 100644 --- a/2018/CVE-2018-2477.md +++ b/2018/CVE-2018-2477.md @@ -13,7 +13,7 @@ Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2478.md b/2018/CVE-2018-2478.md index 716a80e46e3..7594cda101c 100644 --- a/2018/CVE-2018-2478.md +++ b/2018/CVE-2018-2478.md @@ -15,7 +15,7 @@ An attacker can use specially crafted inputs to execute commands on the host of ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2479.md b/2018/CVE-2018-2479.md index 68e115341f0..75e82b9010d 100644 --- a/2018/CVE-2018-2479.md +++ b/2018/CVE-2018-2479.md @@ -11,7 +11,7 @@ SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 a ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2481.md b/2018/CVE-2018-2481.md index 8e6a7a0fae1..f675809deb9 100644 --- a/2018/CVE-2018-2481.md +++ b/2018/CVE-2018-2481.md @@ -17,7 +17,7 @@ In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.3 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2482.md b/2018/CVE-2018-2482.md index 340768d6b97..2079e0d4f27 100644 --- a/2018/CVE-2018-2482.md +++ b/2018/CVE-2018-2482.md @@ -10,7 +10,7 @@ SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2483.md b/2018/CVE-2018-2483.md index dc1441c7ede..934b6008cae 100644 --- a/2018/CVE-2018-2483.md +++ b/2018/CVE-2018-2483.md @@ -11,7 +11,7 @@ HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Pla ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2485.md b/2018/CVE-2018-2485.md index aa4e2f7ab6e..bfa2bd2758a 100644 --- a/2018/CVE-2018-2485.md +++ b/2018/CVE-2018-2485.md @@ -10,7 +10,7 @@ It is possible for a malicious application or malware to execute JavaScript in a ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2487.md b/2018/CVE-2018-2487.md index 96a5eef3af9..c4794656c03 100644 --- a/2018/CVE-2018-2487.md +++ b/2018/CVE-2018-2487.md @@ -10,7 +10,7 @@ SAP Disclosure Management 10.x allows an attacker to exploit through a specially ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2488.md b/2018/CVE-2018-2488.md index 4a4b36c6303..7906f907beb 100644 --- a/2018/CVE-2018-2488.md +++ b/2018/CVE-2018-2488.md @@ -10,7 +10,7 @@ It is possible for a malware application installed on an Android device to send ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2489.md b/2018/CVE-2018-2489.md index 03b7edd03dd..bd458cb4378 100644 --- a/2018/CVE-2018-2489.md +++ b/2018/CVE-2018-2489.md @@ -10,7 +10,7 @@ Locally, without any permission, an arbitrary android application could delete t ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2490.md b/2018/CVE-2018-2490.md index 3ecdbfac807..2b9ed92b4f5 100644 --- a/2018/CVE-2018-2490.md +++ b/2018/CVE-2018-2490.md @@ -10,7 +10,7 @@ The broadcast messages received by SAP Fiori Client are not protected by permiss ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-2491.md b/2018/CVE-2018-2491.md index 3fe4f539a59..70c1c71a1bf 100644 --- a/2018/CVE-2018-2491.md +++ b/2018/CVE-2018-2491.md @@ -10,7 +10,7 @@ When opening a deep link URL in SAP Fiori Client with log level set to "Debug", ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-3574.md b/2018/CVE-2018-3574.md index 43631593c11..6f4c22225c7 100644 --- a/2018/CVE-2018-3574.md +++ b/2018/CVE-2018-3574.md @@ -10,7 +10,7 @@ In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from ### POC #### Reference -- https://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000049462 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-5233.md b/2018/CVE-2018-5233.md index a17d877dc2a..083a596624f 100644 --- a/2018/CVE-2018-5233.md +++ b/2018/CVE-2018-5233.md @@ -11,7 +11,6 @@ Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php #### Reference - http://www.openwall.com/lists/oss-security/2018/03/15/1 -- https://sysdream.com/news/lab/2018-03-15-cve-2018-5233-grav-cms-admin-plugin-reflected-cross-site-scripting-xss-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6336.md b/2018/CVE-2018-6336.md index 54fd10d3bb9..6a5b5ede9a3 100644 --- a/2018/CVE-2018-6336.md +++ b/2018/CVE-2018-6336.md @@ -11,7 +11,7 @@ An issue was discovered in osquery. A maliciously crafted Universal/fat binary c ### POC #### Reference -- https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6391.md b/2018/CVE-2018-6391.md index 08f61804b43..61f3a6a1006 100644 --- a/2018/CVE-2018-6391.md +++ b/2018/CVE-2018-6391.md @@ -10,7 +10,6 @@ A cross-site request forgery web vulnerability has been discovered on Netis WF24 ### POC #### Reference -- https://0day.today/exploit/29659 - https://packetstormsecurity.com/files/146117/netiswf2419-xsrf.txt - https://www.exploit-db.com/exploits/43919/ diff --git a/2018/CVE-2018-6409.md b/2018/CVE-2018-6409.md index d334414a8f4..45b6e149d28 100644 --- a/2018/CVE-2018-6409.md +++ b/2018/CVE-2018-6409.md @@ -10,7 +10,6 @@ An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge ### POC #### Reference -- https://metalamin.github.io/MachForm-not-0-day-EN/ - https://www.exploit-db.com/exploits/44804/ #### Github diff --git a/2018/CVE-2018-6410.md b/2018/CVE-2018-6410.md index f7f096f16cc..c0e67b51c7a 100644 --- a/2018/CVE-2018-6410.md +++ b/2018/CVE-2018-6410.md @@ -10,7 +10,6 @@ An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.p ### POC #### Reference -- https://metalamin.github.io/MachForm-not-0-day-EN/ - https://www.exploit-db.com/exploits/44804/ #### Github diff --git a/2018/CVE-2018-6411.md b/2018/CVE-2018-6411.md index 012d0d706f6..aa9adc4b9cc 100644 --- a/2018/CVE-2018-6411.md +++ b/2018/CVE-2018-6411.md @@ -10,7 +10,6 @@ An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set ### POC #### Reference -- https://metalamin.github.io/MachForm-not-0-day-EN/ - https://www.exploit-db.com/exploits/44804/ #### Github diff --git a/2018/CVE-2018-6634.md b/2018/CVE-2018-6634.md index 642444737c3..c1867df5845 100644 --- a/2018/CVE-2018-6634.md +++ b/2018/CVE-2018-6634.md @@ -10,7 +10,7 @@ A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Deskt ### POC #### Reference -- https://twitter.com/VixusFoxy/status/1125697484498583553 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6858.md b/2018/CVE-2018-6858.md index 75df6b0b92a..4eea2847f41 100644 --- a/2018/CVE-2018-6858.md +++ b/2018/CVE-2018-6858.md @@ -10,7 +10,7 @@ Cross Site Scripting (XSS) exists in PHP Scripts Mall Facebook Clone Script. ### POC #### Reference -- https://www.exploit-db.com/exploits/44010 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6859.md b/2018/CVE-2018-6859.md index cea6b04c0be..ba1dd34d7a0 100644 --- a/2018/CVE-2018-6859.md +++ b/2018/CVE-2018-6859.md @@ -10,7 +10,7 @@ SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 v ### POC #### Reference -- https://www.exploit-db.com/exploits/44185/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6860.md b/2018/CVE-2018-6860.md index 49ae92b09ad..d81a13bd612 100644 --- a/2018/CVE-2018-6860.md +++ b/2018/CVE-2018-6860.md @@ -10,7 +10,7 @@ Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall School ### POC #### Reference -- https://www.exploit-db.com/exploits/44011 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6861.md b/2018/CVE-2018-6861.md index 43a4be5c78c..bd35c5a6da6 100644 --- a/2018/CVE-2018-6861.md +++ b/2018/CVE-2018-6861.md @@ -10,7 +10,7 @@ Cross Site Scripting (XSS) exists in PHP Scripts Mall Lawyer Search Script 1.0.2 ### POC #### Reference -- https://www.exploit-db.com/exploits/44012 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6862.md b/2018/CVE-2018-6862.md index d4f4603dc7a..8c7e43f8e44 100644 --- a/2018/CVE-2018-6862.md +++ b/2018/CVE-2018-6862.md @@ -10,7 +10,7 @@ Cross Site Scripting (XSS) exists in PHP Scripts Mall Bitcoin MLM Software 1.0.2 ### POC #### Reference -- https://www.exploit-db.com/exploits/44013 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6863.md b/2018/CVE-2018-6863.md index 5fcf457dc2a..39dedd09eb4 100644 --- a/2018/CVE-2018-6863.md +++ b/2018/CVE-2018-6863.md @@ -10,7 +10,7 @@ SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a ### POC #### Reference -- https://www.exploit-db.com/exploits/44014 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6864.md b/2018/CVE-2018-6864.md index f93086656c0..ffe95ea82a3 100644 --- a/2018/CVE-2018-6864.md +++ b/2018/CVE-2018-6864.md @@ -10,7 +10,7 @@ Cross Site Scripting (XSS) exists in PHP Scripts Mall Multi religion Responsive ### POC #### Reference -- https://www.exploit-db.com/exploits/44015 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6878.md b/2018/CVE-2018-6878.md index 07ca7c2fbba..5e84c78f7b9 100644 --- a/2018/CVE-2018-6878.md +++ b/2018/CVE-2018-6878.md @@ -10,7 +10,7 @@ Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot ### POC #### Reference -- https://www.exploit-db.com/exploits/43991/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6975.md b/2018/CVE-2018-6975.md index dbb2ffc1804..910c2de3673 100644 --- a/2018/CVE-2018-6975.md +++ b/2018/CVE-2018-6975.md @@ -10,7 +10,7 @@ The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerabili ### POC #### Reference -- https://www.vmware.com/security/advisories/VMSA-2018-0023.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-6976.md b/2018/CVE-2018-6976.md index c400b373cab..297ff59a3cd 100644 --- a/2018/CVE-2018-6976.md +++ b/2018/CVE-2018-6976.md @@ -10,7 +10,7 @@ The VMware Content Locker for iOS prior to 4.14 contains a data protection vulne ### POC #### Reference -- https://www.vmware.com/security/advisories/VMSA-2018-0023.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7466.md b/2018/CVE-2018-7466.md index b38ab12cba0..5f788ebf649 100644 --- a/2018/CVE-2018-7466.md +++ b/2018/CVE-2018-7466.md @@ -11,7 +11,6 @@ install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to c #### Reference - https://www.exploit-db.com/exploits/44226/ -- https://www.exploit-db.com/exploits/44349/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7567.md b/2018/CVE-2018-7567.md index 70ec8aa1725..82dc26755e2 100644 --- a/2018/CVE-2018-7567.md +++ b/2018/CVE-2018-7567.md @@ -10,7 +10,7 @@ In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through ### POC #### Reference -- https://0day.today/exploit/29938 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7661.md b/2018/CVE-2018-7661.md index e4c75842592..7c09fad4385 100644 --- a/2018/CVE-2018-7661.md +++ b/2018/CVE-2018-7661.md @@ -11,7 +11,6 @@ Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers t #### Reference - https://blog.manchestergreyhats.co.uk/2018/02/25/eavesdropping-on-wifi-baby-monitor/ -- https://www.exploit-db.com/exploits/442322/ #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7700.md b/2018/CVE-2018-7700.md index f62fd3f4548..f63f6ef0b20 100644 --- a/2018/CVE-2018-7700.md +++ b/2018/CVE-2018-7700.md @@ -10,7 +10,7 @@ DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the par ### POC #### Reference -- https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7741.md b/2018/CVE-2018-7741.md index 7287fa6ae10..8b0c92b48b0 100644 --- a/2018/CVE-2018-7741.md +++ b/2018/CVE-2018-7741.md @@ -10,7 +10,7 @@ Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7816.md b/2018/CVE-2018-7816.md index 38f2e762bd4..894e05b2a13 100644 --- a/2018/CVE-2018-7816.md +++ b/2018/CVE-2018-7816.md @@ -11,7 +11,7 @@ A Permissions, Privileges, and Access Control vulnerability exists in the web-ba ### POC #### Reference -- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7825.md b/2018/CVE-2018-7825.md index 481b66b4a83..2504165006b 100644 --- a/2018/CVE-2018-7825.md +++ b/2018/CVE-2018-7825.md @@ -10,7 +10,7 @@ A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pel ### POC #### Reference -- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7826.md b/2018/CVE-2018-7826.md index c782b3d57d0..41684fda080 100644 --- a/2018/CVE-2018-7826.md +++ b/2018/CVE-2018-7826.md @@ -10,7 +10,7 @@ A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pel ### POC #### Reference -- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7827.md b/2018/CVE-2018-7827.md index 2d927ffa1f7..cc00b4ba3f7 100644 --- a/2018/CVE-2018-7827.md +++ b/2018/CVE-2018-7827.md @@ -10,7 +10,7 @@ A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix En ### POC #### Reference -- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7828.md b/2018/CVE-2018-7828.md index 50c45e71123..b9c1c0f4bc6 100644 --- a/2018/CVE-2018-7828.md +++ b/2018/CVE-2018-7828.md @@ -10,7 +10,7 @@ A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco S ### POC #### Reference -- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7829.md b/2018/CVE-2018-7829.md index a17e1595b6a..ad91eff09b0 100644 --- a/2018/CVE-2018-7829.md +++ b/2018/CVE-2018-7829.md @@ -10,7 +10,7 @@ An Improper Neutralization of Special Elements in Query vulnerability exists in ### POC #### Reference -- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7894.md b/2018/CVE-2018-7894.md index 2f1d5bdbee4..bf5ba0bce4d 100644 --- a/2018/CVE-2018-7894.md +++ b/2018/CVE-2018-7894.md @@ -10,7 +10,7 @@ Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7996.md b/2018/CVE-2018-7996.md index 6bc0c25014d..1fb8aa00007 100644 --- a/2018/CVE-2018-7996.md +++ b/2018/CVE-2018-7996.md @@ -10,7 +10,7 @@ Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes descr ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-7997.md b/2018/CVE-2018-7997.md index 51ae0bdf709..d72cbfb3843 100644 --- a/2018/CVE-2018-7997.md +++ b/2018/CVE-2018-7997.md @@ -10,7 +10,7 @@ Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion ### POC #### Reference -- https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-8802.md b/2018/CVE-2018-8802.md index dac42018569..ad7fe004e70 100644 --- a/2018/CVE-2018-8802.md +++ b/2018/CVE-2018-8802.md @@ -10,7 +10,7 @@ SQL injection vulnerability in the management interface in ePortal Manager allo ### POC #### Reference -- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=49 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2018/CVE-2018-9037.md b/2018/CVE-2018-9037.md index aa9eff46941..21b75905bfc 100644 --- a/2018/CVE-2018-9037.md +++ b/2018/CVE-2018-9037.md @@ -10,7 +10,7 @@ Monstra CMS 3.0.4 allows remote code execution via an upload_file request for a ### POC #### Reference -- https://www.exploit-db.com/exploits/44621/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0367.md b/2019/CVE-2019-0367.md index 72ac4d9dfe1..6b9ba4f42ce 100644 --- a/2019/CVE-2019-0367.md +++ b/2019/CVE-2019-0367.md @@ -11,7 +11,7 @@ SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, do ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0368.md b/2019/CVE-2019-0368.md index 85bf8b10663..eec682c29cf 100644 --- a/2019/CVE-2019-0368.md +++ b/2019/CVE-2019-0368.md @@ -18,7 +18,7 @@ SAP Customer Relationship Management (Email Management), versions: S4CRM before ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0369.md b/2019/CVE-2019-0369.md index 44af0049473..cf9ace1b965 100644 --- a/2019/CVE-2019-0369.md +++ b/2019/CVE-2019-0369.md @@ -11,7 +11,7 @@ SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficientl ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0370.md b/2019/CVE-2019-0370.md index 65dea89f8c1..444655a3b81 100644 --- a/2019/CVE-2019-0370.md +++ b/2019/CVE-2019-0370.md @@ -11,7 +11,7 @@ Due to missing input validation, SAP Financial Consolidation, before versions 10 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0374.md b/2019/CVE-2019-0374.md index 1f8cab21e2d..e82ed2ae3c0 100644 --- a/2019/CVE-2019-0374.md +++ b/2019/CVE-2019-0374.md @@ -11,7 +11,7 @@ SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interf ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0375.md b/2019/CVE-2019-0375.md index 30d714f90dc..6a50aef8b6c 100644 --- a/2019/CVE-2019-0375.md +++ b/2019/CVE-2019-0375.md @@ -11,7 +11,7 @@ SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interf ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0376.md b/2019/CVE-2019-0376.md index ace43323219..a6147c48d07 100644 --- a/2019/CVE-2019-0376.md +++ b/2019/CVE-2019-0376.md @@ -11,7 +11,7 @@ SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interf ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0377.md b/2019/CVE-2019-0377.md index 5d0dd87a801..93c441d4a34 100644 --- a/2019/CVE-2019-0377.md +++ b/2019/CVE-2019-0377.md @@ -10,7 +10,7 @@ SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interf ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0378.md b/2019/CVE-2019-0378.md index 113c39a42fc..8214a0862c1 100644 --- a/2019/CVE-2019-0378.md +++ b/2019/CVE-2019-0378.md @@ -10,7 +10,7 @@ SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interf ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0379.md b/2019/CVE-2019-0379.md index 584bec1d641..c835cc30337 100644 --- a/2019/CVE-2019-0379.md +++ b/2019/CVE-2019-0379.md @@ -12,7 +12,6 @@ SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does no #### Reference - https://launchpad.support.sap.com/#/notes/2826015 -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0380.md b/2019/CVE-2019-0380.md index 2aed20e1673..e900293751c 100644 --- a/2019/CVE-2019-0380.md +++ b/2019/CVE-2019-0380.md @@ -10,7 +10,7 @@ Under certain conditions, SAP Landscape Management enterprise edition, before ve ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-0381.md b/2019/CVE-2019-0381.md index f9669e1b8c4..b3f5676fbb8 100644 --- a/2019/CVE-2019-0381.md +++ b/2019/CVE-2019-0381.md @@ -16,7 +16,6 @@ A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before versi #### Reference - https://launchpad.support.sap.com/#/notes/2792430 -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-1010104.md b/2019/CVE-2019-1010104.md index 13c1cee502c..45e2cd9326c 100644 --- a/2019/CVE-2019-1010104.md +++ b/2019/CVE-2019-1010104.md @@ -10,7 +10,7 @@ TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL I ### POC #### Reference -- https://metalamin.github.io/Quick-Chat-SQLi-EN/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-1010163.md b/2019/CVE-2019-1010163.md index 025d6d72b5c..ebfb66eab69 100644 --- a/2019/CVE-2019-1010163.md +++ b/2019/CVE-2019-1010163.md @@ -11,7 +11,6 @@ Socusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Loca #### Reference - https://packetstormsecurity.com/files/145181/SocuSoft-Co.-Photo-2-Video-Converter-8.0.0-Code-Execution-DoS.html -- https://ret2eax.github.io/posts/socusoft-bof.html - https://www.exploit-db.com/exploits/43208/ #### Github diff --git a/2019/CVE-2019-1010177.md b/2019/CVE-2019-1010177.md index 12144edcdd9..e1ac89cc661 100644 --- a/2019/CVE-2019-1010177.md +++ b/2019/CVE-2019-1010177.md @@ -10,7 +10,7 @@ Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of serv ### POC #### Reference -- https://jsish.org/fossil/jsi/tktview?name=65c8965977 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-1010207.md b/2019/CVE-2019-1010207.md index 3f63166de11..3fa758ace9c 100644 --- a/2019/CVE-2019-1010207.md +++ b/2019/CVE-2019-1010207.md @@ -10,7 +10,6 @@ Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS) ### POC #### Reference -- https://0day.today/exploit/31255 - https://packetstormsecurity.com/files/149665/wppieregister3015-xss.txt #### Github diff --git a/2019/CVE-2019-10192.md b/2019/CVE-2019-10192.md index e4020d07528..0cb82c3048b 100644 --- a/2019/CVE-2019-10192.md +++ b/2019/CVE-2019-10192.md @@ -12,8 +12,6 @@ A heap-buffer overflow vulnerability was found in the Redis hyperloglog data str ### POC #### Reference -- https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES -- https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://www.oracle.com/security-alerts/cpujul2020.html #### Github diff --git a/2019/CVE-2019-10193.md b/2019/CVE-2019-10193.md index a7eb8c6d388..8e92693c1d7 100644 --- a/2019/CVE-2019-10193.md +++ b/2019/CVE-2019-10193.md @@ -12,8 +12,6 @@ A stack-buffer overflow vulnerability was found in the Redis hyperloglog data st ### POC #### Reference -- https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES -- https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://www.oracle.com/security-alerts/cpujul2020.html #### Github diff --git a/2019/CVE-2019-10705.md b/2019/CVE-2019-10705.md index 9f696941fa2..b0797974ad4 100644 --- a/2019/CVE-2019-10705.md +++ b/2019/CVE-2019-10705.md @@ -10,8 +10,7 @@ Western Digital SanDisk X600 devices in certain configurations, a vulnerability ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd -- https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-10706.md b/2019/CVE-2019-10706.md index 4006a323345..79af6fca1f4 100644 --- a/2019/CVE-2019-10706.md +++ b/2019/CVE-2019-10706.md @@ -10,8 +10,7 @@ Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmwar ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd -- https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-11013.md b/2019/CVE-2019-11013.md index 7e1f8734956..453e4331d3a 100644 --- a/2019/CVE-2019-11013.md +++ b/2019/CVE-2019-11013.md @@ -11,7 +11,6 @@ Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerabil #### Reference - http://packetstormsecurity.com/files/154196/Nimble-Streamer-3.x-Directory-Traversal.html -- https://mayaseven.com/nimble-directory-traversal-in-nimble-streamer-version-3-0-2-2-to-3-5-4-9/ #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-11033.md b/2019/CVE-2019-11033.md index b2894387062..57b7878b00d 100644 --- a/2019/CVE-2019-11033.md +++ b/2019/CVE-2019-11033.md @@ -10,7 +10,7 @@ Applaud HCM 4.0.42+ uses HTML tag fields for HTML inputs in a form. This leads t ### POC #### Reference -- https://support.applaudsolutions.com/hc/en-us/articles/203794318-Download-latest-Applaud-HCM-patch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-11057.md b/2019/CVE-2019-11057.md index 84edbeff120..75bca8d325c 100644 --- a/2019/CVE-2019-11057.md +++ b/2019/CVE-2019-11057.md @@ -10,7 +10,6 @@ SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authentica ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-11057-vtiger.html - https://medium.com/%40mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c - https://medium.com/@mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c diff --git a/2019/CVE-2019-11396.md b/2019/CVE-2019-11396.md index 6b2bfa3d992..399f9461293 100644 --- a/2019/CVE-2019-11396.md +++ b/2019/CVE-2019-11396.md @@ -11,7 +11,6 @@ An issue was discovered in Avira Free Security Suite 10. The permissive access r #### Reference - http://packetstormsecurity.com/files/153868/Avira-Free-Security-Suite-2019-Software-Updater-2.0.6.13175-Improper-Access-Control.html -- https://medium.com/sidechannel-br/vulnerabilidade-no-avira-security-suite-pode-levar-%C3%A0-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-71964236c077 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-11593.md b/2019/CVE-2019-11593.md index eadab1693c7..3b679565d74 100644 --- a/2019/CVE-2019-11593.md +++ b/2019/CVE-2019-11593.md @@ -10,7 +10,7 @@ In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list main ### POC #### Reference -- https://adblockplus.org/releases/adblock-plus-352-for-chrome-firefox-and-opera-released +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-11686.md b/2019/CVE-2019-11686.md index 926b32fa6d9..29f7b8344db 100644 --- a/2019/CVE-2019-11686.md +++ b/2019/CVE-2019-11686.md @@ -10,8 +10,7 @@ Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd -- https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12176.md b/2019/CVE-2019-12176.md index b23f4934efb..e95b01a1c9c 100644 --- a/2019/CVE-2019-12176.md +++ b/2019/CVE-2019-12176.md @@ -10,7 +10,7 @@ Privilege escalation in the "HTC Account Service" and "ViveportDesktopService" i ### POC #### Reference -- https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12177.md b/2019/CVE-2019-12177.md index 3ad465eaf78..1d9c88f5df0 100644 --- a/2019/CVE-2019-12177.md +++ b/2019/CVE-2019-12177.md @@ -10,7 +10,6 @@ Privilege escalation due to insecure directory permissions affecting ViveportDes ### POC #### Reference -- https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8 - https://posts.specterops.io/razer-synapse-3-elevation-of-privilege-6d2802bd0585 #### Github diff --git a/2019/CVE-2019-12280.md b/2019/CVE-2019-12280.md index 5c2460691b0..3bd3cd2a97d 100644 --- a/2019/CVE-2019-12280.md +++ b/2019/CVE-2019-12280.md @@ -11,7 +11,6 @@ PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. #### Reference - http://packetstormsecurity.com/files/153374/PC-Doctor-Toolbox-DLL-Hijacking.html -- https://safebreach.com/Press-Post/SafeBreach-Identifies-Serious-Vulnerability-In-PC-Doctor-Software #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12479.md b/2019/CVE-2019-12479.md index 551e08c736f..06b474fa0b5 100644 --- a/2019/CVE-2019-12479.md +++ b/2019/CVE-2019-12479.md @@ -10,7 +10,7 @@ An issue was discovered in 20|20 Storage 2.11.0. A Path Traversal vulnerability ### POC #### Reference -- https://security401.com/twentytwenty-storage-path-traversal/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12562.md b/2019/CVE-2019-12562.md index 6de9b8375bf..099277097ca 100644 --- a/2019/CVE-2019-12562.md +++ b/2019/CVE-2019-12562.md @@ -11,7 +11,6 @@ Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remo #### Reference - http://packetstormsecurity.com/files/154673/DotNetNuke-Cross-Site-Scripting.html -- https://mayaseven.com/cve-2019-12562-stored-cross-site-scripting-in-dotnetnuke-dnn-version-v9-3-2/ #### Github - https://github.com/MAYASEVEN/CVE-2019-12562 diff --git a/2019/CVE-2019-12586.md b/2019/CVE-2019-12586.md index c1630b5acf1..c92d90ba989 100644 --- a/2019/CVE-2019-12586.md +++ b/2019/CVE-2019-12586.md @@ -11,7 +11,6 @@ The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266 #### Reference - https://github.com/Matheus-Garbelini/esp32_esp8266_attacks -- https://matheus-garbelini.github.io/home/post/esp32-esp8266-eap-crash/ #### Github - https://github.com/84KaliPleXon3/esp32_esp8266_attacks diff --git a/2019/CVE-2019-12587.md b/2019/CVE-2019-12587.md index d0187f7ee27..c6a78e57e94 100644 --- a/2019/CVE-2019-12587.md +++ b/2019/CVE-2019-12587.md @@ -11,7 +11,6 @@ The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266 #### Reference - https://github.com/Matheus-Garbelini/esp32_esp8266_attacks -- https://matheus-garbelini.github.io/home/post/zero-pmk-installation/ #### Github - https://github.com/84KaliPleXon3/esp32_esp8266_attacks diff --git a/2019/CVE-2019-12588.md b/2019/CVE-2019-12588.md index 5344f5d5efc..0ab5c98b018 100644 --- a/2019/CVE-2019-12588.md +++ b/2019/CVE-2019-12588.md @@ -11,7 +11,6 @@ The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 throug #### Reference - https://github.com/Matheus-Garbelini/esp32_esp8266_attacks -- https://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/ #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12719.md b/2019/CVE-2019-12719.md index 3c031e48129..3992fe02ce6 100644 --- a/2019/CVE-2019-12719.md +++ b/2019/CVE-2019-12719.md @@ -10,7 +10,6 @@ An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitorin ### POC #### Reference -- https://drive.google.com/open?id=1Khz7x6b32g7JYCyA6ZQ6NGEc4I0yFA45 - https://www.exploit-db.com/exploits/47541 #### Github diff --git a/2019/CVE-2019-12720.md b/2019/CVE-2019-12720.md index cade421ffe9..08017e25950 100644 --- a/2019/CVE-2019-12720.md +++ b/2019/CVE-2019-12720.md @@ -10,7 +10,6 @@ AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail ### POC #### Reference -- https://drive.google.com/file/d/1QYgj4FU0MjSIhgXwddg4L5no9KYn8E9v/view - https://www.exploit-db.com/exploits/47542 #### Github diff --git a/2019/CVE-2019-12731.md b/2019/CVE-2019-12731.md index 64c11171dcb..d4c3c9f6e84 100644 --- a/2019/CVE-2019-12731.md +++ b/2019/CVE-2019-12731.md @@ -10,7 +10,7 @@ The Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by ### POC #### Reference -- https://www.detack.de/en/cve-2019-12731 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12911.md b/2019/CVE-2019-12911.md index e3307ddd14c..be1cf67636f 100644 --- a/2019/CVE-2019-12911.md +++ b/2019/CVE-2019-12911.md @@ -10,7 +10,7 @@ Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens ### POC #### Reference -- https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12912.md b/2019/CVE-2019-12912.md index 24a5dc750b9..6de2b8aa444 100644 --- a/2019/CVE-2019-12912.md +++ b/2019/CVE-2019-12912.md @@ -10,7 +10,7 @@ Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (s ### POC #### Reference -- https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12913.md b/2019/CVE-2019-12913.md index 52b24911333..b9ecff09dc1 100644 --- a/2019/CVE-2019-12913.md +++ b/2019/CVE-2019-12913.md @@ -10,7 +10,7 @@ Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (s ### POC #### Reference -- https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12914.md b/2019/CVE-2019-12914.md index 9f9e699a4ec..cea0fb5b33d 100644 --- a/2019/CVE-2019-12914.md +++ b/2019/CVE-2019-12914.md @@ -10,7 +10,7 @@ Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens ### POC #### Reference -- https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12938.md b/2019/CVE-2019-12938.md index a6203765c1e..26099bb90e5 100644 --- a/2019/CVE-2019-12938.md +++ b/2019/CVE-2019-12938.md @@ -10,7 +10,7 @@ The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the ### POC #### Reference -- https://bitbucket.org/analogic/mailserver/issues/665/posteio-logs-leak +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12942.md b/2019/CVE-2019-12942.md index bbc79766eb1..ac1ca97c58d 100644 --- a/2019/CVE-2019-12942.md +++ b/2019/CVE-2019-12942.md @@ -10,7 +10,7 @@ TTLock devices do not properly block guest access in certain situations where th ### POC #### Reference -- https://www.kth.se/polopoly_fs/1.923565.1568098364!/Vulnerability_Report_TTLock_State_Consistency.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12943.md b/2019/CVE-2019-12943.md index 2cd0d067668..6a79c6fbfee 100644 --- a/2019/CVE-2019-12943.md +++ b/2019/CVE-2019-12943.md @@ -10,7 +10,7 @@ TTLock devices do not properly restrict password-reset attempts, leading to inco ### POC #### Reference -- https://www.kth.se/polopoly_fs/1.923564.1568098316!/Vulnerability_Report_TTLock_Password_Reset.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12944.md b/2019/CVE-2019-12944.md index dbecc3419db..1ba34d108e6 100644 --- a/2019/CVE-2019-12944.md +++ b/2019/CVE-2019-12944.md @@ -10,7 +10,7 @@ Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situ ### POC #### Reference -- https://www.kth.se/polopoly_fs/1.931930.1571073241!/Vulnerability_Report_Glue_State_Consistency.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-12968.md b/2019/CVE-2019-12968.md index 801648437ad..393694365e5 100644 --- a/2019/CVE-2019-12968.md +++ b/2019/CVE-2019-12968.md @@ -10,9 +10,7 @@ A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 ### POC #### Reference -- https://bitbucket.org/Doomseeker/doomseeker/commits/ae456aac888cb794ea3292f7f99cb87d6b22a555 -- https://bitbucket.org/Doomseeker/doomseeker/commits/b9a90f1f56e704c5cbeefe83da2f9ce939920278 -- https://bitbucket.org/Doomseeker/doomseeker/pull-requests/74/more-openbsd-issues-3654-the-srb2-thingy/diff +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-13466.md b/2019/CVE-2019-13466.md index df83d238943..e227e3a6d57 100644 --- a/2019/CVE-2019-13466.md +++ b/2019/CVE-2019-13466.md @@ -10,7 +10,7 @@ Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2. ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities +No PoCs from references. #### Github - https://github.com/aafgani/poc-az-kv-on-legacy-dotnet-mvc diff --git a/2019/CVE-2019-13467.md b/2019/CVE-2019-13467.md index 5864a919740..11171c265d8 100644 --- a/2019/CVE-2019-13467.md +++ b/2019/CVE-2019-13467.md @@ -10,7 +10,7 @@ Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashbo ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-13570.md b/2019/CVE-2019-13570.md index f93cfaa50b8..6daa56d3715 100644 --- a/2019/CVE-2019-13570.md +++ b/2019/CVE-2019-13570.md @@ -10,7 +10,6 @@ The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection. ### POC #### Reference -- https://ajdg.solutions/2019/07/11/adrotate-pro-5-3-important-update-for-security-and-ads-txt/ - https://wpvulndb.com/vulnerabilities/9475 #### Github diff --git a/2019/CVE-2019-14347.md b/2019/CVE-2019-14347.md index 5a044e288e1..d2d6a16fa82 100644 --- a/2019/CVE-2019-14347.md +++ b/2019/CVE-2019-14347.md @@ -11,7 +11,6 @@ Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged use #### Reference - http://packetstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.html -- https://hackpuntes.com/cve-2019-14347-escalacion-de-privilegios-en-adive/ #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-14510.md b/2019/CVE-2019-14510.md index b6f4adc66d0..1ee62f67cdd 100644 --- a/2019/CVE-2019-14510.md +++ b/2019/CVE-2019-14510.md @@ -10,7 +10,7 @@ An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the defau ### POC #### Reference -- https://lockstepgroup.com/blog/abusing-the-kaseya-lan-cache-fsadmin/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-14541.md b/2019/CVE-2019-14541.md index 510adf305d5..1c577f665b8 100644 --- a/2019/CVE-2019-14541.md +++ b/2019/CVE-2019-14541.md @@ -10,7 +10,7 @@ GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_program_id in cobc/t ### POC #### Reference -- https://sourceforge.net/p/open-cobol/bugs/584/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-14685.md b/2019/CVE-2019-14685.md index af0d4f07a04..3d8300f5c31 100644 --- a/2019/CVE-2019-14685.md +++ b/2019/CVE-2019-14685.md @@ -12,7 +12,6 @@ A local privilege escalation vulnerability exists in Trend Micro Security 2019 ( #### Reference - http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html - http://seclists.org/fulldisclosure/2019/Aug/26 -- https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-14943.md b/2019/CVE-2019-14943.md index 2dad26a0940..fd30222086d 100644 --- a/2019/CVE-2019-14943.md +++ b/2019/CVE-2019-14943.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 12.0 through ### POC #### Reference -- https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4530 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15092.md b/2019/CVE-2019-15092.md index 2280a464afe..f09231fced8 100644 --- a/2019/CVE-2019-15092.md +++ b/2019/CVE-2019-15092.md @@ -11,7 +11,6 @@ The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3 #### Reference - http://packetstormsecurity.com/files/154203/WordPress-Import-Export-WordPress-Users-1.3.1-CSV-Injection.html -- https://hackpuntes.com/cve-2019-15092-wordpress-plugin-import-export-users-1-3-0-csv-injection/ - https://wpvulndb.com/vulnerabilities/9704 #### Github diff --git a/2019/CVE-2019-15131.md b/2019/CVE-2019-15131.md index bdaa15cd7fe..bb59a9d0111 100644 --- a/2019/CVE-2019-15131.md +++ b/2019/CVE-2019-15131.md @@ -10,7 +10,6 @@ In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnera ### POC #### Reference -- https://code42.com/r/support/CVE-2019-15131 - https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories #### Github diff --git a/2019/CVE-2019-15229.md b/2019/CVE-2019-15229.md index 1b011a006b6..a9a557fd08b 100644 --- a/2019/CVE-2019-15229.md +++ b/2019/CVE-2019-15229.md @@ -11,7 +11,6 @@ FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin #### Reference - https://github.com/daylightstudio/FUEL-CMS/issues/536 -- https://www.sevenlayers.com/index.php/238-fuelcms-1-4-4-csrf #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15628.md b/2019/CVE-2019-15628.md index 9c1aca7ff7b..e04c375e26a 100644 --- a/2019/CVE-2019-15628.md +++ b/2019/CVE-2019-15628.md @@ -10,7 +10,7 @@ Trend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL ### POC #### Reference -- https://safebreach.com/Post/Trend-Micro-Security-16-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-15628 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15720.md b/2019/CVE-2019-15720.md index 58194dfe0e5..a5a1f08fd67 100644 --- a/2019/CVE-2019-15720.md +++ b/2019/CVE-2019-15720.md @@ -10,7 +10,7 @@ CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post ### POC #### Reference -- https://www.sevenlayers.com/index.php/243-cloudberry-backup-local-privilege-escalation +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15721.md b/2019/CVE-2019-15721.md index 2eeeec0ea6b..4585ad389a7 100644 --- a/2019/CVE-2019-15721.md +++ b/2019/CVE-2019-15721.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 10.8 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15722.md b/2019/CVE-2019-15722.md index 721ee54b56c..52bd8e04dd1 100644 --- a/2019/CVE-2019-15722.md +++ b/2019/CVE-2019-15722.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 8.15 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15723.md b/2019/CVE-2019-15723.md index d115efa8b47..6bd2a2c5a4a 100644 --- a/2019/CVE-2019-15723.md +++ b/2019/CVE-2019-15723.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11 ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15724.md b/2019/CVE-2019-15724.md index c1509ebda69..a209ad4b35c 100644 --- a/2019/CVE-2019-15724.md +++ b/2019/CVE-2019-15724.md @@ -10,7 +10,6 @@ An issue was discovered in GitLab Community and Enterprise Edition 11.10 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/60888 #### Github diff --git a/2019/CVE-2019-15725.md b/2019/CVE-2019-15725.md index b91419ae8fd..66a83c45f87 100644 --- a/2019/CVE-2019-15725.md +++ b/2019/CVE-2019-15725.md @@ -10,7 +10,6 @@ An issue was discovered in GitLab Community and Enterprise Edition 12.0 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ee/issues/11431 #### Github diff --git a/2019/CVE-2019-15726.md b/2019/CVE-2019-15726.md index d05fce8d29a..31aa5434465 100644 --- a/2019/CVE-2019-15726.md +++ b/2019/CVE-2019-15726.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition through 12.2. ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15727.md b/2019/CVE-2019-15727.md index 45f1f4d8d6a..a379514be3f 100644 --- a/2019/CVE-2019-15727.md +++ b/2019/CVE-2019-15727.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 11.2 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15728.md b/2019/CVE-2019-15728.md index fcd676bcb0d..82f070fdfaa 100644 --- a/2019/CVE-2019-15728.md +++ b/2019/CVE-2019-15728.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 10.1 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15729.md b/2019/CVE-2019-15729.md index a7fcaf0a5e6..a6241ec9278 100644 --- a/2019/CVE-2019-15729.md +++ b/2019/CVE-2019-15729.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 8.18 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15730.md b/2019/CVE-2019-15730.md index 7039c4ed577..e36f9370b9a 100644 --- a/2019/CVE-2019-15730.md +++ b/2019/CVE-2019-15730.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 8.14 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15731.md b/2019/CVE-2019-15731.md index dab91933227..f05163f7916 100644 --- a/2019/CVE-2019-15731.md +++ b/2019/CVE-2019-15731.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 12.0 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15732.md b/2019/CVE-2019-15732.md index 979f29727df..3c44500ff2b 100644 --- a/2019/CVE-2019-15732.md +++ b/2019/CVE-2019-15732.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 12.2 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15733.md b/2019/CVE-2019-15733.md index b13b3c95bd7..8e9321ac6f2 100644 --- a/2019/CVE-2019-15733.md +++ b/2019/CVE-2019-15733.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 7.12 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15734.md b/2019/CVE-2019-15734.md index ddaad761351..cf442bae9a3 100644 --- a/2019/CVE-2019-15734.md +++ b/2019/CVE-2019-15734.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 1 ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15736.md b/2019/CVE-2019-15736.md index 32741acc0a2..76dfdc6ce36 100644 --- a/2019/CVE-2019-15736.md +++ b/2019/CVE-2019-15736.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition through 12.2. ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15737.md b/2019/CVE-2019-15737.md index d0bf55616dd..d08d2c08d4d 100644 --- a/2019/CVE-2019-15737.md +++ b/2019/CVE-2019-15737.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition through 12.2. ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15738.md b/2019/CVE-2019-15738.md index 38d21ae796b..1402475e8c0 100644 --- a/2019/CVE-2019-15738.md +++ b/2019/CVE-2019-15738.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 12.0 through ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15739.md b/2019/CVE-2019-15739.md index 90c021b183e..5a27db6e782 100644 --- a/2019/CVE-2019-15739.md +++ b/2019/CVE-2019-15739.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 1 ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15740.md b/2019/CVE-2019-15740.md index bb95823a76c..bd0461a9b4c 100644 --- a/2019/CVE-2019-15740.md +++ b/2019/CVE-2019-15740.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 1 ### POC #### Reference -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-15741.md b/2019/CVE-2019-15741.md index ed8e8410488..a45279e56fa 100644 --- a/2019/CVE-2019-15741.md +++ b/2019/CVE-2019-15741.md @@ -12,7 +12,6 @@ An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interact #### Reference - http://packetstormsecurity.com/files/154734/GitLab-Omnibus-12.2.1-Logrotate-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2019/Oct/7 -- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ - https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4380 #### Github diff --git a/2019/CVE-2019-16512.md b/2019/CVE-2019-16512.md index 6fdb32832e8..8aaad417883 100644 --- a/2019/CVE-2019-16512.md +++ b/2019/CVE-2019-16512.md @@ -10,7 +10,6 @@ An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) ### POC #### Reference -- https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control diff --git a/2019/CVE-2019-16513.md b/2019/CVE-2019-16513.md index 920bd794b2d..1ae8f52dbfc 100644 --- a/2019/CVE-2019-16513.md +++ b/2019/CVE-2019-16513.md @@ -10,7 +10,6 @@ An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) ### POC #### Reference -- https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control diff --git a/2019/CVE-2019-16514.md b/2019/CVE-2019-16514.md index 8ae02879139..cb2fe74b4a3 100644 --- a/2019/CVE-2019-16514.md +++ b/2019/CVE-2019-16514.md @@ -10,7 +10,6 @@ An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) ### POC #### Reference -- https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control diff --git a/2019/CVE-2019-16515.md b/2019/CVE-2019-16515.md index da7e4b314e5..5566d687f78 100644 --- a/2019/CVE-2019-16515.md +++ b/2019/CVE-2019-16515.md @@ -10,7 +10,6 @@ An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) ### POC #### Reference -- https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control - https://wpvulndb.com/vulnerabilities/10013 diff --git a/2019/CVE-2019-16516.md b/2019/CVE-2019-16516.md index fdcbcbd2897..caee48b1a4f 100644 --- a/2019/CVE-2019-16516.md +++ b/2019/CVE-2019-16516.md @@ -11,7 +11,6 @@ An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) #### Reference - http://packetstormsecurity.com/files/165432/ConnectWise-Control-19.2.24707-Username-Enumeration.html -- https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control diff --git a/2019/CVE-2019-16517.md b/2019/CVE-2019-16517.md index a3b797c5d52..da8b858877c 100644 --- a/2019/CVE-2019-16517.md +++ b/2019/CVE-2019-16517.md @@ -10,7 +10,6 @@ An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) ### POC #### Reference -- https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control diff --git a/2019/CVE-2019-16647.md b/2019/CVE-2019-16647.md index 68f89e85b29..b5ba1c40cbf 100644 --- a/2019/CVE-2019-16647.md +++ b/2019/CVE-2019-16647.md @@ -10,7 +10,7 @@ Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows. ### POC #### Reference -- https://safebreach.com/Post/Maxthon-Browser-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-16647 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16685.md b/2019/CVE-2019-16685.md index 51bee1124c5..79d4d461259 100644 --- a/2019/CVE-2019-16685.md +++ b/2019/CVE-2019-16685.md @@ -10,7 +10,7 @@ Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section ### POC #### Reference -- http://verneet.com/cve-2019-16685/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16686.md b/2019/CVE-2019-16686.md index 5531f43573e..39e79dc7572 100644 --- a/2019/CVE-2019-16686.md +++ b/2019/CVE-2019-16686.md @@ -10,7 +10,7 @@ Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no ### POC #### Reference -- http://verneet.com/cve-2019-16686 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16687.md b/2019/CVE-2019-16687.md index 5e84503e216..4fbae84acbb 100644 --- a/2019/CVE-2019-16687.md +++ b/2019/CVE-2019-16687.md @@ -10,7 +10,7 @@ Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.p ### POC #### Reference -- http://verneet.com/cve-2019-16687 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16688.md b/2019/CVE-2019-16688.md index 4c48878e8ac..e56ce96cd4b 100644 --- a/2019/CVE-2019-16688.md +++ b/2019/CVE-2019-16688.md @@ -10,7 +10,7 @@ Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.ph ### POC #### Reference -- http://verneet.com/cve-2019-16688 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16872.md b/2019/CVE-2019-16872.md index 12c637d115f..88a7192765a 100644 --- a/2019/CVE-2019-16872.md +++ b/2019/CVE-2019-16872.md @@ -10,7 +10,7 @@ Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4). ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-19-120 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16874.md b/2019/CVE-2019-16874.md index 38bbab03edc..88b17d6e45d 100644 --- a/2019/CVE-2019-16874.md +++ b/2019/CVE-2019-16874.md @@ -10,7 +10,7 @@ Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4). ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-19-121 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16885.md b/2019/CVE-2019-16885.md index 8fd597d1ba0..98da01c3133 100644 --- a/2019/CVE-2019-16885.md +++ b/2019/CVE-2019-16885.md @@ -12,7 +12,6 @@ In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code ex #### Reference - http://packetstormsecurity.com/files/155583/OkayCMS-2.3.4-Remote-Code-Execution.html - http://seclists.org/fulldisclosure/2019/Dec/15 -- https://www.ait.ac.at/ait-sa-20191129-01-unauthenticated-remote-code-execution-okaycms #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-16931.md b/2019/CVE-2019-16931.md index e661d4e6cbd..a505aafb65c 100644 --- a/2019/CVE-2019-16931.md +++ b/2019/CVE-2019-16931.md @@ -10,7 +10,6 @@ A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows a ### POC #### Reference -- https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf - https://wpvulndb.com/vulnerabilities/9893 #### Github diff --git a/2019/CVE-2019-16932.md b/2019/CVE-2019-16932.md index 1966b054713..a7995ba45d3 100644 --- a/2019/CVE-2019-16932.md +++ b/2019/CVE-2019-16932.md @@ -10,7 +10,6 @@ A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for Word ### POC #### Reference -- https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf - https://wpvulndb.com/vulnerabilities/9892 #### Github diff --git a/2019/CVE-2019-17093.md b/2019/CVE-2019-17093.md index 855dd8d2ca7..bae6725affa 100644 --- a/2019/CVE-2019-17093.md +++ b/2019/CVE-2019-17093.md @@ -10,7 +10,7 @@ An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before ### POC #### Reference -- https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPL-and-Potential-Abuses +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17397.md b/2019/CVE-2019-17397.md index bec9a8bc92f..49de532ef40 100644 --- a/2019/CVE-2019-17397.md +++ b/2019/CVE-2019-17397.md @@ -10,7 +10,7 @@ In the DoorDash application through 11.5.2 for Android, the username and passwor ### POC #### Reference -- https://pastebin.com/hGg5efMe +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17455.md b/2019/CVE-2019-17455.md index 7c84038fb3e..793424d8038 100644 --- a/2019/CVE-2019-17455.md +++ b/2019/CVE-2019-17455.md @@ -11,7 +11,6 @@ Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbN #### Reference - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942145 -- https://gitlab.com/jas/libntlm/issues/2 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17621.md b/2019/CVE-2019-17621.md index ece1e2605ae..081e3d3774c 100644 --- a/2019/CVE-2019-17621.md +++ b/2019/CVE-2019-17621.md @@ -12,9 +12,7 @@ The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06 #### Reference - http://packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104 -- https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104 -- https://medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9 #### Github - https://github.com/Squirre17/CVE-2019-17621 diff --git a/2019/CVE-2019-17669.md b/2019/CVE-2019-17669.md index 84d8afa0e46..8101a28e936 100644 --- a/2019/CVE-2019-17669.md +++ b/2019/CVE-2019-17669.md @@ -10,7 +10,7 @@ WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability be ### POC #### Reference -- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17670.md b/2019/CVE-2019-17670.md index 9f5601f4ef4..3a934a17270 100644 --- a/2019/CVE-2019-17670.md +++ b/2019/CVE-2019-17670.md @@ -10,7 +10,7 @@ WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability be ### POC #### Reference -- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17671.md b/2019/CVE-2019-17671.md index 8efacca18c4..ca774a9a99d 100644 --- a/2019/CVE-2019-17671.md +++ b/2019/CVE-2019-17671.md @@ -10,7 +10,7 @@ In WordPress before 5.2.4, unauthenticated viewing of certain content is possibl ### POC #### Reference -- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html +No PoCs from references. #### Github - https://github.com/rhbb/CVE-2019-17671 diff --git a/2019/CVE-2019-17672.md b/2019/CVE-2019-17672.md index c7fb4090438..64e5df68ea2 100644 --- a/2019/CVE-2019-17672.md +++ b/2019/CVE-2019-17672.md @@ -10,7 +10,7 @@ WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript ### POC #### Reference -- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17673.md b/2019/CVE-2019-17673.md index e391421e772..da3884acc6f 100644 --- a/2019/CVE-2019-17673.md +++ b/2019/CVE-2019-17673.md @@ -10,7 +10,7 @@ WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET reque ### POC #### Reference -- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17674.md b/2019/CVE-2019-17674.md index 36ca3125a17..9274b45f633 100644 --- a/2019/CVE-2019-17674.md +++ b/2019/CVE-2019-17674.md @@ -10,7 +10,7 @@ WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via th ### POC #### Reference -- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-17675.md b/2019/CVE-2019-17675.md index b955ef926d4..c88f555be41 100644 --- a/2019/CVE-2019-17675.md +++ b/2019/CVE-2019-17675.md @@ -10,7 +10,7 @@ WordPress before 5.2.4 does not properly consider type confusion during validati ### POC #### Reference -- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18193.md b/2019/CVE-2019-18193.md index 93526c9ee99..77b75b7384d 100644 --- a/2019/CVE-2019-18193.md +++ b/2019/CVE-2019-18193.md @@ -10,7 +10,7 @@ In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key materi ### POC #### Reference -- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=52 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18196.md b/2019/CVE-2019-18196.md index cf2b6c1b23b..5cad671b70d 100644 --- a/2019/CVE-2019-18196.md +++ b/2019/CVE-2019-18196.md @@ -10,7 +10,7 @@ A DLL side loading vulnerability in the Windows Service in TeamViewer versions u ### POC #### Reference -- https://safebreach.com/Post/TeamViewer-Windows-Client-v11-to-v14-DLL-Preloading-and-Potential-Abuses-CVE-2019-18196 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18215.md b/2019/CVE-2019-18215.md index 4e0b8414366..2e6dc3fe85d 100644 --- a/2019/CVE-2019-18215.md +++ b/2019/CVE-2019-18215.md @@ -11,7 +11,6 @@ An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security thr #### Reference - https://forums.comodo.com/news-announcements-feedback-cis/comodo-internet-security-2019-v12106914-released-t124993.0.html -- https://safebreach.com/Post/Comodo-Internet-Security-DLL-Preloading-and-Potential-Abuses-CVE-2019-18215 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18344.md b/2019/CVE-2019-18344.md index 848f3de0b6b..52745ee31d7 100644 --- a/2019/CVE-2019-18344.md +++ b/2019/CVE-2019-18344.md @@ -10,7 +10,7 @@ Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL in ### POC #### Reference -- https://www.sevenlayers.com/index.php/262-online-grading-system-1-0-sqli +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18387.md b/2019/CVE-2019-18387.md index 35804a48cb9..b0536f2ce0c 100644 --- a/2019/CVE-2019-18387.md +++ b/2019/CVE-2019-18387.md @@ -10,7 +10,7 @@ Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenti ### POC #### Reference -- https://www.sevenlayers.com/index.php/266-hotel-and-lodge-management-system-1-0-sqli +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18854.md b/2019/CVE-2019-18854.md index 4d8343da4e0..b939bb73b70 100644 --- a/2019/CVE-2019-18854.md +++ b/2019/CVE-2019-18854.md @@ -10,7 +10,6 @@ A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin t ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-19-113 - https://wordpress.org/plugins/safe-svg/#developers - https://wpvulndb.com/vulnerabilities/9937 diff --git a/2019/CVE-2019-18855.md b/2019/CVE-2019-18855.md index 8999bf645e9..3b410025ea6 100644 --- a/2019/CVE-2019-18855.md +++ b/2019/CVE-2019-18855.md @@ -10,7 +10,6 @@ A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin t ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-19-113 - https://wordpress.org/plugins/safe-svg/#developers - https://wpvulndb.com/vulnerabilities/9937 diff --git a/2019/CVE-2019-18856.md b/2019/CVE-2019-18856.md index 6c3e17c9a81..ab9763ea50b 100644 --- a/2019/CVE-2019-18856.md +++ b/2019/CVE-2019-18856.md @@ -10,7 +10,7 @@ A Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x ### POC #### Reference -- https://fortiguard.com/zeroday/FG-VD-19-115 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18958.md b/2019/CVE-2019-18958.md index 0ec52bc643c..f1eec2f52cd 100644 --- a/2019/CVE-2019-18958.md +++ b/2019/CVE-2019-18958.md @@ -10,7 +10,7 @@ Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf fil ### POC #### Reference -- https://a-man-in-the-cookie.blogspot.com/2019/11/nitro-pro-vulnerability.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18989.md b/2019/CVE-2019-18989.md index ac82a44525e..9cc0b277408 100644 --- a/2019/CVE-2019-18989.md +++ b/2019/CVE-2019-18989.md @@ -10,7 +10,7 @@ A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 de ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18990.md b/2019/CVE-2019-18990.md index f7a34dd6676..5cdf076ab7c 100644 --- a/2019/CVE-2019-18990.md +++ b/2019/CVE-2019-18990.md @@ -10,7 +10,7 @@ A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18991.md b/2019/CVE-2019-18991.md index 8c57911e0dd..e11c0be7b50 100644 --- a/2019/CVE-2019-18991.md +++ b/2019/CVE-2019-18991.md @@ -10,7 +10,7 @@ A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX. ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18994.md b/2019/CVE-2019-18994.md index f780659720d..c1441ca0bb3 100644 --- a/2019/CVE-2019-18994.md +++ b/2019/CVE-2019-18994.md @@ -10,7 +10,7 @@ Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel B ### POC #### Reference -- http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18995.md b/2019/CVE-2019-18995.md index ce014c1b306..92e53ba87ac 100644 --- a/2019/CVE-2019-18995.md +++ b/2019/CVE-2019-18995.md @@ -10,7 +10,7 @@ The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and ### POC #### Reference -- http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18996.md b/2019/CVE-2019-18996.md index 50904df1186..245cecf2b36 100644 --- a/2019/CVE-2019-18996.md +++ b/2019/CVE-2019-18996.md @@ -10,7 +10,7 @@ Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8 ### POC #### Reference -- http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-18997.md b/2019/CVE-2019-18997.md index 2e7ff5c6cd4..1da7609532a 100644 --- a/2019/CVE-2019-18997.md +++ b/2019/CVE-2019-18997.md @@ -10,7 +10,7 @@ The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writ ### POC #### Reference -- http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19000.md b/2019/CVE-2019-19000.md index 4be4f0887d0..0ca2885c223 100644 --- a/2019/CVE-2019-19000.md +++ b/2019/CVE-2019-19000.md @@ -13,7 +13,7 @@ For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19001.md b/2019/CVE-2019-19001.md index 540a707e1f7..24a7898330a 100644 --- a/2019/CVE-2019-19001.md +++ b/2019/CVE-2019-19001.md @@ -10,7 +10,7 @@ For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configure ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19002.md b/2019/CVE-2019-19002.md index 8e1d6067ab6..cd9e8cc7a93 100644 --- a/2019/CVE-2019-19002.md +++ b/2019/CVE-2019-19002.md @@ -11,7 +11,7 @@ For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header i ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19003.md b/2019/CVE-2019-19003.md index 227a6809fa1..694bc735d84 100644 --- a/2019/CVE-2019-19003.md +++ b/2019/CVE-2019-19003.md @@ -11,7 +11,7 @@ For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allo ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19089.md b/2019/CVE-2019-19089.md index 93d449f4539..db50a2f8355 100644 --- a/2019/CVE-2019-19089.md +++ b/2019/CVE-2019-19089.md @@ -10,7 +10,7 @@ For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missin ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19090.md b/2019/CVE-2019-19090.md index 34a9f67b647..c7080166e60 100644 --- a/2019/CVE-2019-19090.md +++ b/2019/CVE-2019-19090.md @@ -10,7 +10,7 @@ For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP resp ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19091.md b/2019/CVE-2019-19091.md index 7c491457938..e1a6f56220e 100644 --- a/2019/CVE-2019-19091.md +++ b/2019/CVE-2019-19091.md @@ -11,7 +11,7 @@ For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensi ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19092.md b/2019/CVE-2019-19092.md index 57846f4eb2e..98774a9d21c 100644 --- a/2019/CVE-2019-19092.md +++ b/2019/CVE-2019-19092.md @@ -10,7 +10,7 @@ ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentica ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19093.md b/2019/CVE-2019-19093.md index 02c07303452..eda5fca0ebc 100644 --- a/2019/CVE-2019-19093.md +++ b/2019/CVE-2019-19093.md @@ -10,7 +10,7 @@ eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potenti ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19094.md b/2019/CVE-2019-19094.md index 71667a0cab4..2a021396ce2 100644 --- a/2019/CVE-2019-19094.md +++ b/2019/CVE-2019-19094.md @@ -10,7 +10,7 @@ Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might al ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19095.md b/2019/CVE-2019-19095.md index 2296c5d999b..11a15989bf2 100644 --- a/2019/CVE-2019-19095.md +++ b/2019/CVE-2019-19095.md @@ -10,7 +10,7 @@ Lack of adequate input/output validation for ABB eSOMS versions 4.0 to 6.0.2 mig ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19096.md b/2019/CVE-2019-19096.md index 4bb9b15b5d1..c1c62cd973b 100644 --- a/2019/CVE-2019-19096.md +++ b/2019/CVE-2019-19096.md @@ -10,7 +10,7 @@ The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 store ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19097.md b/2019/CVE-2019-19097.md index 61b2cb83f97..c6a27176568 100644 --- a/2019/CVE-2019-19097.md +++ b/2019/CVE-2019-19097.md @@ -11,7 +11,7 @@ ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19115.md b/2019/CVE-2019-19115.md index a87938781e5..df23e073db5 100644 --- a/2019/CVE-2019-19115.md +++ b/2019/CVE-2019-19115.md @@ -10,7 +10,7 @@ An escalation of privilege vulnerability in Nahimic APO Software Component Drive ### POC #### Reference -- https://safebreach.com/Post/Nahimic-APO-Software-Component-Driver-Deployed-with-MSI-Computers-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-19115 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19135.md b/2019/CVE-2019-19135.md index 9eba43cd119..e5ed6a5428d 100644 --- a/2019/CVE-2019-19135.md +++ b/2019/CVE-2019-19135.md @@ -10,7 +10,6 @@ In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not creat ### POC #### Reference -- https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2019-19135.pdf - https://opcfoundation.org/security-bulletins/ #### Github diff --git a/2019/CVE-2019-19197.md b/2019/CVE-2019-19197.md index a0f7c7040c0..27971d3883e 100644 --- a/2019/CVE-2019-19197.md +++ b/2019/CVE-2019-19197.md @@ -11,7 +11,6 @@ IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows #### Reference - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-11-16-kyrol-internet-security-driver-issue.md -- https://nafiez.github.io/security/vulnerability/2019/11/16/kyrol-internet-security-driver-issue.html #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19262.md b/2019/CVE-2019-19262.md index d06167f9d37..d37607dda5a 100644 --- a/2019/CVE-2019-19262.md +++ b/2019/CVE-2019-19262.md @@ -10,7 +10,7 @@ GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissi ### POC #### Reference -- https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-2-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19306.md b/2019/CVE-2019-19306.md index b0f23240952..7423e078522 100644 --- a/2019/CVE-2019-19306.md +++ b/2019/CVE-2019-19306.md @@ -10,7 +10,6 @@ The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, Edi ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-19306-zoho.html - https://github.com/cybersecurityworks/Disclosed/issues/16 - https://wpvulndb.com/vulnerabilities/9919 diff --git a/2019/CVE-2019-19453.md b/2019/CVE-2019-19453.md index 006711be93e..962da95f899 100644 --- a/2019/CVE-2019-19453.md +++ b/2019/CVE-2019-19453.md @@ -10,7 +10,7 @@ Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19454.md b/2019/CVE-2019-19454.md index 231b7150b00..69b42d75d29 100644 --- a/2019/CVE-2019-19454.md +++ b/2019/CVE-2019-19454.md @@ -10,7 +10,7 @@ An arbitrary file download was found in the "Download Log" functionality of Wowz ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19455.md b/2019/CVE-2019-19455.md index 98737b893d6..af677550eb5 100644 --- a/2019/CVE-2019-19455.md +++ b/2019/CVE-2019-19455.md @@ -10,7 +10,7 @@ Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a l ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19456.md b/2019/CVE-2019-19456.md index d62ddb29ba3..6f318e1e48b 100644 --- a/2019/CVE-2019-19456.md +++ b/2019/CVE-2019-19456.md @@ -10,7 +10,7 @@ A Reflected XSS was found in the server selection box inside the login page at: ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19538.md b/2019/CVE-2019-19538.md index d3e1d13e3d0..6728e160f71 100644 --- a/2019/CVE-2019-19538.md +++ b/2019/CVE-2019-19538.md @@ -10,7 +10,6 @@ In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through ### POC #### Reference -- https://community.freepbx.org/t/freepbx-security-vulnerability-sec-2019-00 - https://wiki.freepbx.org/display/FOP/2019-12-03+Remote+Command+Execution #### Github diff --git a/2019/CVE-2019-19576.md b/2019/CVE-2019-19576.md index db1c07be499..2a76ee55552 100644 --- a/2019/CVE-2019-19576.md +++ b/2019/CVE-2019-19576.md @@ -13,7 +13,6 @@ class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as - http://packetstormsecurity.com/files/155577/Verot-2.0.3-Remote-Code-Execution.html - https://github.com/jra89/CVE-2019-19576 - https://medium.com/%40jra8908/cve-2019-19576-e9da712b779 -- https://medium.com/@jra8908/cve-2019-19576-e9da712b779 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19634.md b/2019/CVE-2019-19634.md index f785661350e..cb5806f7bde 100644 --- a/2019/CVE-2019-19634.md +++ b/2019/CVE-2019-19634.md @@ -11,8 +11,6 @@ class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, #### Reference - https://github.com/jra89/CVE-2019-19634 -- https://medium.com/%40jra8908/cve-2019-19634-arbitrary-file-upload-in-class-upload-php-ccaf9e13875e -- https://medium.com/@jra8908/cve-2019-19634-arbitrary-file-upload-in-class-upload-php-ccaf9e13875e #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19676.md b/2019/CVE-2019-19676.md index ef6758c20d7..84c525eaf76 100644 --- a/2019/CVE-2019-19676.md +++ b/2019/CVE-2019-19676.md @@ -10,7 +10,7 @@ A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote cont ### POC #### Reference -- https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-csv-injection.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19681.md b/2019/CVE-2019-19681.md index 0b1a4488e56..5b47f5ebb3f 100644 --- a/2019/CVE-2019-19681.md +++ b/2019/CVE-2019-19681.md @@ -10,8 +10,7 @@ Pandora FMS 7.x suffers from remote code execution vulnerability. With an authen ### POC #### Reference -- https://medium.com/%40k4m1ll0/remote-code-execution-vulnerability-in-pandorafms-7-x-8ce55d4b1d5a -- https://medium.com/@k4m1ll0/remote-code-execution-vulnerability-in-pandorafms-7-x-8ce55d4b1d5a +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19732.md b/2019/CVE-2019-19732.md index 7028c299baf..48e6b124580 100644 --- a/2019/CVE-2019-19732.md +++ b/2019/CVE-2019-19732.md @@ -10,8 +10,7 @@ translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts Yeti ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19733.md b/2019/CVE-2019-19733.md index 279b40de4f0..cdb5b633441 100644 --- a/2019/CVE-2019-19733.md +++ b/2019/CVE-2019-19733.md @@ -10,8 +10,7 @@ _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19734.md b/2019/CVE-2019-19734.md index af939cc170d..f5eb680a95a 100644 --- a/2019/CVE-2019-19734.md +++ b/2019/CVE-2019-19734.md @@ -10,8 +10,7 @@ _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inse ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19735.md b/2019/CVE-2019-19735.md index 1e4ce440b41..04ea2828ffc 100644 --- a/2019/CVE-2019-19735.md +++ b/2019/CVE-2019-19735.md @@ -10,8 +10,7 @@ class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure m ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19736.md b/2019/CVE-2019-19736.md index 1a2f1b999ce..e0540124d37 100644 --- a/2019/CVE-2019-19736.md +++ b/2019/CVE-2019-19736.md @@ -10,8 +10,7 @@ MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on sessio ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19737.md b/2019/CVE-2019-19737.md index fd2646374c9..24f6fa00420 100644 --- a/2019/CVE-2019-19737.md +++ b/2019/CVE-2019-19737.md @@ -10,8 +10,7 @@ MFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on sessio ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19738.md b/2019/CVE-2019-19738.md index 3fec4c5a265..2ea20dfb4a6 100644 --- a/2019/CVE-2019-19738.md +++ b/2019/CVE-2019-19738.md @@ -10,8 +10,7 @@ log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19739.md b/2019/CVE-2019-19739.md index 87bc2690900..c649be02260 100644 --- a/2019/CVE-2019-19739.md +++ b/2019/CVE-2019-19739.md @@ -10,8 +10,7 @@ MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19782.md b/2019/CVE-2019-19782.md index d74eb8513b9..a8b302de4fc 100644 --- a/2019/CVE-2019-19782.md +++ b/2019/CVE-2019-19782.md @@ -11,7 +11,6 @@ The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO respo #### Reference - https://github.com/sketler/sketler.github.io/blob/master/_posts/2019-11-11-AceaXeftp-RCE-Via-Buffer-Overflow.markdown -- https://sketler.github.io/cve_research/AceaXeftp-RCE-Via-Buffer-Overflow/ #### Github - https://github.com/Underwood12/CVE-2019-19782 diff --git a/2019/CVE-2019-19805.md b/2019/CVE-2019-19805.md index 3b46ea2a83f..7e82b718c00 100644 --- a/2019/CVE-2019-19805.md +++ b/2019/CVE-2019-19805.md @@ -10,8 +10,7 @@ _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 tak ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19806.md b/2019/CVE-2019-19806.md index d648ed0a818..2d9cccd0dd4 100644 --- a/2019/CVE-2019-19806.md +++ b/2019/CVE-2019-19806.md @@ -10,8 +10,7 @@ _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 dis ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19820.md b/2019/CVE-2019-19820.md index 6cdb85359c4..9c792f7ea41 100644 --- a/2019/CVE-2019-19820.md +++ b/2019/CVE-2019-19820.md @@ -11,7 +11,6 @@ An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Ky #### Reference - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-12-04-kyrol-internet-security-invalid-pointer-vulnerability.md -- https://nafiez.github.io/security/vulnerability/2019/12/04/kyrol-internet-security-invalid-pointer-vulnerability.html #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19854.md b/2019/CVE-2019-19854.md index 8627753f7fd..a901d25eede 100644 --- a/2019/CVE-2019-19854.md +++ b/2019/CVE-2019-19854.md @@ -10,7 +10,7 @@ An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn ### POC #### Reference -- https://websec.nl/news.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19855.md b/2019/CVE-2019-19855.md index b67ea7dc2c9..11fed684c35 100644 --- a/2019/CVE-2019-19855.md +++ b/2019/CVE-2019-19855.md @@ -10,7 +10,7 @@ An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn ### POC #### Reference -- https://websec.nl/news.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19856.md b/2019/CVE-2019-19856.md index 9aa4799a01b..18824e47e7b 100644 --- a/2019/CVE-2019-19856.md +++ b/2019/CVE-2019-19856.md @@ -10,7 +10,7 @@ An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn ### POC #### Reference -- https://websec.nl/news.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19857.md b/2019/CVE-2019-19857.md index 3edc7f9b890..ac3accb6211 100644 --- a/2019/CVE-2019-19857.md +++ b/2019/CVE-2019-19857.md @@ -10,7 +10,7 @@ An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn ### POC #### Reference -- https://websec.nl/news.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19858.md b/2019/CVE-2019-19858.md index 5ca732d4b3d..65c0084453a 100644 --- a/2019/CVE-2019-19858.md +++ b/2019/CVE-2019-19858.md @@ -10,7 +10,7 @@ An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn ### POC #### Reference -- https://websec.nl/news.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19859.md b/2019/CVE-2019-19859.md index 7b8fd7ee714..79db325d541 100644 --- a/2019/CVE-2019-19859.md +++ b/2019/CVE-2019-19859.md @@ -10,7 +10,7 @@ An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn ### POC #### Reference -- https://www.websec.nl/news.php +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-19916.md b/2019/CVE-2019-19916.md index c7cd4a43fa3..9613f130120 100644 --- a/2019/CVE-2019-19916.md +++ b/2019/CVE-2019-19916.md @@ -11,7 +11,6 @@ In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not a #### Reference - https://github.com/V1n1v131r4/MIME-Confusion-Attack-on-Midori-Browser/blob/master/README.md -- https://portswigger.net/research/bypassing-csp-using-polyglot-jpegs #### Github - https://github.com/V1n1v131r4/MIME-Confusion-Attack-on-Midori-Browser diff --git a/2019/CVE-2019-20059.md b/2019/CVE-2019-20059.md index e23b837f910..6c946585877 100644 --- a/2019/CVE-2019-20059.md +++ b/2019/CVE-2019-20059.md @@ -10,8 +10,7 @@ payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5 ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad +No PoCs from references. #### Github - https://github.com/cve-vuln/CVE-2019-20059 diff --git a/2019/CVE-2019-20060.md b/2019/CVE-2019-20060.md index 1aace20f026..7b2aea51cc5 100644 --- a/2019/CVE-2019-20060.md +++ b/2019/CVE-2019-20060.md @@ -10,8 +10,7 @@ MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Re ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20061.md b/2019/CVE-2019-20061.md index c4050e0457a..d03fb0f87ba 100644 --- a/2019/CVE-2019-20061.md +++ b/2019/CVE-2019-20061.md @@ -10,8 +10,7 @@ The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may lea ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20062.md b/2019/CVE-2019-20062.md index b1840c7ab05..758d5d44bc9 100644 --- a/2019/CVE-2019-20062.md +++ b/2019/CVE-2019-20062.md @@ -10,8 +10,7 @@ MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a pas ### POC #### Reference -- https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -- https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20074.md b/2019/CVE-2019-20074.md index 9df7bb77438..9b523bcfab8 100644 --- a/2019/CVE-2019-20074.md +++ b/2019/CVE-2019-20074.md @@ -11,7 +11,6 @@ On Netis DL4323 devices, any user role can view sensitive information, such as a #### Reference - https://drive.google.com/open?id=1MH6DMhP1JsV_RptGXDze0Vo9MDuCH9se -- https://fatihhcelik.blogspot.com/2019/12/clear-text-password-netis-dl4323.html #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20181.md b/2019/CVE-2019-20181.md index 7a76345997b..ae58abaf841 100644 --- a/2019/CVE-2019-20181.md +++ b/2019/CVE-2019-20181.md @@ -10,8 +10,7 @@ The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title par ### POC #### Reference -- https://medium.com/%40Pablo0xSantiago/cve-2019-20181-awesome-support-wordpress-helpdesk-support-plugin-5-8-0-84a0c022cf53 -- https://medium.com/@Pablo0xSantiago/cve-2019-20181-awesome-support-wordpress-helpdesk-support-plugin-5-8-0-84a0c022cf53 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20182.md b/2019/CVE-2019-20182.md index 7bbc80512c6..235d17ad638 100644 --- a/2019/CVE-2019-20182.md +++ b/2019/CVE-2019-20182.md @@ -10,8 +10,7 @@ The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title paramete ### POC #### Reference -- https://medium.com/%40Pablo0xSantiago/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f -- https://medium.com/@Pablo0xSantiago/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20213.md b/2019/CVE-2019-20213.md index ea930ce4e8e..259dc01f4c6 100644 --- a/2019/CVE-2019-20213.md +++ b/2019/CVE-2019-20213.md @@ -11,9 +11,7 @@ D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Di #### Reference - https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f -- https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 - https://medium.com/@s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f -- https://medium.com/@s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20216.md b/2019/CVE-2019-20216.md index c477d9a0151..91ce4e279b4 100644 --- a/2019/CVE-2019-20216.md +++ b/2019/CVE-2019-20216.md @@ -11,9 +11,7 @@ D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute #### Reference - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae -- https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae -- https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20217.md b/2019/CVE-2019-20217.md index 6c7c929e7b3..3be6f7805de 100644 --- a/2019/CVE-2019-20217.md +++ b/2019/CVE-2019-20217.md @@ -11,9 +11,7 @@ D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute #### Reference - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae -- https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae -- https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35 #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20363.md b/2019/CVE-2019-20363.md index e8cd1da63c3..518b0a20bec 100644 --- a/2019/CVE-2019-20363.md +++ b/2019/CVE-2019-20363.md @@ -10,7 +10,6 @@ An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manag ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20363-openfire.html - https://issues.igniterealtime.org/browse/OF-1955 #### Github diff --git a/2019/CVE-2019-20364.md b/2019/CVE-2019-20364.md index 1051cf8f75e..bd0bdd83e84 100644 --- a/2019/CVE-2019-20364.md +++ b/2019/CVE-2019-20364.md @@ -10,7 +10,6 @@ An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to S ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20364-openfire.html - https://issues.igniterealtime.org/browse/OF-1955 #### Github diff --git a/2019/CVE-2019-20365.md b/2019/CVE-2019-20365.md index 1e9e5004d5c..06a835d55a1 100644 --- a/2019/CVE-2019-20365.md +++ b/2019/CVE-2019-20365.md @@ -10,7 +10,6 @@ An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20365-openfire.html - https://issues.igniterealtime.org/browse/OF-1955 #### Github diff --git a/2019/CVE-2019-20366.md b/2019/CVE-2019-20366.md index 70a609ab783..764151dfb29 100644 --- a/2019/CVE-2019-20366.md +++ b/2019/CVE-2019-20366.md @@ -10,7 +10,6 @@ An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore t ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20366-openfire.html - https://issues.igniterealtime.org/browse/OF-1955 #### Github diff --git a/2019/CVE-2019-20383.md b/2019/CVE-2019-20383.md index 2e8a18d402f..48b37753044 100644 --- a/2019/CVE-2019-20383.md +++ b/2019/CVE-2019-20383.md @@ -10,7 +10,7 @@ ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.1 ### POC #### Reference -- https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-20434.md b/2019/CVE-2019-20434.md index 436f80ca807..fe1339d7b97 100644 --- a/2019/CVE-2019-20434.md +++ b/2019/CVE-2019-20434.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-S ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20434-wso2.html - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0616 - https://github.com/cybersecurityworks/Disclosed/issues/17 diff --git a/2019/CVE-2019-20435.md b/2019/CVE-2019-20435.md index 4acdd0fa7c0..8e8cec24a30 100644 --- a/2019/CVE-2019-20435.md +++ b/2019/CVE-2019-20435.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20435-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/18 #### Github diff --git a/2019/CVE-2019-20436.md b/2019/CVE-2019-20436.md index 99d56bc57e2..4e8268e8df0 100644 --- a/2019/CVE-2019-20436.md +++ b/2019/CVE-2019-20436.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20436-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/19 #### Github diff --git a/2019/CVE-2019-20437.md b/2019/CVE-2019-20437.md index 5d44eb535ff..7966b657447 100644 --- a/2019/CVE-2019-20437.md +++ b/2019/CVE-2019-20437.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20437-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/20 #### Github diff --git a/2019/CVE-2019-20438.md b/2019/CVE-2019-20438.md index a4629010f68..57ed8bdf479 100644 --- a/2019/CVE-2019-20438.md +++ b/2019/CVE-2019-20438.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20438-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/22 #### Github diff --git a/2019/CVE-2019-20439.md b/2019/CVE-2019-20439.md index bfe22896322..f3ffd61cae8 100644 --- a/2019/CVE-2019-20439.md +++ b/2019/CVE-2019-20439.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-S ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20439-wso2.html - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0644 - https://github.com/cybersecurityworks/Disclosed/issues/21 diff --git a/2019/CVE-2019-20440.md b/2019/CVE-2019-20440.md index caed3d0f54b..ba3ab61d087 100644 --- a/2019/CVE-2019-20440.md +++ b/2019/CVE-2019-20440.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-S ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20440-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/24 #### Github diff --git a/2019/CVE-2019-20441.md b/2019/CVE-2019-20441.md index c33221c9b83..c6cbd558222 100644 --- a/2019/CVE-2019-20441.md +++ b/2019/CVE-2019-20441.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0. A potential Stored Cross-Site ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20441-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/23 #### Github diff --git a/2019/CVE-2019-20442.md b/2019/CVE-2019-20442.md index 1cc38c35bf7..4bb9202fc65 100644 --- a/2019/CVE-2019-20442.md +++ b/2019/CVE-2019-20442.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6. ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20442-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/25 #### Github diff --git a/2019/CVE-2019-20443.md b/2019/CVE-2019-20443.md index 394e69dc570..8c8b1f5372e 100644 --- a/2019/CVE-2019-20443.md +++ b/2019/CVE-2019-20443.md @@ -10,7 +10,6 @@ An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6. ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html - https://github.com/cybersecurityworks/Disclosed/issues/26 #### Github diff --git a/2019/CVE-2019-25065.md b/2019/CVE-2019-25065.md index fa56571b7fe..95ee9b32116 100644 --- a/2019/CVE-2019-25065.md +++ b/2019/CVE-2019-25065.md @@ -10,7 +10,6 @@ A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. ### POC #### Reference -- https://0day.today/exploit/33544 - https://vuldb.com/?id.146798 #### Github diff --git a/2019/CVE-2019-3648.md b/2019/CVE-2019-3648.md index 2b33a0603de..45e0b4cf7b9 100644 --- a/2019/CVE-2019-3648.md +++ b/2019/CVE-2019-3648.md @@ -10,7 +10,6 @@ A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee T ### POC #### Reference -- https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648 - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984 #### Github diff --git a/2019/CVE-2019-6265.md b/2019/CVE-2019-6265.md index a5fd46990f1..caac0dfae12 100644 --- a/2019/CVE-2019-6265.md +++ b/2019/CVE-2019-6265.md @@ -10,7 +10,7 @@ The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft W ### POC #### Reference -- https://www.detack.de/en/cve-2019-6265-6266 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6266.md b/2019/CVE-2019-6266.md index 2d65bdc0193..28125f683e6 100644 --- a/2019/CVE-2019-6266.md +++ b/2019/CVE-2019-6266.md @@ -10,7 +10,7 @@ Cordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by in ### POC #### Reference -- https://www.detack.de/en/cve-2019-6265-6266 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6333.md b/2019/CVE-2019-6333.md index 7745934320b..d253d178365 100644 --- a/2019/CVE-2019-6333.md +++ b/2019/CVE-2019-6333.md @@ -10,7 +10,7 @@ A potential security vulnerability has been identified with certain versions of ### POC #### Reference -- https://safebreach.com/Post/HP-Touchpoint-Analytics-DLL-Search-Order-Hijacking-Potential-Abuses-CVE-2019-6333 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6781.md b/2019/CVE-2019-6781.md index 332a00c5c33..83a7de040b2 100644 --- a/2019/CVE-2019-6781.md +++ b/2019/CVE-2019-6781.md @@ -10,7 +10,7 @@ An Improper Input Validation issue was discovered in GitLab Community and Enterp ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6782.md b/2019/CVE-2019-6782.md index 648006bb728..742bc22b335 100644 --- a/2019/CVE-2019-6782.md +++ b/2019/CVE-2019-6782.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6783.md b/2019/CVE-2019-6783.md index 080152ce6e8..6deaaf9b07e 100644 --- a/2019/CVE-2019-6783.md +++ b/2019/CVE-2019-6783.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6784.md b/2019/CVE-2019-6784.md index f87738c3e56..fa745ed34b1 100644 --- a/2019/CVE-2019-6784.md +++ b/2019/CVE-2019-6784.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6785.md b/2019/CVE-2019-6785.md index cb1af6bc7f7..19e795c1fbe 100644 --- a/2019/CVE-2019-6785.md +++ b/2019/CVE-2019-6785.md @@ -10,7 +10,6 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/52212 #### Github diff --git a/2019/CVE-2019-6786.md b/2019/CVE-2019-6786.md index 27ccdce1f2f..1d65bf68fa4 100644 --- a/2019/CVE-2019-6786.md +++ b/2019/CVE-2019-6786.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6787.md b/2019/CVE-2019-6787.md index 82c2025b4a4..a63e21d3d02 100644 --- a/2019/CVE-2019-6787.md +++ b/2019/CVE-2019-6787.md @@ -10,7 +10,7 @@ An Incorrect Access Control issue was discovered in GitLab Community and Enterpr ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6788.md b/2019/CVE-2019-6788.md index 8611df3f087..4da9834faf0 100644 --- a/2019/CVE-2019-6788.md +++ b/2019/CVE-2019-6788.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6789.md b/2019/CVE-2019-6789.md index 3b053eed748..469b6c1abd3 100644 --- a/2019/CVE-2019-6789.md +++ b/2019/CVE-2019-6789.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6790.md b/2019/CVE-2019-6790.md index 2e6eebd3f63..e60dd1e2350 100644 --- a/2019/CVE-2019-6790.md +++ b/2019/CVE-2019-6790.md @@ -10,7 +10,7 @@ An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Commun ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6791.md b/2019/CVE-2019-6791.md index 36d3141ed53..8652d204c60 100644 --- a/2019/CVE-2019-6791.md +++ b/2019/CVE-2019-6791.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6792.md b/2019/CVE-2019-6792.md index 4c51f308724..1943c81c2a4 100644 --- a/2019/CVE-2019-6792.md +++ b/2019/CVE-2019-6792.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6793.md b/2019/CVE-2019-6793.md index 13d9edf5589..86c3389e2cc 100644 --- a/2019/CVE-2019-6793.md +++ b/2019/CVE-2019-6793.md @@ -10,7 +10,6 @@ An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x befor ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/50748 #### Github diff --git a/2019/CVE-2019-6794.md b/2019/CVE-2019-6794.md index ea9b27ef219..515f8159b83 100644 --- a/2019/CVE-2019-6794.md +++ b/2019/CVE-2019-6794.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6795.md b/2019/CVE-2019-6795.md index 5135c6235a6..492d8c9f18d 100644 --- a/2019/CVE-2019-6795.md +++ b/2019/CVE-2019-6795.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6796.md b/2019/CVE-2019-6796.md index cda8134c43b..4bc57babcc2 100644 --- a/2019/CVE-2019-6796.md +++ b/2019/CVE-2019-6796.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8 ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6797.md b/2019/CVE-2019-6797.md index 63c9434dc65..8ed9ab93cbe 100644 --- a/2019/CVE-2019-6797.md +++ b/2019/CVE-2019-6797.md @@ -10,7 +10,7 @@ An information disclosure issue was discovered in GitLab Enterprise Edition befo ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6960.md b/2019/CVE-2019-6960.md index 8e2a9bc5537..7b40befd552 100644 --- a/2019/CVE-2019-6960.md +++ b/2019/CVE-2019-6960.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, an ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6995.md b/2019/CVE-2019-6995.md index 6b765261a9f..d6f042dc455 100644 --- a/2019/CVE-2019-6995.md +++ b/2019/CVE-2019-6995.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10. ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6996.md b/2019/CVE-2019-6996.md index c47c975b5f7..5aeeec61f33 100644 --- a/2019/CVE-2019-6996.md +++ b/2019/CVE-2019-6996.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-6997.md b/2019/CVE-2019-6997.md index 0f9de42c230..dd1912bd9f2 100644 --- a/2019/CVE-2019-6997.md +++ b/2019/CVE-2019-6997.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 10.x (startin ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7155.md b/2019/CVE-2019-7155.md index 92eae848f50..a0b949f94b3 100644 --- a/2019/CVE-2019-7155.md +++ b/2019/CVE-2019-7155.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, an ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7176.md b/2019/CVE-2019-7176.md index d43d387148e..815d00c9ac2 100644 --- a/2019/CVE-2019-7176.md +++ b/2019/CVE-2019-7176.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7238.md b/2019/CVE-2019-7238.md index 12a07b3994f..352722006b0 100644 --- a/2019/CVE-2019-7238.md +++ b/2019/CVE-2019-7238.md @@ -10,7 +10,7 @@ Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. ### POC #### Reference -- https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019 +No PoCs from references. #### Github - https://github.com/DannyRavi/nmap-scripts diff --git a/2019/CVE-2019-7400.md b/2019/CVE-2019-7400.md index 27b5e02aecd..11ceeb6dcde 100644 --- a/2019/CVE-2019-7400.md +++ b/2019/CVE-2019-7400.md @@ -11,7 +11,6 @@ Rukovoditel before 2.4.1 allows XSS. #### Reference - http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.html -- https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/ - https://www.exploit-db.com/exploits/46608/ #### Github diff --git a/2019/CVE-2019-7549.md b/2019/CVE-2019-7549.md index c4163e9408c..5a18b017eac 100644 --- a/2019/CVE-2019-7549.md +++ b/2019/CVE-2019-7549.md @@ -10,7 +10,7 @@ An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x ### POC #### Reference -- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7589.md b/2019/CVE-2019-7589.md index 8652c6984b2..16c3ad3c803 100644 --- a/2019/CVE-2019-7589.md +++ b/2019/CVE-2019-7589.md @@ -11,7 +11,7 @@ A vulnerability with the SmartService API Service option exists whereby an unaut ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7590.md b/2019/CVE-2019-7590.md index 6ddc30f8d7f..6e0c7c3dedf 100644 --- a/2019/CVE-2019-7590.md +++ b/2019/CVE-2019-7590.md @@ -14,7 +14,6 @@ ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsre #### Reference - https://packetstormsecurity.com/files/152128/exacqVision-9.8-Unquoted-Service-Path-Privilege-Escalation.html -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5515.php #### Github diff --git a/2019/CVE-2019-7651.md b/2019/CVE-2019-7651.md index b74d70007b5..076a0f37738 100644 --- a/2019/CVE-2019-7651.md +++ b/2019/CVE-2019-7651.md @@ -11,7 +11,6 @@ EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to #### Reference - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-01-09-emsisoft-Anti-Malware-bypass.md -- https://nafiez.github.io/security/bypass/2019/01/08/emsisoft-Anti-Malware-bypass.html #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7687.md b/2019/CVE-2019-7687.md index 12ce06b5b64..e353541e48f 100644 --- a/2019/CVE-2019-7687.md +++ b/2019/CVE-2019-7687.md @@ -11,7 +11,6 @@ cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST b #### Reference - http://packetstormsecurity.com/files/151654/Jiofi-4-JMR-1140-Cross-Site-Scripting.html -- https://www.exploit-db.com/exploits/46363/ #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7745.md b/2019/CVE-2019-7745.md index ff214f4bfc3..88007561333 100644 --- a/2019/CVE-2019-7745.md +++ b/2019/CVE-2019-7745.md @@ -11,7 +11,6 @@ JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain th #### Reference - http://packetstormsecurity.com/files/151655/Jiofi-4-JMR-1140-WiFi-Password-Cross-Site-Request-Forgery.html -- https://www.exploit-db.com/exploits/46364/ #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7746.md b/2019/CVE-2019-7746.md index 7f66e68ba1b..ca303af2370 100644 --- a/2019/CVE-2019-7746.md +++ b/2019/CVE-2019-7746.md @@ -11,7 +11,6 @@ JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an #### Reference - http://packetstormsecurity.com/files/151656/Jiofi-4-JMR-1140-Admin-Token-Disclosure-Cross-Site-Request-Forgery.html -- https://www.exploit-db.com/exploits/46365/ #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-7755.md b/2019/CVE-2019-7755.md index 0b8a91f1b46..13084c2dc35 100644 --- a/2019/CVE-2019-7755.md +++ b/2019/CVE-2019-7755.md @@ -11,7 +11,6 @@ In webERP 4.15, the Import Bank Transactions function fails to sanitize the cont #### Reference - https://www.exploit-database.net/?id=101060 -- https://www.exploit-db.com/exploits/46431/ #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-8931.md b/2019/CVE-2019-8931.md index d0e8355c07f..da2b975a42e 100644 --- a/2019/CVE-2019-8931.md +++ b/2019/CVE-2019-8931.md @@ -10,7 +10,7 @@ Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (s ### POC #### Reference -- https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-8932.md b/2019/CVE-2019-8932.md index 1e7790592bb..4369961f9c3 100644 --- a/2019/CVE-2019-8932.md +++ b/2019/CVE-2019-8932.md @@ -10,7 +10,7 @@ Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens ### POC #### Reference -- https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-9005.md b/2019/CVE-2019-9005.md index 71930debd1b..ae9bd1ca5aa 100644 --- a/2019/CVE-2019-9005.md +++ b/2019/CVE-2019-9005.md @@ -10,7 +10,7 @@ The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory T ### POC #### Reference -- https://www.detack.de/en/cve-2019-9005 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2019/CVE-2019-9081.md b/2019/CVE-2019-9081.md index 3a28510f5ec..7d0e8b3a6b4 100644 --- a/2019/CVE-2019-9081.md +++ b/2019/CVE-2019-9081.md @@ -11,7 +11,6 @@ #### Reference - https://github.com/Laworigin/Laworigin.github.io/blob/master/2019/02/21/laravelv5-7%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96rce/index.html -- https://laworigin.github.io/2019/02/21/laravelv5-7%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96rce/ #### Github - https://github.com/nth347/CVE-2019-9081_PoC diff --git a/2019/CVE-2019-9742.md b/2019/CVE-2019-9742.md index 877641c5481..0dde164ed7b 100644 --- a/2019/CVE-2019-9742.md +++ b/2019/CVE-2019-9742.md @@ -11,7 +11,6 @@ gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to byp #### Reference - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-03-13-gdata-total-security-acl-bypass.md -- https://nafiez.github.io/security/bypass/2019/03/12/gdata-total-security-acl-bypass.html #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10203.md b/2020/CVE-2020-10203.md index 25a792830fb..eec04d729ff 100644 --- a/2020/CVE-2020-10203.md +++ b/2020/CVE-2020-10203.md @@ -10,7 +10,7 @@ Sonatype Nexus Repository before 3.21.2 allows XSS. ### POC #### Reference -- https://support.sonatype.com/hc/en-us/articles/360044361594 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10204.md b/2020/CVE-2020-10204.md index 42cba0bf9f8..d03ad96cf6a 100644 --- a/2020/CVE-2020-10204.md +++ b/2020/CVE-2020-10204.md @@ -10,7 +10,7 @@ Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. ### POC #### Reference -- https://support.sonatype.com/hc/en-us/articles/360044356194 +No PoCs from references. #### Github - https://github.com/magicming200/CVE-2020-10199_CVE-2020-10204 diff --git a/2020/CVE-2020-10222.md b/2020/CVE-2020-10222.md index 383df97369f..3ce852aff85 100644 --- a/2020/CVE-2020-10222.md +++ b/2020/CVE-2020-10222.md @@ -11,7 +11,6 @@ npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npd #### Reference - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability.md -- https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerability.html #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10223.md b/2020/CVE-2020-10223.md index cb3dffa8f93..53632a7b94c 100644 --- a/2020/CVE-2020-10223.md +++ b/2020/CVE-2020-10223.md @@ -11,7 +11,6 @@ npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2De #### Reference - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability.md -- https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerability.html #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10386.md b/2020/CVE-2020-10386.md index ad70674fc85..5ff1d0488a0 100644 --- a/2020/CVE-2020-10386.md +++ b/2020/CVE-2020-10386.md @@ -11,7 +11,6 @@ admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 all #### Reference - http://packetstormsecurity.com/files/156757/PHPKB-Multi-Language-9-image-upload.php-Code-Execution.html -- https://antoniocannito.it/phpkb1#remote-code-execution-cve-2020-10386 - https://www.exploit-db.com/exploits/48221 #### Github diff --git a/2020/CVE-2020-10387.md b/2020/CVE-2020-10387.md index 42a9da3885a..ecf1d4f5acd 100644 --- a/2020/CVE-2020-10387.md +++ b/2020/CVE-2020-10387.md @@ -11,7 +11,6 @@ Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 a #### Reference - http://packetstormsecurity.com/files/156754/PHPKB-Multi-Language-9-Authenticated-Directory-Traversal.html -- https://antoniocannito.it/phpkb1#authenticated-arbitrary-file-download-cve-2020-10387 - https://www.exploit-db.com/exploits/48220 #### Github diff --git a/2020/CVE-2020-10388.md b/2020/CVE-2020-10388.md index f968ec2fa84..184362449ce 100644 --- a/2020/CVE-2020-10388.md +++ b/2020/CVE-2020-10388.md @@ -10,7 +10,7 @@ The way the Referer header in article.php is handled in Chadha PHPKB Standard Mu ### POC #### Reference -- https://antoniocannito.it/phpkb1#blind-cross-site-scripting-cve-2020-10388 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10389.md b/2020/CVE-2020-10389.md index 81273a57514..05cd52dd65f 100644 --- a/2020/CVE-2020-10389.md +++ b/2020/CVE-2020-10389.md @@ -11,7 +11,6 @@ admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote #### Reference - http://packetstormsecurity.com/files/156751/PHPKB-Multi-Language-9-Authenticated-Remote-Code-Execution.html -- https://antoniocannito.it/phpkb1#authenticated-remote-code-execution-cve-2020-10389 - https://www.exploit-db.com/exploits/48219 #### Github diff --git a/2020/CVE-2020-10390.md b/2020/CVE-2020-10390.md index ce788d5d789..a7a19dddd4a 100644 --- a/2020/CVE-2020-10390.md +++ b/2020/CVE-2020-10390.md @@ -10,7 +10,7 @@ OS Command Injection in export.php (vulnerable function called from include/func ### POC #### Reference -- https://antoniocannito.it/phpkb1#out-of-band-blind-authenticated-remote-code-execution-cve-2020-10390 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10391.md b/2020/CVE-2020-10391.md index fe2f22e2922..8c7c218f423 100644 --- a/2020/CVE-2020-10391.md +++ b/2020/CVE-2020-10391.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10392.md b/2020/CVE-2020-10392.md index 827b5e67ad4..c02bd3e0fdb 100644 --- a/2020/CVE-2020-10392.md +++ b/2020/CVE-2020-10392.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10393.md b/2020/CVE-2020-10393.md index 6766f833975..ea0dc88548b 100644 --- a/2020/CVE-2020-10393.md +++ b/2020/CVE-2020-10393.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10394.md b/2020/CVE-2020-10394.md index 0dc0bb2a9b5..691b19c9233 100644 --- a/2020/CVE-2020-10394.md +++ b/2020/CVE-2020-10394.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10395.md b/2020/CVE-2020-10395.md index 4cebfd572d3..8f62ee5569c 100644 --- a/2020/CVE-2020-10395.md +++ b/2020/CVE-2020-10395.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10396.md b/2020/CVE-2020-10396.md index dfcd0376465..0fee095cce4 100644 --- a/2020/CVE-2020-10396.md +++ b/2020/CVE-2020-10396.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10397.md b/2020/CVE-2020-10397.md index 0f7857b2ebe..3a5a0f6d2ee 100644 --- a/2020/CVE-2020-10397.md +++ b/2020/CVE-2020-10397.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10398.md b/2020/CVE-2020-10398.md index 97745baaeeb..b16902a3855 100644 --- a/2020/CVE-2020-10398.md +++ b/2020/CVE-2020-10398.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10399.md b/2020/CVE-2020-10399.md index cdfcf025cc3..2691035a2d7 100644 --- a/2020/CVE-2020-10399.md +++ b/2020/CVE-2020-10399.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10400.md b/2020/CVE-2020-10400.md index 97416f7a0ab..2ac3de17f79 100644 --- a/2020/CVE-2020-10400.md +++ b/2020/CVE-2020-10400.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10401.md b/2020/CVE-2020-10401.md index dcf32ade009..4904537f621 100644 --- a/2020/CVE-2020-10401.md +++ b/2020/CVE-2020-10401.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10402.md b/2020/CVE-2020-10402.md index bbfa9117e11..8784446999b 100644 --- a/2020/CVE-2020-10402.md +++ b/2020/CVE-2020-10402.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10403.md b/2020/CVE-2020-10403.md index 803ff62fd17..b82c1e9e4d8 100644 --- a/2020/CVE-2020-10403.md +++ b/2020/CVE-2020-10403.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10404.md b/2020/CVE-2020-10404.md index f3c73b66d26..cef9e013d9a 100644 --- a/2020/CVE-2020-10404.md +++ b/2020/CVE-2020-10404.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10405.md b/2020/CVE-2020-10405.md index 88e1ce76151..4506fd88252 100644 --- a/2020/CVE-2020-10405.md +++ b/2020/CVE-2020-10405.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10406.md b/2020/CVE-2020-10406.md index 8e9ae8cec1f..e5c953c2c07 100644 --- a/2020/CVE-2020-10406.md +++ b/2020/CVE-2020-10406.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10407.md b/2020/CVE-2020-10407.md index 59527dc2c3e..afc17cdd2f2 100644 --- a/2020/CVE-2020-10407.md +++ b/2020/CVE-2020-10407.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10408.md b/2020/CVE-2020-10408.md index 26ce77261a3..ba26f40a286 100644 --- a/2020/CVE-2020-10408.md +++ b/2020/CVE-2020-10408.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10409.md b/2020/CVE-2020-10409.md index f36cda02dcf..7f19b628cc6 100644 --- a/2020/CVE-2020-10409.md +++ b/2020/CVE-2020-10409.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10410.md b/2020/CVE-2020-10410.md index 76d3f2a3267..4f837e8ce5f 100644 --- a/2020/CVE-2020-10410.md +++ b/2020/CVE-2020-10410.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10411.md b/2020/CVE-2020-10411.md index e8eabff944b..09b45ba75b2 100644 --- a/2020/CVE-2020-10411.md +++ b/2020/CVE-2020-10411.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10412.md b/2020/CVE-2020-10412.md index 5ee2d832532..6148790decd 100644 --- a/2020/CVE-2020-10412.md +++ b/2020/CVE-2020-10412.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10413.md b/2020/CVE-2020-10413.md index 6c354df5f8c..f7cb9f171e9 100644 --- a/2020/CVE-2020-10413.md +++ b/2020/CVE-2020-10413.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10414.md b/2020/CVE-2020-10414.md index 776ad3ec667..fffa82a8efe 100644 --- a/2020/CVE-2020-10414.md +++ b/2020/CVE-2020-10414.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10415.md b/2020/CVE-2020-10415.md index 48b8a121406..2e7bf607ff6 100644 --- a/2020/CVE-2020-10415.md +++ b/2020/CVE-2020-10415.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10416.md b/2020/CVE-2020-10416.md index b5ba6f9998a..dd01150659c 100644 --- a/2020/CVE-2020-10416.md +++ b/2020/CVE-2020-10416.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10417.md b/2020/CVE-2020-10417.md index dc0f2a389db..394e22d86de 100644 --- a/2020/CVE-2020-10417.md +++ b/2020/CVE-2020-10417.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10418.md b/2020/CVE-2020-10418.md index ec43a2b9f14..0697549924e 100644 --- a/2020/CVE-2020-10418.md +++ b/2020/CVE-2020-10418.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10419.md b/2020/CVE-2020-10419.md index 635894d0895..d3189e4fd59 100644 --- a/2020/CVE-2020-10419.md +++ b/2020/CVE-2020-10419.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10420.md b/2020/CVE-2020-10420.md index 6dc94af0b39..043ab1eb897 100644 --- a/2020/CVE-2020-10420.md +++ b/2020/CVE-2020-10420.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10421.md b/2020/CVE-2020-10421.md index befb6ba9380..6b0fd9f89fe 100644 --- a/2020/CVE-2020-10421.md +++ b/2020/CVE-2020-10421.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10422.md b/2020/CVE-2020-10422.md index 5402762f081..9e4458ec1dc 100644 --- a/2020/CVE-2020-10422.md +++ b/2020/CVE-2020-10422.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10423.md b/2020/CVE-2020-10423.md index 770e9111e6c..8029edacb93 100644 --- a/2020/CVE-2020-10423.md +++ b/2020/CVE-2020-10423.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10424.md b/2020/CVE-2020-10424.md index 6788eb4b58e..f4cc7e3e5c3 100644 --- a/2020/CVE-2020-10424.md +++ b/2020/CVE-2020-10424.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10425.md b/2020/CVE-2020-10425.md index 8a2091c9454..0326cbf7799 100644 --- a/2020/CVE-2020-10425.md +++ b/2020/CVE-2020-10425.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10426.md b/2020/CVE-2020-10426.md index 647aa25c02c..440062e11b9 100644 --- a/2020/CVE-2020-10426.md +++ b/2020/CVE-2020-10426.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10427.md b/2020/CVE-2020-10427.md index 313f0b0e44e..0a80d7130e6 100644 --- a/2020/CVE-2020-10427.md +++ b/2020/CVE-2020-10427.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10428.md b/2020/CVE-2020-10428.md index 5ceabbd0e2f..fcfda530020 100644 --- a/2020/CVE-2020-10428.md +++ b/2020/CVE-2020-10428.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10429.md b/2020/CVE-2020-10429.md index 381e1da85ff..d414578b923 100644 --- a/2020/CVE-2020-10429.md +++ b/2020/CVE-2020-10429.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10430.md b/2020/CVE-2020-10430.md index 975680efd6f..c6af96123c0 100644 --- a/2020/CVE-2020-10430.md +++ b/2020/CVE-2020-10430.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10431.md b/2020/CVE-2020-10431.md index 59b4d9f7a2b..1065624fd30 100644 --- a/2020/CVE-2020-10431.md +++ b/2020/CVE-2020-10431.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10432.md b/2020/CVE-2020-10432.md index e2a61a7d041..c53d81ab9d4 100644 --- a/2020/CVE-2020-10432.md +++ b/2020/CVE-2020-10432.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10433.md b/2020/CVE-2020-10433.md index c873eab080e..0eaadf305a9 100644 --- a/2020/CVE-2020-10433.md +++ b/2020/CVE-2020-10433.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10434.md b/2020/CVE-2020-10434.md index 059746ddbff..2bc6ce114a9 100644 --- a/2020/CVE-2020-10434.md +++ b/2020/CVE-2020-10434.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10435.md b/2020/CVE-2020-10435.md index d61e4ea0cb5..c3fe71e8408 100644 --- a/2020/CVE-2020-10435.md +++ b/2020/CVE-2020-10435.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10436.md b/2020/CVE-2020-10436.md index 0fa8d630d86..d41eddd971f 100644 --- a/2020/CVE-2020-10436.md +++ b/2020/CVE-2020-10436.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10437.md b/2020/CVE-2020-10437.md index 1c2d48a4d1e..1e03f89a4b3 100644 --- a/2020/CVE-2020-10437.md +++ b/2020/CVE-2020-10437.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10438.md b/2020/CVE-2020-10438.md index 1a503d3a67b..144fadd275a 100644 --- a/2020/CVE-2020-10438.md +++ b/2020/CVE-2020-10438.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10439.md b/2020/CVE-2020-10439.md index 70d9663b1f6..4c1927a007d 100644 --- a/2020/CVE-2020-10439.md +++ b/2020/CVE-2020-10439.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10440.md b/2020/CVE-2020-10440.md index 05da801981c..7d023277793 100644 --- a/2020/CVE-2020-10440.md +++ b/2020/CVE-2020-10440.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10441.md b/2020/CVE-2020-10441.md index 4ca7321dfd5..0ed19ce2c34 100644 --- a/2020/CVE-2020-10441.md +++ b/2020/CVE-2020-10441.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10442.md b/2020/CVE-2020-10442.md index ec90e3ff226..9433f9b0fd3 100644 --- a/2020/CVE-2020-10442.md +++ b/2020/CVE-2020-10442.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10443.md b/2020/CVE-2020-10443.md index 4ab66172a30..ec1b1b79cbc 100644 --- a/2020/CVE-2020-10443.md +++ b/2020/CVE-2020-10443.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10444.md b/2020/CVE-2020-10444.md index 82ad7af2c2c..959890810b8 100644 --- a/2020/CVE-2020-10444.md +++ b/2020/CVE-2020-10444.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10445.md b/2020/CVE-2020-10445.md index 6f6e627544c..ff330310dcd 100644 --- a/2020/CVE-2020-10445.md +++ b/2020/CVE-2020-10445.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10446.md b/2020/CVE-2020-10446.md index 4b83e725451..f4aca39e144 100644 --- a/2020/CVE-2020-10446.md +++ b/2020/CVE-2020-10446.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10447.md b/2020/CVE-2020-10447.md index 4b420faf039..26453215ed2 100644 --- a/2020/CVE-2020-10447.md +++ b/2020/CVE-2020-10447.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10448.md b/2020/CVE-2020-10448.md index 5d7b3245dd0..6e38f5e8841 100644 --- a/2020/CVE-2020-10448.md +++ b/2020/CVE-2020-10448.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10449.md b/2020/CVE-2020-10449.md index 74d4e16f249..c3ca401e1f3 100644 --- a/2020/CVE-2020-10449.md +++ b/2020/CVE-2020-10449.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10450.md b/2020/CVE-2020-10450.md index e478f7cd3ce..e17791aa438 100644 --- a/2020/CVE-2020-10450.md +++ b/2020/CVE-2020-10450.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10451.md b/2020/CVE-2020-10451.md index f7c282a1588..6aa1864e783 100644 --- a/2020/CVE-2020-10451.md +++ b/2020/CVE-2020-10451.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10452.md b/2020/CVE-2020-10452.md index f66d43b6c00..f8a052fe969 100644 --- a/2020/CVE-2020-10452.md +++ b/2020/CVE-2020-10452.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10453.md b/2020/CVE-2020-10453.md index 4278e2e5dc7..4a9193bfc11 100644 --- a/2020/CVE-2020-10453.md +++ b/2020/CVE-2020-10453.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10454.md b/2020/CVE-2020-10454.md index bb7f6b499a8..540f957860e 100644 --- a/2020/CVE-2020-10454.md +++ b/2020/CVE-2020-10454.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10455.md b/2020/CVE-2020-10455.md index a0ddf23d414..3bf3e018d47 100644 --- a/2020/CVE-2020-10455.md +++ b/2020/CVE-2020-10455.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10456.md b/2020/CVE-2020-10456.md index f9df5ba86ce..be0b273467d 100644 --- a/2020/CVE-2020-10456.md +++ b/2020/CVE-2020-10456.md @@ -10,7 +10,7 @@ The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10457.md b/2020/CVE-2020-10457.md index 2565913ffba..0439a0f3445 100644 --- a/2020/CVE-2020-10457.md +++ b/2020/CVE-2020-10457.md @@ -10,7 +10,7 @@ Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard ### POC #### Reference -- https://antoniocannito.it/phpkb1#arbitrary-file-renaming-cve-2020-10457 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10458.md b/2020/CVE-2020-10458.md index 83b7f75afac..f9b30cf4539 100644 --- a/2020/CVE-2020-10458.md +++ b/2020/CVE-2020-10458.md @@ -10,7 +10,7 @@ Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Mult ### POC #### Reference -- https://antoniocannito.it/phpkb1#arbitrary-folder-deletion-cve-2020-10458 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10459.md b/2020/CVE-2020-10459.md index 9af456a2e17..7dbd6cab660 100644 --- a/2020/CVE-2020-10459.md +++ b/2020/CVE-2020-10459.md @@ -10,7 +10,7 @@ Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved ### POC #### Reference -- https://antoniocannito.it/phpkb1#arbitrary-file-listing-cve-2020-10459 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10460.md b/2020/CVE-2020-10460.md index 5d0bb07bd1d..89d692c33bf 100644 --- a/2020/CVE-2020-10460.md +++ b/2020/CVE-2020-10460.md @@ -10,7 +10,7 @@ admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Sta ### POC #### Reference -- https://antoniocannito.it/phpkb1#csv-injection-cve-2020-10460 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10461.md b/2020/CVE-2020-10461.md index 98743de6573..2454828b0fd 100644 --- a/2020/CVE-2020-10461.md +++ b/2020/CVE-2020-10461.md @@ -10,7 +10,7 @@ The way comments in article.php (vulnerable function in include/functions-articl ### POC #### Reference -- https://antoniocannito.it/phpkb1#blind-cross-site-scripting-2-cve-2020-10461 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10462.md b/2020/CVE-2020-10462.md index 63ddf672895..be603b4ae22 100644 --- a/2020/CVE-2020-10462.md +++ b/2020/CVE-2020-10462.md @@ -10,7 +10,7 @@ Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-custom-field-cve-2020-10462 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10463.md b/2020/CVE-2020-10463.md index f80386e14a3..de29522e43c 100644 --- a/2020/CVE-2020-10463.md +++ b/2020/CVE-2020-10463.md @@ -10,7 +10,7 @@ Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-template-cve-2020-10463 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10464.md b/2020/CVE-2020-10464.md index 2baea70c88e..426c0bbe952 100644 --- a/2020/CVE-2020-10464.md +++ b/2020/CVE-2020-10464.md @@ -10,7 +10,7 @@ Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-an-article-cve-2020-10464 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10465.md b/2020/CVE-2020-10465.md index 9c45ba24918..fe827fed200 100644 --- a/2020/CVE-2020-10465.md +++ b/2020/CVE-2020-10465.md @@ -10,7 +10,7 @@ Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-category-cve-2020-10465 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10466.md b/2020/CVE-2020-10466.md index 7b73566c1b5..1b46eb9aa56 100644 --- a/2020/CVE-2020-10466.md +++ b/2020/CVE-2020-10466.md @@ -10,7 +10,7 @@ Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-glossary-term-cve-2020-10466 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10467.md b/2020/CVE-2020-10467.md index d0e1f815ff3..b5f5f1742ac 100644 --- a/2020/CVE-2020-10467.md +++ b/2020/CVE-2020-10467.md @@ -10,7 +10,7 @@ Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-comment-cve-2020-10467 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10468.md b/2020/CVE-2020-10468.md index 200f8fd4b03..533974423a5 100644 --- a/2020/CVE-2020-10468.md +++ b/2020/CVE-2020-10468.md @@ -10,7 +10,7 @@ Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 a ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-news-article-cve-2020-10468 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10469.md b/2020/CVE-2020-10469.md index b9264b31568..6325788712a 100644 --- a/2020/CVE-2020-10469.md +++ b/2020/CVE-2020-10469.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Lan ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-department-cve-2020-10469 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10470.md b/2020/CVE-2020-10470.md index 1eb12d2503e..94cb261978a 100644 --- a/2020/CVE-2020-10470.md +++ b/2020/CVE-2020-10470.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-custom-fields-cve-2020-10470 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10471.md b/2020/CVE-2020-10471.md index bc10bd41d27..37a582b4260 100644 --- a/2020/CVE-2020-10471.md +++ b/2020/CVE-2020-10471.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Langua ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-articles-cve-2020-10471 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10472.md b/2020/CVE-2020-10472.md index 2930caa8523..7e9d6fd9de7 100644 --- a/2020/CVE-2020-10472.md +++ b/2020/CVE-2020-10472.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Langu ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-templates-cve-2020-10472 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10473.md b/2020/CVE-2020-10473.md index 8a604815c39..61545ff04c3 100644 --- a/2020/CVE-2020-10473.md +++ b/2020/CVE-2020-10473.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Lang ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-category-cve-2020-10473 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10474.md b/2020/CVE-2020-10474.md index 67ce305fba4..39f1246937b 100644 --- a/2020/CVE-2020-10474.md +++ b/2020/CVE-2020-10474.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Langua ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-comment-cve-2020-10474 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10475.md b/2020/CVE-2020-10475.md index d5bc8f9789c..761402f6f81 100644 --- a/2020/CVE-2020-10475.md +++ b/2020/CVE-2020-10475.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Languag ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-ticket-cve-2020-10475 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10476.md b/2020/CVE-2020-10476.md index ab5dd6e8a9e..a201603692c 100644 --- a/2020/CVE-2020-10476.md +++ b/2020/CVE-2020-10476.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Langua ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-glossary-term-2-cve-2020-10476 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10477.md b/2020/CVE-2020-10477.md index c8900c7c6eb..a1d14db4384 100644 --- a/2020/CVE-2020-10477.md +++ b/2020/CVE-2020-10477.md @@ -10,7 +10,7 @@ Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 ### POC #### Reference -- https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-news-article-cve-2020-10477 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10478.md b/2020/CVE-2020-10478.md index 0108a24675d..7cb3ca9010e 100644 --- a/2020/CVE-2020-10478.md +++ b/2020/CVE-2020-10478.md @@ -10,7 +10,7 @@ CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allo ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-changing-settings-cve-2020-10478 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10479.md b/2020/CVE-2020-10479.md index 0f81fbfc10c..f0316447a66 100644 --- a/2020/CVE-2020-10479.md +++ b/2020/CVE-2020-10479.md @@ -10,7 +10,7 @@ CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows atta ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-news-article-cve-2020-10479 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10480.md b/2020/CVE-2020-10480.md index d1e326b54b6..ba3c62012dd 100644 --- a/2020/CVE-2020-10480.md +++ b/2020/CVE-2020-10480.md @@ -10,7 +10,7 @@ CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-category-cve-2020-10480 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10481.md b/2020/CVE-2020-10481.md index 0c12c1a70b8..582fde7b86c 100644 --- a/2020/CVE-2020-10481.md +++ b/2020/CVE-2020-10481.md @@ -10,7 +10,7 @@ CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-new-glossary-term-cve-2020-10481 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10482.md b/2020/CVE-2020-10482.md index 91ae2696b09..54e8e0604c1 100644 --- a/2020/CVE-2020-10482.md +++ b/2020/CVE-2020-10482.md @@ -10,7 +10,7 @@ CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-new-article-template-cve-2020-10482 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10483.md b/2020/CVE-2020-10483.md index 64fefde7809..5e2fe843448 100644 --- a/2020/CVE-2020-10483.md +++ b/2020/CVE-2020-10483.md @@ -10,7 +10,7 @@ CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows atta ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-posting-a-comment-cve-2020-10483 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10484.md b/2020/CVE-2020-10484.md index e0d963e0b1f..f4293d890ee 100644 --- a/2020/CVE-2020-10484.md +++ b/2020/CVE-2020-10484.md @@ -10,7 +10,7 @@ CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows att ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-new-custom-field-cve-2020-10484 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10485.md b/2020/CVE-2020-10485.md index 6e4f0e9d7a0..da420bbc524 100644 --- a/2020/CVE-2020-10485.md +++ b/2020/CVE-2020-10485.md @@ -10,7 +10,7 @@ CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allo ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-an-article-cve-2020-10485 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10486.md b/2020/CVE-2020-10486.md index c2f526160ff..d9132a4d613 100644 --- a/2020/CVE-2020-10486.md +++ b/2020/CVE-2020-10486.md @@ -10,7 +10,7 @@ CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allo ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-comment-cve-2020-10486 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10487.md b/2020/CVE-2020-10487.md index 8f82820df9f..66e19b67378 100644 --- a/2020/CVE-2020-10487.md +++ b/2020/CVE-2020-10487.md @@ -10,7 +10,7 @@ CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allo ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-glossary-term-cve-2020-10487 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10488.md b/2020/CVE-2020-10488.md index 1a627fc15f9..c59d857a1de 100644 --- a/2020/CVE-2020-10488.md +++ b/2020/CVE-2020-10488.md @@ -10,7 +10,7 @@ CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows a ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-news-article-cve-2020-10488 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10489.md b/2020/CVE-2020-10489.md index 0067e4e93f8..fee5bd9f1ca 100644 --- a/2020/CVE-2020-10489.md +++ b/2020/CVE-2020-10489.md @@ -10,7 +10,7 @@ CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allow ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-ticket-cve-2020-10489 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10490.md b/2020/CVE-2020-10490.md index c2f7c8e1241..523aa4a506f 100644 --- a/2020/CVE-2020-10490.md +++ b/2020/CVE-2020-10490.md @@ -10,7 +10,7 @@ CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 a ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-department-cve-2020-10490 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10491.md b/2020/CVE-2020-10491.md index a45bbbb558b..a1db63a43f8 100644 --- a/2020/CVE-2020-10491.md +++ b/2020/CVE-2020-10491.md @@ -10,7 +10,7 @@ CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 a ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-department-cve-2020-10491 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10492.md b/2020/CVE-2020-10492.md index 00c6c4c901d..5a52873ddc9 100644 --- a/2020/CVE-2020-10492.md +++ b/2020/CVE-2020-10492.md @@ -10,7 +10,7 @@ CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 all ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-an-article-template-cve-2020-10492 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10493.md b/2020/CVE-2020-10493.md index 03385974ba4..3bc5b75fd0c 100644 --- a/2020/CVE-2020-10493.md +++ b/2020/CVE-2020-10493.md @@ -10,7 +10,7 @@ CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-glossary-term-cve-2020-10493 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10494.md b/2020/CVE-2020-10494.md index 6b177ac009d..d2612d1c9df 100644 --- a/2020/CVE-2020-10494.md +++ b/2020/CVE-2020-10494.md @@ -10,7 +10,7 @@ CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows att ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-news-article-cve-2020-10494 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10495.md b/2020/CVE-2020-10495.md index 4892a17d75f..ecbc5876c95 100644 --- a/2020/CVE-2020-10495.md +++ b/2020/CVE-2020-10495.md @@ -10,7 +10,7 @@ CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-an-article-template-cve-2020-10495 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10496.md b/2020/CVE-2020-10496.md index 2507ab176e6..8ef686f36dd 100644 --- a/2020/CVE-2020-10496.md +++ b/2020/CVE-2020-10496.md @@ -10,7 +10,7 @@ CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-an-article-cve-2020-10496 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10497.md b/2020/CVE-2020-10497.md index 33196a29f04..13c1ac9eb51 100644 --- a/2020/CVE-2020-10497.md +++ b/2020/CVE-2020-10497.md @@ -10,7 +10,7 @@ CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 al ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-category-cve-2020-10497 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10498.md b/2020/CVE-2020-10498.md index f7f6ffec159..46f9a17e78f 100644 --- a/2020/CVE-2020-10498.md +++ b/2020/CVE-2020-10498.md @@ -10,7 +10,7 @@ CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-category-cve-2020-10498 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10499.md b/2020/CVE-2020-10499.md index ce1f05ae9b3..004284a0019 100644 --- a/2020/CVE-2020-10499.md +++ b/2020/CVE-2020-10499.md @@ -10,7 +10,7 @@ CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allow ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-closing-a-ticket-cve-2020-10499 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10500.md b/2020/CVE-2020-10500.md index 93fc4aa7b8c..0a4711a1718 100644 --- a/2020/CVE-2020-10500.md +++ b/2020/CVE-2020-10500.md @@ -10,7 +10,7 @@ CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-replying-to-a-ticket-cve-2020-10500 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10501.md b/2020/CVE-2020-10501.md index 2156f85f48d..5c7edae423b 100644 --- a/2020/CVE-2020-10501.md +++ b/2020/CVE-2020-10501.md @@ -10,7 +10,7 @@ CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 a ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-department-cve-2020-10501 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10502.md b/2020/CVE-2020-10502.md index 6b58ef46207..973cce9428f 100644 --- a/2020/CVE-2020-10502.md +++ b/2020/CVE-2020-10502.md @@ -10,7 +10,7 @@ CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allo ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-approving-a-new-comment-cve-2020-10502 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10503.md b/2020/CVE-2020-10503.md index bdf47227126..108b8ae78c3 100644 --- a/2020/CVE-2020-10503.md +++ b/2020/CVE-2020-10503.md @@ -10,7 +10,7 @@ CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allo ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-disapproving-a-new-comment-cve-2020-10503 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10504.md b/2020/CVE-2020-10504.md index ccddaa0757d..31b817daa6c 100644 --- a/2020/CVE-2020-10504.md +++ b/2020/CVE-2020-10504.md @@ -10,7 +10,7 @@ CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows ### POC #### Reference -- https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-comment-cve-2020-10504 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10823.md b/2020/CVE-2020-10823.md index 85581085c06..c7bc33fb998 100644 --- a/2020/CVE-2020-10823.md +++ b/2020/CVE-2020-10823.md @@ -11,7 +11,6 @@ A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on #### Reference - https://slashd.ga/2020/03/draytek-vulnerabilities/ -- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10824.md b/2020/CVE-2020-10824.md index b26ba67ab8e..27f627be88d 100644 --- a/2020/CVE-2020-10824.md +++ b/2020/CVE-2020-10824.md @@ -11,7 +11,6 @@ A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter #### Reference - https://slashd.ga/2020/03/draytek-vulnerabilities/ -- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10825.md b/2020/CVE-2020-10825.md index 4a27f49f72a..962925c7531 100644 --- a/2020/CVE-2020-10825.md +++ b/2020/CVE-2020-10825.md @@ -11,7 +11,6 @@ A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding tic #### Reference - https://slashd.ga/2020/03/draytek-vulnerabilities/ -- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10826.md b/2020/CVE-2020-10826.md index 7a4f5d476ba..3a7964ab6dc 100644 --- a/2020/CVE-2020-10826.md +++ b/2020/CVE-2020-10826.md @@ -11,7 +11,6 @@ #### Reference - https://slashd.ga/2020/03/draytek-vulnerabilities/ -- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10827.md b/2020/CVE-2020-10827.md index c4bbcd0da43..31a2ee14f5a 100644 --- a/2020/CVE-2020-10827.md +++ b/2020/CVE-2020-10827.md @@ -11,7 +11,6 @@ A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor #### Reference - https://slashd.ga/2020/03/draytek-vulnerabilities/ -- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10828.md b/2020/CVE-2020-10828.md index e00dd9423a7..0bf1610966d 100644 --- a/2020/CVE-2020-10828.md +++ b/2020/CVE-2020-10828.md @@ -11,7 +11,6 @@ A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor #### Reference - https://slashd.ga/2020/03/draytek-vulnerabilities/ -- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10936.md b/2020/CVE-2020-10936.md index b35f67695ee..d02c47d5b22 100644 --- a/2020/CVE-2020-10936.md +++ b/2020/CVE-2020-10936.md @@ -11,7 +11,6 @@ Sympa before 6.2.56 allows privilege escalation. #### Reference - https://sysdream.com/news/lab/ -- https://sysdream.com/news/lab/2020-05-25-cve-2020-10936-sympa-privileges-escalation-to-root/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10945.md b/2020/CVE-2020-10945.md index de6b4ff6215..69cd13214d0 100644 --- a/2020/CVE-2020-10945.md +++ b/2020/CVE-2020-10945.md @@ -10,7 +10,7 @@ Centreon before 19.10.7 exposes Session IDs in server responses. ### POC #### Reference -- https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10946.md b/2020/CVE-2020-10946.md index e9546e21587..0c407d20084 100644 --- a/2020/CVE-2020-10946.md +++ b/2020/CVE-2020-10946.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbit ### POC #### Reference -- https://sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10951.md b/2020/CVE-2020-10951.md index 1c75436946f..54210046582 100644 --- a/2020/CVE-2020-10951.md +++ b/2020/CVE-2020-10951.md @@ -10,8 +10,7 @@ Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-portal-websites-clickjacking-vulnerability -- https://www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-websites-2-2-0 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-10996.md b/2020/CVE-2020-10996.md index 008326d80f1..d8977c2b263 100644 --- a/2020/CVE-2020-10996.md +++ b/2020/CVE-2020-10996.md @@ -12,7 +12,6 @@ An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundl #### Reference - https://jira.percona.com/browse/PXC-3117 - https://www.percona.com/blog/2020/04/20/cve-2020-10996-percona-xtradb-cluster-sst-script-static-key/ -- https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.28-31.41.2.html #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-11415.md b/2020/CVE-2020-11415.md index 78b0bcf2a96..7eb78946f87 100644 --- a/2020/CVE-2020-11415.md +++ b/2020/CVE-2020-11415.md @@ -10,7 +10,7 @@ An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 ### POC #### Reference -- https://support.sonatype.com/hc/en-us/articles/360045360854 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-11492.md b/2020/CVE-2020-11492.md index 3e2f61afe7d..750e646e4e6 100644 --- a/2020/CVE-2020-11492.md +++ b/2020/CVE-2020-11492.md @@ -10,7 +10,6 @@ An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local ### POC #### Reference -- https://docs.docker.com/docker-for-windows/release-notes/ - https://www.pentestpartners.com/security-blog/docker-desktop-for-windows-privesc-cve-2020-11492/ #### Github diff --git a/2020/CVE-2020-11811.md b/2020/CVE-2020-11811.md index 9c3ebe61a41..8d559421bf3 100644 --- a/2020/CVE-2020-11811.md +++ b/2020/CVE-2020-11811.md @@ -10,7 +10,7 @@ In qdPM 9.1, an attacker can upload a malicious .php file to the server by explo ### POC #### Reference -- https://fatihhcelik.blogspot.com/2020/01/qdpm-web-based-project-management.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-12050.md b/2020/CVE-2020-12050.md index 23f6d1cc9fa..e3ff00db381 100644 --- a/2020/CVE-2020-12050.md +++ b/2020/CVE-2020-12050.md @@ -12,7 +12,6 @@ SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has #### Reference - https://bugzilla.redhat.com/show_bug.cgi?id=1825762 - https://sysdream.com/news/lab/ -- https://sysdream.com/news/lab/2020-05-25-cve-2020-12050-fedora-red-hat-centos-local-privilege-escalation-through-a-race-condition-in-the-sqliteodbc-installer-script/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-12427.md b/2020/CVE-2020-12427.md index 7f1c33144e3..a7931919b7f 100644 --- a/2020/CVE-2020-12427.md +++ b/2020/CVE-2020-12427.md @@ -10,7 +10,7 @@ The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20004-wd-discovery-cross-site-request-forgery-csrf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-12647.md b/2020/CVE-2020-12647.md index 3e89695e4ee..4946c6f3db3 100644 --- a/2020/CVE-2020-12647.md +++ b/2020/CVE-2020-12647.md @@ -10,7 +10,7 @@ Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before ### POC #### Reference -- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=55 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-12680.md b/2020/CVE-2020-12680.md index bced5d022df..b455af9a6ce 100644 --- a/2020/CVE-2020-12680.md +++ b/2020/CVE-2020-12680.md @@ -10,8 +10,7 @@ Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user ### POC #### Reference -- https://medium.com/%40knikolenko/avira-free-antivirus-password-collector-83452fa7f943 -- https://medium.com/@knikolenko/avira-free-antivirus-password-collector-83452fa7f943 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-12828.md b/2020/CVE-2020-12828.md index a2f83a5d72d..0885dd846c7 100644 --- a/2020/CVE-2020-12828.md +++ b/2020/CVE-2020-12828.md @@ -10,7 +10,7 @@ An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK serv ### POC #### Reference -- https://www.pango.co/sec31944/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-12830.md b/2020/CVE-2020-12830.md index 5f1df7bd003..0b7b147a634 100644 --- a/2020/CVE-2020-12830.md +++ b/2020/CVE-2020-12830.md @@ -10,7 +10,7 @@ Addressed multiple stack buffer overflow vulnerabilities that could allow an att ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13111.md b/2020/CVE-2020-13111.md index 26663e92c50..77be71b7b5a 100644 --- a/2020/CVE-2020-13111.md +++ b/2020/CVE-2020-13111.md @@ -10,7 +10,7 @@ NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c Ch ### POC #### Reference -- https://bitbucket.org/naviserver/naviserver/commits/a5c3079f1d8996d5f34c9384a440acf3519ca3bb +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13162.md b/2020/CVE-2020-13162.md index dcc3e8d5e3b..342166db1fc 100644 --- a/2020/CVE-2020-13162.md +++ b/2020/CVE-2020-13162.md @@ -13,7 +13,6 @@ A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Sec - http://packetstormsecurity.com/files/158117/Pulse-Secure-Client-For-Windows-Local-Privilege-Escalation.html - http://packetstormsecurity.com/files/159065/Pulse-Secure-Windows-Client-Privilege-Escalation.html - https://kb.pulsesecure.net/?atype=sa -- https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/ #### Github - https://github.com/redtimmy/tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162- diff --git a/2020/CVE-2020-13404.md b/2020/CVE-2020-13404.md index e7c9bfeff99..82c245b235c 100644 --- a/2020/CVE-2020-13404.md +++ b/2020/CVE-2020-13404.md @@ -12,7 +12,6 @@ The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento all #### Reference - https://github.com/quadra-informatique/Atos-Magento/releases - https://sysdream.com/news/lab/ -- https://sysdream.com/news/lab/2020-06-09-cve-2020-13404-remote-system-command-injection-in-atos-magento-module/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13426.md b/2020/CVE-2020-13426.md index f5c463914d3..95a656116c3 100644 --- a/2020/CVE-2020-13426.md +++ b/2020/CVE-2020-13426.md @@ -10,11 +10,9 @@ The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery ### POC #### Reference -- https://0day.today/exploit/34496 - https://cxsecurity.com/issue/WLB-2020050235 - https://infayer.com/archivos/448 - https://packetstormsecurity.com/files/157867/WordPress-Multi-Scheduler-1.0.0-Cross-Site-Request-Forgery.html -- https://research-labs.net/search/exploits/wordpress-plugin-multi-scheduler-100-cross-site-request-forgery-delete-user - https://www.exploit-db.com/exploits/48532 #### Github diff --git a/2020/CVE-2020-13504.md b/2020/CVE-2020-13504.md index 0860262c4d1..d6ae918b88a 100644 --- a/2020/CVE-2020-13504.md +++ b/2020/CVE-2020-13504.md @@ -10,7 +10,7 @@ Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13505.md b/2020/CVE-2020-13505.md index 58d6fa78353..2898d3e5339 100644 --- a/2020/CVE-2020-13505.md +++ b/2020/CVE-2020-13505.md @@ -10,7 +10,7 @@ Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL inj ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13619.md b/2020/CVE-2020-13619.md index c75e4b46013..3c6f0f58868 100644 --- a/2020/CVE-2020-13619.md +++ b/2020/CVE-2020-13619.md @@ -10,7 +10,7 @@ php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achi ### POC #### Reference -- https://reallinkers.github.io/CVE-2020-13619/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13620.md b/2020/CVE-2020-13620.md index 8a681a53f20..c8e0c1c0b39 100644 --- a/2020/CVE-2020-13620.md +++ b/2020/CVE-2020-13620.md @@ -10,7 +10,6 @@ Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the r ### POC #### Reference -- https://lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4 - https://members.backbox.org/fastgate-gpon-cross-site-request-forgery/ #### Github diff --git a/2020/CVE-2020-13627.md b/2020/CVE-2020-13627.md index 727af7f7f11..fc12fd4a488 100644 --- a/2020/CVE-2020-13627.md +++ b/2020/CVE-2020-13627.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbit ### POC #### Reference -- https://sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13628.md b/2020/CVE-2020-13628.md index 3eeddfe9692..ec6cc0aeea1 100644 --- a/2020/CVE-2020-13628.md +++ b/2020/CVE-2020-13628.md @@ -10,7 +10,7 @@ Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbit ### POC #### Reference -- https://sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13799.md b/2020/CVE-2020-13799.md index 13aa509ae50..c199f3f74fa 100644 --- a/2020/CVE-2020-13799.md +++ b/2020/CVE-2020-13799.md @@ -10,7 +10,7 @@ Western Digital has identified a security vulnerability in the Replay Protected ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20008-replay-attack-vulnerabilities-rpmb-protocol-applications +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-13977.md b/2020/CVE-2020-13977.md index d1b29101e6e..1e180702509 100644 --- a/2020/CVE-2020-13977.md +++ b/2020/CVE-2020-13977.md @@ -10,7 +10,7 @@ Nagios 4.4.5 allows an attacker, who already has administrative access to change ### POC #### Reference -- https://anhtai.me/nagios-core-4-4-5-url-injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-14293.md b/2020/CVE-2020-14293.md index 36722c1a2c1..27d15afd6c6 100644 --- a/2020/CVE-2020-14293.md +++ b/2020/CVE-2020-14293.md @@ -12,7 +12,6 @@ conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary #### Reference - http://seclists.org/fulldisclosure/2020/Sep/51 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-025.txt -- https://www.syss.de/pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata #### Github - https://github.com/patrickhener/CVE-2020-14293 diff --git a/2020/CVE-2020-14294.md b/2020/CVE-2020-14294.md index 9e136eb7eab..bd130ed5342 100644 --- a/2020/CVE-2020-14294.md +++ b/2020/CVE-2020-14294.md @@ -12,7 +12,6 @@ An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows #### Reference - http://seclists.org/fulldisclosure/2020/Sep/50 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-024.txt -- https://www.syss.de/pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata #### Github - https://github.com/patrickhener/CVE-2020-14294 diff --git a/2020/CVE-2020-14444.md b/2020/CVE-2020-14444.md index 16638b81d7f..8c67eaf907a 100644 --- a/2020/CVE-2020-14444.md +++ b/2020/CVE-2020-14444.md @@ -10,7 +10,7 @@ An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-14444-wso2.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-14445.md b/2020/CVE-2020-14445.md index ffddab0114f..05b36e80872 100644 --- a/2020/CVE-2020-14445.md +++ b/2020/CVE-2020-14445.md @@ -10,7 +10,7 @@ An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-14445-wso2.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-14446.md b/2020/CVE-2020-14446.md index 4cc86b8d2af..4e2f1ee35fd 100644 --- a/2020/CVE-2020-14446.md +++ b/2020/CVE-2020-14446.md @@ -10,7 +10,7 @@ An issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Ke ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-14446-wso2.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-14723.md b/2020/CVE-2020-14723.md index f8e8a4b2392..b4994c165f6 100644 --- a/2020/CVE-2020-14723.md +++ b/2020/CVE-2020-14723.md @@ -11,7 +11,6 @@ Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middlewar ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-14723-oracle.html - https://www.oracle.com/security-alerts/cpujul2020.html #### Github diff --git a/2020/CVE-2020-14930.md b/2020/CVE-2020-14930.md index 3a2f2d6630e..904de558ef2 100644 --- a/2020/CVE-2020-14930.md +++ b/2020/CVE-2020-14930.md @@ -11,7 +11,6 @@ An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account tak #### Reference - https://www.exploit-db.com/exploits/48196 -- https://www.pentest.com.tr/exploits/CTROMS-Terminal-OS-Port-Portal-Password-Reset-Authentication-Bypass.html #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-14936.md b/2020/CVE-2020-14936.md index 7222ca24869..84da8ff83a4 100644 --- a/2020/CVE-2020-14936.md +++ b/2020/CVE-2020-14936.md @@ -10,7 +10,7 @@ Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agen ### POC #### Reference -- https://drive.google.com/file/d/1FypWH_g475jSL0mDFzquaATCeRIHQ2kj/view?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-14982.md b/2020/CVE-2020-14982.md index d625312e3e7..51e15cbce57 100644 --- a/2020/CVE-2020-14982.md +++ b/2020/CVE-2020-14982.md @@ -10,7 +10,7 @@ A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 ( ### POC #### Reference -- https://www.mindpointgroup.com/blog/webta-sqli-vulnerability/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15307.md b/2020/CVE-2020-15307.md index 765e57f09eb..be071a3b97b 100644 --- a/2020/CVE-2020-15307.md +++ b/2020/CVE-2020-15307.md @@ -10,7 +10,7 @@ Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS (in the web ### POC #### Reference -- https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-stored-xss.html?nc=1 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15360.md b/2020/CVE-2020-15360.md index 0f0a0a9fe3e..033d473314d 100644 --- a/2020/CVE-2020-15360.md +++ b/2020/CVE-2020-15360.md @@ -10,7 +10,6 @@ com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because ### POC #### Reference -- https://docs.docker.com/docker-for-windows/release-notes/ - https://whitehatck01.blogspot.com/2020/06/dockers-latest-version-of-privilege.html #### Github diff --git a/2020/CVE-2020-15492.md b/2020/CVE-2020-15492.md index 95ae83a0094..d737dbe70a2 100644 --- a/2020/CVE-2020-15492.md +++ b/2020/CVE-2020-15492.md @@ -12,7 +12,6 @@ An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 20 #### Reference - http://packetstormsecurity.com/files/158556/INNEO-Startup-TOOLS-2018-M040-13.0.70.3804-Remote-Code-Execution.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-028.txt -- https://www.syss.de/pentest-blog/2020/syss-2020-028-sicherheitsschwachstelle-in-inneo-startup-tools-2017-und-2018/ #### Github - https://github.com/patrickhener/CVE-2020-15492 diff --git a/2020/CVE-2020-15518.md b/2020/CVE-2020-15518.md index d569b231c90..cee3bb63a17 100644 --- a/2020/CVE-2020-15518.md +++ b/2020/CVE-2020-15518.md @@ -10,7 +10,7 @@ VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replicatio ### POC #### Reference -- https://zwclose.github.io/veeamon +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15690.md b/2020/CVE-2020-15690.md index 4c1f2971a44..ce7229ede0e 100644 --- a/2020/CVE-2020-15690.md +++ b/2020/CVE-2020-15690.md @@ -11,7 +11,6 @@ In Nim before 1.2.6, the standard library asyncftpclient lacks a check for wheth #### Reference - http://www.openwall.com/lists/oss-security/2021/02/04/3 -- https://consensys.net/diligence/vulnerabilities/nim-asyncftpd-crlf-injection/ - https://github.com/tintinweb/pub/tree/master/pocs/cve-2020-15690 #### Github diff --git a/2020/CVE-2020-15692.md b/2020/CVE-2020-15692.md index 8c4554b11c3..552d49ce602 100644 --- a/2020/CVE-2020-15692.md +++ b/2020/CVE-2020-15692.md @@ -11,7 +11,6 @@ In Nim 1.2.4, the standard library browsers mishandles the URL argument to brows #### Reference - http://www.openwall.com/lists/oss-security/2021/02/04/1 -- https://consensys.net/diligence/vulnerabilities/nim-browsers-argument-injection/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15693.md b/2020/CVE-2020-15693.md index d8f1d9977b4..2b14c252d51 100644 --- a/2020/CVE-2020-15693.md +++ b/2020/CVE-2020-15693.md @@ -11,7 +11,6 @@ In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection #### Reference - http://www.openwall.com/lists/oss-security/2021/02/04/2 -- https://consensys.net/diligence/vulnerabilities/nim-httpclient-header-crlf-injection/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15694.md b/2020/CVE-2020-15694.md index b5cc62b6425..9598f753cca 100644 --- a/2020/CVE-2020-15694.md +++ b/2020/CVE-2020-15694.md @@ -11,7 +11,6 @@ In Nim 1.2.4, the standard library httpClient fails to properly validate the ser #### Reference - http://www.openwall.com/lists/oss-security/2021/02/04/2 -- https://consensys.net/diligence/vulnerabilities/nim-httpclient-header-crlf-injection/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15816.md b/2020/CVE-2020-15816.md index 551b9599209..5ef44a0bbd9 100644 --- a/2020/CVE-2020-15816.md +++ b/2020/CVE-2020-15816.md @@ -10,7 +10,7 @@ In Western Digital WD Discovery before 4.0.251.0, a malicious application runnin ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20005-wd-discovery-remote-command-execution-vulnerability +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15868.md b/2020/CVE-2020-15868.md index b525968949d..9b91e792c97 100644 --- a/2020/CVE-2020-15868.md +++ b/2020/CVE-2020-15868.md @@ -10,7 +10,7 @@ Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Con ### POC #### Reference -- https://support.sonatype.com/hc/en-us/articles/360052192533 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-15871.md b/2020/CVE-2020-15871.md index 523ccb91ceb..12dbd0b57dc 100644 --- a/2020/CVE-2020-15871.md +++ b/2020/CVE-2020-15871.md @@ -12,7 +12,6 @@ Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Co #### Reference - https://hackerone.com/reports/917843 - https://support.sonatype.com -- https://support.sonatype.com/hc/en-us/articles/360052192693 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-16140.md b/2020/CVE-2020-16140.md index 54281f2829f..cbc5bb105ce 100644 --- a/2020/CVE-2020-16140.md +++ b/2020/CVE-2020-16140.md @@ -10,7 +10,7 @@ The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerabl ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-16140-thembay.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-16271.md b/2020/CVE-2020-16271.md index 0d64ecf5998..328bafe0efc 100644 --- a/2020/CVE-2020-16271.md +++ b/2020/CVE-2020-16271.md @@ -10,7 +10,6 @@ The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insuff ### POC #### Reference -- https://danzinger.wien/exploiting-keepassrpc/ - https://forum.kee.pm/t/a-critical-security-update-for-keepassrpc-is-available/3040 #### Github diff --git a/2020/CVE-2020-16272.md b/2020/CVE-2020-16272.md index 49063306b98..2b3cf63bba3 100644 --- a/2020/CVE-2020-16272.md +++ b/2020/CVE-2020-16272.md @@ -10,7 +10,6 @@ The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing valid ### POC #### Reference -- https://danzinger.wien/exploiting-keepassrpc/ - https://forum.kee.pm/t/a-critical-security-update-for-keepassrpc-is-available/3040 #### Github diff --git a/2020/CVE-2020-16602.md b/2020/CVE-2020-16602.md index 1f3c3ba49f2..d70a6d51b31 100644 --- a/2020/CVE-2020-16602.md +++ b/2020/CVE-2020-16602.md @@ -11,7 +11,6 @@ Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute #### Reference - http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.html -- https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.html - https://www.youtube.com/watch?v=fkESBVhIdIA #### Github diff --git a/2020/CVE-2020-17365.md b/2020/CVE-2020-17365.md index 5f5ac1978df..ba581f796c5 100644 --- a/2020/CVE-2020-17365.md +++ b/2020/CVE-2020-17365.md @@ -11,7 +11,6 @@ Improper directory permissions in the Hotspot Shield VPN client software for Win #### Reference - https://cymptom.com/cve-2020-17365-hotspot-shield-vpn-new-privilege-escalation-vulnerability/2020/10/ -- https://www.pango.co/sec31944/ #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-17457.md b/2020/CVE-2020-17457.md index 184e455859c..a567ca7d6d7 100644 --- a/2020/CVE-2020-17457.md +++ b/2020/CVE-2020-17457.md @@ -10,7 +10,7 @@ Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-17458.md b/2020/CVE-2020-17458.md index b6c7e31b0fb..82342537112 100644 --- a/2020/CVE-2020-17458.md +++ b/2020/CVE-2020-17458.md @@ -10,7 +10,7 @@ A post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-23260.md b/2020/CVE-2020-23260.md index cf28557dbfc..c3cbae7d0e4 100644 --- a/2020/CVE-2020-23260.md +++ b/2020/CVE-2020-23260.md @@ -11,7 +11,6 @@ An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial #### Reference - https://github.com/pcmacdon/jsish/issues/14 -- https://jsish.org/fossil/jsi2/tktview?name=3e211e44b1 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-24036.md b/2020/CVE-2020-24036.md index a24315fec58..5954ee5a0f6 100644 --- a/2020/CVE-2020-24036.md +++ b/2020/CVE-2020-24036.md @@ -12,7 +12,6 @@ PHP object injection in the Ajax endpoint of the backend in ForkCMS below versio #### Reference - http://seclists.org/fulldisclosure/2021/Mar/31 - https://tech.feedyourhead.at/content/ForkCMS-PHP-Object-Injection-CVE-2020-24036 -- https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-04 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-24577.md b/2020/CVE-2020-24577.md index ba40d458bb8..b02a862fc0c 100644 --- a/2020/CVE-2020-24577.md +++ b/2020/CVE-2020-24577.md @@ -10,7 +10,6 @@ An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2. ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28241 diff --git a/2020/CVE-2020-24578.md b/2020/CVE-2020-24578.md index 9ec5f1bc038..126cb43df89 100644 --- a/2020/CVE-2020-24578.md +++ b/2020/CVE-2020-24578.md @@ -10,7 +10,6 @@ An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2. ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ #### Github diff --git a/2020/CVE-2020-24579.md b/2020/CVE-2020-24579.md index 4d191a4678c..9812c2c2cb3 100644 --- a/2020/CVE-2020-24579.md +++ b/2020/CVE-2020-24579.md @@ -10,7 +10,6 @@ An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2. ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ #### Github diff --git a/2020/CVE-2020-24580.md b/2020/CVE-2020-24580.md index 20c2d82502d..e50d436dc28 100644 --- a/2020/CVE-2020-24580.md +++ b/2020/CVE-2020-24580.md @@ -10,7 +10,6 @@ An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2. ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ #### Github diff --git a/2020/CVE-2020-24581.md b/2020/CVE-2020-24581.md index f6ef96a99ee..15fbbaf52c1 100644 --- a/2020/CVE-2020-24581.md +++ b/2020/CVE-2020-24581.md @@ -10,7 +10,6 @@ An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2. ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ #### Github diff --git a/2020/CVE-2020-24600.md b/2020/CVE-2020-24600.md index 432e2ed5f8d..caa04b69ab9 100644 --- a/2020/CVE-2020-24600.md +++ b/2020/CVE-2020-24600.md @@ -10,7 +10,7 @@ Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-24600-sql-injection-in-capexweb.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-24601.md b/2020/CVE-2020-24601.md index 7c09caf57c1..0b8aaacca3c 100644 --- a/2020/CVE-2020-24601.md +++ b/2020/CVE-2020-24601.md @@ -10,7 +10,6 @@ In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an at ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-24601-ignite-realtime-openfire.html - https://issues.igniterealtime.org/browse/OF-1963 #### Github diff --git a/2020/CVE-2020-24602.md b/2020/CVE-2020-24602.md index e82d095a016..4d9a82adedd 100644 --- a/2020/CVE-2020-24602.md +++ b/2020/CVE-2020-24602.md @@ -10,7 +10,6 @@ Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerabilit ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-24602-ignite-realtime-openfire.html - https://issues.igniterealtime.org/browse/OF-1963 #### Github diff --git a/2020/CVE-2020-24604.md b/2020/CVE-2020-24604.md index 8ea74d06b68..241e8037d7d 100644 --- a/2020/CVE-2020-24604.md +++ b/2020/CVE-2020-24604.md @@ -10,7 +10,6 @@ A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-24604-ignite-realtime-openfire.html - https://issues.igniterealtime.org/browse/OF-1963 #### Github diff --git a/2020/CVE-2020-24912.md b/2020/CVE-2020-24912.md index 8bbbe0e439a..3d9f2e70f88 100644 --- a/2020/CVE-2020-24912.md +++ b/2020/CVE-2020-24912.md @@ -12,7 +12,6 @@ A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions inc #### Reference - http://seclists.org/fulldisclosure/2021/Mar/30 - https://tech.feedyourhead.at/content/QCubed-Cross-Site-Scripting-CVE-2020-24912 -- https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-03 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-25213.md b/2020/CVE-2020-25213.md index 3a58f7a390e..894ee868e3c 100644 --- a/2020/CVE-2020-25213.md +++ b/2020/CVE-2020-25213.md @@ -12,7 +12,6 @@ The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote #### Reference - http://packetstormsecurity.com/files/160003/WordPress-File-Manager-6.8-Remote-Code-Execution.html - http://packetstormsecurity.com/files/171650/WordPress-File-Manager-6.9-Shell-Upload.html -- https://hotforsecurity.bitdefender.com/blog/wordpress-websites-attacked-via-file-manager-plugin-vulnerability-24048.html - https://seravo.com/blog/0-day-vulnerability-in-wp-file-manager/ - https://wordfence.com/blog/2020/09/700000-wordpress-users-affected-by-zero-day-vulnerability-in-file-manager-plugin/ diff --git a/2020/CVE-2020-25289.md b/2020/CVE-2020-25289.md index 7145364c8ef..a8dbbabea7c 100644 --- a/2020/CVE-2020-25289.md +++ b/2020/CVE-2020-25289.md @@ -10,7 +10,7 @@ The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to wr ### POC #### Reference -- http://zeifan.my/security/arbitrary%20file/eop/2020/07/21/avast-secureline-vpn-arb-file-eop.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-25291.md b/2020/CVE-2020-25291.md index 61a92313e7a..83dd699ecae 100644 --- a/2020/CVE-2020-25291.md +++ b/2020/CVE-2020-25291.md @@ -10,7 +10,7 @@ GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap ### POC #### Reference -- http://zeifan.my/security/rce/heap/2020/09/03/wps-rce-heap.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-25507.md b/2020/CVE-2020-25507.md index ff867e41018..4b53407e884 100644 --- a/2020/CVE-2020-25507.md +++ b/2020/CVE-2020-25507.md @@ -10,7 +10,6 @@ An incorrect permission assignment during the installation script of TeamworkClo ### POC #### Reference -- https://docs.nomagic.com/display/TWCloud190/Installation+on+Linux+using+scripts - https://github.com/sickcodes/security/blob/master/advisories/SICK-2020-002.md - https://sick.codes/sick-2020-002/ - https://web.archive.org/web/20201219095507/https://docs.nomagic.com/display/TWCloud185SP1/Installation+on+Centos+7. diff --git a/2020/CVE-2020-25538.md b/2020/CVE-2020-25538.md index ea501b49a5f..7fd56e018dc 100644 --- a/2020/CVE-2020-25538.md +++ b/2020/CVE-2020-25538.md @@ -11,7 +11,6 @@ An authenticated attacker can inject malicious code into "lang" parameter in /un #### Reference - http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html -- https://fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution_30.html #### Github - https://github.com/sec-it/CMSUno-RCE diff --git a/2020/CVE-2020-25557.md b/2020/CVE-2020-25557.md index 6d5abc4b015..c9a425a54b2 100644 --- a/2020/CVE-2020-25557.md +++ b/2020/CVE-2020-25557.md @@ -11,7 +11,6 @@ In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while #### Reference - http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html -- https://fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution.html #### Github - https://github.com/sec-it/CMSUno-RCE diff --git a/2020/CVE-2020-25765.md b/2020/CVE-2020-25765.md index ad04b1fa68d..1518e0b32f1 100644 --- a/2020/CVE-2020-25765.md +++ b/2020/CVE-2020-25765.md @@ -10,8 +10,7 @@ Addressed remote code execution vulnerability in reg_device.php due to insuffici ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity -- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-25989.md b/2020/CVE-2020-25989.md index aec47a3efd4..a8b41f660e8 100644 --- a/2020/CVE-2020-25989.md +++ b/2020/CVE-2020-25989.md @@ -10,7 +10,7 @@ Privilege escalation via arbitrary file write in pritunl electron client 1.0.111 ### POC #### Reference -- https://vkas-afk.github.io/vuln-disclosures/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26098.md b/2020/CVE-2020-26098.md index ffa51b6e60d..78581cd0f06 100644 --- a/2020/CVE-2020-26098.md +++ b/2020/CVE-2020-26098.md @@ -10,7 +10,7 @@ cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code exe ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26099.md b/2020/CVE-2020-26099.md index 0dc9767b977..0bfe3b6798b 100644 --- a/2020/CVE-2020-26099.md +++ b/2020/CVE-2020-26099.md @@ -10,7 +10,7 @@ cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26100.md b/2020/CVE-2020-26100.md index d54baf4cb08..aa2e9c6dfcf 100644 --- a/2020/CVE-2020-26100.md +++ b/2020/CVE-2020-26100.md @@ -10,7 +10,7 @@ chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497). ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26101.md b/2020/CVE-2020-26101.md index 31aca8cbd8d..dddd1a74f42 100644 --- a/2020/CVE-2020-26101.md +++ b/2020/CVE-2020-26101.md @@ -10,7 +10,7 @@ In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templa ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26102.md b/2020/CVE-2020-26102.md index dffd2ca0c3e..e56c705782d 100644 --- a/2020/CVE-2020-26102.md +++ b/2020/CVE-2020-26102.md @@ -10,7 +10,7 @@ In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26103.md b/2020/CVE-2020-26103.md index 9bc61689546..092ab128368 100644 --- a/2020/CVE-2020-26103.md +++ b/2020/CVE-2020-26103.md @@ -10,7 +10,7 @@ In cPanel before 88.0.3, an insecure site password is used for Mailman on a temp ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26104.md b/2020/CVE-2020-26104.md index cce51e47a64..ed98d13f72c 100644 --- a/2020/CVE-2020-26104.md +++ b/2020/CVE-2020-26104.md @@ -10,7 +10,7 @@ In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-5 ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26105.md b/2020/CVE-2020-26105.md index f03487f3081..a07df5683f3 100644 --- a/2020/CVE-2020-26105.md +++ b/2020/CVE-2020-26105.md @@ -10,7 +10,7 @@ In cPanel before 88.0.3, insecure chkservd test credentials are used on a templa ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26106.md b/2020/CVE-2020-26106.md index 02c771bb3fd..11ba5009917 100644 --- a/2020/CVE-2020-26106.md +++ b/2020/CVE-2020-26106.md @@ -10,7 +10,7 @@ cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdoma ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26107.md b/2020/CVE-2020-26107.md index aca509aaf6c..e57011dc0d1 100644 --- a/2020/CVE-2020-26107.md +++ b/2020/CVE-2020-26107.md @@ -10,7 +10,7 @@ cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26108.md b/2020/CVE-2020-26108.md index a32b4fc77d9..5fee4b035a8 100644 --- a/2020/CVE-2020-26108.md +++ b/2020/CVE-2020-26108.md @@ -10,7 +10,7 @@ cPanel before 88.0.13 mishandles file-extension dispatching, leading to code exe ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26109.md b/2020/CVE-2020-26109.md index 8f8f5f63b2f..588d7ad2808 100644 --- a/2020/CVE-2020-26109.md +++ b/2020/CVE-2020-26109.md @@ -10,7 +10,7 @@ cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26110.md b/2020/CVE-2020-26110.md index 305e614e709..6d4ea4deac7 100644 --- a/2020/CVE-2020-26110.md +++ b/2020/CVE-2020-26110.md @@ -10,7 +10,7 @@ cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SE ### POC #### Reference -- https://docs.cpanel.net/changelogs/88-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26168.md b/2020/CVE-2020-26168.md index fd0cce4f524..5c28b2075e8 100644 --- a/2020/CVE-2020-26168.md +++ b/2020/CVE-2020-26168.md @@ -10,7 +10,7 @@ The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4 ### POC #### Reference -- https://hazelcast.zendesk.com/hc/en-us/articles/360050161951--IMDG-Enterprise-4-0-4-0-1-4-0-2-LDAP-Authentication-Bypass +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-26554.md b/2020/CVE-2020-26554.md index df10231f1e3..a769b905aed 100644 --- a/2020/CVE-2020-26554.md +++ b/2020/CVE-2020-26554.md @@ -11,7 +11,6 @@ REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail mes #### Reference - http://packetstormsecurity.com/files/160077/MailDepot-2033-2.3.3022-Cross-Site-Scripting.html -- https://www.syss.de/pentest-blog/syss-2020-037-persistent-cross-site-scripting-schwachstelle-in-reddoxx-maildepot #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-27158.md b/2020/CVE-2020-27158.md index 4d103768dc7..73723e3d12f 100644 --- a/2020/CVE-2020-27158.md +++ b/2020/CVE-2020-27158.md @@ -10,8 +10,7 @@ Addressed remote code execution vulnerability in cgi_api.php that allowed escala ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity -- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-27159.md b/2020/CVE-2020-27159.md index ed4ac754612..a9dd83f1ed4 100644 --- a/2020/CVE-2020-27159.md +++ b/2020/CVE-2020-27159.md @@ -10,8 +10,7 @@ Addressed remote code execution vulnerability in DsdkProxy.php due to insufficie ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity -- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-27160.md b/2020/CVE-2020-27160.md index 86cd2f24257..73627f8931f 100644 --- a/2020/CVE-2020-27160.md +++ b/2020/CVE-2020-27160.md @@ -10,8 +10,7 @@ Addressed remote code execution vulnerability in AvailableApps.php that allowed ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity -- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-27199.md b/2020/CVE-2020-27199.md index 96cf626ad12..979464b54f0 100644 --- a/2020/CVE-2020-27199.md +++ b/2020/CVE-2020-27199.md @@ -10,7 +10,7 @@ The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. T ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/magic-home-pro-mobile-application-authentication-bypass-cve-2020-27199/ +No PoCs from references. #### Github - https://github.com/9lyph/CVE-2020-27199 diff --git a/2020/CVE-2020-27211.md b/2020/CVE-2020-27211.md index 17b33e57681..0aea41cd05d 100644 --- a/2020/CVE-2020-27211.md +++ b/2020/CVE-2020-27211.md @@ -11,7 +11,6 @@ Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protectio #### Reference - https://eprint.iacr.org/2021/640 -- https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/ - https://www.aisec.fraunhofer.de/en/FirmwareProtection.html #### Github diff --git a/2020/CVE-2020-27744.md b/2020/CVE-2020-27744.md index 974008cb79b..95e0c7d6924 100644 --- a/2020/CVE-2020-27744.md +++ b/2020/CVE-2020-27744.md @@ -10,7 +10,7 @@ An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-28408.md b/2020/CVE-2020-28408.md index 9695738a502..09f63e542f4 100644 --- a/2020/CVE-2020-28408.md +++ b/2020/CVE-2020-28408.md @@ -10,7 +10,7 @@ The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when cre ### POC #### Reference -- https://mattschmidt.net/2020/11/10/dundas-persistent-xss/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-28409.md b/2020/CVE-2020-28409.md index e074b681b71..e68c2f222bb 100644 --- a/2020/CVE-2020-28409.md +++ b/2020/CVE-2020-28409.md @@ -10,7 +10,7 @@ The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Componen ### POC #### Reference -- https://mattschmidt.net/2020/11/10/dundas-persistent-xss/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-28641.md b/2020/CVE-2020-28641.md index ecb9ea90f07..f0516146843 100644 --- a/2020/CVE-2020-28641.md +++ b/2020/CVE-2020-28641.md @@ -10,7 +10,7 @@ In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary f ### POC #### Reference -- https://support.malwarebytes.com/hc/en-us/articles/1500000403501-Arbitrary-file-deletion-vulnerability-fixed-in-Malwarebytes-Endpoint-Protection +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-28926.md b/2020/CVE-2020-28926.md index 3f8e69d5b9e..d705686b3ec 100644 --- a/2020/CVE-2020-28926.md +++ b/2020/CVE-2020-28926.md @@ -10,7 +10,7 @@ ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Se ### POC #### Reference -- https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/ +No PoCs from references. #### Github - https://github.com/lorsanta/exploit-CVE-2020-28926 diff --git a/2020/CVE-2020-28940.md b/2020/CVE-2020-28940.md index 4a61e068df2..7c74b9a2ea1 100644 --- a/2020/CVE-2020-28940.md +++ b/2020/CVE-2020-28940.md @@ -10,7 +10,7 @@ On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboar ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-28970.md b/2020/CVE-2020-28970.md index aee85121f10..2226788b969 100644 --- a/2020/CVE-2020-28970.md +++ b/2020/CVE-2020-28970.md @@ -10,7 +10,7 @@ An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115 ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-28971.md b/2020/CVE-2020-28971.md index 5b22bce1d47..50e26eeaa64 100644 --- a/2020/CVE-2020-28971.md +++ b/2020/CVE-2020-28971.md @@ -10,7 +10,7 @@ An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115 ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29321.md b/2020/CVE-2020-29321.md index 234be62b389..43d8183c085 100644 --- a/2020/CVE-2020-29321.md +++ b/2020/CVE-2020-29321.md @@ -10,7 +10,7 @@ The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telne ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-29321-telnet-hardcoded-credentials.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29322.md b/2020/CVE-2020-29322.md index ccad46cb53c..9a4c4064b8d 100644 --- a/2020/CVE-2020-29322.md +++ b/2020/CVE-2020-29322.md @@ -10,7 +10,7 @@ The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telne ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29323.md b/2020/CVE-2020-29323.md index 29031a5d3c5..662bbf4b6dd 100644 --- a/2020/CVE-2020-29323.md +++ b/2020/CVE-2020-29323.md @@ -10,7 +10,7 @@ The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials di ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-29323-telnet-hardcoded-credentials.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29324.md b/2020/CVE-2020-29324.md index 99ade26eb00..65f3ddff8b5 100644 --- a/2020/CVE-2020-29324.md +++ b/2020/CVE-2020-29324.md @@ -10,7 +10,7 @@ The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure i ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-29324-d-link-router-dir-895l-mfc-telnet-hardcoded-credentials.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29371.md b/2020/CVE-2020-29371.md index f0d179b41e9..017247d10ef 100644 --- a/2020/CVE-2020-29371.md +++ b/2020/CVE-2020-29371.md @@ -11,7 +11,6 @@ An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux ker #### Reference - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4 -- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd #### Github diff --git a/2020/CVE-2020-29436.md b/2020/CVE-2020-29436.md index dc18e26f1dd..4f19ead1d4e 100644 --- a/2020/CVE-2020-29436.md +++ b/2020/CVE-2020-29436.md @@ -10,7 +10,7 @@ Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin pri ### POC #### Reference -- https://support.sonatype.com/hc/en-us/articles/1500000415082-CVE-2020-29436-Nexus-Repository-Manager-3-XML-External-Entities-injection-2020-12-15 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29457.md b/2020/CVE-2020-29457.md index 706b21304fe..b234af7f756 100644 --- a/2020/CVE-2020-29457.md +++ b/2020/CVE-2020-29457.md @@ -10,7 +10,7 @@ A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 co ### POC #### Reference -- https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-29457.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29563.md b/2020/CVE-2020-29563.md index 73f22591b1f..3a18404ccf0 100644 --- a/2020/CVE-2020-29563.md +++ b/2020/CVE-2020-29563.md @@ -10,7 +10,7 @@ An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118 ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20010-my-cloud-os5-firmware-5-07-118 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-29654.md b/2020/CVE-2020-29654.md index fc35f9d0339..d8d73a2a83c 100644 --- a/2020/CVE-2020-29654.md +++ b/2020/CVE-2020-29654.md @@ -10,7 +10,7 @@ Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to comp ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20011-western-digital-dashboard-privilege-escalation +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-35121.md b/2020/CVE-2020-35121.md index 46bdac98e46..67d53d5c000 100644 --- a/2020/CVE-2020-35121.md +++ b/2020/CVE-2020-35121.md @@ -10,7 +10,7 @@ An issue was discovered in the Keysight Database Connector plugin before 1.5.0 f ### POC #### Reference -- https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-35122.md b/2020/CVE-2020-35122.md index f53c118c295..2eda7060734 100644 --- a/2020/CVE-2020-35122.md +++ b/2020/CVE-2020-35122.md @@ -10,7 +10,7 @@ An issue was discovered in the Keysight Database Connector plugin before 1.5.0 f ### POC #### Reference -- https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-35269.md b/2020/CVE-2020-35269.md index 999933bc05f..875cffba65f 100644 --- a/2020/CVE-2020-35269.md +++ b/2020/CVE-2020-35269.md @@ -10,7 +10,7 @@ Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Requ ### POC #### Reference -- https://gist.github.com/MoSalah20/d1d40b43eafba0bd22ee4cddecad3cbc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-35418.md b/2020/CVE-2020-35418.md index c0cdc13ca2c..b217cf5376f 100644 --- a/2020/CVE-2020-35418.md +++ b/2020/CVE-2020-35418.md @@ -10,7 +10,7 @@ Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by up ### POC #### Reference -- https://fatihhcelik.blogspot.com/2020/12/group-office-crm-stored-xss-via-svg-file.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-36139.md b/2020/CVE-2020-36139.md index 3fa8a1bca97..1f68e1f1a97 100644 --- a/2020/CVE-2020-36139.md +++ b/2020/CVE-2020-36139.md @@ -10,7 +10,7 @@ BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by ### POC #### Reference -- https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-36140.md b/2020/CVE-2020-36140.md index 8b66b2d9500..05fbf0bc05b 100644 --- a/2020/CVE-2020-36140.md +++ b/2020/CVE-2020-36140.md @@ -10,7 +10,7 @@ BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&p ### POC #### Reference -- https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-36141.md b/2020/CVE-2020-36141.md index f8ce650fdf9..68ba8772494 100644 --- a/2020/CVE-2020-36141.md +++ b/2020/CVE-2020-36141.md @@ -10,7 +10,7 @@ BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME ### POC #### Reference -- https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-36142.md b/2020/CVE-2020-36142.md index 33d3968e27a..0d8f64434e7 100644 --- a/2020/CVE-2020-36142.md +++ b/2020/CVE-2020-36142.md @@ -10,7 +10,7 @@ BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' p ### POC #### Reference -- https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-36705.md b/2020/CVE-2020-36705.md index 0c67d643e97..432f5df507d 100644 --- a/2020/CVE-2020-36705.md +++ b/2020/CVE-2020-36705.md @@ -10,7 +10,7 @@ The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uplo ### POC #### Reference -- https://codecanyon.net/item/wp-pro-advertising-system-all-in-one-ad-manager/269693 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-36728.md b/2020/CVE-2020-36728.md index e30a166c551..119372d745d 100644 --- a/2020/CVE-2020-36728.md +++ b/2020/CVE-2020-36728.md @@ -10,7 +10,7 @@ The Adning Advertising plugin for WordPress is vulnerable to file deletion via p ### POC #### Reference -- https://codecanyon.net/item/wp-pro-advertising-system-all-in-one-ad-manager/269693 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-5504.md b/2020/CVE-2020-5504.md index 16a34a3865d..fff941e72c8 100644 --- a/2020/CVE-2020-5504.md +++ b/2020/CVE-2020-5504.md @@ -10,7 +10,7 @@ In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the use ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-5504-phpmyadmin.html +No PoCs from references. #### Github - https://github.com/whale-baby/exploitation-of-vulnerability diff --git a/2020/CVE-2020-5841.md b/2020/CVE-2020-5841.md index 407e5eb79c5..a0c16797471 100644 --- a/2020/CVE-2020-5841.md +++ b/2020/CVE-2020-5841.md @@ -10,8 +10,7 @@ An issue was discovered in OpServices OpMon 9.3.1-1. Using password change param ### POC #### Reference -- https://medium.com/%40ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1 -- https://medium.com/@ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6059.md b/2020/CVE-2020-6059.md index 75292c95618..1d248a6e713 100644 --- a/2020/CVE-2020-6059.md +++ b/2020/CVE-2020-6059.md @@ -10,7 +10,7 @@ An exploitable out of bounds read vulnerability exists in the way MiniSNMPD vers ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0976 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6060.md b/2020/CVE-2020-6060.md index a06da90e968..f502478a36d 100644 --- a/2020/CVE-2020-6060.md +++ b/2020/CVE-2020-6060.md @@ -10,7 +10,7 @@ A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 ha ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0977 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6178.md b/2020/CVE-2020-6178.md index 60010b18937..a4eab5fb51e 100644 --- a/2020/CVE-2020-6178.md +++ b/2020/CVE-2020-6178.md @@ -10,7 +10,7 @@ SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. T ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6196.md b/2020/CVE-2020-6196.md index fda479c133a..bf0aac75e94 100644 --- a/2020/CVE-2020-6196.md +++ b/2020/CVE-2020-6196.md @@ -10,7 +10,7 @@ SAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6197.md b/2020/CVE-2020-6197.md index a260c717f62..5dcda0ea267 100644 --- a/2020/CVE-2020-6197.md +++ b/2020/CVE-2020-6197.md @@ -10,7 +10,7 @@ SAP Enable Now, before version 1908, does not invalidate session tokens in a tim ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6198.md b/2020/CVE-2020-6198.md index d30772b1d2f..4c65edf421a 100644 --- a/2020/CVE-2020-6198.md +++ b/2020/CVE-2020-6198.md @@ -10,7 +10,7 @@ SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connec ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6199.md b/2020/CVE-2020-6199.md index 5e068568845..1547f42ee79 100644 --- a/2020/CVE-2020-6199.md +++ b/2020/CVE-2020-6199.md @@ -19,7 +19,7 @@ The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO vers ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6200.md b/2020/CVE-2020-6200.md index 5c9c0050278..d55f8af3b12 100644 --- a/2020/CVE-2020-6200.md +++ b/2020/CVE-2020-6200.md @@ -13,7 +13,7 @@ The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulne ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6201.md b/2020/CVE-2020-6201.md index 8867730e556..5c360389c7c 100644 --- a/2020/CVE-2020-6201.md +++ b/2020/CVE-2020-6201.md @@ -14,7 +14,7 @@ The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6202.md b/2020/CVE-2020-6202.md index 3b7392a217d..278b77dbcaa 100644 --- a/2020/CVE-2020-6202.md +++ b/2020/CVE-2020-6202.md @@ -16,7 +16,7 @@ SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6203.md b/2020/CVE-2020-6203.md index b4a83244897..729f13e99e6 100644 --- a/2020/CVE-2020-6203.md +++ b/2020/CVE-2020-6203.md @@ -16,7 +16,7 @@ SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6204.md b/2020/CVE-2020-6204.md index 96433c268f9..a3ab4fcc624 100644 --- a/2020/CVE-2020-6204.md +++ b/2020/CVE-2020-6204.md @@ -23,7 +23,7 @@ The selection query in SAP Treasury and Risk Management (Transaction Management) ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6205.md b/2020/CVE-2020-6205.md index a8fbd94087a..ffb902b95f7 100644 --- a/2020/CVE-2020-6205.md +++ b/2020/CVE-2020-6205.md @@ -23,7 +23,6 @@ SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7 #### Reference - https://launchpad.support.sap.com/#/notes/2884910 -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6206.md b/2020/CVE-2020-6206.md index 98aaf8bdabf..d1e0e50bba6 100644 --- a/2020/CVE-2020-6206.md +++ b/2020/CVE-2020-6206.md @@ -10,7 +10,7 @@ SAP Cloud Platform Integration for Data Services, version 1.0, allows user input ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6207.md b/2020/CVE-2020-6207.md index 958239f1feb..6832845c8ed 100644 --- a/2020/CVE-2020-6207.md +++ b/2020/CVE-2020-6207.md @@ -14,7 +14,6 @@ SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing - http://packetstormsecurity.com/files/162083/SAP-SMD-Agent-Unauthenticated-Remote-Code-Execution.html - http://packetstormsecurity.com/files/163168/SAP-Solution-Manager-7.20-Missing-Authorization.html - http://seclists.org/fulldisclosure/2021/Apr/4 -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 #### Github - https://github.com/chipik/SAP_EEM_CVE-2020-6207 diff --git a/2020/CVE-2020-6208.md b/2020/CVE-2020-6208.md index 47fcaa3efd9..2298fbf6b76 100644 --- a/2020/CVE-2020-6208.md +++ b/2020/CVE-2020-6208.md @@ -11,7 +11,7 @@ SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6209.md b/2020/CVE-2020-6209.md index 3f61effbac7..72eca2708e2 100644 --- a/2020/CVE-2020-6209.md +++ b/2020/CVE-2020-6209.md @@ -10,7 +10,7 @@ SAP Disclosure Management, version 10.1, does not perform necessary authorizatio ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6210.md b/2020/CVE-2020-6210.md index a7914d02853..29e2c3086e8 100644 --- a/2020/CVE-2020-6210.md +++ b/2020/CVE-2020-6210.md @@ -11,7 +11,7 @@ SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-contr ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6273.md b/2020/CVE-2020-6273.md index 70351c41915..fbcc2eb5d48 100644 --- a/2020/CVE-2020-6273.md +++ b/2020/CVE-2020-6273.md @@ -11,7 +11,7 @@ SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does n ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6284.md b/2020/CVE-2020-6284.md index 31865ad4981..b18d66108af 100644 --- a/2020/CVE-2020-6284.md +++ b/2020/CVE-2020-6284.md @@ -13,7 +13,7 @@ SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6293.md b/2020/CVE-2020-6293.md index 2a196e6da1c..419cdaeb5d0 100644 --- a/2020/CVE-2020-6293.md +++ b/2020/CVE-2020-6293.md @@ -13,7 +13,7 @@ SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6294.md b/2020/CVE-2020-6294.md index 2b57099d6a6..e48c9169f80 100644 --- a/2020/CVE-2020-6294.md +++ b/2020/CVE-2020-6294.md @@ -11,7 +11,7 @@ Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6295.md b/2020/CVE-2020-6295.md index e1b681a42b2..9178d7cad26 100644 --- a/2020/CVE-2020-6295.md +++ b/2020/CVE-2020-6295.md @@ -10,7 +10,7 @@ Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allow ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6296.md b/2020/CVE-2020-6296.md index 441c55df689..eb9316eca22 100644 --- a/2020/CVE-2020-6296.md +++ b/2020/CVE-2020-6296.md @@ -21,7 +21,7 @@ SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 71 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6297.md b/2020/CVE-2020-6297.md index 5a439328e15..77cdc5e3a66 100644 --- a/2020/CVE-2020-6297.md +++ b/2020/CVE-2020-6297.md @@ -10,7 +10,7 @@ Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligenc ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6298.md b/2020/CVE-2020-6298.md index 670c53584b9..42dc59203bc 100644 --- a/2020/CVE-2020-6298.md +++ b/2020/CVE-2020-6298.md @@ -12,7 +12,7 @@ SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6299.md b/2020/CVE-2020-6299.md index 81e5c9c5f01..3d859473296 100644 --- a/2020/CVE-2020-6299.md +++ b/2020/CVE-2020-6299.md @@ -16,7 +16,7 @@ SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 75 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6300.md b/2020/CVE-2020-6300.md index f0fb2f1d50f..4f49aa278fa 100644 --- a/2020/CVE-2020-6300.md +++ b/2020/CVE-2020-6300.md @@ -11,7 +11,7 @@ SAP Business Objects Business Intelligence Platform (Central Management Console) ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6301.md b/2020/CVE-2020-6301.md index 6dae30abcb4..2bb153cd94b 100644 --- a/2020/CVE-2020-6301.md +++ b/2020/CVE-2020-6301.md @@ -17,7 +17,7 @@ SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 6 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6309.md b/2020/CVE-2020-6309.md index c553151b630..37e99108dda 100644 --- a/2020/CVE-2020-6309.md +++ b/2020/CVE-2020-6309.md @@ -18,7 +18,7 @@ SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6310.md b/2020/CVE-2020-6310.md index 263601b87b8..1cac35c8be4 100644 --- a/2020/CVE-2020-6310.md +++ b/2020/CVE-2020-6310.md @@ -14,7 +14,7 @@ Improper access control in SOA Configuration Trace component in SAP NetWeaver (A ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-6844.md b/2020/CVE-2020-6844.md index 8df5065ef3d..dbd5d187aad 100644 --- a/2020/CVE-2020-6844.md +++ b/2020/CVE-2020-6844.md @@ -10,7 +10,6 @@ In TopManage OLK 2020, login CSRF can be chained with another vulnerability in o ### POC #### Reference -- https://websec.nl/news.php - https://www.exploit-db.com/exploits/47960 #### Github diff --git a/2020/CVE-2020-6845.md b/2020/CVE-2020-6845.md index 8deda7750dd..b03c832af35 100644 --- a/2020/CVE-2020-6845.md +++ b/2020/CVE-2020-6845.md @@ -10,7 +10,6 @@ An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Se ### POC #### Reference -- https://websec.nl/news.php - https://www.exploit-db.com/exploits/47960 #### Github diff --git a/2020/CVE-2020-6956.md b/2020/CVE-2020-6956.md index f42834423de..007181fd437 100644 --- a/2020/CVE-2020-6956.md +++ b/2020/CVE-2020-6956.md @@ -10,7 +10,7 @@ PCS DEXICON 3.4.1 allows XSS via the loginName parameter in login_action.jsp. ### POC #### Reference -- https://www.kpmg.de/noindex/advisories/KPMG-2019-001.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-7363.md b/2020/CVE-2020-7363.md index fccc23c46a5..cb2b5d312f3 100644 --- a/2020/CVE-2020-7363.md +++ b/2020/CVE-2020-7363.md @@ -10,7 +10,6 @@ User Interface (UI) Misrepresentation of Critical Information vulnerability in t ### POC #### Reference -- https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html #### Github diff --git a/2020/CVE-2020-7364.md b/2020/CVE-2020-7364.md index cabfaf9fe70..58a9811e39c 100644 --- a/2020/CVE-2020-7364.md +++ b/2020/CVE-2020-7364.md @@ -10,7 +10,6 @@ User Interface (UI) Misrepresentation of Critical Information vulnerability in t ### POC #### Reference -- https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html #### Github diff --git a/2020/CVE-2020-7369.md b/2020/CVE-2020-7369.md index f6d7d362cb2..6e49c75bed8 100644 --- a/2020/CVE-2020-7369.md +++ b/2020/CVE-2020-7369.md @@ -10,7 +10,6 @@ User Interface (UI) Misrepresentation of Critical Information vulnerability in t ### POC #### Reference -- https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html #### Github diff --git a/2020/CVE-2020-7370.md b/2020/CVE-2020-7370.md index 785cf84bc2c..a5cd5a4c93a 100644 --- a/2020/CVE-2020-7370.md +++ b/2020/CVE-2020-7370.md @@ -10,7 +10,6 @@ User Interface (UI) Misrepresentation of Critical Information vulnerability in t ### POC #### Reference -- https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html #### Github diff --git a/2020/CVE-2020-7371.md b/2020/CVE-2020-7371.md index c0335da7f9c..c330c5be035 100644 --- a/2020/CVE-2020-7371.md +++ b/2020/CVE-2020-7371.md @@ -10,7 +10,6 @@ User Interface (UI) Misrepresentation of Critical Information vulnerability in t ### POC #### Reference -- https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html #### Github diff --git a/2020/CVE-2020-7745.md b/2020/CVE-2020-7745.md index 5b37401aa29..e358faefa01 100644 --- a/2020/CVE-2020-7745.md +++ b/2020/CVE-2020-7745.md @@ -11,7 +11,6 @@ This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by t #### Reference - https://snyk.io/blog/remote-code-execution-rce-sourmint/ -- https://snyk.io/research/sour-mint-malicious-sdk/%23rce - https://snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-1019377 - https://www.youtube.com/watch?v=n-mEMkeoUqs diff --git a/2020/CVE-2020-7953.md b/2020/CVE-2020-7953.md index 25b23174d32..bc132da3e5d 100644 --- a/2020/CVE-2020-7953.md +++ b/2020/CVE-2020-7953.md @@ -11,9 +11,7 @@ An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is #### Reference - https://medium.com/%40ph0rensic -- https://medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5 - https://medium.com/@ph0rensic -- https://medium.com/@ph0rensic/three-cves-on-opmon-3ca775a262f5 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-7954.md b/2020/CVE-2020-7954.md index 3c0a2212532..6c6dda62b78 100644 --- a/2020/CVE-2020-7954.md +++ b/2020/CVE-2020-7954.md @@ -11,9 +11,7 @@ An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user #### Reference - https://medium.com/%40ph0rensic -- https://medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5 - https://medium.com/@ph0rensic -- https://medium.com/@ph0rensic/three-cves-on-opmon-3ca775a262f5 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-8636.md b/2020/CVE-2020-8636.md index 7fe4bbb32e2..c3777594189 100644 --- a/2020/CVE-2020-8636.md +++ b/2020/CVE-2020-8636.md @@ -10,8 +10,7 @@ An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execut ### POC #### Reference -- https://medium.com/%40ph0rensic/three-cves-on-opmon-3ca775a262f5 -- https://medium.com/@ph0rensic/three-cves-on-opmon-3ca775a262f5 +No PoCs from references. #### Github - https://github.com/phor3nsic/opmonster diff --git a/2020/CVE-2020-8839.md b/2020/CVE-2020-8839.md index 099cf0ef828..b00e775b364 100644 --- a/2020/CVE-2020-8839.md +++ b/2020/CVE-2020-8839.md @@ -11,7 +11,6 @@ Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices befor #### Reference - http://packetstormsecurity.com/files/156289/CHIYU-BF430-TCP-IP-Converter-Cross-Site-Scripting.html -- https://drive.google.com/open?id=1eDN0rsGPs4-yxeMxl7MGh__yjdbl-wON #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-8867.md b/2020/CVE-2020-8867.md index 16b0e6698f2..1fc010d5ece 100644 --- a/2020/CVE-2020-8867.md +++ b/2020/CVE-2020-8867.md @@ -10,7 +10,7 @@ This vulnerability allows remote attackers to create a denial-of-service conditi ### POC #### Reference -- https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-8867.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-8948.md b/2020/CVE-2020-8948.md index 668bf3dacaf..830757e3091 100644 --- a/2020/CVE-2020-8948.md +++ b/2020/CVE-2020-8948.md @@ -10,7 +10,7 @@ The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build ### POC #### Reference -- https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2020-002-cve-2020-8948/#sthash.ByZB8ifG.dpbs +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-8959.md b/2020/CVE-2020-8959.md index d50907f672e..341596d4341 100644 --- a/2020/CVE-2020-8959.md +++ b/2020/CVE-2020-8959.md @@ -10,7 +10,7 @@ Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hi ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20001-ssd-dashboard-setup-privilege-escalation +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-8960.md b/2020/CVE-2020-8960.md index 71e871feeca..1d6576a4005 100644 --- a/2020/CVE-2020-8960.md +++ b/2020/CVE-2020-8960.md @@ -10,8 +10,7 @@ Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS. ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-20003-mycloud-site-version-2-2-0-134 -- https://www.westerndigital.com/support/productsecurity/wdc-20003-mycloud-xss-vulnerability +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-8990.md b/2020/CVE-2020-8990.md index 7c7255d5339..7951aa7f689 100644 --- a/2020/CVE-2020-8990.md +++ b/2020/CVE-2020-8990.md @@ -10,7 +10,7 @@ Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fi ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-19013-my-cloud-home-and-ibi-session-invalidation-vulnerability +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9036.md b/2020/CVE-2020-9036.md index 225843a6426..10c0c82b452 100644 --- a/2020/CVE-2020-9036.md +++ b/2020/CVE-2020-9036.md @@ -10,7 +10,7 @@ Jeedom through 4.0.38 allows XSS. ### POC #### Reference -- https://sysdream.com/news/lab/2020-08-05-cve-2020-9036-jeedom-xss-leading-to-remote-code-execution/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9044.md b/2020/CVE-2020-9044.md index 5ca9a606b6b..935a2099817 100644 --- a/2020/CVE-2020-9044.md +++ b/2020/CVE-2020-9044.md @@ -27,7 +27,7 @@ XXE vulnerability exists in the Metasys family of product Web Services which has ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9045.md b/2020/CVE-2020-9045.md index 93e9c65724a..78fa43a4bb6 100644 --- a/2020/CVE-2020-9045.md +++ b/2020/CVE-2020-9045.md @@ -12,7 +12,7 @@ During installation or upgrade to Software House C•CURE 9000 v2.70 and America ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9046.md b/2020/CVE-2020-9046.md index c4fcce6fbb4..9200eee0fdc 100644 --- a/2020/CVE-2020-9046.md +++ b/2020/CVE-2020-9046.md @@ -12,7 +12,7 @@ A vulnerability in all versions of Kantech EntraPass Editions could potentially ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9047.md b/2020/CVE-2020-9047.md index 218a559d822..6b36983afd8 100644 --- a/2020/CVE-2020-9047.md +++ b/2020/CVE-2020-9047.md @@ -11,7 +11,7 @@ A vulnerability exists that could allow the execution of unauthorized code or op ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github - https://github.com/norrismw/CVE-2020-9047 diff --git a/2020/CVE-2020-9048.md b/2020/CVE-2020-9048.md index c84f0e333d9..c72516886ad 100644 --- a/2020/CVE-2020-9048.md +++ b/2020/CVE-2020-9048.md @@ -10,7 +10,7 @@ A vulnerability in specified versions of American Dynamics victor Web Client and ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9049.md b/2020/CVE-2020-9049.md index 643faac7a6a..259ed5a05d4 100644 --- a/2020/CVE-2020-9049.md +++ b/2020/CVE-2020-9049.md @@ -11,7 +11,7 @@ A vulnerability in specified versions of American Dynamics victor Web Client and ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9050.md b/2020/CVE-2020-9050.md index 27b82487618..50efd263823 100644 --- a/2020/CVE-2020-9050.md +++ b/2020/CVE-2020-9050.md @@ -11,7 +11,7 @@ Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Servic ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9368.md b/2020/CVE-2020-9368.md index 8401a1ab258..5c021db5ef9 100644 --- a/2020/CVE-2020-9368.md +++ b/2020/CVE-2020-9368.md @@ -10,7 +10,7 @@ The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an una ### POC #### Reference -- https://www.intrinsec.com/publications/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9371.md b/2020/CVE-2020-9371.md index 2734f9498f7..2f06d88c4af 100644 --- a/2020/CVE-2020-9371.md +++ b/2020/CVE-2020-9371.md @@ -11,7 +11,6 @@ Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for W #### Reference - http://packetstormsecurity.com/files/156694/WordPress-Appointment-Booking-Calendar-1.3.34-CSV-Injection.html -- https://drive.google.com/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9 - https://wpvulndb.com/vulnerabilities/10110 #### Github diff --git a/2020/CVE-2020-9372.md b/2020/CVE-2020-9372.md index cfb4b64007d..6a1c24972ed 100644 --- a/2020/CVE-2020-9372.md +++ b/2020/CVE-2020-9372.md @@ -11,7 +11,6 @@ The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user #### Reference - http://packetstormsecurity.com/files/156694/WordPress-Appointment-Booking-Calendar-1.3.34-CSV-Injection.html -- https://drive.google.com/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9 #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9375.md b/2020/CVE-2020-9375.md index c2ff4b691ca..6919f9daaec 100644 --- a/2020/CVE-2020-9375.md +++ b/2020/CVE-2020-9375.md @@ -11,7 +11,6 @@ TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attac #### Reference - http://packetstormsecurity.com/files/156928/TP-Link-Archer-C50-V3-Denial-of-Service.html -- https://thewhiteh4t.github.io/2020/02/27/CVE-2020-9375-TP-Link-Archer-C50-v3-Denial-of-Service.html #### Github - https://github.com/thewhiteh4t/cve-2020-9375 diff --git a/2020/CVE-2020-9388.md b/2020/CVE-2020-9388.md index f490373f7b8..29d8c68d77e 100644 --- a/2020/CVE-2020-9388.md +++ b/2020/CVE-2020-9388.md @@ -10,8 +10,7 @@ CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack ### POC #### Reference -- https://support.squaredup.com/hc/en-us/articles/360017568238 -- https://support.squaredup.com/hc/en-us/articles/360019427218-CVE-2020-9388-API-Endpoints-are-not-protected-against-CSRF +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9389.md b/2020/CVE-2020-9389.md index 122f5621200..dc0e3b6657a 100644 --- a/2020/CVE-2020-9389.md +++ b/2020/CVE-2020-9389.md @@ -10,8 +10,7 @@ A username enumeration issue was discovered in SquaredUp before version 4.6.0. T ### POC #### Reference -- https://support.squaredup.com/hc/en-us/articles/360017255858 -- https://support.squaredup.com/hc/en-us/articles/360019427238-CVE-2020-9389-Username-enumeration-possible-via-a-timing-attack +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2020/CVE-2020-9390.md b/2020/CVE-2020-9390.md index 10a74cb3fed..88b60b2a1b6 100644 --- a/2020/CVE-2020-9390.md +++ b/2020/CVE-2020-9390.md @@ -10,8 +10,7 @@ SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a d ### POC #### Reference -- https://support.squaredup.com/hc/en-us/articles/360017568258 -- https://support.squaredup.com/hc/en-us/articles/360019427258-CVE-2020-9390-Stored-cross-site-scripting +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-20654.md b/2021/CVE-2021-20654.md index efad528327a..9730b1aa0f2 100644 --- a/2021/CVE-2021-20654.md +++ b/2021/CVE-2021-20654.md @@ -11,7 +11,6 @@ Wekan, open source kanban board system, between version 3.12 and 4.11, is vulner #### Reference - https://jvn.jp/en/jp/JVN80785288/ -- https://wekan.github.io/hall-of-fame/fieldbleed/ #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-21372.md b/2021/CVE-2021-21372.md index 0351ab4b06a..90c78eb824c 100644 --- a/2021/CVE-2021-21372.md +++ b/2021/CVE-2021-21372.md @@ -12,7 +12,7 @@ Nimble is a package manager for the Nim programming language. In Nim release ver ### POC #### Reference -- https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-21373.md b/2021/CVE-2021-21373.md index 1d196c4938c..01932d20bd6 100644 --- a/2021/CVE-2021-21373.md +++ b/2021/CVE-2021-21373.md @@ -11,7 +11,7 @@ Nimble is a package manager for the Nim programming language. In Nim release ver ### POC #### Reference -- https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-21374.md b/2021/CVE-2021-21374.md index a4de91d4ded..fbc733f8f3c 100644 --- a/2021/CVE-2021-21374.md +++ b/2021/CVE-2021-21374.md @@ -13,7 +13,7 @@ Nimble is a package manager for the Nim programming language. In Nim release ver ### POC #### Reference -- https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-22248.md b/2021/CVE-2021-22248.md index cb164698c37..8c61fd872ae 100644 --- a/2021/CVE-2021-22248.md +++ b/2021/CVE-2021-22248.md @@ -12,7 +12,7 @@ Improper authorization on the pipelines page in GitLab CE/EE affecting all versi ### POC #### Reference -- https://gitlab.com/gitlab-org/gitlab/-/issues/336074 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-22285.md b/2021/CVE-2021-22285.md index 5d87b8fc264..2d4fcb15010 100644 --- a/2021/CVE-2021-22285.md +++ b/2021/CVE-2021-22285.md @@ -12,7 +12,7 @@ Improper Handling of Exceptional Conditions, Improper Check for Unusual or Excep ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=7PAA001353&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-22286.md b/2021/CVE-2021-22286.md index 437401888ac..8c4b9bdcf1c 100644 --- a/2021/CVE-2021-22286.md +++ b/2021/CVE-2021-22286.md @@ -11,7 +11,7 @@ Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module al ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=7PAA001353&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-22288.md b/2021/CVE-2021-22288.md index 18366af87b4..266bc0abc23 100644 --- a/2021/CVE-2021-22288.md +++ b/2021/CVE-2021-22288.md @@ -11,7 +11,7 @@ Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module al ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=7PAA001353&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-24338.md b/2021/CVE-2021-24338.md index b3acdcc2547..f76f6467f93 100644 --- a/2021/CVE-2021-24338.md +++ b/2021/CVE-2021-24338.md @@ -11,7 +11,7 @@ The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was ### POC #### Reference -- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24338 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-24339.md b/2021/CVE-2021-24339.md index 309300c791e..4ab4b566389 100644 --- a/2021/CVE-2021-24339.md +++ b/2021/CVE-2021-24339.md @@ -11,7 +11,7 @@ The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was ### POC #### Reference -- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24339 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-24366.md b/2021/CVE-2021-24366.md index 55a14dcc7ce..548b505ff8a 100644 --- a/2021/CVE-2021-24366.md +++ b/2021/CVE-2021-24366.md @@ -12,7 +12,7 @@ The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress pl ### POC #### Reference -- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24366 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-25274.md b/2021/CVE-2021-25274.md index f2449505231..e63d156bcc7 100644 --- a/2021/CVE-2021-25274.md +++ b/2021/CVE-2021-25274.md @@ -10,7 +10,7 @@ The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Mi ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-25275.md b/2021/CVE-2021-25275.md index 0781e6b9d9e..99c30ab21b1 100644 --- a/2021/CVE-2021-25275.md +++ b/2021/CVE-2021-25275.md @@ -10,7 +10,7 @@ SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds product ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-25276.md b/2021/CVE-2021-25276.md index 9bf3d229dd1..c9b98e330f5 100644 --- a/2021/CVE-2021-25276.md +++ b/2021/CVE-2021-25276.md @@ -10,7 +10,7 @@ In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing use ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-25898.md b/2021/CVE-2021-25898.md index ab54cd6e58f..f57f74c6904 100644 --- a/2021/CVE-2021-25898.md +++ b/2021/CVE-2021-25898.md @@ -10,7 +10,6 @@ An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Pass ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765 #### Github diff --git a/2021/CVE-2021-25899.md b/2021/CVE-2021-25899.md index 026fc8661bb..f9fc719b2f3 100644 --- a/2021/CVE-2021-25899.md +++ b/2021/CVE-2021-25899.md @@ -10,7 +10,6 @@ An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An u ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765 #### Github diff --git a/2021/CVE-2021-25924.md b/2021/CVE-2021-25924.md index 51c17086010..e4f666aec08 100644 --- a/2021/CVE-2021-25924.md +++ b/2021/CVE-2021-25924.md @@ -10,8 +10,7 @@ In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery ### POC #### Reference -- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25924%2C -- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25924, +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-25926.md b/2021/CVE-2021-25926.md index 4ecc89957f4..4836de3e962 100644 --- a/2021/CVE-2021-25926.md +++ b/2021/CVE-2021-25926.md @@ -10,8 +10,7 @@ In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cr ### POC #### Reference -- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926%2C -- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926, +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-26549.md b/2021/CVE-2021-26549.md index 7f1abf7ad02..5e199e4cb29 100644 --- a/2021/CVE-2021-26549.md +++ b/2021/CVE-2021-26549.md @@ -11,7 +11,6 @@ An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminT #### Reference - http://packetstormsecurity.com/files/161335/SmartFoxServer-2X-2.17.0-God-Mode-Console-WebSocket-Cross-Site-Scripting.html -- https://www.zeroscience.mk/en/vulnerabilities/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5626.php #### Github diff --git a/2021/CVE-2021-26550.md b/2021/CVE-2021-26550.md index d5f8ce80912..40c8d40b490 100644 --- a/2021/CVE-2021-26550.md +++ b/2021/CVE-2021-26550.md @@ -11,7 +11,6 @@ An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure #### Reference - http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html -- https://www.zeroscience.mk/en/vulnerabilities/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php #### Github diff --git a/2021/CVE-2021-26551.md b/2021/CVE-2021-26551.md index 26aabdd5a5e..2ece962fbbc 100644 --- a/2021/CVE-2021-26551.md +++ b/2021/CVE-2021-26551.md @@ -11,7 +11,6 @@ An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitr #### Reference - http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html -- https://www.zeroscience.mk/en/vulnerabilities/ #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-26596.md b/2021/CVE-2021-26596.md index 400a67b5a15..3738b0deeef 100644 --- a/2021/CVE-2021-26596.md +++ b/2021/CVE-2021-26596.md @@ -10,7 +10,7 @@ An issue was discovered in Nokia NetAct 18A. A malicious user can change a filen ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-26597.md b/2021/CVE-2021-26597.md index 0f7016e943f..b9af98f4ddd 100644 --- a/2021/CVE-2021-26597.md +++ b/2021/CVE-2021-26597.md @@ -10,7 +10,7 @@ An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-26762.md b/2021/CVE-2021-26762.md index f149291b54c..0e850a806fc 100644 --- a/2021/CVE-2021-26762.md +++ b/2021/CVE-2021-26762.md @@ -11,7 +11,6 @@ SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remot #### Reference - https://phpgurukul.com/ -- https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip - https://www.exploit-db.com/exploits/49513 #### Github diff --git a/2021/CVE-2021-26764.md b/2021/CVE-2021-26764.md index 2a085c68701..aaed6c5bbda 100644 --- a/2021/CVE-2021-26764.md +++ b/2021/CVE-2021-26764.md @@ -12,7 +12,6 @@ SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows rem #### Reference - https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html - https://phpgurukul.com/ -- https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-26765.md b/2021/CVE-2021-26765.md index b8844f81254..0c8e79f3591 100644 --- a/2021/CVE-2021-26765.md +++ b/2021/CVE-2021-26765.md @@ -12,7 +12,6 @@ SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remot #### Reference - https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html - https://phpgurukul.com/ -- https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27201.md b/2021/CVE-2021-27201.md index 6a3b4341db3..279df6c6e4f 100644 --- a/2021/CVE-2021-27201.md +++ b/2021/CVE-2021-27201.md @@ -11,7 +11,6 @@ Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to e #### Reference - https://github.com/MucahitSaratar/endian_firewall_authenticated_rce -- https://www.endian.com/company/news/endian-community-releases-new-version-332-148/ #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27203.md b/2021/CVE-2021-27203.md index 83d693c5516..a272440feb3 100644 --- a/2021/CVE-2021-27203.md +++ b/2021/CVE-2021-27203.md @@ -10,7 +10,7 @@ In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL code ### POC #### Reference -- https://www.rootshellsecurity.net/rootshell-discover-denial-of-service-flaw-dekart-private-disk-encryption-software/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27351.md b/2021/CVE-2021-27351.md index 48617136f0e..a00e149e347 100644 --- a/2021/CVE-2021-27351.md +++ b/2021/CVE-2021-27351.md @@ -10,7 +10,7 @@ The Terminate Session feature in the Telegram application through 7.2.1 for Andr ### POC #### Reference -- https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27414.md b/2021/CVE-2021-27414.md index bf6846fb0ba..1f9560c72f3 100644 --- a/2021/CVE-2021-27414.md +++ b/2021/CVE-2021-27414.md @@ -10,7 +10,7 @@ An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Ass ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27416.md b/2021/CVE-2021-27416.md index 21bcf36c63a..349f2b5c09f 100644 --- a/2021/CVE-2021-27416.md +++ b/2021/CVE-2021-27416.md @@ -10,7 +10,7 @@ An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27656.md b/2021/CVE-2021-27656.md index 374e03ffaa1..e73e218dac2 100644 --- a/2021/CVE-2021-27656.md +++ b/2021/CVE-2021-27656.md @@ -10,7 +10,7 @@ A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an un ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27657.md b/2021/CVE-2021-27657.md index 2c5f029d4dc..54a193b46c7 100644 --- a/2021/CVE-2021-27657.md +++ b/2021/CVE-2021-27657.md @@ -10,7 +10,7 @@ Successful exploitation of this vulnerability could give an authenticated Metasy ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27658.md b/2021/CVE-2021-27658.md index 7a0dfcafb35..1f8f40933d9 100644 --- a/2021/CVE-2021-27658.md +++ b/2021/CVE-2021-27658.md @@ -10,7 +10,7 @@ exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, esc ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27659.md b/2021/CVE-2021-27659.md index 73ce9b1f055..89ea8340fde 100644 --- a/2021/CVE-2021-27659.md +++ b/2021/CVE-2021-27659.md @@ -10,7 +10,7 @@ exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, an ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27660.md b/2021/CVE-2021-27660.md index 8fc655cc310..3fda583c010 100644 --- a/2021/CVE-2021-27660.md +++ b/2021/CVE-2021-27660.md @@ -10,7 +10,7 @@ An insecure client auto update feature in C-CURE 9000 can allow remote execution ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27661.md b/2021/CVE-2021-27661.md index f683d71ca92..5d33b5313ae 100644 --- a/2021/CVE-2021-27661.md +++ b/2021/CVE-2021-27661.md @@ -10,7 +10,7 @@ Successful exploitation of this vulnerability could give an authenticated Facili ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27662.md b/2021/CVE-2021-27662.md index c03117df52c..5ac0bb9e689 100644 --- a/2021/CVE-2021-27662.md +++ b/2021/CVE-2021-27662.md @@ -10,7 +10,7 @@ The KT-1 door controller is susceptible to replay or man-in-the-middle attacks w ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27663.md b/2021/CVE-2021-27663.md index e21948ec832..99186c9714f 100644 --- a/2021/CVE-2021-27663.md +++ b/2021/CVE-2021-27663.md @@ -10,7 +10,7 @@ A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27664.md b/2021/CVE-2021-27664.md index 9620f0dcd9e..a341f5e7f38 100644 --- a/2021/CVE-2021-27664.md +++ b/2021/CVE-2021-27664.md @@ -10,7 +10,7 @@ Under certain configurations an unauthenticated remote user could be given acces ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27665.md b/2021/CVE-2021-27665.md index ebdb6ecc7ad..4f216e328b8 100644 --- a/2021/CVE-2021-27665.md +++ b/2021/CVE-2021-27665.md @@ -10,7 +10,7 @@ An unauthenticated remote user could exploit a potential integer overflow condit ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-27691.md b/2021/CVE-2021-27691.md index dbfe05ca056..8c088a6d888 100644 --- a/2021/CVE-2021-27691.md +++ b/2021/CVE-2021-27691.md @@ -10,7 +10,6 @@ Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN ### POC #### Reference -- https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/rkhTCGzMd - https://hackmd.io/@aZYpdinUS2SD-yhAeHwOkw/rkhTCGzMd #### Github diff --git a/2021/CVE-2021-27692.md b/2021/CVE-2021-27692.md index 330084c7823..71b41b6a42a 100644 --- a/2021/CVE-2021-27692.md +++ b/2021/CVE-2021-27692.md @@ -10,7 +10,6 @@ Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17( ### POC #### Reference -- https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/ry-t4QfMu - https://hackmd.io/@aZYpdinUS2SD-yhAeHwOkw/ry-t4QfMu #### Github diff --git a/2021/CVE-2021-28133.md b/2021/CVE-2021-28133.md index b6b2ac27b01..a684fa80ddf 100644 --- a/2021/CVE-2021-28133.md +++ b/2021/CVE-2021-28133.md @@ -14,7 +14,6 @@ Zoom through 5.5.4 sometimes allows attackers to read private information on a p - http://seclists.org/fulldisclosure/2021/Mar/48 - https://thehackernews.com/2021/03/new-zoom-screen-sharing-bug-lets-other.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-044.txt -- https://www.syss.de/pentest-blog/syss-2020-044-sicherheitsproblem-in-screen-sharing-funktionalitaet-von-zoom-cve-2021-28133 - https://www.youtube.com/watch?v=SonmmgQlLzg #### Github diff --git a/2021/CVE-2021-28269.md b/2021/CVE-2021-28269.md index 7d1f68c6708..cd5b4c8046a 100644 --- a/2021/CVE-2021-28269.md +++ b/2021/CVE-2021-28269.md @@ -11,7 +11,6 @@ Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via clien #### Reference - https://www.exploit-db.com/exploits/49679 -- https://www.zeroscience.mk/en/vulnerabilities - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5634.php #### Github diff --git a/2021/CVE-2021-28271.md b/2021/CVE-2021-28271.md index 804f83f67d9..bcd1378a288 100644 --- a/2021/CVE-2021-28271.md +++ b/2021/CVE-2021-28271.md @@ -11,7 +11,6 @@ Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges #### Reference - https://www.exploit-db.com/exploits/49678 -- https://www.zeroscience.mk/en/vulnerabilities - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php #### Github diff --git a/2021/CVE-2021-28653.md b/2021/CVE-2021-28653.md index 100899603c6..e317a4336c2 100644 --- a/2021/CVE-2021-28653.md +++ b/2021/CVE-2021-28653.md @@ -10,7 +10,7 @@ The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLo ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-28855.md b/2021/CVE-2021-28855.md index 96ef35a98ca..ba42d76c9bf 100644 --- a/2021/CVE-2021-28855.md +++ b/2021/CVE-2021-28855.md @@ -10,7 +10,7 @@ In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer d ### POC #### Reference -- https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-28856.md b/2021/CVE-2021-28856.md index 159b4496b43..4eb287796cf 100644 --- a/2021/CVE-2021-28856.md +++ b/2021/CVE-2021-28856.md @@ -10,7 +10,7 @@ In Deark before v1.5.8, a specially crafted input file can cause a division by z ### POC #### Reference -- https://fatihhcelik.github.io/posts/Division-By-Zero-Deark/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-28979.md b/2021/CVE-2021-28979.md index c9ec6ca90ec..1a181ba3b87 100644 --- a/2021/CVE-2021-28979.md +++ b/2021/CVE-2021-28979.md @@ -10,7 +10,7 @@ SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response split ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-29022.md b/2021/CVE-2021-29022.md index a6d890cc28b..cf9f6f9a71d 100644 --- a/2021/CVE-2021-29022.md +++ b/2021/CVE-2021-29022.md @@ -10,7 +10,7 @@ In InvoicePlane 1.5.11, the upload feature discloses the full path of the file u ### POC #### Reference -- https://notnnor.github.io/research/2021/03/17/full-path-discloure-in-invoiceplane.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-29023.md b/2021/CVE-2021-29023.md index 29ce4149d5c..bab2ce2b1e1 100644 --- a/2021/CVE-2021-29023.md +++ b/2021/CVE-2021-29023.md @@ -10,7 +10,7 @@ InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the re ### POC #### Reference -- https://notnnor.github.io/research/2021/03/16/weak-password-recovery-mechanism-in-invoiceplane.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-29660.md b/2021/CVE-2021-29660.md index c68769f1426..a4aa6b73d9a 100644 --- a/2021/CVE-2021-29660.md +++ b/2021/CVE-2021-29660.md @@ -10,7 +10,7 @@ A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softi ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-29661.md b/2021/CVE-2021-29661.md index 878166a9067..ee63b4cb501 100644 --- a/2021/CVE-2021-29661.md +++ b/2021/CVE-2021-29661.md @@ -10,7 +10,7 @@ Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored X ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-30117.md b/2021/CVE-2021-30117.md index 496081cb173..e17eb3a0e7c 100644 --- a/2021/CVE-2021-30117.md +++ b/2021/CVE-2021-30117.md @@ -10,7 +10,7 @@ The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated bo ### POC #### Reference -- https://helpdesk.kaseya.com/hc/en-gb/articles/360019966738-9-5-6-Feature-Release-8-May-2021 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-30201.md b/2021/CVE-2021-30201.md index 01d6c379f5d..6d3be04f1c0 100644 --- a/2021/CVE-2021-30201.md +++ b/2021/CVE-2021-30201.md @@ -10,7 +10,7 @@ The API /vsaWS/KaseyaWS.asmx can be used to submit XML to the system. When this ### POC #### Reference -- https://helpdesk.kaseya.com/hc/en-gb/articles/360019966738-9-5-6-Feature-Release-8-May-2021 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-31330.md b/2021/CVE-2021-31330.md index 471802a0e03..72362b78979 100644 --- a/2021/CVE-2021-31330.md +++ b/2021/CVE-2021-31330.md @@ -10,7 +10,7 @@ A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3 ### POC #### Reference -- https://mattschmidt.net/2021/04/14/review-board-xss-discovered/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-3141.md b/2021/CVE-2021-3141.md index 21ace019aef..a70dbc0b922 100644 --- a/2021/CVE-2021-3141.md +++ b/2021/CVE-2021-3141.md @@ -10,7 +10,7 @@ In Unisys Stealth (core) before 6.0.025.0, the Keycloak password is stored in a ### POC #### Reference -- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=62 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-31532.md b/2021/CVE-2021-31532.md index bf0de16f6f9..eb56779ac63 100644 --- a/2021/CVE-2021-31532.md +++ b/2021/CVE-2021-31532.md @@ -10,7 +10,7 @@ NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i ### POC #### Reference -- https://oxide.computer/blog/lpc55/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-31539.md b/2021/CVE-2021-31539.md index 007f95b0564..c3f075a4c17 100644 --- a/2021/CVE-2021-31539.md +++ b/2021/CVE-2021-31539.md @@ -10,7 +10,7 @@ Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-31540.md b/2021/CVE-2021-31540.md index fab12c04414..40f94374892 100644 --- a/2021/CVE-2021-31540.md +++ b/2021/CVE-2021-31540.md @@ -10,7 +10,7 @@ Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect f ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-31583.md b/2021/CVE-2021-31583.md index 68f8c8fe59d..3c2867933fc 100644 --- a/2021/CVE-2021-31583.md +++ b/2021/CVE-2021-31583.md @@ -11,7 +11,6 @@ Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGC #### Reference - http://packetstormsecurity.com/files/162316/Sipwise-C5-NGCP-CSC-Cross-Site-Scripting.html -- https://www.zeroscience.mk/en/vulnerabilities - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5648.php #### Github diff --git a/2021/CVE-2021-31584.md b/2021/CVE-2021-31584.md index 2e4826c53b0..c90f2169bbc 100644 --- a/2021/CVE-2021-31584.md +++ b/2021/CVE-2021-31584.md @@ -11,7 +11,6 @@ Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8 #### Reference - http://packetstormsecurity.com/files/162318/Sipwise-C5-NGCP-CSC-Cross-Site-Request-Forgery.html -- https://www.zeroscience.mk/en/vulnerabilities - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5649.php #### Github diff --git a/2021/CVE-2021-31859.md b/2021/CVE-2021-31859.md index bc3892d944c..2ab0410a4f8 100644 --- a/2021/CVE-2021-31859.md +++ b/2021/CVE-2021-31859.md @@ -11,7 +11,6 @@ Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 al #### Reference - https://www.ysoft.com/en -- https://www.ysoft.com/en/legal/ysoft-safeq-flexispooler #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-31923.md b/2021/CVE-2021-31923.md index 031512b5389..4d507387690 100644 --- a/2021/CVE-2021-31923.md +++ b/2021/CVE-2021-31923.md @@ -10,7 +10,7 @@ Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header m ### POC #### Reference -- https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-32098.md b/2021/CVE-2021-32098.md index 02a565604dd..8e04e84f24a 100644 --- a/2021/CVE-2021-32098.md +++ b/2021/CVE-2021-32098.md @@ -10,7 +10,7 @@ Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserial ### POC #### Reference -- https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-32099.md b/2021/CVE-2021-32099.md index 34056427d1b..a47535deb99 100644 --- a/2021/CVE-2021-32099.md +++ b/2021/CVE-2021-32099.md @@ -10,7 +10,7 @@ A SQL injection vulnerability in the pandora_console component of Artica Pandora ### POC #### Reference -- https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack +No PoCs from references. #### Github - https://github.com/akr3ch/CVE-2021-32099 diff --git a/2021/CVE-2021-32100.md b/2021/CVE-2021-32100.md index b0271606d6f..b5ebe407ed2 100644 --- a/2021/CVE-2021-32100.md +++ b/2021/CVE-2021-32100.md @@ -10,7 +10,7 @@ A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploita ### POC #### Reference -- https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-32172.md b/2021/CVE-2021-32172.md index 43b9ce18080..fd5d673b87f 100644 --- a/2021/CVE-2021-32172.md +++ b/2021/CVE-2021-32172.md @@ -11,7 +11,6 @@ Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit #### Reference - http://packetstormsecurity.com/files/164445/Maian-Cart-3.8-Remote-Code-Execution.html -- https://dreyand.github.io/maian-cart-rce/ - https://github.com/DreyAnd/maian-cart-rce #### Github diff --git a/2021/CVE-2021-32238.md b/2021/CVE-2021-32238.md index 5c3e0c43bc4..db9a239d122 100644 --- a/2021/CVE-2021-32238.md +++ b/2021/CVE-2021-32238.md @@ -10,7 +10,6 @@ Epic Games / Psyonix Rocket League <=1.95 is affected by Buffer Overflow. Stack- ### POC #### Reference -- https://www.zeroscience.mk/en/vulnerabilities/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5651.php #### Github diff --git a/2021/CVE-2021-3310.md b/2021/CVE-2021-3310.md index b03cdd8c917..c429f6668cc 100644 --- a/2021/CVE-2021-3310.md +++ b/2021/CVE-2021-3310.md @@ -10,7 +10,7 @@ Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Fo ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122 +No PoCs from references. #### Github - https://github.com/piffd0s/CVE-2021-3310 diff --git a/2021/CVE-2021-3314.md b/2021/CVE-2021-3314.md index 4dc26793886..579ec2e347f 100644 --- a/2021/CVE-2021-3314.md +++ b/2021/CVE-2021-3314.md @@ -11,7 +11,6 @@ Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.js #### Reference - https://n4nj0.github.io/advisories/oracle-glassfish-reflected-xss/ -- https://www.gruppotim.it/redteam #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33193.md b/2021/CVE-2021-33193.md index ae92978fde5..f074b9c1c91 100644 --- a/2021/CVE-2021-33193.md +++ b/2021/CVE-2021-33193.md @@ -10,7 +10,6 @@ A crafted method sent through HTTP/2 will bypass validation and be forwarded by ### POC #### Reference -- https://portswigger.net/research/http2 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujan2022.html diff --git a/2021/CVE-2021-33205.md b/2021/CVE-2021-33205.md index 6825c8a1239..b944e1328ab 100644 --- a/2021/CVE-2021-33205.md +++ b/2021/CVE-2021-33205.md @@ -10,7 +10,7 @@ Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerabil ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-21007-edgerover-windows-app-ver-0-25 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33543.md b/2021/CVE-2021-33543.md index 937687adc98..fee948964f0 100644 --- a/2021/CVE-2021-33543.md +++ b/2021/CVE-2021-33543.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors allow u ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33544.md b/2021/CVE-2021-33544.md index be5cfec3647..a5e361a80c1 100644 --- a/2021/CVE-2021-33544.md +++ b/2021/CVE-2021-33544.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33545.md b/2021/CVE-2021-33545.md index a1c1639b430..5a3c1ff47da 100644 --- a/2021/CVE-2021-33545.md +++ b/2021/CVE-2021-33545.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33546.md b/2021/CVE-2021-33546.md index 3e223aa665d..fbeaaa04c4e 100644 --- a/2021/CVE-2021-33546.md +++ b/2021/CVE-2021-33546.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33547.md b/2021/CVE-2021-33547.md index 11824dcf4b5..5505ea39e59 100644 --- a/2021/CVE-2021-33547.md +++ b/2021/CVE-2021-33547.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33548.md b/2021/CVE-2021-33548.md index b156ac4a718..e000d7fdc0c 100644 --- a/2021/CVE-2021-33548.md +++ b/2021/CVE-2021-33548.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33549.md b/2021/CVE-2021-33549.md index 70c73ab8fd9..916711503e2 100644 --- a/2021/CVE-2021-33549.md +++ b/2021/CVE-2021-33549.md @@ -29,7 +29,6 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul #### Reference - http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33550.md b/2021/CVE-2021-33550.md index 2b11fb9cd25..0640e1bea03 100644 --- a/2021/CVE-2021-33550.md +++ b/2021/CVE-2021-33550.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33551.md b/2021/CVE-2021-33551.md index 6be29bac5da..18ca855c0ee 100644 --- a/2021/CVE-2021-33551.md +++ b/2021/CVE-2021-33551.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33552.md b/2021/CVE-2021-33552.md index 92691c2621c..74ef9a8df6a 100644 --- a/2021/CVE-2021-33552.md +++ b/2021/CVE-2021-33552.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33553.md b/2021/CVE-2021-33553.md index 38d6e82a50c..53400a40332 100644 --- a/2021/CVE-2021-33553.md +++ b/2021/CVE-2021-33553.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33554.md b/2021/CVE-2021-33554.md index 4d10a9172a4..5f61da7759f 100644 --- a/2021/CVE-2021-33554.md +++ b/2021/CVE-2021-33554.md @@ -28,7 +28,7 @@ Multiple camera devices by UDP Technology, Geutebrück and other vendors are vul ### POC #### Reference -- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33563.md b/2021/CVE-2021-33563.md index 43ca2107f3c..6b42cdd49f3 100644 --- a/2021/CVE-2021-33563.md +++ b/2021/CVE-2021-33563.md @@ -10,7 +10,7 @@ Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and ### POC #### Reference -- https://huntr.dev/bounties/1-other-koel/koel/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33849.md b/2021/CVE-2021-33849.md index 33b79d6f210..7ea9bf1e6b5 100644 --- a/2021/CVE-2021-33849.md +++ b/2021/CVE-2021-33849.md @@ -10,8 +10,7 @@ A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html -- https://cybersecurityworks.com/zerodays/cve-2021-33849-stored-cross-site-scripting-xss-in-wordpress-plugin-zoho-crm-lead-magnet-version-1-7-2-4.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33850.md b/2021/CVE-2021-33850.md index c90eb72a50f..80ae43112d7 100644 --- a/2021/CVE-2021-33850.md +++ b/2021/CVE-2021-33850.md @@ -10,7 +10,7 @@ There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2021-33850-stored-cross-site-scripting-xss-in-wordpress-microsoft-clarity-plugin.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33851.md b/2021/CVE-2021-33851.md index 22af6b2db5e..9c20d583407 100644 --- a/2021/CVE-2021-33851.md +++ b/2021/CVE-2021-33851.md @@ -10,7 +10,7 @@ A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2021-33851-stored-cross-site-scripting-in-wordpress-customize-login-image.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33852.md b/2021/CVE-2021-33852.md index 19d137eccaf..0f1d615072b 100644 --- a/2021/CVE-2021-33852.md +++ b/2021/CVE-2021-33852.md @@ -10,7 +10,7 @@ A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2021-33852-stored-cross-site-scripting-in-wordpress-post-duplicator-plugin-2-23.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33853.md b/2021/CVE-2021-33853.md index 9d23f10dd61..ff4b0b12361 100644 --- a/2021/CVE-2021-33853.md +++ b/2021/CVE-2021-33853.md @@ -10,7 +10,7 @@ A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2021-33853-stored-cross-site-scripting-in-x2crm.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33923.md b/2021/CVE-2021-33923.md index 4d5ccc2059f..d2ffbc7dd37 100644 --- a/2021/CVE-2021-33923.md +++ b/2021/CVE-2021-33923.md @@ -11,7 +11,6 @@ Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6 #### Reference - https://confluent.io -- https://www.detack.de/en/cve-2021-33923 #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33924.md b/2021/CVE-2021-33924.md index 174da04f13e..6bb37efc138 100644 --- a/2021/CVE-2021-33924.md +++ b/2021/CVE-2021-33924.md @@ -11,7 +11,6 @@ Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerab #### Reference - https://confluent.io -- https://www.detack.de/en/cve-2021-33924 #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33962.md b/2021/CVE-2021-33962.md index e7834c93aaf..5a56f48e57d 100644 --- a/2021/CVE-2021-33962.md +++ b/2021/CVE-2021-33962.md @@ -10,7 +10,7 @@ China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injectio ### POC #### Reference -- https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33963.md b/2021/CVE-2021-33963.md index 74ab324e5ab..7c2f1410cae 100644 --- a/2021/CVE-2021-33963.md +++ b/2021/CVE-2021-33963.md @@ -10,7 +10,7 @@ China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone ### POC #### Reference -- https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33964.md b/2021/CVE-2021-33964.md index 5a8052ecb47..676a60c6bcb 100644 --- a/2021/CVE-2021-33964.md +++ b/2021/CVE-2021-33964.md @@ -10,7 +10,7 @@ China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleF ### POC #### Reference -- https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-33965.md b/2021/CVE-2021-33965.md index ecbdd919c69..7ead3d4844c 100644 --- a/2021/CVE-2021-33965.md +++ b/2021/CVE-2021-33965.md @@ -10,7 +10,7 @@ China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/ ### POC #### Reference -- https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-34543.md b/2021/CVE-2021-34543.md index 03365e41222..02bacb3fe65 100644 --- a/2021/CVE-2021-34543.md +++ b/2021/CVE-2021-34543.md @@ -10,7 +10,6 @@ The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not re ### POC #### Reference -- https://drive.google.com/file/d/1z1TaANlDyX4SOP2vjNzkPQI3nETL9kZM/view?usp=sharing - https://www.exploit-db.com/exploits/49986 #### Github diff --git a/2021/CVE-2021-34544.md b/2021/CVE-2021-34544.md index 8bdf3eb1fa2..42dea21da44 100644 --- a/2021/CVE-2021-34544.md +++ b/2021/CVE-2021-34544.md @@ -10,7 +10,6 @@ An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /e ### POC #### Reference -- https://drive.google.com/file/d/1N8Ch1UGNcoocUaPhOe_1mAECOe5kr4pt/view?usp=sharing - https://www.exploit-db.com/exploits/49987 #### Github diff --git a/2021/CVE-2021-3460.md b/2021/CVE-2021-3460.md index 941f76a411b..0a1a5d2a711 100644 --- a/2021/CVE-2021-3460.md +++ b/2021/CVE-2021-3460.md @@ -10,7 +10,7 @@ The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify ### POC #### Reference -- https://motorolamentor.zendesk.com/hc/en-us/articles/1260804087249 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35380.md b/2021/CVE-2021-35380.md index 25d0f273e9d..ace71c752bf 100644 --- a/2021/CVE-2021-35380.md +++ b/2021/CVE-2021-35380.md @@ -11,7 +11,6 @@ A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (T #### Reference - https://www.exploit-db.com/exploits/50638 -- https://www.swascan.com/solari-di-udine/ #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35391.md b/2021/CVE-2021-35391.md index 16f49bfa9aa..236ec9715f4 100644 --- a/2021/CVE-2021-35391.md +++ b/2021/CVE-2021-35391.md @@ -10,7 +10,7 @@ Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21 ### POC #### Reference -- https://sayaanalam.github.io/CVE-2021-35391.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35450.md b/2021/CVE-2021-35450.md index 9e26ddc6cce..0aa880df309 100644 --- a/2021/CVE-2021-35450.md +++ b/2021/CVE-2021-35450.md @@ -10,7 +10,7 @@ A Server Side Template Injection in the Entando Admin Console 6.3.9 and before a ### POC #### Reference -- https://www.swascan.com/entando/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35488.md b/2021/CVE-2021-35488.md index 3c29a6f1f78..ad2aaec5a52 100644 --- a/2021/CVE-2021-35488.md +++ b/2021/CVE-2021-35488.md @@ -10,7 +10,7 @@ Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Refl ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35489.md b/2021/CVE-2021-35489.md index 5c8452cb6f2..83136e7d8e4 100644 --- a/2021/CVE-2021-35489.md +++ b/2021/CVE-2021-35489.md @@ -10,7 +10,7 @@ Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={ ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35490.md b/2021/CVE-2021-35490.md index b26bd4118b3..b55ff96d849 100644 --- a/2021/CVE-2021-35490.md +++ b/2021/CVE-2021-35490.md @@ -10,7 +10,7 @@ Thruk before 2.44 allows XSS for a quick command. ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35491.md b/2021/CVE-2021-35491.md index fd5eecab7ad..28bcbd0ce8d 100644 --- a/2021/CVE-2021-35491.md +++ b/2021/CVE-2021-35491.md @@ -11,7 +11,6 @@ A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine thro #### Reference - https://n4nj0.github.io/advisories/wowza-streaming-engine-i/ -- https://www.gruppotim.it/redteam #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35492.md b/2021/CVE-2021-35492.md index 7891d57c4e4..29fbf69ca38 100644 --- a/2021/CVE-2021-35492.md +++ b/2021/CVE-2021-35492.md @@ -11,7 +11,6 @@ Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote att #### Reference - https://n4nj0.github.io/advisories/wowza-streaming-engine-i/ -- https://www.gruppotim.it/redteam #### Github - https://github.com/N4nj0/CVE-2021-35492 diff --git a/2021/CVE-2021-35528.md b/2021/CVE-2021-35528.md index 1a82b1d5eda..643227593cb 100644 --- a/2021/CVE-2021-35528.md +++ b/2021/CVE-2021-35528.md @@ -11,7 +11,7 @@ Improper Access Control vulnerability in the application authentication and auth ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000068&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-35941.md b/2021/CVE-2021-35941.md index 643bffeb5fa..84c9126b899 100644 --- a/2021/CVE-2021-35941.md +++ b/2021/CVE-2021-35941.md @@ -10,7 +10,7 @@ Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all ver ### POC #### Reference -- https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-3603.md b/2021/CVE-2021-3603.md index 295df92820c..16361425b22 100644 --- a/2021/CVE-2021-3603.md +++ b/2021/CVE-2021-3603.md @@ -10,7 +10,7 @@ PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted ### POC #### Reference -- https://www.huntr.dev/bounties/1-PHPMailer/PHPMailer/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36198.md b/2021/CVE-2021-36198.md index fbf7a8e0764..5be3edaa60d 100644 --- a/2021/CVE-2021-36198.md +++ b/2021/CVE-2021-36198.md @@ -10,7 +10,7 @@ Successful exploitation of this vulnerability could allow an unauthorized user t ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36199.md b/2021/CVE-2021-36199.md index eb9048a4823..3d4da0125cf 100644 --- a/2021/CVE-2021-36199.md +++ b/2021/CVE-2021-36199.md @@ -10,7 +10,7 @@ Running a vulnerability scanner against VideoEdge NVRs can cause some functional ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36200.md b/2021/CVE-2021-36200.md index 8b5f50d3184..6f100923456 100644 --- a/2021/CVE-2021-36200.md +++ b/2021/CVE-2021-36200.md @@ -11,7 +11,7 @@ Under certain circumstances an unauthenticated user could access the the web API ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36201.md b/2021/CVE-2021-36201.md index b76ae01ff53..a89f2c2159e 100644 --- a/2021/CVE-2021-36201.md +++ b/2021/CVE-2021-36201.md @@ -10,7 +10,7 @@ Under certain circumstances a CCURE Portal user could enumerate user accounts in ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36202.md b/2021/CVE-2021-36202.md index 2488eb4e6ee..97d15bbac74 100644 --- a/2021/CVE-2021-36202.md +++ b/2021/CVE-2021-36202.md @@ -11,7 +11,7 @@ Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys cou ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36204.md b/2021/CVE-2021-36204.md index c571e95f521..2a72ed7b63b 100644 --- a/2021/CVE-2021-36204.md +++ b/2021/CVE-2021-36204.md @@ -11,7 +11,7 @@ Under some circumstances an Insufficiently Protected Credentials vulnerability i ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36205.md b/2021/CVE-2021-36205.md index 6ecde89f3ce..fc04df0d023 100644 --- a/2021/CVE-2021-36205.md +++ b/2021/CVE-2021-36205.md @@ -11,7 +11,7 @@ Under certain circumstances the session token is not cleared on logout. ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36206.md b/2021/CVE-2021-36206.md index 12835e8fbe2..a033d580dea 100644 --- a/2021/CVE-2021-36206.md +++ b/2021/CVE-2021-36206.md @@ -10,7 +10,7 @@ All versions of CEVAS prior to 1.01.46 do not sufficiently validate user-control ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36207.md b/2021/CVE-2021-36207.md index a4c45123cff..cf6fd1b0f2a 100644 --- a/2021/CVE-2021-36207.md +++ b/2021/CVE-2021-36207.md @@ -11,7 +11,7 @@ Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-3647.md b/2021/CVE-2021-3647.md index bf598d7aca0..7014d2602c5 100644 --- a/2021/CVE-2021-3647.md +++ b/2021/CVE-2021-3647.md @@ -10,7 +10,7 @@ URI.js is vulnerable to URL Redirection to Untrusted Site ### POC #### Reference -- https://huntr.dev/bounties/1625558772840-medialize/URI.js +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-3649.md b/2021/CVE-2021-3649.md index 1d28407f1f0..e5b27a1b8c2 100644 --- a/2021/CVE-2021-3649.md +++ b/2021/CVE-2021-3649.md @@ -10,7 +10,7 @@ chatwoot is vulnerable to Inefficient Regular Expression Complexity ### POC #### Reference -- https://huntr.dev/bounties/1625088985607-chatwoot/chatwoot +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-3664.md b/2021/CVE-2021-3664.md index 6f1c6563f70..ac3fbfd22fc 100644 --- a/2021/CVE-2021-3664.md +++ b/2021/CVE-2021-3664.md @@ -10,7 +10,7 @@ url-parse is vulnerable to URL Redirection to Untrusted Site ### POC #### Reference -- https://huntr.dev/bounties/1625557993985-unshiftio/url-parse +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-3666.md b/2021/CVE-2021-3666.md index 49177fe0376..c4a9d650921 100644 --- a/2021/CVE-2021-3666.md +++ b/2021/CVE-2021-3666.md @@ -10,7 +10,7 @@ body-parser-xml is vulnerable to Improperly Controlled Modification of Object Pr ### POC #### Reference -- https://huntr.dev/bounties/1-other-fiznool/body-parser-xml +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-36750.md b/2021/CVE-2021-36750.md index 241f75143d9..7de32db5ebe 100644 --- a/2021/CVE-2021-36750.md +++ b/2021/CVE-2021-36750.md @@ -10,7 +10,7 @@ ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it ea ### POC #### Reference -- https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software +No PoCs from references. #### Github - https://github.com/mamba-4-ever/CVE-2021-36750 diff --git a/2021/CVE-2021-36751.md b/2021/CVE-2021-36751.md index bc92eccb69d..362a4150145 100644 --- a/2021/CVE-2021-36751.md +++ b/2021/CVE-2021-36751.md @@ -10,7 +10,7 @@ ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm th ### POC #### Reference -- https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-37291.md b/2021/CVE-2021-37291.md index cf114fda47b..c8bd0a23bb5 100644 --- a/2021/CVE-2021-37291.md +++ b/2021/CVE-2021-37291.md @@ -10,7 +10,7 @@ An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management ### POC #### Reference -- https://www.zeroscience.mk/en/vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-37292.md b/2021/CVE-2021-37292.md index 269c2bfbb0e..2ae57784368 100644 --- a/2021/CVE-2021-37292.md +++ b/2021/CVE-2021-37292.md @@ -10,7 +10,7 @@ An Access Control vulnerability exists in KevinLAB Inc Building Energy Managemen ### POC #### Reference -- https://www.zeroscience.mk/en/vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-37293.md b/2021/CVE-2021-37293.md index 945fa6a5460..5b0ed2f883d 100644 --- a/2021/CVE-2021-37293.md +++ b/2021/CVE-2021-37293.md @@ -10,7 +10,7 @@ A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Manag ### POC #### Reference -- https://www.zeroscience.mk/en/vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-37749.md b/2021/CVE-2021-37749.md index df453bd88fa..3988112a4fc 100644 --- a/2021/CVE-2021-37749.md +++ b/2021/CVE-2021-37749.md @@ -10,7 +10,7 @@ MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) a ### POC #### Reference -- https://www.silentgrid.com/blog/cve-2021-37749-hexagon-geomedia-webmap-2020-blind-sql-injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-37841.md b/2021/CVE-2021-37841.md index 44c3bec3d8d..3f76d3aca68 100644 --- a/2021/CVE-2021-37841.md +++ b/2021/CVE-2021-37841.md @@ -10,7 +10,7 @@ Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-priv ### POC #### Reference -- https://docs.docker.com/docker-for-windows/release-notes/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38143.md b/2021/CVE-2021-38143.md index 6d1127bb1b9..dd0b03ae217 100644 --- a/2021/CVE-2021-38143.md +++ b/2021/CVE-2021-38143.md @@ -10,7 +10,6 @@ An issue was discovered in Form Tools through 3.0.20. When an administrator crea ### POC #### Reference -- https://bernardofsr.github.io/blog/2021/form-tools/ - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md #### Github diff --git a/2021/CVE-2021-38144.md b/2021/CVE-2021-38144.md index 241dc5124ed..9b9af65313f 100644 --- a/2021/CVE-2021-38144.md +++ b/2021/CVE-2021-38144.md @@ -10,7 +10,6 @@ An issue was discovered in Form Tools through 3.0.20. A low-privileged user can ### POC #### Reference -- https://bernardofsr.github.io/blog/2021/form-tools/ - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md #### Github diff --git a/2021/CVE-2021-38145.md b/2021/CVE-2021-38145.md index 92dbaabda0b..df556943759 100644 --- a/2021/CVE-2021-38145.md +++ b/2021/CVE-2021-38145.md @@ -10,7 +10,6 @@ An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur vi ### POC #### Reference -- https://bernardofsr.github.io/blog/2021/form-tools/ - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md #### Github diff --git a/2021/CVE-2021-38178.md b/2021/CVE-2021-38178.md index b00b631925d..ea2402c8f0f 100644 --- a/2021/CVE-2021-38178.md +++ b/2021/CVE-2021-38178.md @@ -23,7 +23,7 @@ The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform version ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38179.md b/2021/CVE-2021-38179.md index 2dfd9a61cee..429070bc4c5 100644 --- a/2021/CVE-2021-38179.md +++ b/2021/CVE-2021-38179.md @@ -10,7 +10,7 @@ Debug function of Admin UI of SAP Business One Integration is enabled by default ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38180.md b/2021/CVE-2021-38180.md index 0dc49586b51..5cef6d114cf 100644 --- a/2021/CVE-2021-38180.md +++ b/2021/CVE-2021-38180.md @@ -10,7 +10,7 @@ SAP Business One - version 10.0, allows an attacker to inject formulas when expo ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38181.md b/2021/CVE-2021-38181.md index 2ffb0e85735..4193852405c 100644 --- a/2021/CVE-2021-38181.md +++ b/2021/CVE-2021-38181.md @@ -22,7 +22,7 @@ SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38183.md b/2021/CVE-2021-38183.md index e46facd0fdd..0f753247423 100644 --- a/2021/CVE-2021-38183.md +++ b/2021/CVE-2021-38183.md @@ -13,7 +13,7 @@ SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-c ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38584.md b/2021/CVE-2021-38584.md index 9d8280cdf80..8f697b6ead2 100644 --- a/2021/CVE-2021-38584.md +++ b/2021/CVE-2021-38584.md @@ -10,7 +10,7 @@ The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-58 ### POC #### Reference -- https://docs.cpanel.net/changelogs/98-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38585.md b/2021/CVE-2021-38585.md index 72547b9a4e5..fe1604f8465 100644 --- a/2021/CVE-2021-38585.md +++ b/2021/CVE-2021-38585.md @@ -10,7 +10,7 @@ The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization att ### POC #### Reference -- https://docs.cpanel.net/changelogs/98-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-38586.md b/2021/CVE-2021-38586.md index 246131ec43d..754c98d3c99 100644 --- a/2021/CVE-2021-38586.md +++ b/2021/CVE-2021-38586.md @@ -10,7 +10,7 @@ In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on file ### POC #### Reference -- https://docs.cpanel.net/changelogs/98-change-log/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40212.md b/2021/CVE-2021-40212.md index 7db00f50688..a012d42a0b7 100644 --- a/2021/CVE-2021-40212.md +++ b/2021/CVE-2021-40212.md @@ -10,8 +10,7 @@ An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 21 ### POC #### Reference -- https://a-man-in-the-cookie.blogspot.com -- https://a-man-in-the-cookie.blogspot.com/2021/08/PotPlayer-Critical-Memory-Access-Violation-Vulnerability.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40337.md b/2021/CVE-2021-40337.md index 192ae8d0e70..24eb6669b25 100644 --- a/2021/CVE-2021-40337.md +++ b/2021/CVE-2021-40337.md @@ -15,7 +15,7 @@ Cross-site Scripting (XSS) vulnerability in Hitachi Energy LinkOne allows an att ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40338.md b/2021/CVE-2021-40338.md index 2ed0408e74a..d0325f402a8 100644 --- a/2021/CVE-2021-40338.md +++ b/2021/CVE-2021-40338.md @@ -10,7 +10,7 @@ Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfi ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40339.md b/2021/CVE-2021-40339.md index 0fab043314e..fdd2506409e 100644 --- a/2021/CVE-2021-40339.md +++ b/2021/CVE-2021-40339.md @@ -10,7 +10,7 @@ Configuration vulnerability in Hitachi Energy LinkOne application due to the lac ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40340.md b/2021/CVE-2021-40340.md index 81d2313a5ce..c1694f19be5 100644 --- a/2021/CVE-2021-40340.md +++ b/2021/CVE-2021-40340.md @@ -10,7 +10,7 @@ Information Exposure vulnerability in Hitachi Energy LinkOne application, due to ### POC #### Reference -- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40423.md b/2021/CVE-2021-40423.md index c855b62905b..f7d215d5359 100644 --- a/2021/CVE-2021-40423.md +++ b/2021/CVE-2021-40423.md @@ -10,7 +10,7 @@ A denial of service vulnerability exists in the cgiserver.cgi API command parser ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1432 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40495.md b/2021/CVE-2021-40495.md index 5af7c763962..be74e69e5ef 100644 --- a/2021/CVE-2021-40495.md +++ b/2021/CVE-2021-40495.md @@ -16,7 +16,7 @@ There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Applicatio ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40496.md b/2021/CVE-2021-40496.md index 768dabce6e8..9cda7df8440 100644 --- a/2021/CVE-2021-40496.md +++ b/2021/CVE-2021-40496.md @@ -23,7 +23,7 @@ SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 7 ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40497.md b/2021/CVE-2021-40497.md index 620be203941..d8c050ed616 100644 --- a/2021/CVE-2021-40497.md +++ b/2021/CVE-2021-40497.md @@ -11,7 +11,7 @@ SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an a ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40498.md b/2021/CVE-2021-40498.md index d3cda66986d..36ea0c4e35d 100644 --- a/2021/CVE-2021-40498.md +++ b/2021/CVE-2021-40498.md @@ -10,7 +10,7 @@ A vulnerability has been identified in SAP SuccessFactors Mobile Application for ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40499.md b/2021/CVE-2021-40499.md index 550b92de2ae..bb2450b3c26 100644 --- a/2021/CVE-2021-40499.md +++ b/2021/CVE-2021-40499.md @@ -12,7 +12,7 @@ Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetW ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-40500.md b/2021/CVE-2021-40500.md index 0d55123d7a6..9cd2f9cc012 100644 --- a/2021/CVE-2021-40500.md +++ b/2021/CVE-2021-40500.md @@ -11,7 +11,7 @@ SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions ### POC #### Reference -- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41110.md b/2021/CVE-2021-41110.md index 3aa1d74d3b9..94ff63dcfcf 100644 --- a/2021/CVE-2021-41110.md +++ b/2021/CVE-2021-41110.md @@ -10,7 +10,7 @@ cwlviewer is a web application to view and share Common Workflow Language workfl ### POC #### Reference -- https://www.fatalerrors.org/a/analysis-of-the-snakeyaml-deserialization-in-java-security.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41553.md b/2021/CVE-2021-41553.md index 59d8791d6d2..fe5fe548acc 100644 --- a/2021/CVE-2021-41553.md +++ b/2021/CVE-2021-41553.md @@ -10,7 +10,7 @@ In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41554.md b/2021/CVE-2021-41554.md index 6b5baa90d69..e4c9e2c1016 100644 --- a/2021/CVE-2021-41554.md +++ b/2021/CVE-2021-41554.md @@ -10,7 +10,7 @@ ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41555.md b/2021/CVE-2021-41555.md index 680587a28ab..67cf3a81d36 100644 --- a/2021/CVE-2021-41555.md +++ b/2021/CVE-2021-41555.md @@ -10,7 +10,7 @@ In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibu ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41634.md b/2021/CVE-2021-41634.md index 81112ebdadf..d46d841ea6c 100644 --- a/2021/CVE-2021-41634.md +++ b/2021/CVE-2021-41634.md @@ -10,7 +10,7 @@ A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker ### POC #### Reference -- https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41635.md b/2021/CVE-2021-41635.md index da1a86e3c6b..c363fa47e49 100644 --- a/2021/CVE-2021-41635.md +++ b/2021/CVE-2021-41635.md @@ -10,7 +10,7 @@ When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user ### POC #### Reference -- https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41636.md b/2021/CVE-2021-41636.md index 6e7678b6b4d..736137bc527 100644 --- a/2021/CVE-2021-41636.md +++ b/2021/CVE-2021-41636.md @@ -10,7 +10,7 @@ MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out ### POC #### Reference -- https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41637.md b/2021/CVE-2021-41637.md index ed29354d99b..60834ffb3fb 100644 --- a/2021/CVE-2021-41637.md +++ b/2021/CVE-2021-41637.md @@ -10,7 +10,7 @@ Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" ### POC #### Reference -- https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41638.md b/2021/CVE-2021-41638.md index 5e3f49a3773..3f42215cd73 100644 --- a/2021/CVE-2021-41638.md +++ b/2021/CVE-2021-41638.md @@ -10,7 +10,7 @@ The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incompl ### POC #### Reference -- https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41639.md b/2021/CVE-2021-41639.md index 26cb49ac45f..d9972168480 100644 --- a/2021/CVE-2021-41639.md +++ b/2021/CVE-2021-41639.md @@ -10,7 +10,7 @@ MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local co ### POC #### Reference -- https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-41821.md b/2021/CVE-2021-41821.md index fa3327ec410..66bb32459bf 100644 --- a/2021/CVE-2021-41821.md +++ b/2021/CVE-2021-41821.md @@ -10,7 +10,7 @@ Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow v ### POC #### Reference -- https://documentation.wazuh.com/current/release-notes/release_4_2_0.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-42220.md b/2021/CVE-2021-42220.md index 77d92f90ec8..13ba57366d9 100644 --- a/2021/CVE-2021-42220.md +++ b/2021/CVE-2021-42220.md @@ -11,7 +11,6 @@ A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via #### Reference - https://packetstormsecurity.com/files/164544/Dolibarr-ERP-CRM-14.0.2-Cross-Site-Scripting-Privilege-Escalation.html -- https://truedigitalsecurity.com/advisory-summary-2021 #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-4240.md b/2021/CVE-2021-4240.md index 82d95b7b227..502566ed04a 100644 --- a/2021/CVE-2021-4240.md +++ b/2021/CVE-2021-4240.md @@ -10,7 +10,6 @@ A vulnerability, which was classified as problematic, was found in phpservermon. ### POC #### Reference -- https://huntr.dev/bounties/2-phpservermon/phpservermon/ - https://vuldb.com/?id.213717 #### Github diff --git a/2021/CVE-2021-4241.md b/2021/CVE-2021-4241.md index 38320e6e1a8..61dbe8df3d4 100644 --- a/2021/CVE-2021-4241.md +++ b/2021/CVE-2021-4241.md @@ -11,7 +11,6 @@ A vulnerability, which was classified as problematic, was found in phpservermon. #### Reference - https://github.com/phpservermon/phpservermon/commit/bb10a5f3c68527c58073258cb12446782d223bc3 -- https://huntr.dev/bounties/1-phpservermon/phpservermon/ - https://vuldb.com/?id.213744 #### Github diff --git a/2021/CVE-2021-42568.md b/2021/CVE-2021-42568.md index 5bfdde14a30..efcbe29405c 100644 --- a/2021/CVE-2021-42568.md +++ b/2021/CVE-2021-42568.md @@ -11,7 +11,6 @@ Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access #### Reference - https://support.sonatype.com -- https://support.sonatype.com/hc/en-us/articles/4408801690515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021 #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-42940.md b/2021/CVE-2021-42940.md index 9d50ca5e73a..2e5a45dde75 100644 --- a/2021/CVE-2021-42940.md +++ b/2021/CVE-2021-42940.md @@ -10,7 +10,7 @@ A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeq ### POC #### Reference -- https://truedigitalsecurity.com/services/penetration-testing-services/advisory-summary-2.2022-cve-2021-42940 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-43136.md b/2021/CVE-2021-43136.md index 46afd3a52e9..33207115114 100644 --- a/2021/CVE-2021-43136.md +++ b/2021/CVE-2021-43136.md @@ -12,7 +12,6 @@ An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass #### Reference - http://packetstormsecurity.com/files/164930/FormaLMS-2.4.4-Authentication-Bypass.html - https://blog.hacktivesecurity.com -- https://blog.hacktivesecurity.com/index.php/2021/10/05/cve-2021-43136-formalms-the-evil-default-value-that-leads-to-authentication-bypass/ #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-43293.md b/2021/CVE-2021-43293.md index 2a84d604b59..fcb766cc60c 100644 --- a/2021/CVE-2021-43293.md +++ b/2021/CVE-2021-43293.md @@ -10,7 +10,7 @@ Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticate ### POC #### Reference -- https://support.sonatype.com/hc/en-us/articles/4409326330003 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-43329.md b/2021/CVE-2021-43329.md index 6ac46a932bd..d343f8f17db 100644 --- a/2021/CVE-2021-43329.md +++ b/2021/CVE-2021-43329.md @@ -14,7 +14,6 @@ A SQL injection vulnerability in license_update.php in Mumara Classic through 2. - https://packetstormsecurity.com/files/164947/Mumara-Classic-2.93-SQL-Injection.html - https://packetstormsecurity.com/files/164947/mumaraclassic293-sql.txt - https://vulners.com/zdt/1337DAY-ID-37036 -- https://www.cyberdetails.org/2021/11/mumara-classic-293-sql-injection.html - https://www.exploit-db.com/exploits/50518 - https://www.gen.net.uk/about-us/news/50-exploit-db/18335-webapps-mumara-classic-293-license-sql-injection-unauthenticated diff --git a/2021/CVE-2021-43960.md b/2021/CVE-2021-43960.md index 3a19d0a60e6..705ad3e2d17 100644 --- a/2021/CVE-2021-43960.md +++ b/2021/CVE-2021-43960.md @@ -10,7 +10,7 @@ Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability. Exploi ### POC #### Reference -- https://www.surecloud.com/resources/blog/lorensbergs-connect2-cross-site-scripting +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-44041.md b/2021/CVE-2021-44041.md index 1b857a903bc..012fc71d5d8 100644 --- a/2021/CVE-2021-44041.md +++ b/2021/CVE-2021-44041.md @@ -10,8 +10,7 @@ UiPath Assistant 21.4.4 will load and execute attacker controlled data from the ### POC #### Reference -- https://docs.uipath.com/robot/docs/release-notes-2021-10-4 -- https://docs.uipath.com/robot/docs/uipath-assistant +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-44042.md b/2021/CVE-2021-44042.md index f2a0c62d842..7ffa756d32a 100644 --- a/2021/CVE-2021-44042.md +++ b/2021/CVE-2021-44042.md @@ -10,8 +10,7 @@ An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplie ### POC #### Reference -- https://docs.uipath.com/robot/docs/release-notes-2021-10-4 -- https://docs.uipath.com/robot/docs/uipath-assistant +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-44043.md b/2021/CVE-2021-44043.md index 31634eb0072..370a122b7d5 100644 --- a/2021/CVE-2021-44043.md +++ b/2021/CVE-2021-44043.md @@ -10,8 +10,7 @@ An issue was discovered in UiPath App Studio 21.4.4. There is a persistent XSS v ### POC #### Reference -- https://docs.uipath.com/apps/v2021.10/docs/2021-10-1 -- https://docs.uipath.com/robot/docs/uipath-assistant +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-44263.md b/2021/CVE-2021-44263.md index f12ec95d034..aa87d62c55b 100644 --- a/2021/CVE-2021-44263.md +++ b/2021/CVE-2021-44263.md @@ -10,7 +10,7 @@ Gurock TestRail before 7.2.4 mishandles HTML escaping. ### POC #### Reference -- https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-4432.md b/2021/CVE-2021-4432.md index 5f746b41ec7..5671b0a3da8 100644 --- a/2021/CVE-2021-4432.md +++ b/2021/CVE-2021-4432.md @@ -11,7 +11,6 @@ Es wurde eine Schwachstelle in PCMan FTP Server 2.0.7 ausgemacht. Sie wurde als ### POC #### Reference -- https://0day.today/exploit/description/36412 - https://packetstormsecurity.com/files/163104/PCMan-FTP-Server-2.0.7-Denial-Of-Service.html - https://vuldb.com/?id.250719 diff --git a/2021/CVE-2021-44521.md b/2021/CVE-2021-44521.md index 38edc8e705e..51a5dfce723 100644 --- a/2021/CVE-2021-44521.md +++ b/2021/CVE-2021-44521.md @@ -13,7 +13,7 @@ When running Apache Cassandra with the following configuration: enable_user_defi ### POC #### Reference -- https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-functions-for-remote-code-execution/ +No PoCs from references. #### Github - https://github.com/WoodenKlaas/CVE-2021-44521 diff --git a/2021/CVE-2021-45420.md b/2021/CVE-2021-45420.md index c375ca7bf7d..60611455796 100644 --- a/2021/CVE-2021-45420.md +++ b/2021/CVE-2021-45420.md @@ -10,7 +10,7 @@ Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerabil ### POC #### Reference -- https://www.swascan.com/emerson +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-45421.md b/2021/CVE-2021-45421.md index c031158cc0a..dd03d32a9a1 100644 --- a/2021/CVE-2021-45421.md +++ b/2021/CVE-2021-45421.md @@ -10,7 +10,7 @@ Emerson Dixell XWEB-500 products are affected by information disclosure via dire ### POC #### Reference -- https://www.swascan.com/emerson +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-45901.md b/2021/CVE-2021-45901.md index 2eae3f80fbc..8b3aa515fad 100644 --- a/2021/CVE-2021-45901.md +++ b/2021/CVE-2021-45901.md @@ -11,7 +11,6 @@ The password-reset form in ServiceNow Orlando provides different responses to in #### Reference - http://packetstormsecurity.com/files/165989/ServiceNow-Orlando-Username-Enumeration.html -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/servicenow-username-enumeration-vulnerability-cve-2021-45901/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ #### Github diff --git a/2021/CVE-2021-45919.md b/2021/CVE-2021-45919.md index 6684db24f05..87d70ed6b5f 100644 --- a/2021/CVE-2021-45919.md +++ b/2021/CVE-2021-45919.md @@ -10,7 +10,7 @@ Studio 42 elFinder through 2.1.31 allows XSS via an SVG document. ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/from-stored-xss-to-rce-using-beef-and-elfinder-cve-2021-45919/ +No PoCs from references. #### Github - https://github.com/SpiderLabs/Jorogumo diff --git a/2021/CVE-2021-46167.md b/2021/CVE-2021-46167.md index 1fb21554cc4..c3a2f21688d 100644 --- a/2021/CVE-2021-46167.md +++ b/2021/CVE-2021-46167.md @@ -10,7 +10,7 @@ An access control issue in the authentication module of wizplat PD065 v1.19 allo ### POC #### Reference -- http://wizplat.com/PRODUCT1_3/?idx=217 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-46388.md b/2021/CVE-2021-46388.md index e795d8810c9..d52534238d1 100644 --- a/2021/CVE-2021-46388.md +++ b/2021/CVE-2021-46388.md @@ -10,7 +10,7 @@ ### POC #### Reference -- https://drive.google.com/drive/folders/1FDtxZayLeSITcqP72c7FsTOpAFGFePVE +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2021/CVE-2021-46709.md b/2021/CVE-2021-46709.md index e4bd5610ca7..7366f50151e 100644 --- a/2021/CVE-2021-46709.md +++ b/2021/CVE-2021-46709.md @@ -10,7 +10,7 @@ phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka ### POC #### Reference -- https://bitbucket.org/phpliteadmin/public/issues/399/xss-vulnerability +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-1253.md b/2022/CVE-2022-1253.md index c73e8561d4b..f009897ec74 100644 --- a/2022/CVE-2022-1253.md +++ b/2022/CVE-2022-1253.md @@ -10,7 +10,7 @@ Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and ### POC #### Reference -- https://huntr.dev/bounties/1-other-strukturag/libde265 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21134.md b/2022/CVE-2022-21134.md index 31d817ecc47..c1a7c9ba1d5 100644 --- a/2022/CVE-2022-21134.md +++ b/2022/CVE-2022-21134.md @@ -10,7 +10,7 @@ A firmware update vulnerability exists in the "update" firmware checks ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1447 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21199.md b/2022/CVE-2022-21199.md index 024c574ef32..1b13e95cb2c 100644 --- a/2022/CVE-2022-21199.md +++ b/2022/CVE-2022-21199.md @@ -10,7 +10,7 @@ An information disclosure vulnerability exists due to the hardcoded TLS key of r ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1448 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21217.md b/2022/CVE-2022-21217.md index fca64e3c6d8..036a762d8ea 100644 --- a/2022/CVE-2022-21217.md +++ b/2022/CVE-2022-21217.md @@ -10,7 +10,7 @@ An out-of-bounds write vulnerability exists in the device TestEmail functionalit ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1445 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21796.md b/2022/CVE-2022-21796.md index 56c78da9dbc..51ee7c5c1ef 100644 --- a/2022/CVE-2022-21796.md +++ b/2022/CVE-2022-21796.md @@ -10,7 +10,7 @@ A memory corruption vulnerability exists in the netserver parse_command_list fun ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1451 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21801.md b/2022/CVE-2022-21801.md index 21abb78b311..2ab7735a4b7 100644 --- a/2022/CVE-2022-21801.md +++ b/2022/CVE-2022-21801.md @@ -10,7 +10,7 @@ A denial of service vulnerability exists in the netserver recv_command functiona ### POC #### Reference -- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1450 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21934.md b/2022/CVE-2022-21934.md index 4a356c1058b..c8f12e42495 100644 --- a/2022/CVE-2022-21934.md +++ b/2022/CVE-2022-21934.md @@ -11,7 +11,7 @@ Under certain circumstances an authenticated user could lock other users out of ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21935.md b/2022/CVE-2022-21935.md index 9ed103e422d..e27f2afbad5 100644 --- a/2022/CVE-2022-21935.md +++ b/2022/CVE-2022-21935.md @@ -11,7 +11,7 @@ A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys A ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21936.md b/2022/CVE-2022-21936.md index 3ab845d6810..33adee6092e 100644 --- a/2022/CVE-2022-21936.md +++ b/2022/CVE-2022-21936.md @@ -10,7 +10,7 @@ On Metasys ADX Server version 12.0 running MVE, an Active Directory user could e ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21937.md b/2022/CVE-2022-21937.md index 9a588cbd61f..bcc0646703c 100644 --- a/2022/CVE-2022-21937.md +++ b/2022/CVE-2022-21937.md @@ -11,7 +11,7 @@ Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21938.md b/2022/CVE-2022-21938.md index 35656f96ec3..c03d6ddc1f5 100644 --- a/2022/CVE-2022-21938.md +++ b/2022/CVE-2022-21938.md @@ -11,7 +11,7 @@ Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21939.md b/2022/CVE-2022-21939.md index 41feaa07bbf..2fe17a50b6c 100644 --- a/2022/CVE-2022-21939.md +++ b/2022/CVE-2022-21939.md @@ -11,7 +11,7 @@ Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls Syste ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21940.md b/2022/CVE-2022-21940.md index b7bd69f8fef..4a9a25e6688 100644 --- a/2022/CVE-2022-21940.md +++ b/2022/CVE-2022-21940.md @@ -11,7 +11,7 @@ Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Jo ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-21941.md b/2022/CVE-2022-21941.md index 45a0ce1b971..dc1b3c4a5cf 100644 --- a/2022/CVE-2022-21941.md +++ b/2022/CVE-2022-21941.md @@ -10,7 +10,7 @@ All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a comm ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-23119.md b/2022/CVE-2022-23119.md index dda2350c610..83f0eaa8fc2 100644 --- a/2022/CVE-2022-23119.md +++ b/2022/CVE-2022-23119.md @@ -10,7 +10,6 @@ A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - ### POC #### Reference -- https://success.trendmicro.com/solution/000290104 - https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt #### Github diff --git a/2022/CVE-2022-23120.md b/2022/CVE-2022-23120.md index 93929d49fd2..aaf1ae58365 100644 --- a/2022/CVE-2022-23120.md +++ b/2022/CVE-2022-23120.md @@ -10,7 +10,6 @@ A code injection vulnerability in Trend Micro Deep Security and Cloud One - Work ### POC #### Reference -- https://success.trendmicro.com/solution/000290104 - https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt #### Github diff --git a/2022/CVE-2022-23227.md b/2022/CVE-2022-23227.md index 729b2a51831..d4467aa3ac4 100644 --- a/2022/CVE-2022-23227.md +++ b/2022/CVE-2022-23227.md @@ -12,7 +12,6 @@ NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encry #### Reference - https://github.com/pedrib/PoC/blob/master/advisories/NUUO/nuuo_nvrmini_round2.mkd - https://github.com/rapid7/metasploit-framework/pull/16044 -- https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-device #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-23774.md b/2022/CVE-2022-23774.md index 3548115e1b1..f9eef7f1357 100644 --- a/2022/CVE-2022-23774.md +++ b/2022/CVE-2022-23774.md @@ -10,7 +10,7 @@ Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files. ### POC #### Reference -- https://docs.docker.com/docker-for-windows/release-notes/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-23935.md b/2022/CVE-2022-23935.md index 93314daad0d..06532743cb2 100644 --- a/2022/CVE-2022-23935.md +++ b/2022/CVE-2022-23935.md @@ -10,7 +10,7 @@ lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check ### POC #### Reference -- https://gist.github.com/ert-plus/1414276e4cb5d56dd431c2f0429e4429 +No PoCs from references. #### Github - https://github.com/0xFTW/CVE-2022-23935 diff --git a/2022/CVE-2022-25356.md b/2022/CVE-2022-25356.md index 0402d540eb9..6574d02dd1f 100644 --- a/2022/CVE-2022-25356.md +++ b/2022/CVE-2022-25356.md @@ -10,7 +10,6 @@ Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=log ### POC #### Reference -- https://www.swascan.com/security-advisory-alt-n-security-gateway/ - https://www.tinextacyber.com/security-advisory-alt-n-security-gataway-cve-2022-25356/ #### Github diff --git a/2022/CVE-2022-26186.md b/2022/CVE-2022-26186.md index cd405e0762a..b239b7848f5 100644 --- a/2022/CVE-2022-26186.md +++ b/2022/CVE-2022-26186.md @@ -10,7 +10,7 @@ TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injec ### POC #### Reference -- https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-26187.md b/2022/CVE-2022-26187.md index 3771a7551a6..1579f86e403 100644 --- a/2022/CVE-2022-26187.md +++ b/2022/CVE-2022-26187.md @@ -10,7 +10,7 @@ TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injec ### POC #### Reference -- https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-26188.md b/2022/CVE-2022-26188.md index ecb542add82..893c8c4c183 100644 --- a/2022/CVE-2022-26188.md +++ b/2022/CVE-2022-26188.md @@ -10,7 +10,7 @@ TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injec ### POC #### Reference -- https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-26189.md b/2022/CVE-2022-26189.md index 68f51bafd9c..85111aadbcc 100644 --- a/2022/CVE-2022-26189.md +++ b/2022/CVE-2022-26189.md @@ -10,7 +10,7 @@ TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injec ### POC #### Reference -- https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-26659.md b/2022/CVE-2022-26659.md index e324512750c..884103b2d52 100644 --- a/2022/CVE-2022-26659.md +++ b/2022/CVE-2022-26659.md @@ -10,7 +10,7 @@ Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker ### POC #### Reference -- https://docs.docker.com/docker-for-windows/release-notes/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-27254.md b/2022/CVE-2022-27254.md index bd0725c4375..fa63b0dff60 100644 --- a/2022/CVE-2022-27254.md +++ b/2022/CVE-2022-27254.md @@ -10,7 +10,6 @@ The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal ### POC #### Reference -- https://drive.google.com/file/d/1MtmWfBs1r6Y3JN1HpbNsZqO1GcsdgPdc/view?usp=sharing - https://github.com/nonamecoder/CVE-2022-27254 - https://news.ycombinator.com/item?id=30804702 - https://www.bleepingcomputer.com/news/security/honda-bug-lets-a-hacker-unlock-and-start-your-car-via-replay-attack/ diff --git a/2022/CVE-2022-28290.md b/2022/CVE-2022-28290.md index 7b32c5ec77b..bee0e0da5d5 100644 --- a/2022/CVE-2022-28290.md +++ b/2022/CVE-2022-28290.md @@ -10,7 +10,7 @@ Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plug ### POC #### Reference -- https://cybersecurityworks.com/zerodays/cve-2022-28290-reflected-cross-site-scripting-in-welaunch.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-28291.md b/2022/CVE-2022-28291.md index 26580984272..fd332df969e 100644 --- a/2022/CVE-2022-28291.md +++ b/2022/CVE-2022-28291.md @@ -10,7 +10,7 @@ Insufficiently Protected Credentials: An authenticated user with debug privilege ### POC #### Reference -- https://cybersecurityworks.com/blog/zero-days/csw-expert-discovers-a-zero-day-vulnerability-in-tenables-nessus-scanner.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-2932.md b/2022/CVE-2022-2932.md index ca16ae5f35c..28ce4fbee51 100644 --- a/2022/CVE-2022-2932.md +++ b/2022/CVE-2022-2932.md @@ -10,7 +10,7 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit ### POC #### Reference -- https://huntr.dev/bounties/2-other-bustle/mobiledoc-kit +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-29593.md b/2022/CVE-2022-29593.md index e1bd974b1fe..a565af39654 100644 --- a/2022/CVE-2022-29593.md +++ b/2022/CVE-2022-29593.md @@ -11,7 +11,6 @@ relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allow #### Reference - http://packetstormsecurity.com/files/167868/Dingtian-DT-R002-3.1.276A-Authentication-Bypass.html -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-29593-authentication-bypass-by-capture-replay-dingtian-dt-r002/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ #### Github diff --git a/2022/CVE-2022-29622.md b/2022/CVE-2022-29622.md index 9c96f42fd31..47ebaa2f89c 100644 --- a/2022/CVE-2022-29622.md +++ b/2022/CVE-2022-29622.md @@ -11,8 +11,6 @@ An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to #### Reference - https://github.com/node-formidable/formidable/issues/856 -- https://medium.com/%40zsolt.imre/is-cybersecurity-the-next-supply-chain-vulnerability-9a00de745022 -- https://medium.com/@zsolt.imre/is-cybersecurity-the-next-supply-chain-vulnerability-9a00de745022 - https://www.youtube.com/watch?v=C6QPKooxhAo #### Github diff --git a/2022/CVE-2022-29650.md b/2022/CVE-2022-29650.md index 560742c7cad..ee14c73ebe2 100644 --- a/2022/CVE-2022-29650.md +++ b/2022/CVE-2022-29650.md @@ -10,7 +10,7 @@ Online Food Ordering System v1.0 was discovered to contain a SQL injection vulne ### POC #### Reference -- https://hackmd.io/@d4rkp0w4r/Online_Food_Ordering_System_Unauthenticated_Sql_Injection +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-29651.md b/2022/CVE-2022-29651.md index e06f217c009..4decbb11f1c 100644 --- a/2022/CVE-2022-29651.md +++ b/2022/CVE-2022-29651.md @@ -10,7 +10,7 @@ An arbitrary file upload vulnerability in the Select Image function of Online Fo ### POC #### Reference -- https://hackmd.io/@d4rkp0w4r/Online_Food_Ordering_System_Remote_Code_Execution +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-30036.md b/2022/CVE-2022-30036.md index 4c1defaec7e..c68a8fb64f8 100644 --- a/2022/CVE-2022-30036.md +++ b/2022/CVE-2022-30036.md @@ -10,7 +10,7 @@ MA Lighting grandMA2 Light has a password of root for the root account. NOTE: Th ### POC #### Reference -- https://parzival.sh/posts/Pwning-a-Lighting-Console-in-a-Few-Minutes/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-30037.md b/2022/CVE-2022-30037.md index bcd908e935d..b700d21ad44 100644 --- a/2022/CVE-2022-30037.md +++ b/2022/CVE-2022-30037.md @@ -10,7 +10,7 @@ XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusi ### POC #### Reference -- https://weltolk.github.io/p/xunruicms-v4.3.3-to-v4.5.1-backstage-code-injection-vulnerabilityfile-write-and-file-inclusion/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-30121.md b/2022/CVE-2022-30121.md index 597ba5e73d1..a10d58e2c8c 100644 --- a/2022/CVE-2022-30121.md +++ b/2022/CVE-2022-30121.md @@ -10,7 +10,7 @@ The “LANDesk(R) Management Agent” service exposes a socket and once connecte ### POC #### Reference -- https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-30121?language=en_US +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-30284.md b/2022/CVE-2022-30284.md index 8eb1d322a30..13add97a999 100644 --- a/2022/CVE-2022-30284.md +++ b/2022/CVE-2022-30284.md @@ -10,7 +10,7 @@ In the python-libnmap package through 0.7.2 for Python, remote command execution ### POC #### Reference -- https://www.swascan.com/security-advisory-libnmap-2/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-30422.md b/2022/CVE-2022-30422.md index 5d26d1ebae3..d53a6a13700 100644 --- a/2022/CVE-2022-30422.md +++ b/2022/CVE-2022-30422.md @@ -10,7 +10,7 @@ Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0 ### POC #### Reference -- https://www.swascan.com/it/security-advisory-proietti-planet-time-enterprise-cve-2022-30422/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-30930.md b/2022/CVE-2022-30930.md index c1fe415cf78..b3145cac9cf 100644 --- a/2022/CVE-2022-30930.md +++ b/2022/CVE-2022-30930.md @@ -10,8 +10,7 @@ Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forg ### POC #### Reference -- https://medium.com/%40pmmali/my-second-cve-2022-30930-4f9aab047518 -- https://medium.com/@pmmali/my-second-cve-2022-30930-4f9aab047518 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-31358.md b/2022/CVE-2022-31358.md index e42bbd25b26..099c0dc724b 100644 --- a/2022/CVE-2022-31358.md +++ b/2022/CVE-2022-31358.md @@ -10,7 +10,7 @@ A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environm ### POC #### Reference -- https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-32168.md b/2022/CVE-2022-32168.md index 4e4ab0d6079..1ee9734e71b 100644 --- a/2022/CVE-2022-32168.md +++ b/2022/CVE-2022-32168.md @@ -11,7 +11,7 @@ Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an att ### POC #### Reference -- https://www.mend.io/vulnerability-database/CVE-2022-32168 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-32277.md b/2022/CVE-2022-32277.md index 36b1d69a0a8..6c278f28862 100644 --- a/2022/CVE-2022-32277.md +++ b/2022/CVE-2022-32277.md @@ -10,7 +10,7 @@ Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference cause ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/squiz-matrix-cms-authenticated-privilege-escalation-through-idor/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-32427.md b/2022/CVE-2022-32427.md index b38c7afffde..2513d5c3e20 100644 --- a/2022/CVE-2022-32427.md +++ b/2022/CVE-2022-32427.md @@ -10,7 +10,7 @@ PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute direc ### POC #### Reference -- https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm?tocpath=_____9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-34005.md b/2022/CVE-2022-34005.md index d358cdfbb72..11bee07e4a2 100644 --- a/2022/CVE-2022-34005.md +++ b/2022/CVE-2022-34005.md @@ -10,7 +10,7 @@ An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. The ### POC #### Reference -- https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-34006.md b/2022/CVE-2022-34006.md index 93274243bde..f4d08ff20de 100644 --- a/2022/CVE-2022-34006.md +++ b/2022/CVE-2022-34006.md @@ -10,7 +10,7 @@ An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. Whe ### POC #### Reference -- https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-34831.md b/2022/CVE-2022-34831.md index 5217f0e0d55..00aae1df5ff 100644 --- a/2022/CVE-2022-34831.md +++ b/2022/CVE-2022-34831.md @@ -10,7 +10,7 @@ An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to pos ### POC #### Reference -- https://support.keyfactor.com/s/detail/a6x1Q000000CwC5QAK +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-34906.md b/2022/CVE-2022-34906.md index 3173de2cd8d..8e4f729a1c2 100644 --- a/2022/CVE-2022-34906.md +++ b/2022/CVE-2022-34906.md @@ -11,7 +11,6 @@ A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x befo #### Reference - https://claroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm/ -- https://kb.filewave.com/pages/viewpage.action?pageId=55544244 #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-34907.md b/2022/CVE-2022-34907.md index 3be628caf88..f3a7b8e91be 100644 --- a/2022/CVE-2022-34907.md +++ b/2022/CVE-2022-34907.md @@ -11,7 +11,6 @@ An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7 #### Reference - https://claroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm/ -- https://kb.filewave.com/pages/viewpage.action?pageId=55544244 #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-34918.md b/2022/CVE-2022-34918.md index 8d1f18ec033..72823851735 100644 --- a/2022/CVE-2022-34918.md +++ b/2022/CVE-2022-34918.md @@ -15,7 +15,6 @@ An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug - http://www.openwall.com/lists/oss-security/2022/07/05/1 - https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452@randorisec.fr/T/#u - https://www.openwall.com/lists/oss-security/2022/07/02/3 -- https://www.randorisec.fr/crack-linux-firewall/ #### Github - https://github.com/hardenedvault/vault_range_poc diff --git a/2022/CVE-2022-34960.md b/2022/CVE-2022-34960.md index f9306d2fa49..6dcf176cf4f 100644 --- a/2022/CVE-2022-34960.md +++ b/2022/CVE-2022-34960.md @@ -10,7 +10,6 @@ The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create ### POC #### Reference -- https://nns.ee/blog/2022/06/21/routeros-container-rce.html - https://nns.ee/blog/2022/08/05/routeros-container-rce.html #### Github diff --git a/2022/CVE-2022-35259.md b/2022/CVE-2022-35259.md index dbcffdec420..b1d6ec49a79 100644 --- a/2022/CVE-2022-35259.md +++ b/2022/CVE-2022-35259.md @@ -10,7 +10,7 @@ XML Injection with Endpoint Manager 2022. 3 and below causing a download of a ma ### POC #### Reference -- https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-35259?language=en_US +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-35503.md b/2022/CVE-2022-35503.md index ae7bd4360c9..a4e2cabb08b 100644 --- a/2022/CVE-2022-35503.md +++ b/2022/CVE-2022-35503.md @@ -12,7 +12,6 @@ Improper verification of a user input in Open Source MANO v7-v12 allows an authe #### Reference - https://osm.etsi.org/ -- https://osm.etsi.org/news-events/blog/83-cve-2022-35503-disclosure #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-35507.md b/2022/CVE-2022-35507.md index 2c12d0664c9..d3447f758fc 100644 --- a/2022/CVE-2022-35507.md +++ b/2022/CVE-2022-35507.md @@ -10,7 +10,7 @@ A response-header CRLF injection vulnerability in the Proxmox Virtual Environmen ### POC #### Reference -- https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-35508.md b/2022/CVE-2022-35508.md index 90cf413a642..b6873851b58 100644 --- a/2022/CVE-2022-35508.md +++ b/2022/CVE-2022-35508.md @@ -10,7 +10,7 @@ Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable ### POC #### Reference -- https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-36254.md b/2022/CVE-2022-36254.md index 8d0fa4f8147..60c5f0b226d 100644 --- a/2022/CVE-2022-36254.md +++ b/2022/CVE-2022-36254.md @@ -10,7 +10,7 @@ Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in t ### POC #### Reference -- https://gist.github.com/ziyishen97/c464b459df73c4cef241e7ec774b7cf6 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-36255.md b/2022/CVE-2022-36255.md index 68061a287d5..0518dfe86e2 100644 --- a/2022/CVE-2022-36255.md +++ b/2022/CVE-2022-36255.md @@ -10,7 +10,6 @@ A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagemen ### POC #### Reference -- https://gist.github.com/ziyishen97/268678bca3034c64861b135946ee9fc3 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 #### Github diff --git a/2022/CVE-2022-36256.md b/2022/CVE-2022-36256.md index 4fdf0c63a8a..e1682f858bc 100644 --- a/2022/CVE-2022-36256.md +++ b/2022/CVE-2022-36256.md @@ -10,7 +10,6 @@ A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSyst ### POC #### Reference -- https://gist.github.com/ziyishen97/0fd90a5939ffb401e8a74f4a415e1610 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 #### Github diff --git a/2022/CVE-2022-36257.md b/2022/CVE-2022-36257.md index 524916218a3..dc72ef6f437 100644 --- a/2022/CVE-2022-36257.md +++ b/2022/CVE-2022-36257.md @@ -10,7 +10,6 @@ A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSys ### POC #### Reference -- https://gist.github.com/ziyishen97/ff3816032a76796f45368ed243ab3343 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 #### Github diff --git a/2022/CVE-2022-36258.md b/2022/CVE-2022-36258.md index f3ffd345091..672944a02fa 100644 --- a/2022/CVE-2022-36258.md +++ b/2022/CVE-2022-36258.md @@ -10,7 +10,6 @@ A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagemen ### POC #### Reference -- https://gist.github.com/ziyishen97/3553468b534c250f7b0d47e8a4c5fa52 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 #### Github diff --git a/2022/CVE-2022-36259.md b/2022/CVE-2022-36259.md index 64b654477dd..9576eea6e6f 100644 --- a/2022/CVE-2022-36259.md +++ b/2022/CVE-2022-36259.md @@ -10,7 +10,6 @@ A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryMan ### POC #### Reference -- https://gist.github.com/ziyishen97/47666f584cd4cdad1d0f6af5f33a56db - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 #### Github diff --git a/2022/CVE-2022-36759.md b/2022/CVE-2022-36759.md index fcf098db813..8b75cddf39e 100644 --- a/2022/CVE-2022-36759.md +++ b/2022/CVE-2022-36759.md @@ -10,7 +10,6 @@ Online Food Ordering System v1.0 was discovered to contain a SQL injection vulne ### POC #### Reference -- https://hackmd.io/%40hieuleuxuan/OFOS_Sql_Injection - https://hackmd.io/@hieuleuxuan/OFOS_Sql_Injection #### Github diff --git a/2022/CVE-2022-37424.md b/2022/CVE-2022-37424.md index 6540c2a706d..43278c9f418 100644 --- a/2022/CVE-2022-37424.md +++ b/2022/CVE-2022-37424.md @@ -10,7 +10,7 @@ Files or Directories Accessible to External Parties vulnerability in OpenNebula ### POC #### Reference -- https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-37425.md b/2022/CVE-2022-37425.md index 71dea3af578..18a372a2065 100644 --- a/2022/CVE-2022-37425.md +++ b/2022/CVE-2022-37425.md @@ -10,7 +10,7 @@ Improper Neutralization of Special Elements used in a Command ('Command Injectio ### POC #### Reference -- https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-37426.md b/2022/CVE-2022-37426.md index f4549a19094..8cff4f090ac 100644 --- a/2022/CVE-2022-37426.md +++ b/2022/CVE-2022-37426.md @@ -10,7 +10,7 @@ Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula Open ### POC #### Reference -- https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-38131.md b/2022/CVE-2022-38131.md index 525028610d2..b971b1763be 100644 --- a/2022/CVE-2022-38131.md +++ b/2022/CVE-2022-38131.md @@ -10,7 +10,7 @@ RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vu ### POC #### Reference -- https://support.posit.co/hc/en-us/articles/10983374992023 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-38176.md b/2022/CVE-2022-38176.md index 49774ee15f4..a895cd04153 100644 --- a/2022/CVE-2022-38176.md +++ b/2022/CVE-2022-38176.md @@ -10,7 +10,7 @@ An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges wer ### POC #### Reference -- https://www.ysoft.com/en/legal/ysoft-safeq-client-v3-local-privilege-escalation +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-38329.md b/2022/CVE-2022-38329.md index ec3ea5f5215..8c35f48a3cd 100644 --- a/2022/CVE-2022-38329.md +++ b/2022/CVE-2022-38329.md @@ -10,7 +10,6 @@ A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remot ### POC #### Reference -- https://albert5888.github.io/posts/CVE-2022-38329/ - https://github.com/albert5888/CVE-Issues/blob/main/CVE-2022-38329/file.md - https://github.com/zhangqiquan/shopxian_cms/issues/4 diff --git a/2022/CVE-2022-39834.md b/2022/CVE-2022-39834.md index 422f210e6ce..67404b09d42 100644 --- a/2022/CVE-2022-39834.md +++ b/2022/CVE-2022-39834.md @@ -10,7 +10,7 @@ A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in Pr ### POC #### Reference -- https://support.keyfactor.com/s/detail/a6x1Q000000CwCoQAK +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-39960.md b/2022/CVE-2022-39960.md index e5f50011532..6caa76f4025 100644 --- a/2022/CVE-2022-39960.md +++ b/2022/CVE-2022-39960.md @@ -10,7 +10,7 @@ The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform a ### POC #### Reference -- https://gist.github.com/CveCt0r/ca8c6e46f536e9ae69fc6061f132463e +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-39983.md b/2022/CVE-2022-39983.md index f3ab2b33522..ee8e43d8460 100644 --- a/2022/CVE-2022-39983.md +++ b/2022/CVE-2022-39983.md @@ -10,7 +10,6 @@ File upload vulnerability in Pro Gamma Instant Developer RD3 22.5 r23, r30, and ### POC #### Reference -- https://www.swascan.com/it/vulnerability-report-instant-developer/ - https://www.tinextacyber.com/security-advisory-instant-developer-rd3-cve-2022-39983/ #### Github diff --git a/2022/CVE-2022-40055.md b/2022/CVE-2022-40055.md index 4134d4de457..995735beff3 100644 --- a/2022/CVE-2022-40055.md +++ b/2022/CVE-2022-40055.md @@ -10,7 +10,7 @@ An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to ### POC #### Reference -- https://blog.alphathreat.in/index.php?post/2022/10/01/Achieving-CVE-2022-40055 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-40711.md b/2022/CVE-2022-40711.md index 87dbcb09f96..20742e26693 100644 --- a/2022/CVE-2022-40711.md +++ b/2022/CVE-2022-40711.md @@ -10,7 +10,7 @@ PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A ### POC #### Reference -- https://verneet.com/cve-2022-40711/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-41924.md b/2022/CVE-2022-41924.md index b99a69b7983..726de5441e7 100644 --- a/2022/CVE-2022-41924.md +++ b/2022/CVE-2022-41924.md @@ -11,7 +11,6 @@ A vulnerability identified in the Tailscale Windows client allows a malicious we ### POC #### Reference -- https://emily.id.au/tailscale - https://tailscale.com/security-bulletins/#ts-2022-004 #### Github diff --git a/2022/CVE-2022-41925.md b/2022/CVE-2022-41925.md index 455f36fee88..3c48a1d592a 100644 --- a/2022/CVE-2022-41925.md +++ b/2022/CVE-2022-41925.md @@ -10,7 +10,6 @@ A vulnerability identified in the Tailscale client allows a malicious website to ### POC #### Reference -- https://emily.id.au/tailscale - https://tailscale.com/security-bulletins/#ts-2022-005 #### Github diff --git a/2022/CVE-2022-42150.md b/2022/CVE-2022-42150.md index e6791a2cf49..9e4f331f973 100644 --- a/2022/CVE-2022-42150.md +++ b/2022/CVE-2022-42150.md @@ -11,7 +11,6 @@ TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to ins #### Reference - https://github.com/eBPF-Research/eBPF-Attack/blob/main/PoC.md#attack-requirements -- https://hackmd.io/%40UR9gnr32QymtmtZHnZceOw/ry428EZGo - https://hackmd.io/@UR9gnr32QymtmtZHnZceOw/ry428EZGo #### Github diff --git a/2022/CVE-2022-42954.md b/2022/CVE-2022-42954.md index b25e9537ba2..ffb43832b30 100644 --- a/2022/CVE-2022-42954.md +++ b/2022/CVE-2022-42954.md @@ -10,7 +10,7 @@ Keyfactor EJBCA before 7.10.0 allows XSS. ### POC #### Reference -- https://support.keyfactor.com/s/detail/a6x1Q000000CwCjQAK +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-43675.md b/2022/CVE-2022-43675.md index b57ee398932..3f83aeb36c1 100644 --- a/2022/CVE-2022-43675.md +++ b/2022/CVE-2022-43675.md @@ -10,7 +10,7 @@ An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Eleme ### POC #### Reference -- https://www.gruppotim.it/redteam +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-43704.md b/2022/CVE-2022-43704.md index 940f9b8e901..b807b70d1c4 100644 --- a/2022/CVE-2022-43704.md +++ b/2022/CVE-2022-43704.md @@ -10,7 +10,7 @@ The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an a ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-43704-capture-replay-vulnerability-in-sinilink-xy-wft1-thermostat/ +No PoCs from references. #### Github - https://github.com/9lyph/CVE-2022-43704 diff --git a/2022/CVE-2022-44267.md b/2022/CVE-2022-44267.md index 00dc1da156f..47bd4ed66c5 100644 --- a/2022/CVE-2022-44267.md +++ b/2022/CVE-2022-44267.md @@ -10,7 +10,7 @@ ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG im ### POC #### Reference -- https://www.metabaseq.com/imagemagick-zero-days/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-44268.md b/2022/CVE-2022-44268.md index 53d646e0ed3..ddea6e7e71e 100644 --- a/2022/CVE-2022-44268.md +++ b/2022/CVE-2022-44268.md @@ -11,7 +11,6 @@ ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a P #### Reference - http://packetstormsecurity.com/files/171727/ImageMagick-7.1.0-48-Arbitrary-File-Read.html -- https://www.metabaseq.com/imagemagick-zero-days/ #### Github - https://github.com/Ashifcoder/CVE-2022-44268-automated-poc diff --git a/2022/CVE-2022-44727.md b/2022/CVE-2022-44727.md index fa6ebe5aab7..a687d5b005c 100644 --- a/2022/CVE-2022-44727.md +++ b/2022/CVE-2022-44727.md @@ -11,7 +11,6 @@ The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop all #### Reference - https://addons.prestashop.com/en/legal/8734-eu-cookie-law-gdpr-banner-blocker.html -- https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45326.md b/2022/CVE-2022-45326.md index 9758b4acdec..147f9e1b570 100644 --- a/2022/CVE-2022-45326.md +++ b/2022/CVE-2022-45326.md @@ -10,7 +10,7 @@ An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information ### POC #### Reference -- https://www.navsec.net/2022/11/12/kwoksys-xxe.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45477.md b/2022/CVE-2022-45477.md index 82517080509..00a8514d76d 100644 --- a/2022/CVE-2022-45477.md +++ b/2022/CVE-2022-45477.md @@ -10,7 +10,7 @@ Telepad allows remote unauthenticated users to send instructions to the server t ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45478.md b/2022/CVE-2022-45478.md index b8864d43582..26f0ff11702 100644 --- a/2022/CVE-2022-45478.md +++ b/2022/CVE-2022-45478.md @@ -10,7 +10,7 @@ Telepad allows an attacker (in a man-in-the-middle position between the server a ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45479.md b/2022/CVE-2022-45479.md index 916f0fb00a0..e04bf8da947 100644 --- a/2022/CVE-2022-45479.md +++ b/2022/CVE-2022-45479.md @@ -10,7 +10,7 @@ PC Keyboard allows remote unauthenticated users to send instructions to the serv ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45480.md b/2022/CVE-2022-45480.md index c69ad4c72d7..771e2fba20d 100644 --- a/2022/CVE-2022-45480.md +++ b/2022/CVE-2022-45480.md @@ -10,7 +10,7 @@ PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45481.md b/2022/CVE-2022-45481.md index 1888bb07c3b..3a0030faa51 100644 --- a/2022/CVE-2022-45481.md +++ b/2022/CVE-2022-45481.md @@ -10,7 +10,7 @@ The default configuration of Lazy Mouse does not require a password, allowing re ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45482.md b/2022/CVE-2022-45482.md index aca2f459c26..48574549b2b 100644 --- a/2022/CVE-2022-45482.md +++ b/2022/CVE-2022-45482.md @@ -10,7 +10,7 @@ Lazy Mouse server enforces weak password requirements and doesn't implement rate ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45483.md b/2022/CVE-2022-45483.md index f4acef24122..8a337c5f59e 100644 --- a/2022/CVE-2022-45483.md +++ b/2022/CVE-2022-45483.md @@ -10,7 +10,7 @@ Lazy Mouse allows an attacker (in a man in the middle position between the serve ### POC #### Reference -- https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45535.md b/2022/CVE-2022-45535.md index ee9a4542265..ec07cdda2bc 100644 --- a/2022/CVE-2022-45535.md +++ b/2022/CVE-2022-45535.md @@ -10,7 +10,7 @@ AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the e ### POC #### Reference -- https://rdyx0.github.io/2018/09/06/AeroCMS-v0.0.1-SQLi%20update_categories_sql_injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45536.md b/2022/CVE-2022-45536.md index ba21339b696..7e07728fdee 100644 --- a/2022/CVE-2022-45536.md +++ b/2022/CVE-2022-45536.md @@ -10,7 +10,7 @@ AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the i ### POC #### Reference -- https://rdyx0.github.io/2018/09/07/AeroCMS-v0.0.1-SQLi%20post_comments_sql_injection/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45706.md b/2022/CVE-2022-45706.md index 90ee559a07c..eb925e3362e 100644 --- a/2022/CVE-2022-45706.md +++ b/2022/CVE-2022-45706.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SJZx0L0Sj - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/SJZx0L0Sj - https://hackmd.io/@chaosisaladdar/SJZx0L0Sj diff --git a/2022/CVE-2022-45707.md b/2022/CVE-2022-45707.md index 7c089c62215..41ff866bfb4 100644 --- a/2022/CVE-2022-45707.md +++ b/2022/CVE-2022-45707.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HyEfIEpBj - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/HyEfIEpBj - https://hackmd.io/@chaosisaladdar/HyEfIEpBj diff --git a/2022/CVE-2022-45708.md b/2022/CVE-2022-45708.md index e5b20d8824e..530652e04ea 100644 --- a/2022/CVE-2022-45708.md +++ b/2022/CVE-2022-45708.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1rR3UArj - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/B1rR3UArj - https://hackmd.io/@chaosisaladdar/B1rR3UArj diff --git a/2022/CVE-2022-45709.md b/2022/CVE-2022-45709.md index bb5cca4f51d..c34877b46aa 100644 --- a/2022/CVE-2022-45709.md +++ b/2022/CVE-2022-45709.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injecti ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BkFpXcsSs - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/BkFpXcsSs - https://hackmd.io/@chaosisaladdar/BkFpXcsSs diff --git a/2022/CVE-2022-45710.md b/2022/CVE-2022-45710.md index 8e555db9524..ba5c6b24d64 100644 --- a/2022/CVE-2022-45710.md +++ b/2022/CVE-2022-45710.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflow ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1XG-5iSo - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/B1XG-5iSo - https://hackmd.io/@chaosisaladdar/B1XG-5iSo diff --git a/2022/CVE-2022-45712.md b/2022/CVE-2022-45712.md index fb3ddd8ee86..8e054f94a86 100644 --- a/2022/CVE-2022-45712.md +++ b/2022/CVE-2022-45712.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/r1pG4cori - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/r1pG4cori - https://hackmd.io/@chaosisaladdar/r1pG4cori diff --git a/2022/CVE-2022-45714.md b/2022/CVE-2022-45714.md index 44f08b769a0..8a7d2fda081 100644 --- a/2022/CVE-2022-45714.md +++ b/2022/CVE-2022-45714.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/S1QhLw0Ss - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/S1QhLw0Ss - https://hackmd.io/@chaosisaladdar/S1QhLw0Ss diff --git a/2022/CVE-2022-45715.md b/2022/CVE-2022-45715.md index 63c8fd53c9f..2c0064f4cb4 100644 --- a/2022/CVE-2022-45715.md +++ b/2022/CVE-2022-45715.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflow ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HkJ_o8Arj - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/HkJ_o8Arj - https://hackmd.io/@chaosisaladdar/HkJ_o8Arj diff --git a/2022/CVE-2022-45716.md b/2022/CVE-2022-45716.md index cbb851319cb..4e40922a6f6 100644 --- a/2022/CVE-2022-45716.md +++ b/2022/CVE-2022-45716.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/rywHivCBo - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/rywHivCBo - https://hackmd.io/@chaosisaladdar/rywHivCBo diff --git a/2022/CVE-2022-45717.md b/2022/CVE-2022-45717.md index e3899d08372..e512e138bcd 100644 --- a/2022/CVE-2022-45717.md +++ b/2022/CVE-2022-45717.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vuln ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/By3Y6DRrj - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/By3Y6DRrj - https://hackmd.io/@chaosisaladdar/By3Y6DRrj diff --git a/2022/CVE-2022-45718.md b/2022/CVE-2022-45718.md index 2a445e23802..9df8556b676 100644 --- a/2022/CVE-2022-45718.md +++ b/2022/CVE-2022-45718.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/Hkb38vELj - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/Hkb38vELj - https://hackmd.io/@chaosisaladdar/Hkb38vELj diff --git a/2022/CVE-2022-45719.md b/2022/CVE-2022-45719.md index d2c8b1cf29c..5488adc0b73 100644 --- a/2022/CVE-2022-45719.md +++ b/2022/CVE-2022-45719.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJ8I_DCBi - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/BJ8I_DCBi - https://hackmd.io/@chaosisaladdar/BJ8I_DCBi diff --git a/2022/CVE-2022-45720.md b/2022/CVE-2022-45720.md index 734dc6da5f9..55ed821e105 100644 --- a/2022/CVE-2022-45720.md +++ b/2022/CVE-2022-45720.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflow ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SkCD5PEUo - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/SkCD5PEUo - https://hackmd.io/@chaosisaladdar/SkCD5PEUo diff --git a/2022/CVE-2022-45721.md b/2022/CVE-2022-45721.md index 1d81f798f67..6052353b716 100644 --- a/2022/CVE-2022-45721.md +++ b/2022/CVE-2022-45721.md @@ -10,7 +10,6 @@ IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via th ### POC #### Reference -- https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJUfyuABo - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/BJUfyuABo - https://hackmd.io/@chaosisaladdar/BJUfyuABo diff --git a/2022/CVE-2022-45770.md b/2022/CVE-2022-45770.md index 1dc9da07d62..b5eb0593825 100644 --- a/2022/CVE-2022-45770.md +++ b/2022/CVE-2022-45770.md @@ -10,7 +10,6 @@ Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 thr ### POC #### Reference -- https://hackmag.com/security/aguard-cve/ - https://xakep.ru/2023/01/27/aguard-cve/ #### Github diff --git a/2022/CVE-2022-45896.md b/2022/CVE-2022-45896.md index 486b356f132..c34c0757b75 100644 --- a/2022/CVE-2022-45896.md +++ b/2022/CVE-2022-45896.md @@ -10,7 +10,7 @@ Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary file ### POC #### Reference -- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/- +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-45938.md b/2022/CVE-2022-45938.md index 32c64d474fc..73b572f72c9 100644 --- a/2022/CVE-2022-45938.md +++ b/2022/CVE-2022-45938.md @@ -10,7 +10,7 @@ An issue was discovered in Comcast Defined Technologies microeisbss through 2021 ### POC #### Reference -- https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-46428.md b/2022/CVE-2022-46428.md index 2a6cf0fb9a4..17a038cbf22 100644 --- a/2022/CVE-2022-46428.md +++ b/2022/CVE-2022-46428.md @@ -10,7 +10,6 @@ TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to exe ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/S1hP34Hvj #### Github diff --git a/2022/CVE-2022-46430.md b/2022/CVE-2022-46430.md index 41ab3777405..dea32e5104a 100644 --- a/2022/CVE-2022-46430.md +++ b/2022/CVE-2022-46430.md @@ -10,7 +10,6 @@ TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers t ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJxlw2Pwi - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/BJxlw2Pwi #### Github diff --git a/2022/CVE-2022-46432.md b/2022/CVE-2022-46432.md index d20f43cccc9..b8a534cc771 100644 --- a/2022/CVE-2022-46432.md +++ b/2022/CVE-2022-46432.md @@ -10,7 +10,6 @@ An exploitable firmware modification vulnerability was discovered on TP-Link TL- ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1Vgv1uwo - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/B1Vgv1uwo #### Github diff --git a/2022/CVE-2022-46434.md b/2022/CVE-2022-46434.md index ecc6e92f249..73685a457f8 100644 --- a/2022/CVE-2022-46434.md +++ b/2022/CVE-2022-46434.md @@ -10,7 +10,6 @@ An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and ear ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/rJl69Icws - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/rJl69Icws #### Github diff --git a/2022/CVE-2022-46435.md b/2022/CVE-2022-46435.md index 3e1a2fab087..81daba25b6d 100644 --- a/2022/CVE-2022-46435.md +++ b/2022/CVE-2022-46435.md @@ -10,7 +10,6 @@ An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SyvnlO9Pi - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/SyvnlO9Pi #### Github diff --git a/2022/CVE-2022-46560.md b/2022/CVE-2022-46560.md index 018bd06d099..18412ad9f6d 100644 --- a/2022/CVE-2022-46560.md +++ b/2022/CVE-2022-46560.md @@ -10,10 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/SetWan2Settings_l2tp -- https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe -- https://hackmd.io/%400dayResearch/SetWan2Settings_pptp -- https://hackmd.io/%400dayResearch/rkXr4BQPi - https://hackmd.io/@0dayResearch/SetWan2Settings_l2tp - https://hackmd.io/@0dayResearch/SetWan2Settings_pppoe - https://hackmd.io/@0dayResearch/SetWan2Settings_pptp diff --git a/2022/CVE-2022-46561.md b/2022/CVE-2022-46561.md index 1bf4e3118bc..8e9b8bb792c 100644 --- a/2022/CVE-2022-46561.md +++ b/2022/CVE-2022-46561.md @@ -10,10 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/SetWanSettings_L2TP -- https://hackmd.io/%400dayResearch/SetWanSettings_PPPoE -- https://hackmd.io/%400dayResearch/SetWanSettings_PPTP -- https://hackmd.io/%400dayResearch/ry55QVQvj - https://hackmd.io/@0dayResearch/SetWanSettings_L2TP - https://hackmd.io/@0dayResearch/SetWanSettings_PPPoE - https://hackmd.io/@0dayResearch/SetWanSettings_PPTP diff --git a/2022/CVE-2022-46562.md b/2022/CVE-2022-46562.md index c70019c8106..486188c5fd7 100644 --- a/2022/CVE-2022-46562.md +++ b/2022/CVE-2022-46562.md @@ -10,8 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/B1C9jeXDi -- https://hackmd.io/%400dayResearch/SetQuickVPNSettings_PSK - https://hackmd.io/@0dayResearch/B1C9jeXDi - https://hackmd.io/@0dayResearch/SetQuickVPNSettings_PSK - https://www.dlink.com/en/security-bulletin/ diff --git a/2022/CVE-2022-46563.md b/2022/CVE-2022-46563.md index 4b52fc00237..09ef57e14e5 100644 --- a/2022/CVE-2022-46563.md +++ b/2022/CVE-2022-46563.md @@ -10,8 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/HkDzZLCUo -- https://hackmd.io/%400dayResearch/SetDynamicDNSSettings - https://hackmd.io/@0dayResearch/HkDzZLCUo - https://hackmd.io/@0dayResearch/SetDynamicDNSSettings - https://www.dlink.com/en/security-bulletin/ diff --git a/2022/CVE-2022-46566.md b/2022/CVE-2022-46566.md index 3ff9bbcd0bb..766005d49ad 100644 --- a/2022/CVE-2022-46566.md +++ b/2022/CVE-2022-46566.md @@ -10,8 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/SetQuickVPNSettings_Password -- https://hackmd.io/%400dayResearch/SyhDme7wo - https://hackmd.io/@0dayResearch/SetQuickVPNSettings_Password - https://hackmd.io/@0dayResearch/SyhDme7wo - https://www.dlink.com/en/security-bulletin/ diff --git a/2022/CVE-2022-46568.md b/2022/CVE-2022-46568.md index cc02a35d073..e58e36ffd7d 100644 --- a/2022/CVE-2022-46568.md +++ b/2022/CVE-2022-46568.md @@ -10,8 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/B1SZP0aIo -- https://hackmd.io/%400dayResearch/SetSysEmailSettings - https://hackmd.io/@0dayResearch/B1SZP0aIo - https://hackmd.io/@0dayResearch/SetSysEmailSettings - https://www.dlink.com/en/security-bulletin/ diff --git a/2022/CVE-2022-46569.md b/2022/CVE-2022-46569.md index fedbf1b2fff..8d4547839cc 100644 --- a/2022/CVE-2022-46569.md +++ b/2022/CVE-2022-46569.md @@ -10,8 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/SetWLanRadioSecurity -- https://hackmd.io/%400dayResearch/r1R6sWRUs - https://hackmd.io/@0dayResearch/SetWLanRadioSecurity - https://hackmd.io/@0dayResearch/r1R6sWRUs - https://www.dlink.com/en/security-bulletin/ diff --git a/2022/CVE-2022-46570.md b/2022/CVE-2022-46570.md index 2515cb6844e..030908d9796 100644 --- a/2022/CVE-2022-46570.md +++ b/2022/CVE-2022-46570.md @@ -10,8 +10,6 @@ D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to co ### POC #### Reference -- https://hackmd.io/%400dayResearch/SetWan3Settings_pppoe -- https://hackmd.io/%400dayResearch/r1zsTSmDs - https://hackmd.io/@0dayResearch/SetWan3Settings_l2tp - https://hackmd.io/@0dayResearch/SetWan3Settings_pppoe - https://hackmd.io/@0dayResearch/SetWan3Settings_pptp diff --git a/2022/CVE-2022-46637.md b/2022/CVE-2022-46637.md index 0bc51ed4ba0..5af3d1879f7 100644 --- a/2022/CVE-2022-46637.md +++ b/2022/CVE-2022-46637.md @@ -11,7 +11,6 @@ Prolink router PRS1841 was discovered to contain hardcoded credentials for its T #### Reference - https://packetstormsecurity.com/files/170342/ProLink-PRS1841-Backdoor-Account.html -- https://prolink2u.com/product/prs1841/ #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-46887.md b/2022/CVE-2022-46887.md index 2176ae2c602..50dde530cb3 100644 --- a/2022/CVE-2022-46887.md +++ b/2022/CVE-2022-46887.md @@ -10,7 +10,7 @@ Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote at ### POC #### Reference -- https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-46888.md b/2022/CVE-2022-46888.md index 4efb5b9faae..1f71438f373 100644 --- a/2022/CVE-2022-46888.md +++ b/2022/CVE-2022-46888.md @@ -10,7 +10,7 @@ Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP befor ### POC #### Reference -- https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-46889.md b/2022/CVE-2022-46889.md index 816eb416355..4aa385dd5f5 100644 --- a/2022/CVE-2022-46889.md +++ b/2022/CVE-2022-46889.md @@ -10,7 +10,7 @@ A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 ### POC #### Reference -- https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-46890.md b/2022/CVE-2022-46890.md index e5111014bf4..1969447eb7c 100644 --- a/2022/CVE-2022-46890.md +++ b/2022/CVE-2022-46890.md @@ -10,7 +10,7 @@ Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user ### POC #### Reference -- https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-46910.md b/2022/CVE-2022-46910.md index 41b815baa91..98a18072b39 100644 --- a/2022/CVE-2022-46910.md +++ b/2022/CVE-2022-46910.md @@ -10,7 +10,6 @@ An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 a ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkwzORiDo - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/BkwzORiDo #### Github diff --git a/2022/CVE-2022-46912.md b/2022/CVE-2022-46912.md index bdde3e398cc..ba506b96412 100644 --- a/2022/CVE-2022-46912.md +++ b/2022/CVE-2022-46912.md @@ -10,7 +10,6 @@ An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.1 ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/Sk6sfbTPi - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/Sk6sfbTPi #### Github diff --git a/2022/CVE-2022-46914.md b/2022/CVE-2022-46914.md index aea30da0c55..c26f142a624 100644 --- a/2022/CVE-2022-46914.md +++ b/2022/CVE-2022-46914.md @@ -10,7 +10,6 @@ An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3. ### POC #### Reference -- https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJ4czlpwi - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/BJ4czlpwi #### Github diff --git a/2022/CVE-2022-47130.md b/2022/CVE-2022-47130.md index 03b60bf0de7..855deb56771 100644 --- a/2022/CVE-2022-47130.md +++ b/2022/CVE-2022-47130.md @@ -11,9 +11,7 @@ A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discoun #### Reference - https://github.com/OpenXP-Research/CVE-2022-47130 -- https://portswigger.net/web-security/csrf - https://www.linkedin.com/in/xvinicius/ -- https://xpsec.co/blog/academy-lms-5-10-coupon-csrf #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-47131.md b/2022/CVE-2022-47131.md index ba9c737ab57..7e6f8043f69 100644 --- a/2022/CVE-2022-47131.md +++ b/2022/CVE-2022-47131.md @@ -11,10 +11,7 @@ A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attack #### Reference - https://github.com/OpenXP-Research/CVE-2022-47131 -- https://portswigger.net/web-security/csrf -- https://portswigger.net/web-security/csrf/xss-vs-csrf - https://www.linkedin.com/in/xvinicius/ -- https://xpsec.co/blog/academy-lms-5-10-add-page-csrf-xss #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-47132.md b/2022/CVE-2022-47132.md index 375540b6378..67830b779d9 100644 --- a/2022/CVE-2022-47132.md +++ b/2022/CVE-2022-47132.md @@ -10,9 +10,7 @@ A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers ### POC #### Reference -- https://portswigger.net/web-security/csrf - https://www.linkedin.com/in/xvinicius/ -- https://xpsec.co/blog/academy-lms-5-10-add-admin-csrf #### Github - https://github.com/OpenXP-Research/CVE-2022-47132 diff --git a/2022/CVE-2022-47768.md b/2022/CVE-2022-47768.md index acbdf174cbb..e80d6f22d70 100644 --- a/2022/CVE-2022-47768.md +++ b/2022/CVE-2022-47768.md @@ -10,7 +10,7 @@ Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal. ### POC #### Reference -- https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-47769.md b/2022/CVE-2022-47769.md index 7e191247cb2..12b3497497c 100644 --- a/2022/CVE-2022-47769.md +++ b/2022/CVE-2022-47769.md @@ -10,7 +10,7 @@ An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1 ### POC #### Reference -- https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-47770.md b/2022/CVE-2022-47770.md index e3596c5f8bd..6652e08f70c 100644 --- a/2022/CVE-2022-47770.md +++ b/2022/CVE-2022-47770.md @@ -10,7 +10,7 @@ Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticat ### POC #### Reference -- https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2022/CVE-2022-47873.md b/2022/CVE-2022-47873.md index c19fe857f14..4c9ed418175 100644 --- a/2022/CVE-2022-47873.md +++ b/2022/CVE-2022-47873.md @@ -10,7 +10,7 @@ Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF wit ### POC #### Reference -- https://fordefence.com/cve-2022-47873-keos-software-xx/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-0248.md b/2023/CVE-2023-0248.md index fcb1bc4c897..82fd66f3325 100644 --- a/2023/CVE-2023-0248.md +++ b/2023/CVE-2023-0248.md @@ -11,7 +11,7 @@ An attacker with physical access to the Kantech Gen1 ioSmart card reader with fi ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-0954.md b/2023/CVE-2023-0954.md index b60b682a96d..6241346f70e 100644 --- a/2023/CVE-2023-0954.md +++ b/2023/CVE-2023-0954.md @@ -11,7 +11,7 @@ A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ camer ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-2024.md b/2023/CVE-2023-2024.md index 12b9141c439..6e175e1ce52 100644 --- a/2023/CVE-2023-2024.md +++ b/2023/CVE-2023-2024.md @@ -10,7 +10,7 @@ Improper authentication in OpenBlue Enterprise Manager Data Collector versions p ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github - https://github.com/team890/CVE-2023-2024 diff --git a/2023/CVE-2023-2025.md b/2023/CVE-2023-2025.md index 86aa1d2d93b..f27c89cc5fc 100644 --- a/2023/CVE-2023-2025.md +++ b/2023/CVE-2023-2025.md @@ -10,7 +10,7 @@ OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-22629.md b/2023/CVE-2023-22629.md index 3cce667a8c9..b676d6d31bd 100644 --- a/2023/CVE-2023-22629.md +++ b/2023/CVE-2023-22629.md @@ -12,7 +12,6 @@ An issue was discovered in TitanFTP through 1.94.1205. The move-file function ha #### Reference - http://packetstormsecurity.com/files/171737/Titan-FTP-Path-Traversal.html - https://f20.be/cves/titan-ftp-vulnerabilities -- https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24117.md b/2023/CVE-2023-24117.md index 84fd649bdab..5ea994d4dbf 100644 --- a/2023/CVE-2023-24117.md +++ b/2023/CVE-2023-24117.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepauth_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24118.md b/2023/CVE-2023-24118.md index 2c38ad87dcd..44ca7686b73 100644 --- a/2023/CVE-2023-24118.md +++ b/2023/CVE-2023-24118.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_security_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24119.md b/2023/CVE-2023-24119.md index 1679c565188..1e734b19c4d 100644 --- a/2023/CVE-2023-24119.md +++ b/2023/CVE-2023-24119.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24120.md b/2023/CVE-2023-24120.md index 5ab60ae2d6d..bc863864db7 100644 --- a/2023/CVE-2023-24120.md +++ b/2023/CVE-2023-24120.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24121.md b/2023/CVE-2023-24121.md index 8d3e2daafc7..9b846e5cddf 100644 --- a/2023/CVE-2023-24121.md +++ b/2023/CVE-2023-24121.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_security_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24122.md b/2023/CVE-2023-24122.md index 156e532767b..9212af1052a 100644 --- a/2023/CVE-2023-24122.md +++ b/2023/CVE-2023-24122.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_ssid_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24123.md b/2023/CVE-2023-24123.md index 456a4f432ef..014536906b8 100644 --- a/2023/CVE-2023-24123.md +++ b/2023/CVE-2023-24123.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepauth_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24124.md b/2023/CVE-2023-24124.md index 6eee40f0420..413347e6e9f 100644 --- a/2023/CVE-2023-24124.md +++ b/2023/CVE-2023-24124.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wrlEn_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24125.md b/2023/CVE-2023-24125.md index 544f74f4851..979308434a2 100644 --- a/2023/CVE-2023-24125.md +++ b/2023/CVE-2023-24125.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey2_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24126.md b/2023/CVE-2023-24126.md index d5f2b9ed8e8..a7cea5bf47c 100644 --- a/2023/CVE-2023-24126.md +++ b/2023/CVE-2023-24126.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey4_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24127.md b/2023/CVE-2023-24127.md index 27590d14e1e..7e6782add3f 100644 --- a/2023/CVE-2023-24127.md +++ b/2023/CVE-2023-24127.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey1_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24128.md b/2023/CVE-2023-24128.md index 89c3f8f2725..de670b24a1b 100644 --- a/2023/CVE-2023-24128.md +++ b/2023/CVE-2023-24128.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey2_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24129.md b/2023/CVE-2023-24129.md index d5bd6b2d6bd..b99b7e58626 100644 --- a/2023/CVE-2023-24129.md +++ b/2023/CVE-2023-24129.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey4_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24130.md b/2023/CVE-2023-24130.md index 3fc03e79b07..18e4c801dac 100644 --- a/2023/CVE-2023-24130.md +++ b/2023/CVE-2023-24130.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24131.md b/2023/CVE-2023-24131.md index 77f44cce361..eccb299c5c0 100644 --- a/2023/CVE-2023-24131.md +++ b/2023/CVE-2023-24131.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey1_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24132.md b/2023/CVE-2023-24132.md index 24e5b9e2fff..a12ec547cb9 100644 --- a/2023/CVE-2023-24132.md +++ b/2023/CVE-2023-24132.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey3_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24133.md b/2023/CVE-2023-24133.md index 66a49ac8fba..3809817ccbe 100644 --- a/2023/CVE-2023-24133.md +++ b/2023/CVE-2023-24133.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey_5g_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24134.md b/2023/CVE-2023-24134.md index 7fd344f0ec6..d2ec91f114b 100644 --- a/2023/CVE-2023-24134.md +++ b/2023/CVE-2023-24134.md @@ -10,7 +10,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a s ### POC #### Reference -- https://oxnan.com/posts/WifiBasic_wepkey3_DoS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-24135.md b/2023/CVE-2023-24135.md index 0088b622754..73c0dcf9530 100644 --- a/2023/CVE-2023-24135.md +++ b/2023/CVE-2023-24135.md @@ -11,7 +11,7 @@ Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a c ### POC #### Reference -- https://oxnan.com/posts/WriteFacMac-Command-Injection +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-25240.md b/2023/CVE-2023-25240.md index dc65bc6b377..5972151dc83 100644 --- a/2023/CVE-2023-25240.md +++ b/2023/CVE-2023-25240.md @@ -10,7 +10,7 @@ An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attacker ### POC #### Reference -- https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-26998.md b/2023/CVE-2023-26998.md index 39d4d2d56ab..3dfa4bda5ff 100644 --- a/2023/CVE-2023-26998.md +++ b/2023/CVE-2023-26998.md @@ -10,7 +10,7 @@ Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a ### POC #### Reference -- https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-26999.md b/2023/CVE-2023-26999.md index 849960f04a0..06f60e89b54 100644 --- a/2023/CVE-2023-26999.md +++ b/2023/CVE-2023-26999.md @@ -10,7 +10,7 @@ An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execut ### POC #### Reference -- https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-27000.md b/2023/CVE-2023-27000.md index 58ff1438524..e71ef4dc780 100644 --- a/2023/CVE-2023-27000.md +++ b/2023/CVE-2023-27000.md @@ -10,7 +10,7 @@ Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a ### POC #### Reference -- https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-27167.md b/2023/CVE-2023-27167.md index 23937deff9b..b78386c4127 100644 --- a/2023/CVE-2023-27167.md +++ b/2023/CVE-2023-27167.md @@ -11,7 +11,6 @@ Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerabilit #### Reference - https://packetstormsecurity.com/files/171523/Suprema-BioStar-2-2.8.16-SQL-Injection.html -- https://www.linkedin.com/in/yuriy-tsarenko-a1453aa4/ #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-27744.md b/2023/CVE-2023-27744.md index b5d1e55f28b..68bec6e7f38 100644 --- a/2023/CVE-2023-27744.md +++ b/2023/CVE-2023-27744.md @@ -10,7 +10,7 @@ An issue was discovered in South River Technologies TitanFTP NextGen server that ### POC #### Reference -- https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-27745.md b/2023/CVE-2023-27745.md index d8ba60fd409..031b2dead50 100644 --- a/2023/CVE-2023-27745.md +++ b/2023/CVE-2023-27745.md @@ -10,7 +10,7 @@ An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attacker ### POC #### Reference -- https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-27779.md b/2023/CVE-2023-27779.md index 4becf84a3d0..024e126e6fb 100644 --- a/2023/CVE-2023-27779.md +++ b/2023/CVE-2023-27779.md @@ -10,7 +10,7 @@ AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via ### POC #### Reference -- https://docs.google.com/document/d/1kGzmc6AOCfRzJf9mDz4emkhQj84Y1XemmAMZjYK32-o/edit?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-28485.md b/2023/CVE-2023-28485.md index 1a8848de13d..f048a56314b 100644 --- a/2023/CVE-2023-28485.md +++ b/2023/CVE-2023-28485.md @@ -11,7 +11,6 @@ A stored cross-site scripting (Stored XSS) vulnerability in file preview in WeKa #### Reference - http://packetstormsecurity.com/files/172649/Wekan-6.74-Cross-Site-Scripting.html -- https://wekan.github.io/hall-of-fame/filebleed/ #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-29383.md b/2023/CVE-2023-29383.md index fd067916197..902a5d561fb 100644 --- a/2023/CVE-2023-29383.md +++ b/2023/CVE-2023-29383.md @@ -11,7 +11,6 @@ In Shadow 4.13, it is possible to inject control characters into fields provided #### Reference - https://github.com/shadow-maint/shadow/pull/687 -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797 #### Github diff --git a/2023/CVE-2023-29623.md b/2023/CVE-2023-29623.md index 4b5b540c6cc..c9a75a099ac 100644 --- a/2023/CVE-2023-29623.md +++ b/2023/CVE-2023-29623.md @@ -10,7 +10,7 @@ Purchase Order Management v1.0 was discovered to contain a reflected cross-site ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/reflected +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-29985.md b/2023/CVE-2023-29985.md index 753e34ade68..43f5702b939 100644 --- a/2023/CVE-2023-29985.md +++ b/2023/CVE-2023-29985.md @@ -10,7 +10,7 @@ Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\in ### POC #### Reference -- https://liaorj.github.io/2023/03/17/admin-reports-date-from-has-sql-injection-vulnerability/#more +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-30328.md b/2023/CVE-2023-30328.md index c84e8333c46..b3e8ad54c2c 100644 --- a/2023/CVE-2023-30328.md +++ b/2023/CVE-2023-30328.md @@ -11,7 +11,6 @@ An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 #### Reference - https://github.com/rand0mIdas/randomideas/blob/main/ShimoVPN.md -- https://raw.githubusercontent.com/rand0mIdas/randomideas/main/ShimoVPN.md?token=GHSAT0AAAAAACA3WX4SPH2YYOCWGV6LLVSGZBIEKEQ #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-3127.md b/2023/CVE-2023-3127.md index 88db2abc7e3..422429389ba 100644 --- a/2023/CVE-2023-3127.md +++ b/2023/CVE-2023-3127.md @@ -14,7 +14,7 @@ An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-31582.md b/2023/CVE-2023-31582.md index fa7cfadecaf..dc9ef348412 100644 --- a/2023/CVE-2023-31582.md +++ b/2023/CVE-2023-31582.md @@ -10,7 +10,7 @@ jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or le ### POC #### Reference -- https://bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-then +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-31893.md b/2023/CVE-2023-31893.md index 53e46a54610..e0a0039f537 100644 --- a/2023/CVE-2023-31893.md +++ b/2023/CVE-2023-31893.md @@ -10,8 +10,7 @@ Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to ### POC #### Reference -- https://medium.com/%40shooterRX/dns-recursion-leads-to-dos-attack-vivo-play-iptv-cve-2023-31893-b5ac45f38f -- https://medium.com/@shooterRX/dns-recursion-leads-to-dos-attack-vivo-play-iptv-cve-2023-31893-b5ac45f38f +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-3309.md b/2023/CVE-2023-3309.md index 216caaaf903..8ea9bac7d9e 100644 --- a/2023/CVE-2023-3309.md +++ b/2023/CVE-2023-3309.md @@ -11,7 +11,7 @@ In SourceCodester Resort Reservation System 1.0 wurde eine problematische Schwac ### POC #### Reference -- https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-3311.md b/2023/CVE-2023-3311.md index 8352bdc191e..32b6ad5eb2a 100644 --- a/2023/CVE-2023-3311.md +++ b/2023/CVE-2023-3311.md @@ -11,7 +11,7 @@ Es wurde eine problematische Schwachstelle in PuneethReddyHC online-shopping-sys ### POC #### Reference -- https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3311 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-3318.md b/2023/CVE-2023-3318.md index 820d1a74e77..c62d322fa54 100644 --- a/2023/CVE-2023-3318.md +++ b/2023/CVE-2023-3318.md @@ -11,7 +11,7 @@ In SourceCodester Resort Management System 1.0 wurde eine problematische Schwach ### POC #### Reference -- https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3318 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-33510.md b/2023/CVE-2023-33510.md index 0ea3574d299..f9ef14683a2 100644 --- a/2023/CVE-2023-33510.md +++ b/2023/CVE-2023-33510.md @@ -10,7 +10,7 @@ Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through ### POC #### Reference -- https://carl1l.github.io/2023/05/08/jeecg-p3-biz-chat-1-0-5-jar-has-arbitrary-file-read-vulnerability/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-33628.md b/2023/CVE-2023-33628.md index 0841b41169c..d4764cc198f 100644 --- a/2023/CVE-2023-33628.md +++ b/2023/CVE-2023-33628.md @@ -10,7 +10,6 @@ H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack over ### POC #### Reference -- https://hackmd.io/%400dayResearch/DelvsList_R300 - https://hackmd.io/@0dayResearch/DelvsList_R300 #### Github diff --git a/2023/CVE-2023-33630.md b/2023/CVE-2023-33630.md index ecb065c7f9e..9bb7b89220c 100644 --- a/2023/CVE-2023-33630.md +++ b/2023/CVE-2023-33630.md @@ -10,7 +10,6 @@ H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack over ### POC #### Reference -- https://hackmd.io/%400dayResearch/HkUA31-Mh - https://hackmd.io/@0dayResearch/HkUA31-Mh #### Github diff --git a/2023/CVE-2023-33632.md b/2023/CVE-2023-33632.md index 2ede6ae50c6..98e9831f660 100644 --- a/2023/CVE-2023-33632.md +++ b/2023/CVE-2023-33632.md @@ -10,7 +10,6 @@ H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack over ### POC #### Reference -- https://hackmd.io/%400dayResearch/r1N7fg-fn - https://hackmd.io/@0dayResearch/r1N7fg-fn #### Github diff --git a/2023/CVE-2023-33634.md b/2023/CVE-2023-33634.md index 8204b580806..30ff258ec6b 100644 --- a/2023/CVE-2023-33634.md +++ b/2023/CVE-2023-33634.md @@ -10,7 +10,6 @@ H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack over ### POC #### Reference -- https://hackmd.io/%400dayResearch/r1g5bl-Mn - https://hackmd.io/@0dayResearch/r1g5bl-Mn #### Github diff --git a/2023/CVE-2023-34367.md b/2023/CVE-2023-34367.md index 964c1804438..31b441d1c5a 100644 --- a/2023/CVE-2023-34367.md +++ b/2023/CVE-2023-34367.md @@ -11,7 +11,6 @@ Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerabili #### Reference - http://blog.pi3.com.pl/?p=850 -- https://portswigger.net/daily-swig/blind-tcp-ip-hijacking-is-resurrected-for-windows-7 #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-34614.md b/2023/CVE-2023-34614.md index b356c8564f4..9170df2afb7 100644 --- a/2023/CVE-2023-34614.md +++ b/2023/CVE-2023-34614.md @@ -10,7 +10,7 @@ An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a d ### POC #### Reference -- https://bitbucket.org/jmarsden/jsonij/issues/7/stack-overflow-error-caused-by-jsonij +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-3548.md b/2023/CVE-2023-3548.md index 71184502261..83565362e78 100644 --- a/2023/CVE-2023-3548.md +++ b/2023/CVE-2023-3548.md @@ -10,7 +10,7 @@ An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2. ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-35885.md b/2023/CVE-2023-35885.md index afefe48fac7..22753f548d3 100644 --- a/2023/CVE-2023-35885.md +++ b/2023/CVE-2023-35885.md @@ -11,7 +11,6 @@ CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. #### Reference - https://github.com/datackmy/FallingSkies-CVE-2023-35885 -- https://www.datack.my/fallingskies-cloudpanel-0-day/ #### Github - https://github.com/Chocapikk/CVE-2023-35885 diff --git a/2023/CVE-2023-36177.md b/2023/CVE-2023-36177.md index 6b36e34ca2a..137c1f574ba 100644 --- a/2023/CVE-2023-36177.md +++ b/2023/CVE-2023-36177.md @@ -11,7 +11,7 @@ An issue was discovered in badaix Snapcast version 0.27.0, allows remote attacke ### POC #### Reference -- https://oxnan.com/posts/Snapcast_jsonrpc_rce +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-36252.md b/2023/CVE-2023-36252.md index c115694a982..4673d201dca 100644 --- a/2023/CVE-2023-36252.md +++ b/2023/CVE-2023-36252.md @@ -10,7 +10,7 @@ An issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authentica ### POC #### Reference -- https://www.zeroscience.mk/en/vulnerabilities/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-36256.md b/2023/CVE-2023-36256.md index ffdbb137457..c860b55a822 100644 --- a/2023/CVE-2023-36256.md +++ b/2023/CVE-2023-36256.md @@ -11,7 +11,6 @@ The Online Examination System Project 1.0 version is vulnerable to Cross-Site Re #### Reference - https://www.exploit-db.com/exploits/51511 -- https://www.hackersnotes.com/blog/pentest/online-examination-system-project-1-0-cross-site-request-forgery-csrf/ #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-3635.md b/2023/CVE-2023-3635.md index 09e2d9b2f21..77e66a26efb 100644 --- a/2023/CVE-2023-3635.md +++ b/2023/CVE-2023-3635.md @@ -13,7 +13,7 @@ GzipSource does not handle an exception that might be raised when parsing a malf ### POC #### Reference -- https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/ +No PoCs from references. #### Github - https://github.com/JoshuaASmith/reproducer-okio-cve-2023-3635 diff --git a/2023/CVE-2023-36629.md b/2023/CVE-2023-36629.md index 80805456528..c2f8a32e935 100644 --- a/2023/CVE-2023-36629.md +++ b/2023/CVE-2023-36629.md @@ -10,7 +10,6 @@ The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for An ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-android-privilege-escalation-with-a-32-line-fuzzer/ - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-007_Xiaomi_Redmi_10sNote-1.txt #### Github diff --git a/2023/CVE-2023-3749.md b/2023/CVE-2023-3749.md index afde74af779..d243f6b7d88 100644 --- a/2023/CVE-2023-3749.md +++ b/2023/CVE-2023-3749.md @@ -10,7 +10,7 @@ A local user could edit the VideoEdge configuration file and interfere with Vide ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-37758.md b/2023/CVE-2023-37758.md index 28286141a4e..80ff757175d 100644 --- a/2023/CVE-2023-37758.md +++ b/2023/CVE-2023-37758.md @@ -11,7 +11,6 @@ D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the compone ### POC #### Reference -- https://hackmd.io/%40pSgS7xsnS5a4K7Y0yiB43g/rJr8oNn_n - https://hackmd.io/@pSgS7xsnS5a4K7Y0yiB43g/rJr8oNn_n - https://www.dlink.com/en/security-bulletin/ diff --git a/2023/CVE-2023-38130.md b/2023/CVE-2023-38130.md index 251edc7da4e..45549e50dd7 100644 --- a/2023/CVE-2023-38130.md +++ b/2023/CVE-2023-38130.md @@ -10,7 +10,7 @@ Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allow ### POC #### Reference -- https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-40044.md b/2023/CVE-2023-40044.md index af985b55c2f..3f0ec97f072 100644 --- a/2023/CVE-2023-40044.md +++ b/2023/CVE-2023-40044.md @@ -14,7 +14,6 @@ In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker - http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html - https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044 - https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044 -- https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/ - https://www.theregister.com/2023/10/02/ws_ftp_update/ #### Github diff --git a/2023/CVE-2023-40889.md b/2023/CVE-2023-40889.md index 539acc3964f..a04cd14d420 100644 --- a/2023/CVE-2023-40889.md +++ b/2023/CVE-2023-40889.md @@ -10,7 +10,6 @@ A heap-based buffer overflow exists in the qr_reader_match_centers function of Z ### POC #### Reference -- https://hackmd.io/%40cspl/B1ZkFZv23 - https://hackmd.io/@cspl/B1ZkFZv23 #### Github diff --git a/2023/CVE-2023-40890.md b/2023/CVE-2023-40890.md index 240548764be..ffc76e1967e 100644 --- a/2023/CVE-2023-40890.md +++ b/2023/CVE-2023-40890.md @@ -10,7 +10,6 @@ A stack-based buffer overflow vulnerability exists in the lookup_sequence functi ### POC #### Reference -- https://hackmd.io/%40cspl/H1PxPAUnn - https://hackmd.io/@cspl/H1PxPAUnn #### Github diff --git a/2023/CVE-2023-41593.md b/2023/CVE-2023-41593.md index 335729d1eb1..75882cf6f1c 100644 --- a/2023/CVE-2023-41593.md +++ b/2023/CVE-2023-41593.md @@ -10,7 +10,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Managemen ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-41627.md b/2023/CVE-2023-41627.md index f4697f116ab..73af5a6a745 100644 --- a/2023/CVE-2023-41627.md +++ b/2023/CVE-2023-41627.md @@ -10,7 +10,6 @@ O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of ### POC #### Reference -- https://jira.o-ran-sc.org/browse/RIC-1001 - https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html #### Github diff --git a/2023/CVE-2023-41628.md b/2023/CVE-2023-41628.md index 4d330cdedbb..9b4d254f669 100644 --- a/2023/CVE-2023-41628.md +++ b/2023/CVE-2023-41628.md @@ -10,7 +10,7 @@ An issue in O-RAN Software Community E2 G-Release allows attackers to cause a De ### POC #### Reference -- https://jira.o-ran-sc.org/browse/RIC-1002 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-42358.md b/2023/CVE-2023-42358.md index a0be4e34286..9b70a38e533 100644 --- a/2023/CVE-2023-42358.md +++ b/2023/CVE-2023-42358.md @@ -10,7 +10,7 @@ An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Relea ### POC #### Reference -- https://jira.o-ran-sc.org/browse/RIC-1009 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-42374.md b/2023/CVE-2023-42374.md index 08c7459b41c..dd595f2305d 100644 --- a/2023/CVE-2023-42374.md +++ b/2023/CVE-2023-42374.md @@ -11,7 +11,6 @@ An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to ### POC #### Reference -- https://beosin.com/resources/%22memory-bomb%22-vulnerability-causes-sui-node-to-crash?lang=en-US - https://medium.com/%40Beosin_com/memory-bomb-vulnerability-causes-sui-node-to-crash-7e8e3ef5057c - https://medium.com/@Beosin_com/memory-bomb-vulnerability-causes-sui-node-to-crash-7e8e3ef5057c diff --git a/2023/CVE-2023-42428.md b/2023/CVE-2023-42428.md index eeda9fff293..6e4d3f1e808 100644 --- a/2023/CVE-2023-42428.md +++ b/2023/CVE-2023-42428.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote aut ### POC #### Reference -- https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-43959.md b/2023/CVE-2023-43959.md index b5ab6311100..2a0d027a399 100644 --- a/2023/CVE-2023-43959.md +++ b/2023/CVE-2023-43959.md @@ -11,7 +11,6 @@ An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker ### POC #### Reference -- https://hackmd.io/%40tahaafarooq/auth_rce_voip - https://hackmd.io/@tahaafarooq/auth_rce_voip - https://www.exploit-db.com/exploits/50509 diff --git a/2023/CVE-2023-43960.md b/2023/CVE-2023-43960.md index 2bdd6b02327..e0c41dd4bf3 100644 --- a/2023/CVE-2023-43960.md +++ b/2023/CVE-2023-43960.md @@ -11,7 +11,6 @@ An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate pr ### POC #### Reference -- https://hackmd.io/%40tahaafarooq/dlink-dph-400se-cwe-200 - https://hackmd.io/@tahaafarooq/dlink-dph-400se-cwe-200 - https://www.exploit-db.com/exploits/51709 diff --git a/2023/CVE-2023-4486.md b/2023/CVE-2023-4486.md index fad2074864c..c0fd4e791af 100644 --- a/2023/CVE-2023-4486.md +++ b/2023/CVE-2023-4486.md @@ -12,7 +12,7 @@ Under certain circumstances, invalid authentication credentials could be sent to ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-45252.md b/2023/CVE-2023-45252.md index ec3fe639e60..92f06796b13 100644 --- a/2023/CVE-2023-45252.md +++ b/2023/CVE-2023-45252.md @@ -10,7 +10,7 @@ DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, ### POC #### Reference -- https://www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-45253.md b/2023/CVE-2023-45253.md index 21696054f41..1316bc8539b 100644 --- a/2023/CVE-2023-45253.md +++ b/2023/CVE-2023-45253.md @@ -10,7 +10,7 @@ An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not ### POC #### Reference -- https://www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-45670.md b/2023/CVE-2023-45670.md index e8b6eb190b0..13b2c5b2c00 100644 --- a/2023/CVE-2023-45670.md +++ b/2023/CVE-2023-45670.md @@ -10,7 +10,6 @@ Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3 ### POC #### Reference -- https://about.gitlab.com/blog/2021/09/07/why-are-developers-vulnerable-to-driveby-attacks/ - https://github.com/blakeblackshear/frigate/security/advisories/GHSA-xq49-hv88-jr6h - https://securitylab.github.com/advisories/GHSL-2023-190_Frigate/ diff --git a/2023/CVE-2023-46055.md b/2023/CVE-2023-46055.md index f82e6de0c29..1453975ae04 100644 --- a/2023/CVE-2023-46055.md +++ b/2023/CVE-2023-46055.md @@ -10,7 +10,7 @@ An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrar ### POC #### Reference -- https://gist.github.com/GroundCTL2MajorTom/eef0d55f5df77cc911d84392acdbf625 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-46484.md b/2023/CVE-2023-46484.md index 26cc84293b6..eaa0851cfa7 100644 --- a/2023/CVE-2023-46484.md +++ b/2023/CVE-2023-46484.md @@ -11,7 +11,7 @@ An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to e ### POC #### Reference -- https://815yang.github.io/2023/10/29/x6000r/setLedCfg/TOTOlink%20X6000R%20setLedCfg%20e/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-46485.md b/2023/CVE-2023-46485.md index 1426d7cda55..ce3ccb17cd4 100644 --- a/2023/CVE-2023-46485.md +++ b/2023/CVE-2023-46485.md @@ -11,7 +11,7 @@ An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to e ### POC #### Reference -- https://815yang.github.io/2023/10/29/x6000r/TOTOlink%20X6000R%20V9.1.0cu.2350_B20230313-rsetTracerouteCfg/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-47283.md b/2023/CVE-2023-47283.md index f5df62fab4c..92facb3aa7f 100644 --- a/2023/CVE-2023-47283.md +++ b/2023/CVE-2023-47283.md @@ -10,7 +10,7 @@ Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote aut ### POC #### Reference -- https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-47397.md b/2023/CVE-2023-47397.md index d2fa1f14428..787acca86fe 100644 --- a/2023/CVE-2023-47397.md +++ b/2023/CVE-2023-47397.md @@ -10,7 +10,7 @@ WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php. ### POC #### Reference -- https://liotree.github.io/2023/webid.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-47444.md b/2023/CVE-2023-47444.md index 2323ea7b43f..ccc024627bc 100644 --- a/2023/CVE-2023-47444.md +++ b/2023/CVE-2023-47444.md @@ -10,7 +10,7 @@ An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend ### POC #### Reference -- https://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-47488.md b/2023/CVE-2023-47488.md index 31babb64a80..a3792e22bf7 100644 --- a/2023/CVE-2023-47488.md +++ b/2023/CVE-2023-47488.md @@ -10,8 +10,7 @@ Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a loca ### POC #### Reference -- https://bugplorer.github.io/cve-xss-itop/ -- https://nitipoom-jar.github.io/CVE-2023-47488/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-47489.md b/2023/CVE-2023-47489.md index 2fca3ab0d71..cac90077e80 100644 --- a/2023/CVE-2023-47489.md +++ b/2023/CVE-2023-47489.md @@ -10,8 +10,7 @@ CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local at ### POC #### Reference -- https://bugplorer.github.io/cve-csv-itop/ -- https://nitipoom-jar.github.io/CVE-2023-47489/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-47675.md b/2023/CVE-2023-47675.md index 2cd498c6d93..74f970d9db3 100644 --- a/2023/CVE-2023-47675.md +++ b/2023/CVE-2023-47675.md @@ -10,7 +10,7 @@ CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administr ### POC #### Reference -- https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48028.md b/2023/CVE-2023-48028.md index 3fb91158b4b..dab9929d95d 100644 --- a/2023/CVE-2023-48028.md +++ b/2023/CVE-2023-48028.md @@ -10,7 +10,7 @@ kodbox 1.46.01 has a security flaw that enables user enumeration. This problem i ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48028/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48029.md b/2023/CVE-2023-48029.md index 3c1405760b6..7f60e6b77f8 100644 --- a/2023/CVE-2023-48029.md +++ b/2023/CVE-2023-48029.md @@ -10,7 +10,7 @@ Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privi ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48029/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48031.md b/2023/CVE-2023-48031.md index 8742d0298e7..dfe3bfbbbd8 100644 --- a/2023/CVE-2023-48031.md +++ b/2023/CVE-2023-48031.md @@ -11,7 +11,7 @@ OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48031/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-4804.md b/2023/CVE-2023-4804.md index 7e1b20a65f9..af7098ab240 100644 --- a/2023/CVE-2023-4804.md +++ b/2023/CVE-2023-4804.md @@ -15,7 +15,7 @@ An unauthorized user could access debug features in Quantum HD Unity products t ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-4810.md b/2023/CVE-2023-4810.md index f0ec0cf8db8..d2a2f2f4a62 100644 --- a/2023/CVE-2023-4810.md +++ b/2023/CVE-2023-4810.md @@ -10,7 +10,6 @@ The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored - https://wpscan.com/vulnerability/dfde5436-dd5c-4c70-a9c2-3cb85cc99c0a #### Github diff --git a/2023/CVE-2023-4816.md b/2023/CVE-2023-4816.md index 6673844f998..80d429ee917 100644 --- a/2023/CVE-2023-4816.md +++ b/2023/CVE-2023-4816.md @@ -11,7 +11,7 @@ A vulnerability exists in the Equipment Tag Out authentication, when configured ### POC #### Reference -- https://images.go.hitachienergy.com/Web/ABBEnterpriseSoftware/%7B70b3d323-4866-42e1-8a75-58996729c1d4%7D_8DBD000172-VU-2023-23_Asset_Suite_Tagout_vulnerability_Rev1.pdf +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48197.md b/2023/CVE-2023-48197.md index f6644a0d34f..9db0294ced3 100644 --- a/2023/CVE-2023-48197.md +++ b/2023/CVE-2023-48197.md @@ -10,7 +10,7 @@ Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48197/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48198.md b/2023/CVE-2023-48198.md index c44841f4f38..4a01ca25357 100644 --- a/2023/CVE-2023-48198.md +++ b/2023/CVE-2023-48198.md @@ -10,7 +10,7 @@ A Cross-Site Scripting (XSS) vulnerability in the 'product description' componen ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48198 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48199.md b/2023/CVE-2023-48199.md index 2190bcfcdf9..2429e0f1caf 100644 --- a/2023/CVE-2023-48199.md +++ b/2023/CVE-2023-48199.md @@ -10,7 +10,7 @@ HTML Injection vulnerability in the 'manageApiKeys' component in Grocy <= 4.0.3 ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48199/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48200.md b/2023/CVE-2023-48200.md index 935cc427d4b..fb75009f3bc 100644 --- a/2023/CVE-2023-48200.md +++ b/2023/CVE-2023-48200.md @@ -10,7 +10,7 @@ Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to e ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48200/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-48866.md b/2023/CVE-2023-48866.md index f4abfcbbec6..8ffddeff401 100644 --- a/2023/CVE-2023-48866.md +++ b/2023/CVE-2023-48866.md @@ -10,7 +10,7 @@ A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component w ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-48866/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-49235.md b/2023/CVE-2023-49235.md index 18e866a9c4c..fbe52bc067b 100644 --- a/2023/CVE-2023-49235.md +++ b/2023/CVE-2023-49235.md @@ -10,7 +10,7 @@ An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 ### POC #### Reference -- https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-49236.md b/2023/CVE-2023-49236.md index 8ea84b3b46c..81a86760349 100644 --- a/2023/CVE-2023-49236.md +++ b/2023/CVE-2023-49236.md @@ -10,7 +10,7 @@ A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 20071 ### POC #### Reference -- https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-49237.md b/2023/CVE-2023-49237.md index c41fd58d41f..f55daf3f38b 100644 --- a/2023/CVE-2023-49237.md +++ b/2023/CVE-2023-49237.md @@ -10,7 +10,7 @@ An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command in ### POC #### Reference -- https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-49453.md b/2023/CVE-2023-49453.md index 4d5fd14ac14..50e5b720921 100644 --- a/2023/CVE-2023-49453.md +++ b/2023/CVE-2023-49453.md @@ -11,7 +11,7 @@ Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and bef ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2023-49453/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-50447.md b/2023/CVE-2023-50447.md index 32674540f0b..e4d44c738cf 100644 --- a/2023/CVE-2023-50447.md +++ b/2023/CVE-2023-50447.md @@ -11,7 +11,6 @@ Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the ### POC #### Reference -- https://duartecsantos.github.io/2023-01-02-CVE-2023-50447/ - https://duartecsantos.github.io/2024-01-02-CVE-2023-50447/ #### Github diff --git a/2023/CVE-2023-51011.md b/2023/CVE-2023-51011.md index 4fd1893dcb2..ecd3d722d43 100644 --- a/2023/CVE-2023-51011.md +++ b/2023/CVE-2023-51011.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanPriDns/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51012.md b/2023/CVE-2023-51012.md index 133d564e8bb..c06671f9e54 100644 --- a/2023/CVE-2023-51012.md +++ b/2023/CVE-2023-51012.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanGateway/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51013.md b/2023/CVE-2023-51013.md index e1b14d32c9a..eecd9a9e153 100644 --- a/2023/CVE-2023-51013.md +++ b/2023/CVE-2023-51013.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanNetmask/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51014.md b/2023/CVE-2023-51014.md index d90967a0fa1..d3aa4ed16b8 100644 --- a/2023/CVE-2023-51014.md +++ b/2023/CVE-2023-51014.md @@ -11,7 +11,7 @@ TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig_lanSecDns/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51015.md b/2023/CVE-2023-51015.md index 7b4870e18b9..029d5f1e5e8 100644 --- a/2023/CVE-2023-51015.md +++ b/2023/CVE-2023-51015.md @@ -11,7 +11,7 @@ TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command exec ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setDmzCfg/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51016.md b/2023/CVE-2023-51016.md index eba0efb97e3..009058d01f3 100644 --- a/2023/CVE-2023-51016.md +++ b/2023/CVE-2023-51016.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/10/EX1800T/TOTOlink%20EX1800T_V9.1.0cu.2112_B20220316(setRebootScheCfg)/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51017.md b/2023/CVE-2023-51017.md index eab69b91071..9a4f406c44a 100644 --- a/2023/CVE-2023-51017.md +++ b/2023/CVE-2023-51017.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanIp/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51018.md b/2023/CVE-2023-51018.md index 2d845fa1611..a4e87a94754 100644 --- a/2023/CVE-2023-51018.md +++ b/2023/CVE-2023-51018.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setWiFiApConfig-opmode/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51019.md b/2023/CVE-2023-51019.md index c7897ef46db..0dcc5abc52e 100644 --- a/2023/CVE-2023-51019.md +++ b/2023/CVE-2023-51019.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-key5g/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51020.md b/2023/CVE-2023-51020.md index 2af849f967c..4d3b73e2f30 100644 --- a/2023/CVE-2023-51020.md +++ b/2023/CVE-2023-51020.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setLanguageCfg-langType/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51021.md b/2023/CVE-2023-51021.md index 7c3c2f3d2b9..8d2eeea82c3 100644 --- a/2023/CVE-2023-51021.md +++ b/2023/CVE-2023-51021.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setRptWizardCfg-merge/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51022.md b/2023/CVE-2023-51022.md index 593c280ea67..da32841d230 100644 --- a/2023/CVE-2023-51022.md +++ b/2023/CVE-2023-51022.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setLanguageCfg-langFlag/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51023.md b/2023/CVE-2023-51023.md index 7293df23e8a..ff2b72466a0 100644 --- a/2023/CVE-2023-51023.md +++ b/2023/CVE-2023-51023.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command exec ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031NTPSyncWithHost-host_time/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51024.md b/2023/CVE-2023-51024.md index b0cb2916656..ac0d29d3f8a 100644 --- a/2023/CVE-2023-51024.md +++ b/2023/CVE-2023-51024.md @@ -10,7 +10,7 @@ TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setNtpCfg-tz/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51025.md b/2023/CVE-2023-51025.md index f2c99b3a86d..497c5045635 100644 --- a/2023/CVE-2023-51025.md +++ b/2023/CVE-2023-51025.md @@ -11,7 +11,7 @@ TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitr ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setPasswordCfg-admuser/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51026.md b/2023/CVE-2023-51026.md index d32e313eafc..a0b054eb585 100644 --- a/2023/CVE-2023-51026.md +++ b/2023/CVE-2023-51026.md @@ -11,7 +11,7 @@ TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setRebootScheCfg-hour/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51027.md b/2023/CVE-2023-51027.md index bf535c22af7..90b5f11d615 100644 --- a/2023/CVE-2023-51027.md +++ b/2023/CVE-2023-51027.md @@ -10,7 +10,7 @@ TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-apcliAuthMode/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51028.md b/2023/CVE-2023-51028.md index 74e059a7e0d..c32c48f6b59 100644 --- a/2023/CVE-2023-51028.md +++ b/2023/CVE-2023-51028.md @@ -10,7 +10,7 @@ TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-apcliChannel/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51033.md b/2023/CVE-2023-51033.md index 3982618ee2f..743860ba7a4 100644 --- a/2023/CVE-2023-51033.md +++ b/2023/CVE-2023-51033.md @@ -10,7 +10,7 @@ TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execu ### POC #### Reference -- https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_setOpModeCfg/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51034.md b/2023/CVE-2023-51034.md index 80417dc6efe..760a5a9d7af 100644 --- a/2023/CVE-2023-51034.md +++ b/2023/CVE-2023-51034.md @@ -11,7 +11,7 @@ TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execu ### POC #### Reference -- https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_UploadFirmwareFile/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51035.md b/2023/CVE-2023-51035.md index 4dc617d31f9..f23f7517825 100644 --- a/2023/CVE-2023-51035.md +++ b/2023/CVE-2023-51035.md @@ -10,7 +10,7 @@ TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execu ### POC #### Reference -- https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_NTPSyncWithHost/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-51775.md b/2023/CVE-2023-51775.md index c57133a992f..1deab090c59 100644 --- a/2023/CVE-2023-51775.md +++ b/2023/CVE-2023-51775.md @@ -11,7 +11,7 @@ The jose4j component before 0.9.4 for Java allows attackers to cause a denial of ### POC #### Reference -- https://bitbucket.org/b_c/jose4j/issues/212 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-52026.md b/2023/CVE-2023-52026.md index 54b5093858d..1eda6d14a85 100644 --- a/2023/CVE-2023-52026.md +++ b/2023/CVE-2023-52026.md @@ -11,7 +11,7 @@ TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote comm ### POC #### Reference -- https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setTelnetCfg/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-52027.md b/2023/CVE-2023-52027.md index 94e48948b0d..3cde7ecf440 100644 --- a/2023/CVE-2023-52027.md +++ b/2023/CVE-2023-52027.md @@ -10,7 +10,7 @@ TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote comman ### POC #### Reference -- https://815yang.github.io/2023/12/23/a3700r/TOTOLINKA3700R_NTPSyncWithHost/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-52028.md b/2023/CVE-2023-52028.md index f868e8f4954..240f9c859c2 100644 --- a/2023/CVE-2023-52028.md +++ b/2023/CVE-2023-52028.md @@ -10,7 +10,7 @@ TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote comman ### POC #### Reference -- https://815yang.github.io/2023/12/04/a3700r/TOTOlink%20A3700R_setTracerouteCfg/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-52031.md b/2023/CVE-2023-52031.md index 9742fc4ff70..9525dce5726 100644 --- a/2023/CVE-2023-52031.md +++ b/2023/CVE-2023-52031.md @@ -10,7 +10,7 @@ TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote comman ### POC #### Reference -- https://815yang.github.io/2023/12/04/a3700r/TOTOlink%20A3700R_UploadFirmwareFile/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-52032.md b/2023/CVE-2023-52032.md index 25507e9e6ab..5329e4e7756 100644 --- a/2023/CVE-2023-52032.md +++ b/2023/CVE-2023-52032.md @@ -10,7 +10,7 @@ TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote comm ### POC #### Reference -- https://815yang.github.io/2023/12/24/cve6/EX1200T_V4.1.2cu.5232_B20210713_downloadFlile/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-6489.md b/2023/CVE-2023-6489.md index e3fb6587339..d517d4939a2 100644 --- a/2023/CVE-2023-6489.md +++ b/2023/CVE-2023-6489.md @@ -12,7 +12,7 @@ A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7. ### POC #### Reference -- https://gitlab.com/gitlab-org/gitlab/-/issues/433520 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-6773.md b/2023/CVE-2023-6773.md index 1940bef15a5..4c089e921cf 100644 --- a/2023/CVE-2023-6773.md +++ b/2023/CVE-2023-6773.md @@ -11,7 +11,7 @@ In CodeAstro POS and Inventory Management System 1.0 wurde eine Schwachstelle ge ### POC #### Reference -- https://drive.google.com/drive/folders/1yuc1n6tr57wD8qsT0HAFDVAuii7iibDM?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2023/CVE-2023-7116.md b/2023/CVE-2023-7116.md index 8e6b1b5ab07..354e9cb41d2 100644 --- a/2023/CVE-2023-7116.md +++ b/2023/CVE-2023-7116.md @@ -11,7 +11,6 @@ Eine kritische Schwachstelle wurde in WeiYe-Jing datax-web 2.1.2 entdeckt. Es ge ### POC #### Reference -- https://medium.com/@2839549219ljk/rec-vulnerability-e8f2e1033b1f - https://vuldb.com/?id.249086 #### Github diff --git a/2023/CVE-2023-7209.md b/2023/CVE-2023-7209.md index 4872c23cc98..2c2be9035d9 100644 --- a/2023/CVE-2023-7209.md +++ b/2023/CVE-2023-7209.md @@ -11,7 +11,7 @@ Eine kritische Schwachstelle wurde in Uniway Router bis 2.0 ausgemacht. Betroffe ### POC #### Reference -- https://drive.google.com/file/d/1XDZA4ibiYNcxTwq60vYCr03_6M_cvJ_2/view?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-0242.md b/2024/CVE-2024-0242.md index 1411ba4ca62..cdc0f41f7c4 100644 --- a/2024/CVE-2024-0242.md +++ b/2024/CVE-2024-0242.md @@ -11,7 +11,7 @@ Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to versio ### POC #### Reference -- https://www.johnsoncontrols.com/cyber-solutions/security-advisories +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-0263.md b/2024/CVE-2024-0263.md index c65607881a0..7325d8047d4 100644 --- a/2024/CVE-2024-0263.md +++ b/2024/CVE-2024-0263.md @@ -11,7 +11,6 @@ Es wurde eine Schwachstelle in ACME Ultra Mini HTTPd 1.21 ausgemacht. Sie wurde ### POC #### Reference -- https://0day.today/exploit/description/39212 - https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html - https://www.youtube.com/watch?v=HWOGeg3e5As diff --git a/2024/CVE-2024-0356.md b/2024/CVE-2024-0356.md index 803dc567822..8e2b3dd59aa 100644 --- a/2024/CVE-2024-0356.md +++ b/2024/CVE-2024-0356.md @@ -11,7 +11,7 @@ In Mandelo ssm_shiro_blog 1.0 wurde eine Schwachstelle gefunden. Sie wurde als p ### POC #### Reference -- https://medium.com/@heishou/ssm-has-a-vertical-override-vulnerability-8728da71842e +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-0693.md b/2024/CVE-2024-0693.md index 8e6bba95a90..7d0b226b6d0 100644 --- a/2024/CVE-2024-0693.md +++ b/2024/CVE-2024-0693.md @@ -11,7 +11,6 @@ In EFS Easy File Sharing FTP 2.0 wurde eine problematische Schwachstelle entdeck ### POC #### Reference -- https://0day.today/exploit/description/39218 - https://packetstormsecurity.com/files/176377/Easy-File-Sharing-FTP-Server-2.0-Denial-Of-Service.html - https://www.youtube.com/watch?v=Rcl6VWg_bPY diff --git a/2024/CVE-2024-0736.md b/2024/CVE-2024-0736.md index 9792316e869..82e7818f667 100644 --- a/2024/CVE-2024-0736.md +++ b/2024/CVE-2024-0736.md @@ -11,7 +11,6 @@ Es wurde eine Schwachstelle in EFS Easy File Sharing FTP 3.6 entdeckt. Sie wurde ### POC #### Reference -- https://0day.today/exploit/39249 - https://vuldb.com/?id.251559 #### Github diff --git a/2024/CVE-2024-1020.md b/2024/CVE-2024-1020.md index 0f61adc55e2..f23187b9e98 100644 --- a/2024/CVE-2024-1020.md +++ b/2024/CVE-2024-1020.md @@ -16,7 +16,7 @@ In Rebuild bis 3.5.5 wurde eine problematische Schwachstelle entdeckt. Hierbei b ### POC #### Reference -- https://www.yuque.com/mailemonyeyongjuan/tha8tr/gdd3hiwz8uo6ylab +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-1021.md b/2024/CVE-2024-1021.md index 90280a5c019..2b9f7515533 100644 --- a/2024/CVE-2024-1021.md +++ b/2024/CVE-2024-1021.md @@ -16,7 +16,7 @@ Eine kritische Schwachstelle wurde in Rebuild bis 3.5.5 entdeckt. Davon betroffe ### POC #### Reference -- https://www.yuque.com/mailemonyeyongjuan/tha8tr/yemvnt5uo53gfem5 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-10327.md b/2024/CVE-2024-10327.md index 65577088bfc..56e26c78ae7 100644 --- a/2024/CVE-2024-10327.md +++ b/2024/CVE-2024-10327.md @@ -11,7 +11,7 @@ A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (includ ### POC #### Reference -- https://help.okta.com/en-us/content/topics/releasenotes/okta-verify-release-notes.htm#panel2 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-1098.md b/2024/CVE-2024-1098.md index 52512186490..c989b5bd5bf 100644 --- a/2024/CVE-2024-1098.md +++ b/2024/CVE-2024-1098.md @@ -17,7 +17,6 @@ Eine problematische Schwachstelle wurde in Rebuild bis 3.5.5 gefunden. Davon bet #### Reference - https://vuldb.com/?id.252455 -- https://www.yuque.com/mailemonyeyongjuan/tha8tr/ouiw375l0m8mw5ls #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-1099.md b/2024/CVE-2024-1099.md index 0c6b828c646..65500999bc5 100644 --- a/2024/CVE-2024-1099.md +++ b/2024/CVE-2024-1099.md @@ -16,7 +16,7 @@ Es wurde eine problematische Schwachstelle in Rebuild bis 3.5.5 ausgemacht. Hier ### POC #### Reference -- https://www.yuque.com/mailemonyeyongjuan/tha8tr/dcilugg0htp973nx +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-11304.md b/2024/CVE-2024-11304.md index b0be8e2e40c..01a7cb50487 100644 --- a/2024/CVE-2024-11304.md +++ b/2024/CVE-2024-11304.md @@ -12,7 +12,7 @@ Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computert ### POC #### Reference -- https://cyberdanube.com/en/en-st-polten-uas-stored-cross-site-scripting-in-seh-utnserver-pro/index.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-11406.md b/2024/CVE-2024-11406.md index 0cbd40cefea..182421d0db3 100644 --- a/2024/CVE-2024-11406.md +++ b/2024/CVE-2024-11406.md @@ -10,7 +10,7 @@ Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site ### POC #### Reference -- https://iltosec.com/blog/post/djangocms-attributes-field-300-stored-xss-vulnerability/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-13759.md b/2024/CVE-2024-13759.md index 0e9c394e540..f12ed77e78b 100644 --- a/2024/CVE-2024-13759.md +++ b/2024/CVE-2024-13759.md @@ -10,7 +10,7 @@ Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96. ### POC #### Reference -- https://www.gendigital.com/us/en/contact-us/security-advisories/) +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-13985.md b/2024/CVE-2024-13985.md index d7c853d0c16..1aefccce400 100644 --- a/2024/CVE-2024-13985.md +++ b/2024/CVE-2024-13985.md @@ -11,8 +11,6 @@ A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows #### Reference - https://blog.csdn.net/weixin_43567873/article/details/136636198 -- https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-remote-command-execution_23961 -- https://s4e.io/tools/dahua-eims-remote-code-execution - https://www.vulncheck.com/advisories/dahua-eims-rce #### Github diff --git a/2024/CVE-2024-1977.md b/2024/CVE-2024-1977.md index d7112e0b00b..6eb152b59c7 100644 --- a/2024/CVE-2024-1977.md +++ b/2024/CVE-2024-1977.md @@ -10,7 +10,7 @@ The Restaurant Solutions – Checklist plugin for WordPress is vulnerable to Sto ### POC #### Reference -- https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2022-004 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-22871.md b/2024/CVE-2024-22871.md index 8b9b9dab26a..6174160d848 100644 --- a/2024/CVE-2024-22871.md +++ b/2024/CVE-2024-22871.md @@ -11,7 +11,6 @@ An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a ### POC #### Reference -- https://hackmd.io/%40fe1w0/rymmJGida - https://hackmd.io/@fe1w0/rymmJGida #### Github diff --git a/2024/CVE-2024-23983.md b/2024/CVE-2024-23983.md index a13512652e8..63d720edb09 100644 --- a/2024/CVE-2024-23983.md +++ b/2024/CVE-2024-23983.md @@ -17,7 +17,7 @@ Improper handling of canonical URL-encoding may lead to bypass not properly cons ### POC #### Reference -- https://docs.pingidentity.com/pingaccess/latest/release_notes/pa_811_rn.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-24041.md b/2024/CVE-2024-24041.md index 9f48c8106a0..9f9f701e25d 100644 --- a/2024/CVE-2024-24041.md +++ b/2024/CVE-2024-24041.md @@ -11,7 +11,6 @@ A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP an #### Reference - https://github.com/tubakvgc/CVE/blob/main/Travel_Journal_App.md -- https://portswigger.net/web-security/cross-site-scripting #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-24115.md b/2024/CVE-2024-24115.md index 7150d0d7365..da9bd6b47b2 100644 --- a/2024/CVE-2024-24115.md +++ b/2024/CVE-2024-24115.md @@ -11,7 +11,6 @@ A stored cross-site scripting (XSS) vulnerability in the Edit Page function of C #### Reference - https://mechaneus.github.io/CVE-2024-24115.html -- https://mechaneus.github.io/CVE-PENDING-COTONTI.html #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-24320.md b/2024/CVE-2024-24320.md index 04d6b61c784..40ce883921c 100644 --- a/2024/CVE-2024-24320.md +++ b/2024/CVE-2024-24320.md @@ -11,7 +11,7 @@ Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4. ### POC #### Reference -- https://datack.my/cloudpanel-v2-0-0-v2-4-0-authenticated-user-session-hijacking-cve-2024-24320/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-24336.md b/2024/CVE-2024-24336.md index 85152c8fe7c..403e574296a 100644 --- a/2024/CVE-2024-24336.md +++ b/2024/CVE-2024-24336.md @@ -11,7 +11,7 @@ A multiple Cross-site scripting (XSS) vulnerability in the '/members/moremember. ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2024-24336/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-24337.md b/2024/CVE-2024-24337.md index 36076e0911d..b4674b9d496 100644 --- a/2024/CVE-2024-24337.md +++ b/2024/CVE-2024-24337.md @@ -11,7 +11,7 @@ CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2024-24337/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-24945.md b/2024/CVE-2024-24945.md index 1bd9cc78d38..138ef93a2c6 100644 --- a/2024/CVE-2024-24945.md +++ b/2024/CVE-2024-24945.md @@ -11,7 +11,6 @@ A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP an #### Reference - https://github.com/tubakvgc/CVE/blob/main/Travel_Journal_App.md -- https://portswigger.net/web-security/cross-site-scripting #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-25202.md b/2024/CVE-2024-25202.md index 432d472c535..b65a1095029 100644 --- a/2024/CVE-2024-25202.md +++ b/2024/CVE-2024-25202.md @@ -11,7 +11,6 @@ Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and U ### POC #### Reference -- https://drive.google.com/file/d/1oMNcChsXPMP9pu9lIE2C11n8mzkmLhcY/view - https://github.com/Agampreet-Singh/CVE-2024-25202 - https://medium.com/%40agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 - https://medium.com/@agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 diff --git a/2024/CVE-2024-25817.md b/2024/CVE-2024-25817.md index f298bb76a92..534da9cb188 100644 --- a/2024/CVE-2024-25817.md +++ b/2024/CVE-2024-25817.md @@ -12,7 +12,6 @@ Buffer Overflow vulnerability in eza before version 0.18.2, allows local attacke #### Reference - https://github.com/advisories/GHSA-3qx3-6hxr-j2ch -- https://www.cubeyond.net/blog/my-cves/eza-cve-report #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-26559.md b/2024/CVE-2024-26559.md index e64a422208e..c13fd12a9cd 100644 --- a/2024/CVE-2024-26559.md +++ b/2024/CVE-2024-26559.md @@ -10,7 +10,7 @@ An issue in uverif v.2.0 allows a remote attacker to obtain sensitive informatio ### POC #### Reference -- https://syst1m.cn/2024/01/22/U%E9%AA%8C%E8%AF%81%E7%BD%91%E7%BB%9C%E7%94%A8%E6%88%B7%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-28519.md b/2024/CVE-2024-28519.md index 5dfd779cd92..93ef2517dd7 100644 --- a/2024/CVE-2024-28519.md +++ b/2024/CVE-2024-28519.md @@ -11,7 +11,7 @@ A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologi ### POC #### Reference -- https://www.escanav.com/en/index.asp +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-29276.md b/2024/CVE-2024-29276.md index 3a30b51ca23..cf2fa7e6848 100644 --- a/2024/CVE-2024-29276.md +++ b/2024/CVE-2024-29276.md @@ -11,7 +11,7 @@ An issue was discovered in seeyonOA version 8, allows remote attackers to execut ### POC #### Reference -- https://www.cnblogs.com/Rainy-Day/p/18061399 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-31061.md b/2024/CVE-2024-31061.md index 1f2a3108af3..603c4567e3c 100644 --- a/2024/CVE-2024-31061.md +++ b/2024/CVE-2024-31061.md @@ -11,7 +11,6 @@ Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and bef ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored - https://github.com/sahildari/cve/blob/master/CVE-2024-31061.md #### Github diff --git a/2024/CVE-2024-31062.md b/2024/CVE-2024-31062.md index cda11266a01..f816450fd07 100644 --- a/2024/CVE-2024-31062.md +++ b/2024/CVE-2024-31062.md @@ -11,7 +11,6 @@ Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and bef ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored - https://github.com/sahildari/cve/blob/master/CVE-2024-31062.md #### Github diff --git a/2024/CVE-2024-31063.md b/2024/CVE-2024-31063.md index 6c2352e42a7..f8ec618085f 100644 --- a/2024/CVE-2024-31063.md +++ b/2024/CVE-2024-31063.md @@ -11,7 +11,6 @@ Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and bef ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored - https://github.com/sahildari/cve/blob/master/CVE-2024-31063.md #### Github diff --git a/2024/CVE-2024-31065.md b/2024/CVE-2024-31065.md index 0c6be522091..4100fdbbbe1 100644 --- a/2024/CVE-2024-31065.md +++ b/2024/CVE-2024-31065.md @@ -11,7 +11,6 @@ Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and bef ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored - https://github.com/sahildari/cve/blob/master/CVE-2024-31065.md #### Github diff --git a/2024/CVE-2024-32405.md b/2024/CVE-2024-32405.md index 91e2cfc76fb..8343e7ccde2 100644 --- a/2024/CVE-2024-32405.md +++ b/2024/CVE-2024-32405.md @@ -12,7 +12,6 @@ Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a re #### Reference - https://packetstormsecurity.com/files/178101/Relate-Cross-Site-Scripting.html -- https://portswigger.net/web-security/cross-site-scripting/stored #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-32651.md b/2024/CVE-2024-32651.md index 4ef9da077d1..a32998020a4 100644 --- a/2024/CVE-2024-32651.md +++ b/2024/CVE-2024-32651.md @@ -11,7 +11,6 @@ changedetection.io is an open source web page change detection, website watcher, ### POC #### Reference -- https://blog.hacktivesecurity.com/index.php/2024/05/08/cve-2024-32651-server-side-template-injection-changedetection-io/ - https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4r7v-whpg-8rx3 #### Github diff --git a/2024/CVE-2024-33302.md b/2024/CVE-2024-33302.md index a7e481083b5..e58c99c803c 100644 --- a/2024/CVE-2024-33302.md +++ b/2024/CVE-2024-33302.md @@ -12,7 +12,6 @@ SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scri #### Reference - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33302.md -- https://portswigger.net/web-security/cross-site-scripting/stored #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-33365.md b/2024/CVE-2024-33365.md index c91893a97df..146ac043a48 100644 --- a/2024/CVE-2024-33365.md +++ b/2024/CVE-2024-33365.md @@ -12,8 +12,6 @@ Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn all #### Reference - https://github.com/johnathanhuutri/CVE_report/blob/master/CVE-2024-33365/README.md -- https://hackmd.io/%40JohnathanHuuTri/rJNbEItJC -- https://hackmd.io/@JohnathanHuuTri/rJNbEItJC #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-33373.md b/2024/CVE-2024-33373.md index 30ff29e267e..7c3fcdf0a18 100644 --- a/2024/CVE-2024-33373.md +++ b/2024/CVE-2024-33373.md @@ -11,7 +11,6 @@ An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass passwor #### Reference - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Password-Policy-Bypass--%7C--Inconsistent-Password-Policy-(CVE%E2%80%902024%E2%80%9033373) -- https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-33374.md b/2024/CVE-2024-33374.md index dd8fbec9620..7cfabc4eb4d 100644 --- a/2024/CVE-2024-33374.md +++ b/2024/CVE-2024-33374.md @@ -12,7 +12,6 @@ Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v #### Reference - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Incorrect-Access-Control-(CVE%E2%80%902024%E2%80%9033374) -- https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-33375.md b/2024/CVE-2024-33375.md index f57c3b1c972..07498d87d20 100644 --- a/2024/CVE-2024-33375.md +++ b/2024/CVE-2024-33375.md @@ -12,7 +12,6 @@ LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext wit #### Reference - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Credentials-Stored-in-Cleartext--%7C--Unencrypted-Credentials-(CVE%E2%80%902024%E2%80%9033375) -- https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-33377.md b/2024/CVE-2024-33377.md index 5668b3501ad..c26fec718b2 100644 --- a/2024/CVE-2024-33377.md +++ b/2024/CVE-2024-33377.md @@ -12,7 +12,6 @@ LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability vi #### Reference - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Clickjacking-(CVE%E2%80%902024%E2%80%9033377) -- https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-33669.md b/2024/CVE-2024-33669.md index 3abfd3bf843..5f15bdec707 100644 --- a/2024/CVE-2024-33669.md +++ b/2024/CVE-2024-33669.md @@ -12,7 +12,6 @@ An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send #### Reference - https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html -- https://help.passbolt.com/incidents/pwned-password-service-information-leak #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-34473.md b/2024/CVE-2024-34473.md index f5c7bbce8ba..1895d69012f 100644 --- a/2024/CVE-2024-34473.md +++ b/2024/CVE-2024-34473.md @@ -11,7 +11,7 @@ An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker co ### POC #### Reference -- https://jira.o-ran-sc.org/browse/RIC-1055 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-34519.md b/2024/CVE-2024-34519.md index dae2147dba8..515c63f3f0d 100644 --- a/2024/CVE-2024-34519.md +++ b/2024/CVE-2024-34519.md @@ -12,7 +12,7 @@ Avantra Server 24.x before 24.0.7 and 24.1.x before 24.1.1 mishandles the securi ### POC #### Reference -- https://support.avantra.com/support/solutions/articles/44002516766-xan-5367-security-vulnerability-fix-for-dashboards +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-34914.md b/2024/CVE-2024-34914.md index d4a377252bb..c15d5e3d9d5 100644 --- a/2024/CVE-2024-34914.md +++ b/2024/CVE-2024-34914.md @@ -11,7 +11,7 @@ php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing ### POC #### Reference -- https://chmod744.super.site/redacted-vulnerability +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-35545.md b/2024/CVE-2024-35545.md index 31c728f89b2..425584517e0 100644 --- a/2024/CVE-2024-35545.md +++ b/2024/CVE-2024-35545.md @@ -10,7 +10,7 @@ MAP-OS v4.45.0 and earlier was discovered to contain a cross-site scripting (XSS ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-35581.md b/2024/CVE-2024-35581.md index bf577a34b70..b972801472b 100644 --- a/2024/CVE-2024-35581.md +++ b/2024/CVE-2024-35581.md @@ -12,7 +12,6 @@ A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Manageme #### Reference - https://github.com/r04i7/CVE/blob/main/CVE-2024-35581.md -- https://portswigger.net/web-security/cross-site-scripting/stored #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-35582.md b/2024/CVE-2024-35582.md index ddf331032be..6ced6cd6c0f 100644 --- a/2024/CVE-2024-35582.md +++ b/2024/CVE-2024-35582.md @@ -12,7 +12,6 @@ A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Manageme #### Reference - https://github.com/r04i7/CVE/blob/main/CVE-2024-35582.md -- https://portswigger.net/web-security/cross-site-scripting/stored #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-35583.md b/2024/CVE-2024-35583.md index 771b3d2a2b0..a35633000bf 100644 --- a/2024/CVE-2024-35583.md +++ b/2024/CVE-2024-35583.md @@ -12,7 +12,6 @@ A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Manageme #### Reference - https://github.com/r04i7/CVE/blob/main/CVE-2024-35583.md -- https://portswigger.net/web-security/cross-site-scripting/stored #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-37394.md b/2024/CVE-2024-37394.md index e8f7e045474..f793f13666f 100644 --- a/2024/CVE-2024-37394.md +++ b/2024/CVE-2024-37394.md @@ -10,7 +10,6 @@ A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of R ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396/ - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt #### Github diff --git a/2024/CVE-2024-37395.md b/2024/CVE-2024-37395.md index 89f4f1753cd..3c560480883 100644 --- a/2024/CVE-2024-37395.md +++ b/2024/CVE-2024-37395.md @@ -10,7 +10,6 @@ A stored cross-site scripting (XSS) vulnerability in the Public Survey function ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396/ - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt #### Github diff --git a/2024/CVE-2024-37396.md b/2024/CVE-2024-37396.md index 38f268caf6d..d1d27c0f3ee 100644 --- a/2024/CVE-2024-37396.md +++ b/2024/CVE-2024-37396.md @@ -10,7 +10,6 @@ A stored cross-site scripting (XSS) vulnerability in the Calendar function of RE ### POC #### Reference -- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396/ - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt #### Github diff --git a/2024/CVE-2024-40500.md b/2024/CVE-2024-40500.md index 1d4d5140e88..396a5f2d57f 100644 --- a/2024/CVE-2024-40500.md +++ b/2024/CVE-2024-40500.md @@ -11,7 +11,7 @@ Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and befo ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2024-40500/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-40800.md b/2024/CVE-2024-40800.md index 7243b5f523b..ac4f0c3cbb3 100644 --- a/2024/CVE-2024-40800.md +++ b/2024/CVE-2024-40800.md @@ -15,7 +15,6 @@ An input validation issue was addressed with improved input validation. This iss #### Reference - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19 -- https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2010 #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41583.md b/2024/CVE-2024-41583.md index b473e84cab4..d873d226870 100644 --- a/2024/CVE-2024-41583.md +++ b/2024/CVE-2024-41583.md @@ -11,7 +11,7 @@ DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Sc ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41584.md b/2024/CVE-2024-41584.md index 69903f4ee4e..0aa9eaf0792 100644 --- a/2024/CVE-2024-41584.md +++ b/2024/CVE-2024-41584.md @@ -11,7 +11,7 @@ DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by aut ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41585.md b/2024/CVE-2024-41585.md index 36476825b35..9e17d47d566 100644 --- a/2024/CVE-2024-41585.md +++ b/2024/CVE-2024-41585.md @@ -11,7 +11,7 @@ DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injectio ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41586.md b/2024/CVE-2024-41586.md index 0fdad3105a9..f844973cf87 100644 --- a/2024/CVE-2024-41586.md +++ b/2024/CVE-2024-41586.md @@ -11,7 +11,7 @@ A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41587.md b/2024/CVE-2024-41587.md index ef0faa94bcc..1c7227e16a9 100644 --- a/2024/CVE-2024-41587.md +++ b/2024/CVE-2024-41587.md @@ -10,7 +10,7 @@ Stored XSS, by authenticated users, is caused by poor sanitization of the Login ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41588.md b/2024/CVE-2024-41588.md index a36ac3b637e..90acd337b8d 100644 --- a/2024/CVE-2024-41588.md +++ b/2024/CVE-2024-41588.md @@ -11,7 +11,7 @@ The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41589.md b/2024/CVE-2024-41589.md index d70d09c195a..52b62b5d5ef 100644 --- a/2024/CVE-2024-41589.md +++ b/2024/CVE-2024-41589.md @@ -11,7 +11,7 @@ DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41590.md b/2024/CVE-2024-41590.md index e8ae6dd1666..d428fa74e10 100644 --- a/2024/CVE-2024-41590.md +++ b/2024/CVE-2024-41590.md @@ -11,7 +11,7 @@ Several CGI endpoints are vulnerable to buffer overflows, by authenticated users ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41591.md b/2024/CVE-2024-41591.md index 7dd80c9593c..0b41328b9d2 100644 --- a/2024/CVE-2024-41591.md +++ b/2024/CVE-2024-41591.md @@ -10,7 +10,7 @@ DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflec ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41592.md b/2024/CVE-2024-41592.md index 1090074ca92..9341fb487d2 100644 --- a/2024/CVE-2024-41592.md +++ b/2024/CVE-2024-41592.md @@ -11,7 +11,7 @@ DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when proce ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41593.md b/2024/CVE-2024-41593.md index 6c4deba0efd..ebd8ebb50b8 100644 --- a/2024/CVE-2024-41593.md +++ b/2024/CVE-2024-41593.md @@ -10,7 +10,7 @@ DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbi ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41594.md b/2024/CVE-2024-41594.md index dec97feb00b..fb814854a25 100644 --- a/2024/CVE-2024-41594.md +++ b/2024/CVE-2024-41594.md @@ -10,7 +10,7 @@ An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtai ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41595.md b/2024/CVE-2024-41595.md index 3938653cc94..8d5dde99818 100644 --- a/2024/CVE-2024-41595.md +++ b/2024/CVE-2024-41595.md @@ -11,7 +11,7 @@ DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change setti ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-41596.md b/2024/CVE-2024-41596.md index 4f52bd44c93..b3e5ef1bc42 100644 --- a/2024/CVE-2024-41596.md +++ b/2024/CVE-2024-41596.md @@ -11,7 +11,7 @@ Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2. ### POC #### Reference -- https://www.forescout.com/resources/draytek14-vulnerabilities +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-44786.md b/2024/CVE-2024-44786.md index 921e2de9942..4b2dab5face 100644 --- a/2024/CVE-2024-44786.md +++ b/2024/CVE-2024-44786.md @@ -11,7 +11,7 @@ Incorrect access control in Meabilis CMS 1.0 allows attackers to access other us ### POC #### Reference -- https://gist.github.com/luluhackme/8356703c7295d03d6e68a1ca652441b9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-45163.md b/2024/CVE-2024-45163.md index c572c4dff35..d97b191ed2e 100644 --- a/2024/CVE-2024-45163.md +++ b/2024/CVE-2024-45163.md @@ -12,7 +12,6 @@ The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to t #### Reference - https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1 -- https://pastebin.com/6tqHnCva - https://youtu.be/aJkvSr85ML8 #### Github diff --git a/2024/CVE-2024-45438.md b/2024/CVE-2024-45438.md index ce50a30d7eb..0677e70b28b 100644 --- a/2024/CVE-2024-45438.md +++ b/2024/CVE-2024-45438.md @@ -10,7 +10,7 @@ An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x befor ### POC #### Reference -- https://www.seralys.com/research/CVE-2024-45438.txt +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-46300.md b/2024/CVE-2024-46300.md index 03dfafd8890..a429b131a36 100644 --- a/2024/CVE-2024-46300.md +++ b/2024/CVE-2024-46300.md @@ -11,7 +11,7 @@ itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripti ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-46307.md b/2024/CVE-2024-46307.md index 228bb326d55..3eaa6c1c8d8 100644 --- a/2024/CVE-2024-46307.md +++ b/2024/CVE-2024-46307.md @@ -11,7 +11,7 @@ A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrar ### POC #### Reference -- http://sparkshop.com +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-47191.md b/2024/CVE-2024-47191.md index a6156db0f1e..32569013bfc 100644 --- a/2024/CVE-2024-47191.md +++ b/2024/CVE-2024-47191.md @@ -11,7 +11,7 @@ pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privi ### POC #### Reference -- https://gitlab.com/oath-toolkit/oath-toolkit/-/issues/43 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-47212.md b/2024/CVE-2024-47212.md index d1df12b0b38..7057224de96 100644 --- a/2024/CVE-2024-47212.md +++ b/2024/CVE-2024-47212.md @@ -10,7 +10,7 @@ An issue was discovered in Iglu Server 0.13.0 and below. It involves sending ver ### POC #### Reference -- https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-47213.md b/2024/CVE-2024-47213.md index a56238b3848..cd844f5e8c6 100644 --- a/2024/CVE-2024-47213.md +++ b/2024/CVE-2024-47213.md @@ -10,7 +10,7 @@ An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a ### POC #### Reference -- https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-47214.md b/2024/CVE-2024-47214.md index 27057f6e27f..c0dc5f07922 100644 --- a/2024/CVE-2024-47214.md +++ b/2024/CVE-2024-47214.md @@ -10,7 +10,7 @@ An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-20 ### POC #### Reference -- https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-47215.md b/2024/CVE-2024-47215.md index bca0be6473c..6f69bbcacc1 100644 --- a/2024/CVE-2024-47215.md +++ b/2024/CVE-2024-47215.md @@ -10,7 +10,7 @@ An issue was discovered in Snowbridge setups sending data to Google Tag Manager ### POC #### Reference -- https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-47217.md b/2024/CVE-2024-47217.md index 04ef34bacb4..5f2456a06e1 100644 --- a/2024/CVE-2024-47217.md +++ b/2024/CVE-2024-47217.md @@ -10,7 +10,7 @@ An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-20 ### POC #### Reference -- https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-51144.md b/2024/CVE-2024-51144.md index a3102657f40..1c66d80c951 100644 --- a/2024/CVE-2024-51144.md +++ b/2024/CVE-2024-51144.md @@ -10,7 +10,7 @@ Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action= ### POC #### Reference -- https://nitipoom-jar.github.io/CVE-2024-51144/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-52680.md b/2024/CVE-2024-52680.md index 9589fb1606b..0ee65893439 100644 --- a/2024/CVE-2024-52680.md +++ b/2024/CVE-2024-52680.md @@ -10,7 +10,7 @@ EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin& ### POC #### Reference -- https://gist.github.com/cyb3res3c/c715407bfe6d418d8e6da61e1ab41fc8 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-54728.md b/2024/CVE-2024-54728.md index ac36e601c47..811ce70459f 100644 --- a/2024/CVE-2024-54728.md +++ b/2024/CVE-2024-54728.md @@ -10,8 +10,7 @@ Incorrect access control in BYD QIN PLUS DM-i Dilink OS 3.0_13.1.7.2204050.1 all ### POC #### Reference -- https://gist.github.com/rainymode/00dacd7bfede713a0f052a531da4fabd -- https://gist.github.com/xu-yanbo202000460009/00dacd7bfede713a0f052a531da4fabd +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-55199.md b/2024/CVE-2024-55199.md index 2adafaca8b0..95d4ddeee28 100644 --- a/2024/CVE-2024-55199.md +++ b/2024/CVE-2024-55199.md @@ -10,7 +10,7 @@ A Stored Cross Site Scripting (XSS) vulnerability in Celk Sistemas Celk Saude v. ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-56528.md b/2024/CVE-2024-56528.md index 978e02412ef..ab06f0c879d 100644 --- a/2024/CVE-2024-56528.md +++ b/2024/CVE-2024-56528.md @@ -10,7 +10,7 @@ This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s se ### POC #### Reference -- https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-57370.md b/2024/CVE-2024-57370.md index 6d30501ae73..523aca1d4df 100644 --- a/2024/CVE-2024-57370.md +++ b/2024/CVE-2024-57370.md @@ -10,7 +10,7 @@ Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master versi ### POC #### Reference -- https://royblume.github.io/CVE-2024-57370/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-57372.md b/2024/CVE-2024-57372.md index 28cbbff02a9..70dfbb24fbd 100644 --- a/2024/CVE-2024-57372.md +++ b/2024/CVE-2024-57372.md @@ -10,7 +10,7 @@ Cross Site Scripting vulnerability in InformationPush master version allows a re ### POC #### Reference -- https://royblume.github.io/CVE-2024-57372/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-57768.md b/2024/CVE-2024-57768.md index dee1739743a..c30238b2e44 100644 --- a/2024/CVE-2024-57768.md +++ b/2024/CVE-2024-57768.md @@ -10,7 +10,7 @@ JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerabil ### POC #### Reference -- https://gitee.com/r1bbit/JFinalOA/issues/IBHUMT +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-57770.md b/2024/CVE-2024-57770.md index cb06f939f31..2793e8b0091 100644 --- a/2024/CVE-2024-57770.md +++ b/2024/CVE-2024-57770.md @@ -10,7 +10,7 @@ JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerabil ### POC #### Reference -- https://gitee.com/r1bbit/JFinalOA/issues/IBHUP1 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-57773.md b/2024/CVE-2024-57773.md index 9f7c32f6fb8..a739c64c860 100644 --- a/2024/CVE-2024-57773.md +++ b/2024/CVE-2024-57773.md @@ -10,7 +10,7 @@ A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid i ### POC #### Reference -- https://gitee.com/r1bbit/JFinalOA/issues/IBHUQ9 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-57774.md b/2024/CVE-2024-57774.md index 3d1e7f07065..47e50552143 100644 --- a/2024/CVE-2024-57774.md +++ b/2024/CVE-2024-57774.md @@ -10,7 +10,7 @@ A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busi ### POC #### Reference -- https://gitee.com/r1bbit/JFinalOA/issues/IBHUQQ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-7061.md b/2024/CVE-2024-7061.md index cc3957f5612..24e5f6198a9 100644 --- a/2024/CVE-2024-7061.md +++ b/2024/CVE-2024-7061.md @@ -12,7 +12,7 @@ Okta Verify for Windows is vulnerable to privilege escalation through DLL hijack ### POC #### Reference -- https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-7353.md b/2024/CVE-2024-7353.md index 12699d659ba..278d22d1314 100644 --- a/2024/CVE-2024-7353.md +++ b/2024/CVE-2024-7353.md @@ -11,7 +11,7 @@ The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Si ### POC #### Reference -- https://portswigger.net/research/xss-in-hidden-input-fields +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-8867.md b/2024/CVE-2024-8867.md index 2a32b4bd036..6daeb8e12d1 100644 --- a/2024/CVE-2024-8867.md +++ b/2024/CVE-2024-8867.md @@ -11,7 +11,6 @@ In Perfex CRM 3.1.6 wurde eine Schwachstelle ausgemacht. Sie wurde als problemat ### POC #### Reference -- https://bytium.com/stored-cross-site-scripting-xss-vulnerability-in-perfex-crm/ - https://vuldb.com/?submit.408014 #### Github diff --git a/2024/CVE-2024-8945.md b/2024/CVE-2024-8945.md index fdf96dbf593..adafbe660a3 100644 --- a/2024/CVE-2024-8945.md +++ b/2024/CVE-2024-8945.md @@ -11,7 +11,6 @@ In CodeCanyon RISE Ultimate Project Manager 3.7.0 wurde eine kritische Schwachst ### POC #### Reference -- https://bytium.com/sql-injection-vulnerability-identified-in-rise-crm/ - https://vuldb.com/?submit.409096 #### Github diff --git a/2024/CVE-2024-9191.md b/2024/CVE-2024-9191.md index 203c52b78a0..7bbf65902bc 100644 --- a/2024/CVE-2024-9191.md +++ b/2024/CVE-2024-9191.md @@ -10,7 +10,7 @@ The Okta Device Access features, provided by the Okta Verify agent for Windows, ### POC #### Reference -- https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2024/CVE-2024-9875.md b/2024/CVE-2024-9875.md index b9f026a2544..98484bd333a 100644 --- a/2024/CVE-2024-9875.md +++ b/2024/CVE-2024-9875.md @@ -10,7 +10,7 @@ Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affecte ### POC #### Reference -- https://help.okta.com/asa/en-us/content/topics/releasenotes/advanced-server-access-release-notes.htm +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10014.md b/2025/CVE-2025-10014.md index 97273dd368e..4a6c4cb0088 100644 --- a/2025/CVE-2025-10014.md +++ b/2025/CVE-2025-10014.md @@ -19,7 +19,7 @@ In elunez eladmin bis 2.7 ist eine Schwachstelle entdeckt worden. Betroffen davo ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063332 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10084.md b/2025/CVE-2025-10084.md index 19ab297a528..3a80c7aaedc 100644 --- a/2025/CVE-2025-10084.md +++ b/2025/CVE-2025-10084.md @@ -19,7 +19,7 @@ Eine Schwachstelle wurde in elunez eladmin bis 2.7 gefunden. Es geht dabei um di ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063331 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10086.md b/2025/CVE-2025-10086.md index 3068dc8add1..7558d9f8825 100644 --- a/2025/CVE-2025-10086.md +++ b/2025/CVE-2025-10086.md @@ -12,7 +12,7 @@ In fuyang_lipengjun platform 1.0.0 wurde eine Schwachstelle gefunden. Hierbei ge ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063427 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10278.md b/2025/CVE-2025-10278.md index b60b09bb29e..6033ee998ee 100644 --- a/2025/CVE-2025-10278.md +++ b/2025/CVE-2025-10278.md @@ -12,7 +12,7 @@ Eine Schwachstelle wurde in YunaiV ruoyi-vue-pro bis 2025.09 gefunden. Betroffen ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063565 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10707.md b/2025/CVE-2025-10707.md index f33966b357e..35d07ce3acb 100644 --- a/2025/CVE-2025-10707.md +++ b/2025/CVE-2025-10707.md @@ -14,7 +14,7 @@ In JeecgBoot bis 3.8.2 ist eine Schwachstelle entdeckt worden. Davon betroffen i ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063346 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10819.md b/2025/CVE-2025-10819.md index 3a1c6760170..e28a535f0b4 100644 --- a/2025/CVE-2025-10819.md +++ b/2025/CVE-2025-10819.md @@ -12,7 +12,7 @@ Eine Schwachstelle wurde in fuyang_lipengjun platform 1.0 gefunden. Hiervon betr ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063466 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10820.md b/2025/CVE-2025-10820.md index 7e864cb15d3..4453c426c84 100644 --- a/2025/CVE-2025-10820.md +++ b/2025/CVE-2025-10820.md @@ -12,7 +12,7 @@ Es wurde eine Schwachstelle in fuyang_lipengjun platform 1.0 entdeckt. Betroffen ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063465 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10976.md b/2025/CVE-2025-10976.md index 8bb1dba6b93..a112fd2aa90 100644 --- a/2025/CVE-2025-10976.md +++ b/2025/CVE-2025-10976.md @@ -14,7 +14,7 @@ In JeecgBoot up to 3.8.2 ist eine Schwachstelle entdeckt worden. Es geht hierbei ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063349 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10977.md b/2025/CVE-2025-10977.md index dea623d50fc..85a0991be8f 100644 --- a/2025/CVE-2025-10977.md +++ b/2025/CVE-2025-10977.md @@ -14,7 +14,7 @@ Eine Schwachstelle wurde in JeecgBoot up to 3.8.2 gefunden. Es geht dabei um ein ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063351 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10978.md b/2025/CVE-2025-10978.md index f5adbb203de..0efe47a12f7 100644 --- a/2025/CVE-2025-10978.md +++ b/2025/CVE-2025-10978.md @@ -14,7 +14,7 @@ Es wurde eine Schwachstelle in JeecgBoot up to 3.8.2 entdeckt. Dabei geht es um ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063352 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10979.md b/2025/CVE-2025-10979.md index ad021d5852a..d5598cd8611 100644 --- a/2025/CVE-2025-10979.md +++ b/2025/CVE-2025-10979.md @@ -14,7 +14,7 @@ In JeecgBoot up to 3.8.2 wurde eine Schwachstelle gefunden. Hierbei geht es um e ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063353 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10980.md b/2025/CVE-2025-10980.md index 9a1239f9853..bae57150c0a 100644 --- a/2025/CVE-2025-10980.md +++ b/2025/CVE-2025-10980.md @@ -14,7 +14,7 @@ In JeecgBoot up to 3.8.2 ist eine Schwachstelle entdeckt worden. Betroffen ist e ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063355 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10981.md b/2025/CVE-2025-10981.md index 281ec84ebdd..8aadd57b849 100644 --- a/2025/CVE-2025-10981.md +++ b/2025/CVE-2025-10981.md @@ -14,7 +14,7 @@ Eine Schwachstelle wurde in JeecgBoot up to 3.8.2 gefunden. Es ist betroffen ein ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063356 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10987.md b/2025/CVE-2025-10987.md index 9636ec578be..14e29f24fe7 100644 --- a/2025/CVE-2025-10987.md +++ b/2025/CVE-2025-10987.md @@ -12,7 +12,7 @@ In YunaiV yudao-cloud up to 2025.09 wurde eine Schwachstelle gefunden. Dies betr ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063573 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10988.md b/2025/CVE-2025-10988.md index 5f43a38ae30..925be28423b 100644 --- a/2025/CVE-2025-10988.md +++ b/2025/CVE-2025-10988.md @@ -12,7 +12,7 @@ In YunaiV ruoyi-vue-pro up to 2025.09 ist eine Schwachstelle entdeckt worden. Da ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063563 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10989.md b/2025/CVE-2025-10989.md index 3c41a139565..f4ec9031527 100644 --- a/2025/CVE-2025-10989.md +++ b/2025/CVE-2025-10989.md @@ -13,7 +13,7 @@ Eine Schwachstelle wurde in yangzongzhuan RuoYi up to 4.8.1 gefunden. Hierbei be ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063507 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-10992.md b/2025/CVE-2025-10992.md index d1ea08c52db..287668f8f56 100644 --- a/2025/CVE-2025-10992.md +++ b/2025/CVE-2025-10992.md @@ -12,7 +12,7 @@ In roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40 ist eine Sch ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063472 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-1224.md b/2025/CVE-2025-1224.md index 5ed27dded87..2326e1b0f48 100644 --- a/2025/CVE-2025-1224.md +++ b/2025/CVE-2025-1224.md @@ -12,7 +12,7 @@ In ywoa bis 2024.07.03 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch ### POC #### Reference -- https://gitee.com/r1bbit/yimioa/issues/IBI731 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-2320.md b/2025/CVE-2025-2320.md index 8ee28b72aa9..5877a50d9ea 100644 --- a/2025/CVE-2025-2320.md +++ b/2025/CVE-2025-2320.md @@ -12,7 +12,7 @@ In 274056675 springboot-openai-chatgpt e84f6f5 wurde eine Schwachstelle gefunden ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18732226 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-2321.md b/2025/CVE-2025-2321.md index eac6d1dac1f..bc583b8e0bf 100644 --- a/2025/CVE-2025-2321.md +++ b/2025/CVE-2025-2321.md @@ -12,7 +12,6 @@ Eine Schwachstelle wurde in 274056675 springboot-openai-chatgpt e84f6f5 gefunden #### Reference - https://vuldb.com/?submit.505690 -- https://www.cnblogs.com/aibot/p/18732250 #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-2322.md b/2025/CVE-2025-2322.md index eb43b68026d..83d489e2c48 100644 --- a/2025/CVE-2025-2322.md +++ b/2025/CVE-2025-2322.md @@ -12,7 +12,7 @@ Es wurde eine Schwachstelle in 274056675 springboot-openai-chatgpt e84f6f5 ausge ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18732299 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-2334.md b/2025/CVE-2025-2334.md index b68c711ff03..2baddb8067e 100644 --- a/2025/CVE-2025-2334.md +++ b/2025/CVE-2025-2334.md @@ -12,7 +12,7 @@ Es wurde eine Schwachstelle in 274056675 springboot-openai-chatgpt e84f6f5 entde ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18732182 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-25747.md b/2025/CVE-2025-25747.md index 2542716206b..29deaa7f56e 100644 --- a/2025/CVE-2025-25747.md +++ b/2025/CVE-2025-25747.md @@ -10,7 +10,7 @@ Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an ### POC #### Reference -- https://www.huyvo.net/post/cve-2025-25747-reflected-xss-vulnerability-in-hoteldruid-3-0-7 +No PoCs from references. #### Github - https://github.com/huyvo2910/CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS diff --git a/2025/CVE-2025-25748.md b/2025/CVE-2025-25748.md index 867af33092e..fbed61a9f90 100644 --- a/2025/CVE-2025-25748.md +++ b/2025/CVE-2025-25748.md @@ -10,7 +10,7 @@ A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 all ### POC #### Reference -- https://www.huyvo.net/post/cve-2025-25748-cross-site-request-forgery-csrf-vulnerability-in-hoteldruid-3-0-7 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-25749.md b/2025/CVE-2025-25749.md index f75adb3ed6c..6ec881543e3 100644 --- a/2025/CVE-2025-25749.md +++ b/2025/CVE-2025-25749.md @@ -10,7 +10,7 @@ An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwo ### POC #### Reference -- https://www.huyvo.net/post/cve-2025-25749-weak-password-policy-in-hoteldruid-3-0-7 +No PoCs from references. #### Github - https://github.com/huyvo2910/CVE-2025-25749-Weak-Password-Policy-in-HotelDruid-3.0.7 diff --git a/2025/CVE-2025-25940.md b/2025/CVE-2025-25940.md index bcbb50a25dc..689b11c778b 100644 --- a/2025/CVE-2025-25940.md +++ b/2025/CVE-2025-25940.md @@ -10,7 +10,7 @@ VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPl ### POC #### Reference -- https://royblume.github.io/CVE-2025-25940/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-28128.md b/2025/CVE-2025-28128.md index 12d05317874..d0f1b7833bf 100644 --- a/2025/CVE-2025-28128.md +++ b/2025/CVE-2025-28128.md @@ -10,7 +10,7 @@ An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass ### POC #### Reference -- https://gist.github.com/str4ng3r-0x7/3d9d310cb6cc5af39088ef44289ba588#file-cve-2025-28128 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-28169.md b/2025/CVE-2025-28169.md index f7589b512af..62a06b64bb6 100644 --- a/2025/CVE-2025-28169.md +++ b/2025/CVE-2025-28169.md @@ -10,7 +10,7 @@ BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was ### POC #### Reference -- https://gist.github.com/rainymode/bfd976ecbe0d0b776fd930375156c19c +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-2852.md b/2025/CVE-2025-2852.md index 4fa6b9154ee..daade9de477 100644 --- a/2025/CVE-2025-2852.md +++ b/2025/CVE-2025-2852.md @@ -12,7 +12,7 @@ In SourceCodester Food Ordering Management System bis 1.0 wurde eine Schwachstel ### POC #### Reference -- https://hackmd.io/@gnol719/rJqOPiInye +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-2974.md b/2025/CVE-2025-2974.md index 976755780cc..82000c8a163 100644 --- a/2025/CVE-2025-2974.md +++ b/2025/CVE-2025-2974.md @@ -13,7 +13,7 @@ In CodeCanyon Perfex CRM bis 3.2.1 wurde eine problematische Schwachstelle gefun ### POC #### Reference -- https://bytium.com/stored-xss-in-perfex-crm-3-2-1-contracts-module/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-3541.md b/2025/CVE-2025-3541.md index 78048fdea91..1313adb5f2d 100644 --- a/2025/CVE-2025-3541.md +++ b/2025/CVE-2025-3541.md @@ -15,7 +15,7 @@ Eine kritische Schwachstelle wurde in H3C Magic NX15, Magic NX30 Pro, Magic NX40 ### POC #### Reference -- https://gist.github.com/mono7s/fcbc1f02d69547704cc9027b29e51c73 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-3542.md b/2025/CVE-2025-3542.md index f46dff287a2..9b36d163ca4 100644 --- a/2025/CVE-2025-3542.md +++ b/2025/CVE-2025-3542.md @@ -14,7 +14,7 @@ Es wurde eine kritische Schwachstelle in H3C Magic NX15, Magic NX400 and Magic R ### POC #### Reference -- https://gist.github.com/mono7s/dd7a0a1ec444bb2c228590d298e37a5d +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-3543.md b/2025/CVE-2025-3543.md index afaba47846c..3e9850d779f 100644 --- a/2025/CVE-2025-3543.md +++ b/2025/CVE-2025-3543.md @@ -15,7 +15,7 @@ In H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 bis V100R014 wurd ### POC #### Reference -- https://gist.github.com/mono7s/9369a3ef060b5655303cd234ba583bb5 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-3546.md b/2025/CVE-2025-3546.md index f43f74b4876..1a13690f453 100644 --- a/2025/CVE-2025-3546.md +++ b/2025/CVE-2025-3546.md @@ -16,7 +16,7 @@ In H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 bi ### POC #### Reference -- https://gist.github.com/isstabber/154661f329e4ae6bfe15dcdc0b932ff3 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4016.md b/2025/CVE-2025-4016.md index a22732344aa..e5491777327 100644 --- a/2025/CVE-2025-4016.md +++ b/2025/CVE-2025-4016.md @@ -12,7 +12,7 @@ Es wurde eine Schwachstelle in 20120630 Novel-Plus bis 0e156c04b4b7ce0563bef6c97 ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18827506 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4019.md b/2025/CVE-2025-4019.md index 452239c9045..8c22af4cd7e 100644 --- a/2025/CVE-2025-4019.md +++ b/2025/CVE-2025-4019.md @@ -12,7 +12,7 @@ Es wurde eine Schwachstelle in 20120630 Novel-Plus bis 0e156c04b4b7ce0563bef6c97 ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18827469 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4118.md b/2025/CVE-2025-4118.md index 4133a865323..4398ae41b62 100644 --- a/2025/CVE-2025-4118.md +++ b/2025/CVE-2025-4118.md @@ -12,7 +12,7 @@ Es wurde eine Schwachstelle in Weitong Mall 1.0.0 entdeckt. Sie wurde als kritis ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18830907 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4119.md b/2025/CVE-2025-4119.md index 89f3b770cb9..88ca4b748da 100644 --- a/2025/CVE-2025-4119.md +++ b/2025/CVE-2025-4119.md @@ -12,7 +12,7 @@ In Weitong Mall 1.0.0 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18830908 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4136.md b/2025/CVE-2025-4136.md index a46a33755d6..193ba2ec98f 100644 --- a/2025/CVE-2025-4136.md +++ b/2025/CVE-2025-4136.md @@ -12,7 +12,7 @@ Es wurde eine Schwachstelle in Weitong Mall 1.0.0 ausgemacht. Sie wurde als krit ### POC #### Reference -- https://www.cnblogs.com/aibot/p/18830909 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4272.md b/2025/CVE-2025-4272.md index 7a77dc2f27b..0c53c00198b 100644 --- a/2025/CVE-2025-4272.md +++ b/2025/CVE-2025-4272.md @@ -12,7 +12,7 @@ Eine kritische Schwachstelle wurde in Mechrevo Control Console 1.0.2.70 ausgemac ### POC #### Reference -- https://drive.google.com/file/d/1VKhLyW0oglACkt-5PgTtN9oRB2jMczeh/view?usp=sharing +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44163.md b/2025/CVE-2025-44163.md index 073727298e6..160aa5ca935 100644 --- a/2025/CVE-2025-44163.md +++ b/2025/CVE-2025-44163.md @@ -10,7 +10,7 @@ RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networki ### POC #### Reference -- https://gist.github.com/YichaoXu/3694f039a3d1b973efd068e4dc662a41 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4455.md b/2025/CVE-2025-4455.md index 2b616286f8b..74600b69a9c 100644 --- a/2025/CVE-2025-4455.md +++ b/2025/CVE-2025-4455.md @@ -15,7 +15,7 @@ Eine Schwachstelle wurde in Patch My PC Home Updater bis 5.1.3.0 ausgemacht. Sie ### POC #### Reference -- https://gist.github.com/shellkraft/d7db265b53115d52a4ca5bffe5e9c6e4 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44883.md b/2025/CVE-2025-44883.md index e43b6f7d0d5..d0dc576730f 100644 --- a/2025/CVE-2025-44883.md +++ b/2025/CVE-2025-44883.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the t ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-tacplus-serverEdit-post-tacIp/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44884.md b/2025/CVE-2025-44884.md index def6b3a9cc5..05492c78ad0 100644 --- a/2025/CVE-2025-44884.md +++ b/2025/CVE-2025-44884.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the w ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-sys-infoContact-post-contact/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44885.md b/2025/CVE-2025-44885.md index 920dd10352e..9d60e80a286 100644 --- a/2025/CVE-2025-44885.md +++ b/2025/CVE-2025-44885.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the r ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-snmpv3-remote-engineId-add-post-remote-ip/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44886.md b/2025/CVE-2025-44886.md index 6d58684a1f1..9ae824f69d0 100644 --- a/2025/CVE-2025-44886.md +++ b/2025/CVE-2025-44886.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the b ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-acl-mgmt-Rules-Edit-post-ruleEditName/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44887.md b/2025/CVE-2025-44887.md index d4a736d5ab6..0c92c0fbf09 100644 --- a/2025/CVE-2025-44887.md +++ b/2025/CVE-2025-44887.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the r ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-radiusSrv-post-radIp/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44888.md b/2025/CVE-2025-44888.md index 86112a294c4..62bd53db3ca 100644 --- a/2025/CVE-2025-44888.md +++ b/2025/CVE-2025-44888.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the s ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-stp-globalSetting-post-stp-conf-name/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44890.md b/2025/CVE-2025-44890.md index 759a5fc69d6..8cc81ced77c 100644 --- a/2025/CVE-2025-44890.md +++ b/2025/CVE-2025-44890.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the h ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-snmp-notifyv3-add-post-host-ip/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44891.md b/2025/CVE-2025-44891.md index 71994819c24..f116eecfc5e 100644 --- a/2025/CVE-2025-44891.md +++ b/2025/CVE-2025-44891.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the h ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-snmp-v3host-add-post-host-ip/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44892.md b/2025/CVE-2025-44892.md index 8dc74688485..e06ecdfbb96 100644 --- a/2025/CVE-2025-44892.md +++ b/2025/CVE-2025-44892.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the o ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-rmon-alarm-post-rmon-alarm-owne/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44893.md b/2025/CVE-2025-44893.md index 19d4706a124..0cd068d892b 100644 --- a/2025/CVE-2025-44893.md +++ b/2025/CVE-2025-44893.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the r ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-acl-mgmt-Rules-Apply-post-ruleName/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44894.md b/2025/CVE-2025-44894.md index 7077c9d364e..410b422bf6a 100644 --- a/2025/CVE-2025-44894.md +++ b/2025/CVE-2025-44894.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the r ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-radiusSrv-dftParam-post-radDftParamKey/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44895.md b/2025/CVE-2025-44895.md index 23df907753c..561f59043b8 100644 --- a/2025/CVE-2025-44895.md +++ b/2025/CVE-2025-44895.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the i ### POC #### Reference -- https://lafdrew.github.io/2025/04/18/web-acl-ipv4BasedAceAdd-post-ipv4Acl-StackOverflow/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44896.md b/2025/CVE-2025-44896.md index fc4c7df49fb..973fb34a944 100644 --- a/2025/CVE-2025-44896.md +++ b/2025/CVE-2025-44896.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the b ### POC #### Reference -- https://lafdrew.github.io/2025/04/18/web-acl-bindEdit-post-bindEditMACName-StackOverflow/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44897.md b/2025/CVE-2025-44897.md index 8642466b20d..046f623d705 100644 --- a/2025/CVE-2025-44897.md +++ b/2025/CVE-2025-44897.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the b ### POC #### Reference -- https://lafdrew.github.io/2025/04/20/web-tool-upgradeManager-post-tftp-srvip/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-44898.md b/2025/CVE-2025-44898.md index cfe1a6ebc97..97f6aaac867 100644 --- a/2025/CVE-2025-44898.md +++ b/2025/CVE-2025-44898.md @@ -10,7 +10,7 @@ FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the t ### POC #### Reference -- https://lafdrew.github.io/2025/04/18/web-aaa-loginAuthlistEdit-get-authName-StackOverflow/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-4525.md b/2025/CVE-2025-4525.md index c318d2a44a0..cd5035e5c4d 100644 --- a/2025/CVE-2025-4525.md +++ b/2025/CVE-2025-4525.md @@ -12,7 +12,7 @@ Eine kritische Schwachstelle wurde in Discord 1.0.9188 für Windows entdeckt. Da ### POC #### Reference -- https://gist.github.com/shellkraft/ac4be6a3953e2889a7bf54aea2db88c2 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-45729.md b/2025/CVE-2025-45729.md index 25505ec2d74..0ddc75b6ce3 100644 --- a/2025/CVE-2025-45729.md +++ b/2025/CVE-2025-45729.md @@ -10,7 +10,7 @@ D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized u ### POC #### Reference -- https://www.kdev.site/2025/04/02/d-link-823_pro-unauthorized-telnet-access/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-47277.md b/2025/CVE-2025-47277.md index 0870be1a559..593e03f721c 100644 --- a/2025/CVE-2025-47277.md +++ b/2025/CVE-2025-47277.md @@ -10,7 +10,7 @@ vLLM, an inference and serving engine for large language models (LLMs), has an i ### POC #### Reference -- https://docs.vllm.ai/en/latest/deployment/security.html +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-50869.md b/2025/CVE-2025-50869.md index 6a5bffe27b3..e94b89abafc 100644 --- a/2025/CVE-2025-50869.md +++ b/2025/CVE-2025-50869.md @@ -10,7 +10,7 @@ A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php ### POC #### Reference -- https://portswigger.net/web-security/cross-site-scripting/stored +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-57520.md b/2025/CVE-2025-57520.md index c81639c2099..4648860de4e 100644 --- a/2025/CVE-2025-57520.md +++ b/2025/CVE-2025-57520.md @@ -10,7 +10,7 @@ A Cross Site Scripting (XSS) vulnerability exists in Decap CMS thru 3.8.3. Input ### POC #### Reference -- https://onurcangenc.com.tr/posts/cve-2025-57520--stored-xss-in-decap-cms-3-8-3/ +No PoCs from references. #### Github - https://github.com/onurcangnc/CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3- diff --git a/2025/CVE-2025-7442.md b/2025/CVE-2025-7442.md index ecd9deaac82..0f8f7081355 100644 --- a/2025/CVE-2025-7442.md +++ b/2025/CVE-2025-7442.md @@ -10,7 +10,7 @@ The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable t ### POC #### Reference -- https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964?s_rank=2 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-8319.md b/2025/CVE-2025-8319.md index 21b71c08cb6..fa92097344f 100644 --- a/2025/CVE-2025-8319.md +++ b/2025/CVE-2025-8319.md @@ -10,7 +10,7 @@ the BMA login interface allows arbitrary JavaScript or HTML to be written straig ### POC #### Reference -- https://bugcrowd.com/disclosures/30a330ef-0885-458c-a64f-2ad63d196b4d/dom-based-cross-site-scripting-xss-with-keylogger-injection-via-the-error-parameter-in-barracuda-mail-archiver +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-9936.md b/2025/CVE-2025-9936.md index d9862156ddd..c21c7d5dd6c 100644 --- a/2025/CVE-2025-9936.md +++ b/2025/CVE-2025-9936.md @@ -12,7 +12,7 @@ In fuyang_lipengjun platform 1.0.0 wurde eine Schwachstelle gefunden. Es geht da ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063425 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2025/CVE-2025-9937.md b/2025/CVE-2025-9937.md index 9263e00ed1e..d8120c55495 100644 --- a/2025/CVE-2025-9937.md +++ b/2025/CVE-2025-9937.md @@ -12,7 +12,7 @@ In elunez eladmin 1.1 ist eine Schwachstelle entdeckt worden. Dabei geht es um d ### POC #### Reference -- https://www.cnblogs.com/aibot/p/19063329 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-10205.md b/2026/CVE-2026-10205.md index 193710d400f..4a377f8ac66 100644 --- a/2026/CVE-2026-10205.md +++ b/2026/CVE-2026-10205.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4. ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/If1EdqoFqoUJ0FxHj06cZnUOngc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-10528.md b/2026/CVE-2026-10528.md index 0c967215c45..a2bb5f8aa83 100644 --- a/2026/CVE-2026-10528.md +++ b/2026/CVE-2026-10528.md @@ -22,7 +22,7 @@ A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This ### POC #### Reference -- https://orthanc.uclouvain.be/bugs/attachment.cgi?id=150 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-10873.md b/2026/CVE-2026-10873.md index 4313cd28134..6fc8d72fcc6 100644 --- a/2026/CVE-2026-10873.md +++ b/2026/CVE-2026-10873.md @@ -11,7 +11,7 @@ A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the funct ### POC #### Reference -- https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/05-rstats.md +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-12787.md b/2026/CVE-2026-12787.md index 2cdd33eb0f8..278f3f39857 100644 --- a/2026/CVE-2026-12787.md +++ b/2026/CVE-2026-12787.md @@ -11,7 +11,7 @@ A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP App ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/I8uZdkZL3oSqBnxkwTAcfDvknUh?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-12788.md b/2026/CVE-2026-12788.md index f18f02ef45d..978bda81d65 100644 --- a/2026/CVE-2026-12788.md +++ b/2026/CVE-2026-12788.md @@ -11,7 +11,7 @@ A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 AD ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/LeLOdhV6mo3clzxstxXcpFzbnjg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-13547.md b/2026/CVE-2026-13547.md index e849bb208a2..251aad935f5 100644 --- a/2026/CVE-2026-13547.md +++ b/2026/CVE-2026-13547.md @@ -11,7 +11,7 @@ A vulnerability was determined in Hanwang e-Face General Management Platform 6.3 ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/SrO0wcxd9i6ByukOizGcIgpBnRd +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-1444.md b/2026/CVE-2026-1444.md index ec5fb25348e..af5f85ec646 100644 --- a/2026/CVE-2026-1444.md +++ b/2026/CVE-2026-1444.md @@ -11,7 +11,7 @@ A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37 ### POC #### Reference -- https://blog.y1fan.work/2026/01/13/%E5%AD%98%E5%82%A8%E5%9E%8Bxss/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-1445.md b/2026/CVE-2026-1445.md index a0f3c63eed7..91343058905 100644 --- a/2026/CVE-2026-1445.md +++ b/2026/CVE-2026-1445.md @@ -11,7 +11,7 @@ A vulnerability was found in iJason-Liu Books_Manager up to 298ba736387ca3781046 ### POC #### Reference -- https://blog.y1fan.work/2026/01/13/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0getshell/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-14736.md b/2026/CVE-2026-14736.md index 268e5a3bfcf..e9775652d58 100644 --- a/2026/CVE-2026-14736.md +++ b/2026/CVE-2026-14736.md @@ -11,7 +11,7 @@ A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted ele ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/OiAKwH3hRi3oVpkQyeycjjPrnL8?fromScene=spaceOverview +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-14737.md b/2026/CVE-2026-14737.md index e97c754db69..fcd55feaa7a 100644 --- a/2026/CVE-2026-14737.md +++ b/2026/CVE-2026-14737.md @@ -11,7 +11,7 @@ A vulnerability was identified in Hanwang e-Face General Management Platform 6.3 ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/RWItdiw5Go02UsxHxgNcMWBqnJc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-15202.md b/2026/CVE-2026-15202.md index f7040f082ec..c0755b440c1 100644 --- a/2026/CVE-2026-15202.md +++ b/2026/CVE-2026-15202.md @@ -16,7 +16,7 @@ A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the ### POC #### Reference -- https://gist.github.com/188452/72d03d030ee3cbfee2642badfa9dce33 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-15514.md b/2026/CVE-2026-15514.md index 076817ecddf..e4a287d3eeb 100644 --- a/2026/CVE-2026-15514.md +++ b/2026/CVE-2026-15514.md @@ -11,7 +11,7 @@ A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/SX91dyomSoAeHJxnfygckPQNnLL?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-15907.md b/2026/CVE-2026-15907.md index 1795c30c74a..cef5ea2bcc2 100644 --- a/2026/CVE-2026-15907.md +++ b/2026/CVE-2026-15907.md @@ -11,7 +11,7 @@ A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/WCbgdWyJKoibcZxdsuMcUGKSnpf?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16252.md b/2026/CVE-2026-16252.md index d25a2e7a80c..744613990f3 100644 --- a/2026/CVE-2026-16252.md +++ b/2026/CVE-2026-16252.md @@ -11,7 +11,7 @@ A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multim ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/XSuvdAP8foTOKzxEnZaclsZznMb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16324.md b/2026/CVE-2026-16324.md index 735668ad70c..8d4e4bd8c76 100644 --- a/2026/CVE-2026-16324.md +++ b/2026/CVE-2026-16324.md @@ -11,7 +11,7 @@ A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/RTF0d4zxooIMA1xF9bGcnQNpnfg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16327.md b/2026/CVE-2026-16327.md index cdecb72e305..a848e8050e3 100644 --- a/2026/CVE-2026-16327.md +++ b/2026/CVE-2026-16327.md @@ -11,7 +11,7 @@ A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16329.md b/2026/CVE-2026-16329.md index 225b8489e4e..85a71b111d7 100644 --- a/2026/CVE-2026-16329.md +++ b/2026/CVE-2026-16329.md @@ -11,7 +11,7 @@ A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown f ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/MBHDdPBz4oUXa9xCdujchmPZneg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16330.md b/2026/CVE-2026-16330.md index 84f84d95ace..5ac476b990f 100644 --- a/2026/CVE-2026-16330.md +++ b/2026/CVE-2026-16330.md @@ -11,7 +11,7 @@ A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/EkMxdLlavojfsXxzKXec5yUknEg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16331.md b/2026/CVE-2026-16331.md index 3b5551eeb1c..9cbc7edccf9 100644 --- a/2026/CVE-2026-16331.md +++ b/2026/CVE-2026-16331.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/UZ6id3F1Joqlpxxn3NFcL8r7nHb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16332.md b/2026/CVE-2026-16332.md index cc1da450fce..26ab745cb1b 100644 --- a/2026/CVE-2026-16332.md +++ b/2026/CVE-2026-16332.md @@ -11,7 +11,7 @@ A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown fu ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/EbAkdl1v8oC3Q3xAEJLcZFcZnMY?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16447.md b/2026/CVE-2026-16447.md index 7a1ec898bbd..015a5285411 100644 --- a/2026/CVE-2026-16447.md +++ b/2026/CVE-2026-16447.md @@ -11,7 +11,7 @@ A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown f ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/KttYdnLfzotGUSxx7p3cbaornPd?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-16448.md b/2026/CVE-2026-16448.md index 9d450c748a6..2fec75e737c 100644 --- a/2026/CVE-2026-16448.md +++ b/2026/CVE-2026-16448.md @@ -30,7 +30,7 @@ A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-32 ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/OfhNdwzvXoBlJBxDIW7clVmjnuh?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-18854.md b/2026/CVE-2026-18854.md index 3e75666babf..c668dc69c72 100644 --- a/2026/CVE-2026-18854.md +++ b/2026/CVE-2026-18854.md @@ -21,7 +21,7 @@ A vulnerability has been found in Shandong Hoteam PDM Product Data Management Sy ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/NEAJdL0fgoCy2jxQwVBcR2mOn7e?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-18859.md b/2026/CVE-2026-18859.md index 5bd52a93553..2b74fb6f0ae 100644 --- a/2026/CVE-2026-18859.md +++ b/2026/CVE-2026-18859.md @@ -11,7 +11,7 @@ A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an un ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/LHkddOv7Jo6quTxlJKZcf8gfnOe?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-18969.md b/2026/CVE-2026-18969.md index e0ee5dc98da..97fdb10f651 100644 --- a/2026/CVE-2026-18969.md +++ b/2026/CVE-2026-18969.md @@ -11,7 +11,7 @@ A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispat ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/CVIpwknSYiQXejkvw7McPrs1n2g?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-18970.md b/2026/CVE-2026-18970.md index a45347d6f4d..f7b52b17818 100644 --- a/2026/CVE-2026-18970.md +++ b/2026/CVE-2026-18970.md @@ -11,7 +11,7 @@ A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Plat ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/UfgVwvpW5iRtLFkZs4icV6LfnGb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-19037.md b/2026/CVE-2026-19037.md index 900aab7e4ee..d10d95a47ab 100644 --- a/2026/CVE-2026-19037.md +++ b/2026/CVE-2026-19037.md @@ -20,7 +20,7 @@ A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability a ### POC #### Reference -- https://my.feishu.cn/wiki/BXljwvHSLiiqiSkI7jScIqkSn4c +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-19208.md b/2026/CVE-2026-19208.md index 1e7a5fc6d28..cb7625dbf2d 100644 --- a/2026/CVE-2026-19208.md +++ b/2026/CVE-2026-19208.md @@ -20,7 +20,7 @@ A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the functi ### POC #### Reference -- https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-19212.md b/2026/CVE-2026-19212.md index 2479aa4602e..f532afab4ed 100644 --- a/2026/CVE-2026-19212.md +++ b/2026/CVE-2026-19212.md @@ -20,7 +20,7 @@ A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unkn ### POC #### Reference -- https://my.feishu.cn/wiki/PyAuwg8Bwit3TBk5DgLc14Ghnkb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-19213.md b/2026/CVE-2026-19213.md index 30b471e0119..fa352692d0b 100644 --- a/2026/CVE-2026-19213.md +++ b/2026/CVE-2026-19213.md @@ -20,7 +20,7 @@ A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the func ### POC #### Reference -- https://my.feishu.cn/wiki/VbQqwEcrJiYOd0khs0Jchw76nhd?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-19352.md b/2026/CVE-2026-19352.md index 1217b4c21f3..424ffd95f8f 100644 --- a/2026/CVE-2026-19352.md +++ b/2026/CVE-2026-19352.md @@ -79,7 +79,7 @@ A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by th ### POC #### Reference -- https://my.feishu.cn/file/Jq4Ib90xeod3oPxlk77cv7jPnFe +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-19764.md b/2026/CVE-2026-19764.md index e1139d1907b..cd914d0b33d 100644 --- a/2026/CVE-2026-19764.md +++ b/2026/CVE-2026-19764.md @@ -16,7 +16,7 @@ A vulnerability was identified in Raisecom Communication Command and Dispatch Ma ### POC #### Reference -- https://my.feishu.cn/docx/S80ddLulfolH8WxDbUJcdrGAnbg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-22679.md b/2026/CVE-2026-22679.md index 914cf10af68..50d96316f27 100644 --- a/2026/CVE-2026-22679.md +++ b/2026/CVE-2026-22679.md @@ -10,7 +10,7 @@ Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthentic ### POC #### Reference -- https://h4cker.zip/post/d5d211/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2556.md b/2026/CVE-2026-2556.md index 6ca07bb59c9..117a50936e1 100644 --- a/2026/CVE-2026-2556.md +++ b/2026/CVE-2026-2556.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in cskefu up to 8.0.1. This issue aff ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/Vrs6dRx79ondtCxldz2cvupdnMe +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2557.md b/2026/CVE-2026-2557.md index be36040b49a..fe8fa74c2f4 100644 --- a/2026/CVE-2026-2557.md +++ b/2026/CVE-2026-2557.md @@ -12,7 +12,7 @@ A vulnerability was detected in cskefu up to 8.0.1. Impacted is the function Upl ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/ZqvtdTniToQMw0xZL94cTpuTnac +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2561.md b/2026/CVE-2026-2561.md index d84299aa711..d0d5d46d543 100644 --- a/2026/CVE-2026-2561.md +++ b/2026/CVE-2026-2561.md @@ -11,7 +11,7 @@ A vulnerability was found in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Thi ### POC #### Reference -- https://my.feishu.cn/wiki/URLywnBj2i2dpBk3dcQcWqFZnSK +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2562.md b/2026/CVE-2026-2562.md index 2021792dcd0..ab04a91c4e9 100644 --- a/2026/CVE-2026-2562.md +++ b/2026/CVE-2026-2562.md @@ -11,7 +11,7 @@ A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533 ### POC #### Reference -- https://my.feishu.cn/wiki/Umb6w4PasizunKkagYschZP1nff +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2563.md b/2026/CVE-2026-2563.md index 8b7f7b182d9..b532da83016 100644 --- a/2026/CVE-2026-2563.md +++ b/2026/CVE-2026-2563.md @@ -11,7 +11,7 @@ A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533 ### POC #### Reference -- https://my.feishu.cn/wiki/T3pjwxZtYiU4Gfkl6iUc3CzVnRe +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-25857.md b/2026/CVE-2026-25857.md index d55ac3fa5a2..a2c25653834 100644 --- a/2026/CVE-2026-25857.md +++ b/2026/CVE-2026-25857.md @@ -10,7 +10,7 @@ Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command ### POC #### Reference -- https://blog.evan.lat/blog/cve-2026-25857/ +No PoCs from references. #### Github - https://github.com/eeeeeeeeeevan/CVE-2026-25857 diff --git a/2026/CVE-2026-2622.md b/2026/CVE-2026-2622.md index 07eb226e408..339e4d2e0fc 100644 --- a/2026/CVE-2026-2622.md +++ b/2026/CVE-2026-2622.md @@ -12,7 +12,7 @@ A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/AXa1dpliBomr2Ox6dYJc6jJInEb +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2623.md b/2026/CVE-2026-2623.md index 6766b3425f0..fc021b553f3 100644 --- a/2026/CVE-2026-2623.md +++ b/2026/CVE-2026-2623.md @@ -11,7 +11,7 @@ A flaw has been found in Blossom up to 1.17.1. This issue affects the function p ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/WmA3dzNfto3AxlxoFlqcu5amnXe +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2904.md b/2026/CVE-2026-2904.md index c72573d37bd..fb4df19fbbc 100644 --- a/2026/CVE-2026-2904.md +++ b/2026/CVE-2026-2904.md @@ -11,7 +11,7 @@ A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the ### POC #### Reference -- https://vuln.ricky.place/UTT/HiPER%20810G/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2911.md b/2026/CVE-2026-2911.md index bda8a9fa131..46df6b8b6fb 100644 --- a/2026/CVE-2026-2911.md +++ b/2026/CVE-2026-2911.md @@ -20,7 +20,7 @@ A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects ### POC #### Reference -- https://vuln.ricky.place/Tenda/FH451/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2946.md b/2026/CVE-2026-2946.md index a1226fb47ed..e3dbce26ffe 100644 --- a/2026/CVE-2026-2946.md +++ b/2026/CVE-2026-2946.md @@ -15,7 +15,7 @@ A security vulnerability has been detected in rymcu forest up to 0.0.5. Affected ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/CvYzdxDNDoXWdKxvaehcvb1rnQK?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2947.md b/2026/CVE-2026-2947.md index 58117ea2ac2..380b59ea914 100644 --- a/2026/CVE-2026-2947.md +++ b/2026/CVE-2026-2947.md @@ -15,7 +15,7 @@ A vulnerability was detected in rymcu forest up to 0.0.5. This affects the funct ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/MBymdGpuFoGQYuxEiH2cdC5BnSe?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2956.md b/2026/CVE-2026-2956.md index df756abc851..b6d52c8ba88 100644 --- a/2026/CVE-2026-2956.md +++ b/2026/CVE-2026-2956.md @@ -16,7 +16,7 @@ A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This aff ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/ObYgdtoweowo8Vx4dmuckqC7nBe?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2957.md b/2026/CVE-2026-2957.md index b880fa8d4e1..837f4a06c81 100644 --- a/2026/CVE-2026-2957.md +++ b/2026/CVE-2026-2957.md @@ -15,7 +15,7 @@ A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/YKwydLrdno51JtxJksmcWSfbnvd?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2963.md b/2026/CVE-2026-2963.md index 726d828168a..99d1b996bee 100644 --- a/2026/CVE-2026-2963.md +++ b/2026/CVE-2026-2963.md @@ -11,7 +11,7 @@ A vulnerability was determined in Jinher OA C6 up to 20260210. This issue affect ### POC #### Reference -- https://vuln.ricky.place/Jinher/C6/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-2985.md b/2026/CVE-2026-2985.md index e9a7fab2b10..2d4705223eb 100644 --- a/2026/CVE-2026-2985.md +++ b/2026/CVE-2026-2985.md @@ -10,7 +10,7 @@ A security flaw has been discovered in Tiandy Video Surveillance System 视频 ### POC #### Reference -- https://my.feishu.cn/wiki/C1TIwBoJziINWlkGt8ucnZJPnEb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-3286.md b/2026/CVE-2026-3286.md index c2fb7663e54..fdbce0645ad 100644 --- a/2026/CVE-2026-3286.md +++ b/2026/CVE-2026-3286.md @@ -13,7 +13,7 @@ A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. Th ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/NK7KdbIrboeB6WxwfhucW1YgnCb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-3287.md b/2026/CVE-2026-3287.md index 8feb9fdf601..e64734e0309 100644 --- a/2026/CVE-2026-3287.md +++ b/2026/CVE-2026-3287.md @@ -11,7 +11,7 @@ A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affect ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/E1YgdZUApoBU2bxDl37cLgqsnof?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-3289.md b/2026/CVE-2026-3289.md index ba95d24a349..965c705f4de 100644 --- a/2026/CVE-2026-3289.md +++ b/2026/CVE-2026-3289.md @@ -10,7 +10,7 @@ A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the ### POC #### Reference -- https://www.yuque.com/la12138/pa2fpb/wdggytgi4vhl93zd?singleDoc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-3409.md b/2026/CVE-2026-3409.md index 7283beea609..a848abcc18e 100644 --- a/2026/CVE-2026-3409.md +++ b/2026/CVE-2026-3409.md @@ -12,7 +12,6 @@ A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is th #### Reference - https://vuldb.com/?id.348304 -- https://gist.github.com/YLChen-007/d2799d8b2077e50658f12a45bcae9b70 #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-3797.md b/2026/CVE-2026-3797.md index b9f651e03ff..d1de705420a 100644 --- a/2026/CVE-2026-3797.md +++ b/2026/CVE-2026-3797.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in Tiandy Video Surveillance System ### POC #### Reference -- https://my.feishu.cn/docx/P3Bgdl9BHocn66xCMpCcgCD7nhe?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-3818.md b/2026/CVE-2026-3818.md index 28eb6934da8..afad6896875 100644 --- a/2026/CVE-2026-3818.md +++ b/2026/CVE-2026-3818.md @@ -11,7 +11,7 @@ A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown ### POC #### Reference -- https://my.feishu.cn/docx/RvTMdXwUqowtxNxt9BFcD3TOn3f?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4170.md b/2026/CVE-2026-4170.md index edd38585458..66f7cb4016b 100644 --- a/2026/CVE-2026-4170.md +++ b/2026/CVE-2026-4170.md @@ -11,7 +11,7 @@ A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerabil ### POC #### Reference -- https://my.feishu.cn/docx/EAFFdhzoeodDxfxeazNcxBzCnRf?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4187.md b/2026/CVE-2026-4187.md index 2f05b6d413c..03d8d666979 100644 --- a/2026/CVE-2026-4187.md +++ b/2026/CVE-2026-4187.md @@ -11,7 +11,7 @@ A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7. ### POC #### Reference -- https://my.feishu.cn/docx/Vc4QdU5KNoMF57xxubOcBwPSnqf?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4200.md b/2026/CVE-2026-4200.md index 82cb20c9557..d334fd7bda3 100644 --- a/2026/CVE-2026-4200.md +++ b/2026/CVE-2026-4200.md @@ -10,7 +10,7 @@ A security flaw has been discovered in glowxq glowxq-oj up to 6f7c72309047205725 ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/K0SjdZTPRo31LExSdlfcC3jwn1c?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4201.md b/2026/CVE-2026-4201.md index 93f366a159d..ab5dbf7b0db 100644 --- a/2026/CVE-2026-4201.md +++ b/2026/CVE-2026-4201.md @@ -11,7 +11,7 @@ A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040f ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/XM7MdiAtxodVIOx5HXScEdOsn47?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4220.md b/2026/CVE-2026-4220.md index c5fe43f03b2..dfa02693ae0 100644 --- a/2026/CVE-2026-4220.md +++ b/2026/CVE-2026-4220.md @@ -11,7 +11,7 @@ A vulnerability has been found in Technologies Integrated Management Platform 7. ### POC #### Reference -- https://my.feishu.cn/docx/EA9HdaXaQo80yTxKdw0c3UDmnmD?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4221.md b/2026/CVE-2026-4221.md index ab6ee2a06a1..22fd6f42819 100644 --- a/2026/CVE-2026-4221.md +++ b/2026/CVE-2026-4221.md @@ -11,7 +11,7 @@ A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. ### POC #### Reference -- https://my.feishu.cn/docx/Z5HJdLCxioFs4sxyILbcoSIAnTh?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4222.md b/2026/CVE-2026-4222.md index a8a6bf7cfd4..48e68b29a85 100644 --- a/2026/CVE-2026-4222.md +++ b/2026/CVE-2026-4222.md @@ -14,7 +14,7 @@ A vulnerability was determined in SSCMS up to 7.4.0. This vulnerability affects ### POC #### Reference -- https://www.yuque.com/la12138/pa2fpb/mbcvbk402bx1qbft?singleDoc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4232.md b/2026/CVE-2026-4232.md index 3bf979f5e98..f7a38474f40 100644 --- a/2026/CVE-2026-4232.md +++ b/2026/CVE-2026-4232.md @@ -11,7 +11,7 @@ A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. ### POC #### Reference -- https://my.feishu.cn/docx/UxbzdoU7coxKGjxbJ7ycPor3n3Q?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4234.md b/2026/CVE-2026-4234.md index 5df003b5753..33a8cdbcf43 100644 --- a/2026/CVE-2026-4234.md +++ b/2026/CVE-2026-4234.md @@ -11,7 +11,7 @@ A security flaw has been discovered in SSCMS 7.4.0. This vulnerability affects u ### POC #### Reference -- https://www.yuque.com/la12138/pa2fpb/uzhex80ydgktvzok?singleDoc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4284.md b/2026/CVE-2026-4284.md index 6a72fd36749..3234b296c69 100644 --- a/2026/CVE-2026-4284.md +++ b/2026/CVE-2026-4284.md @@ -10,7 +10,7 @@ A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b9 ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/XF5WdvWAEoU9jyx2C2mcImSMnBg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4285.md b/2026/CVE-2026-4285.md index a84c8c202a4..e0884da1692 100644 --- a/2026/CVE-2026-4285.md +++ b/2026/CVE-2026-4285.md @@ -10,7 +10,7 @@ A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b9 ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/KezQdqzVGoTVj9x8SH1c9dNvnOg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4287.md b/2026/CVE-2026-4287.md index 7b2e64d9baf..0d3cf68c506 100644 --- a/2026/CVE-2026-4287.md +++ b/2026/CVE-2026-4287.md @@ -11,7 +11,7 @@ A security flaw has been discovered in Tiandy Easy7 Integrated Management Platfo ### POC #### Reference -- https://my.feishu.cn/docx/F68OduQq8oI2MdxmjHlch8u5n8f?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4288.md b/2026/CVE-2026-4288.md index 9d660e890a5..a25902148da 100644 --- a/2026/CVE-2026-4288.md +++ b/2026/CVE-2026-4288.md @@ -11,7 +11,7 @@ A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7. ### POC #### Reference -- https://my.feishu.cn/docx/LgjudozCFo9rVTx57hJcDyk0nXd?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4289.md b/2026/CVE-2026-4289.md index 3f7eb29aa5e..863a322c94b 100644 --- a/2026/CVE-2026-4289.md +++ b/2026/CVE-2026-4289.md @@ -28,7 +28,7 @@ A security vulnerability has been detected in Tiandy Easy7 Integrated Management ### POC #### Reference -- https://my.feishu.cn/docx/UmmudBVvYoMwpIxUtTicjsS8nDe?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4494.md b/2026/CVE-2026-4494.md index 684d57afd34..de47ce8ac78 100644 --- a/2026/CVE-2026-4494.md +++ b/2026/CVE-2026-4494.md @@ -11,7 +11,7 @@ A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function c ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/EKVgdqWIzo70C0xB5jxcb4IZnre?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4495.md b/2026/CVE-2026-4495.md index a71be38dc81..004b0501714 100644 --- a/2026/CVE-2026-4495.md +++ b/2026/CVE-2026-4495.md @@ -11,7 +11,7 @@ A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the funct ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/PN3YdPBpsowyU1xTV1VcVTm9nzg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4542.md b/2026/CVE-2026-4542.md index 364e1eb19a6..e10f0a19e64 100644 --- a/2026/CVE-2026-4542.md +++ b/2026/CVE-2026-4542.md @@ -10,7 +10,7 @@ A vulnerability has been found in SSCMS 4.7.0. The affected element is an unknow ### POC #### Reference -- https://www.yuque.com/la12138/pa2fpb/vlyutc51eb7vhwaz?singleDoc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4585.md b/2026/CVE-2026-4585.md index fc2c68aba6d..fef131ad190 100644 --- a/2026/CVE-2026-4585.md +++ b/2026/CVE-2026-4585.md @@ -28,7 +28,7 @@ A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up ### POC #### Reference -- https://my.feishu.cn/docx/WkHjd3oajoIw5exHk9ecUHaFnKd?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4586.md b/2026/CVE-2026-4586.md index 3715adc6e5d..798c5a2ed39 100644 --- a/2026/CVE-2026-4586.md +++ b/2026/CVE-2026-4586.md @@ -18,7 +18,7 @@ A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects the f ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/PgtzdpfoWoTR0yxB7P6cujGanih?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4588.md b/2026/CVE-2026-4588.md index b015ceef924..6f2db9a6458 100644 --- a/2026/CVE-2026-4588.md +++ b/2026/CVE-2026-4588.md @@ -11,7 +11,7 @@ A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the functio ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/rM8GdIOvQZrw +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4589.md b/2026/CVE-2026-4589.md index fd753236a39..abd90ada12e 100644 --- a/2026/CVE-2026-4589.md +++ b/2026/CVE-2026-4589.md @@ -10,7 +10,7 @@ A vulnerability was identified in kalcaddle kodbox 1.64. The affected element is ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/UTZQq38f9VyI +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4590.md b/2026/CVE-2026-4590.md index 8a424538ed5..ddb231c2d96 100644 --- a/2026/CVE-2026-4590.md +++ b/2026/CVE-2026-4590.md @@ -11,7 +11,7 @@ A security flaw has been discovered in kalcaddle kodbox 1.64. The impacted eleme ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/IJW1LjsyomCQ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4591.md b/2026/CVE-2026-4591.md index 6203bbef0af..83fc2d274d4 100644 --- a/2026/CVE-2026-4591.md +++ b/2026/CVE-2026-4591.md @@ -11,7 +11,7 @@ A weakness has been identified in kalcaddle kodbox 1.64. This affects the functi ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/3ml5XA0firIa +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4592.md b/2026/CVE-2026-4592.md index 92765cbb2ec..9c89edee183 100644 --- a/2026/CVE-2026-4592.md +++ b/2026/CVE-2026-4592.md @@ -10,7 +10,7 @@ A security vulnerability has been detected in kalcaddle kodbox 1.64. This impact ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/S6CMNnndYUXU +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4593.md b/2026/CVE-2026-4593.md index 2ca937b2aa2..8e92d82e4f9 100644 --- a/2026/CVE-2026-4593.md +++ b/2026/CVE-2026-4593.md @@ -14,7 +14,7 @@ A flaw has been found in erupts erupt bis 1.13.3. Affected by this vulnerability ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/EunDdwORZoG3uzxpLykcj24mncJ?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4594.md b/2026/CVE-2026-4594.md index 5dedd7196f9..4918d388b7f 100644 --- a/2026/CVE-2026-4594.md +++ b/2026/CVE-2026-4594.md @@ -14,7 +14,7 @@ A vulnerability has been found in erupts erupt up to 1.13.3. Affected by this is ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/ETWUdbPk1oCC56xoEWHc3Q28nEc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4597.md b/2026/CVE-2026-4597.md index c26b555115e..97d2f28cac4 100644 --- a/2026/CVE-2026-4597.md +++ b/2026/CVE-2026-4597.md @@ -15,7 +15,7 @@ A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4. Im ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/MwZRdLmXhosJJFxCQ2kcJjfqnhk?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4830.md b/2026/CVE-2026-4830.md index aecefd66774..64598d62db0 100644 --- a/2026/CVE-2026-4830.md +++ b/2026/CVE-2026-4830.md @@ -11,7 +11,7 @@ A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/7oB22Zhc6u5X +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4831.md b/2026/CVE-2026-4831.md index 563ddf86b0b..1ce442df773 100644 --- a/2026/CVE-2026-4831.md +++ b/2026/CVE-2026-4831.md @@ -10,7 +10,7 @@ A security flaw has been discovered in kalcaddle kodbox 1.64. Impacted is the fu ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/xdk9igJ3sulk +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4910.md b/2026/CVE-2026-4910.md index d58de09f224..67385ce17a4 100644 --- a/2026/CVE-2026-4910.md +++ b/2026/CVE-2026-4910.md @@ -55,7 +55,7 @@ A security vulnerability has been detected in Shenzhen Ruiming Technology Stream ### POC #### Reference -- https://my.feishu.cn/docx/QZU6dXZBBoBeLMx4K28cW1BEnsZ?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4955.md b/2026/CVE-2026-4955.md index 61a0721a827..58e40c0d005 100644 --- a/2026/CVE-2026-4955.md +++ b/2026/CVE-2026-4955.md @@ -11,7 +11,7 @@ A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. ### POC #### Reference -- https://my.feishu.cn/docx/C16HdO89zo9OCrxn5B2c8bTqnvb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-4956.md b/2026/CVE-2026-4956.md index 6167c7af75d..4db91fda45a 100644 --- a/2026/CVE-2026-4956.md +++ b/2026/CVE-2026-4956.md @@ -11,7 +11,7 @@ A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3. ### POC #### Reference -- https://my.feishu.cn/docx/J8fHdY906o98pax4oCacWLTKndP?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-5259.md b/2026/CVE-2026-5259.md index ada4cb794e4..ead0cfe433e 100644 --- a/2026/CVE-2026-5259.md +++ b/2026/CVE-2026-5259.md @@ -10,7 +10,7 @@ A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affect ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/GE4GdxBxKoSvBOxhkTRcsawlnhc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-5261.md b/2026/CVE-2026-5261.md index 7a5d0852c46..6598362a1fb 100644 --- a/2026/CVE-2026-5261.md +++ b/2026/CVE-2026-5261.md @@ -19,7 +19,7 @@ A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. T ### POC #### Reference -- https://my.feishu.cn/docx/ToGkdd5jwokb4PxEMkHcKrfXn3b?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-5563.md b/2026/CVE-2026-5563.md index b86d7fdcbdc..6255748fad5 100644 --- a/2026/CVE-2026-5563.md +++ b/2026/CVE-2026-5563.md @@ -11,7 +11,7 @@ A security flaw has been discovered in AutohomeCorp frostmourne up to 1.0. Affec ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/M0u0dPZmZosY9Ax6OsScJ3Blnxf?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-5615.md b/2026/CVE-2026-5615.md index dd1053af91e..b34c4150919 100644 --- a/2026/CVE-2026-5615.md +++ b/2026/CVE-2026-5615.md @@ -16,7 +16,7 @@ A weakness has been identified in givanz Vvvebjs up to 2.0.5. The affected eleme ### POC #### Reference -- https://tcn60zf28jhk.feishu.cn/wiki/Cr4KwMPiMi65fFkI9Vyc3oX2n0f?from=from_copylink +No PoCs from references. #### Github - https://github.com/sahmsec/CVE-2026-5615 diff --git a/2026/CVE-2026-5618.md b/2026/CVE-2026-5618.md index abbd889daf7..47321f68bc0 100644 --- a/2026/CVE-2026-5618.md +++ b/2026/CVE-2026-5618.md @@ -74,7 +74,7 @@ A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unk ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/3VtzyzYgcS4b +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-58451.md b/2026/CVE-2026-58451.md index 869a9f7fd50..d891299bfb3 100644 --- a/2026/CVE-2026-58451.md +++ b/2026/CVE-2026-58451.md @@ -10,7 +10,7 @@ Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.ph ### POC #### Reference -- https://blog.evan.lat/posts/CVE-2026-58451/ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6487.md b/2026/CVE-2026-6487.md index 76781a42ec3..f912024ce58 100644 --- a/2026/CVE-2026-6487.md +++ b/2026/CVE-2026-6487.md @@ -10,7 +10,7 @@ A flaw has been found in Qihui jtbc5 CMS 5.0.3.6. Affected is an unknown functio ### POC #### Reference -- https://tcn60zf28jhk.feishu.cn/wiki/CnpvwDdyOi5PXOk8X1fcorudnSv?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6568.md b/2026/CVE-2026-6568.md index 73425b7cd97..9af44ed68d7 100644 --- a/2026/CVE-2026-6568.md +++ b/2026/CVE-2026-6568.md @@ -62,7 +62,7 @@ A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/JyHBnRUaoOY2 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6570.md b/2026/CVE-2026-6570.md index 100c8b32673..936585be661 100644 --- a/2026/CVE-2026-6570.md +++ b/2026/CVE-2026-6570.md @@ -63,7 +63,7 @@ A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/byd7AQVs42VY +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6571.md b/2026/CVE-2026-6571.md index ad65743c1e0..fcd19ca1fce 100644 --- a/2026/CVE-2026-6571.md +++ b/2026/CVE-2026-6571.md @@ -63,7 +63,7 @@ A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by t ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/atu3UbqnfAgs +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6572.md b/2026/CVE-2026-6572.md index daa3bd6895e..d7223e01733 100644 --- a/2026/CVE-2026-6572.md +++ b/2026/CVE-2026-6572.md @@ -63,7 +63,7 @@ A security vulnerability has been detected in Collabora KodExplorer up to 4.52. ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/PLCI4v0BWaF8 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6573.md b/2026/CVE-2026-6573.md index 09a752da593..60ad89859a3 100644 --- a/2026/CVE-2026-6573.md +++ b/2026/CVE-2026-6573.md @@ -10,7 +10,7 @@ A vulnerability was detected in PHPEMS 11.0. This affects the function temppage ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/1QZ4NE0oTRIc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6574.md b/2026/CVE-2026-6574.md index 2b1a29e0721..c6f94dc0495 100644 --- a/2026/CVE-2026-6574.md +++ b/2026/CVE-2026-6574.md @@ -13,7 +13,7 @@ A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue aff ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/VhoNkMja5u7A +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6595.md b/2026/CVE-2026-6595.md index f53abaeab11..52590a25629 100644 --- a/2026/CVE-2026-6595.md +++ b/2026/CVE-2026-6595.md @@ -11,7 +11,7 @@ A vulnerability was identified in ProjectsAndPrograms School Management System u ### POC #### Reference -- https://tcn60zf28jhk.feishu.cn/wiki/MdHFw78Gmi1zbske8Ozc6XTjnIh?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6596.md b/2026/CVE-2026-6596.md index 315484e1eca..0d4a5fa7338 100644 --- a/2026/CVE-2026-6596.md +++ b/2026/CVE-2026-6596.md @@ -12,7 +12,7 @@ A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This is ### POC #### Reference -- https://gist.github.com/chenhouser2025/c2aabfdee41009cfe45d28a9924742a0 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6597.md b/2026/CVE-2026-6597.md index 2ba6bcfd95f..16ed8dbfc61 100644 --- a/2026/CVE-2026-6597.md +++ b/2026/CVE-2026-6597.md @@ -14,7 +14,7 @@ A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is ### POC #### Reference -- https://gist.github.com/chenhouser2025/b93261c6e651f14800a4f2e4365f357b +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6598.md b/2026/CVE-2026-6598.md index 6bae15ceb56..2a6c5403b89 100644 --- a/2026/CVE-2026-6598.md +++ b/2026/CVE-2026-6598.md @@ -14,7 +14,7 @@ A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. ### POC #### Reference -- https://gist.github.com/chenhouser2025/77adb3486c06c635ae4b09a3eaf90213 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6599.md b/2026/CVE-2026-6599.md index b9eda05f711..354cae2f409 100644 --- a/2026/CVE-2026-6599.md +++ b/2026/CVE-2026-6599.md @@ -14,7 +14,7 @@ A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted e ### POC #### Reference -- https://gist.github.com/chenhouser2025/a909c47316b7a0948ee68c109ab747a3 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6600.md b/2026/CVE-2026-6600.md index 5809366544f..adcafa6dd0d 100644 --- a/2026/CVE-2026-6600.md +++ b/2026/CVE-2026-6600.md @@ -14,7 +14,7 @@ A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unkno ### POC #### Reference -- https://gist.github.com/chenhouser2025/935aa5d4556264ba408059eec0960b1a +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6617.md b/2026/CVE-2026-6617.md index 376da49457e..ee0d6333a15 100644 --- a/2026/CVE-2026-6617.md +++ b/2026/CVE-2026-6617.md @@ -19,7 +19,7 @@ A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability ### POC #### Reference -- https://gist.github.com/chenhouser2025/306c6a7ad6aff9bc9a7fa76d5df38c63 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6618.md b/2026/CVE-2026-6618.md index f600d039c30..279ea9002bd 100644 --- a/2026/CVE-2026-6618.md +++ b/2026/CVE-2026-6618.md @@ -13,7 +13,7 @@ A flaw has been found in langgenius dify up to 1.13.3. This issue affects the fu ### POC #### Reference -- https://gist.github.com/chenhouser2025/d7b1c574b0e32eb9169f7046b486e662 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6619.md b/2026/CVE-2026-6619.md index b5e08d2e2e2..00e81c0914c 100644 --- a/2026/CVE-2026-6619.md +++ b/2026/CVE-2026-6619.md @@ -14,7 +14,7 @@ A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the ### POC #### Reference -- https://gist.github.com/chenhouser2025/a8ac169dad5cf84811cf9c0505491ea8 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6629.md b/2026/CVE-2026-6629.md index 85a2513763b..313f7210460 100644 --- a/2026/CVE-2026-6629.md +++ b/2026/CVE-2026-6629.md @@ -15,7 +15,7 @@ A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. Thi ### POC #### Reference -- https://my.feishu.cn/docx/JttndUaPLoR88HxI1alcz1uencf?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6648.md b/2026/CVE-2026-6648.md index e6b96a8358b..4853dd6bb84 100644 --- a/2026/CVE-2026-6648.md +++ b/2026/CVE-2026-6648.md @@ -11,7 +11,7 @@ A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an ### POC #### Reference -- https://tcn60zf28jhk.feishu.cn/wiki/FHHMwcwCliOd0Bke3XkcEz3Enuc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6649.md b/2026/CVE-2026-6649.md index 532cbd53ef9..0de4979c341 100644 --- a/2026/CVE-2026-6649.md +++ b/2026/CVE-2026-6649.md @@ -10,7 +10,7 @@ A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some u ### POC #### Reference -- https://tcn60zf28jhk.feishu.cn/wiki/VYIcwwH4uiWZMgkX0SecopTgnQd?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6651.md b/2026/CVE-2026-6651.md index 5ee1ad8c5e4..52e828a7594 100644 --- a/2026/CVE-2026-6651.md +++ b/2026/CVE-2026-6651.md @@ -11,7 +11,7 @@ A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. Thi ### POC #### Reference -- https://olografix.org/acme/ERP_Online-POC.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-6743.md b/2026/CVE-2026-6743.md index 64c1bcbf81d..3517099b558 100644 --- a/2026/CVE-2026-6743.md +++ b/2026/CVE-2026-6743.md @@ -11,7 +11,7 @@ A vulnerability has been found in WebSystems WebTOTUM 2026. This impacts an unkn ### POC #### Reference -- https://olografix.org/acme/WebTOTUM-POC.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7519.md b/2026/CVE-2026-7519.md index 073c76edfa4..17be5816a5c 100644 --- a/2026/CVE-2026-7519.md +++ b/2026/CVE-2026-7519.md @@ -10,7 +10,7 @@ A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an ### POC #### Reference -- https://my.feishu.cn/docx/TCyMdptvaoTQCvxkHLbceJZCnge?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7672.md b/2026/CVE-2026-7672.md index a7ef98799cd..b067ecf53e5 100644 --- a/2026/CVE-2026-7672.md +++ b/2026/CVE-2026-7672.md @@ -12,7 +12,7 @@ A security vulnerability has been detected in youlaitech youlai-boot up to 2.21. ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/EBZLdUqt4ogm4Px7jxuck1RQnHe?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7673.md b/2026/CVE-2026-7673.md index 5a6b4a51a97..27c449c1ec8 100644 --- a/2026/CVE-2026-7673.md +++ b/2026/CVE-2026-7673.md @@ -15,7 +15,7 @@ A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affec ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/EgMOdHyq6oyxhux5vpJcr5cgnAf?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7676.md b/2026/CVE-2026-7676.md index 9db3e3b4bf5..619efe77b64 100644 --- a/2026/CVE-2026-7676.md +++ b/2026/CVE-2026-7676.md @@ -11,7 +11,7 @@ A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/Yv1gdAzFpoHCUUxDdKSculR4nKf?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7677.md b/2026/CVE-2026-7677.md index 6a6057b4f8d..524e09c0f4b 100644 --- a/2026/CVE-2026-7677.md +++ b/2026/CVE-2026-7677.md @@ -12,7 +12,7 @@ A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted el ### POC #### Reference -- https://fx4tqqfvdw4.feishu.cn/docx/Iu5Dd558UoS4uIxhH9YcgNsWnjc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-76783.md b/2026/CVE-2026-76783.md index 0e219d34f42..a2d5494dd26 100644 --- a/2026/CVE-2026-76783.md +++ b/2026/CVE-2026-76783.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerabil ### POC #### Reference -- https://uvxbywu62qm.feishu.cn/wiki/X1T5w8jPUinAsVkM0bhcZf4XnHe?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-76800.md b/2026/CVE-2026-76800.md index bb3c91cc0d5..c369ab42696 100644 --- a/2026/CVE-2026-76800.md +++ b/2026/CVE-2026-76800.md @@ -11,7 +11,7 @@ A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown ### POC #### Reference -- https://uvxbywu62qm.feishu.cn/wiki/TKqDwJGYaiBVXpk3EtFcdjRDnsg?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7694.md b/2026/CVE-2026-7694.md index 9821a33cce8..31615bd58b8 100644 --- a/2026/CVE-2026-7694.md +++ b/2026/CVE-2026-7694.md @@ -11,7 +11,7 @@ A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Effi ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/WZMewApmsiT3PMkCJfzcASEznOb +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7695.md b/2026/CVE-2026-7695.md index 3d0f5a75374..b0b9db00448 100644 --- a/2026/CVE-2026-7695.md +++ b/2026/CVE-2026-7695.md @@ -11,7 +11,7 @@ A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operati ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/QoXfwTAOiiYw2OkO0vAc7b7SnGg +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7696.md b/2026/CVE-2026-7696.md index f60428ae647..820fab72f7d 100644 --- a/2026/CVE-2026-7696.md +++ b/2026/CVE-2026-7696.md @@ -11,7 +11,7 @@ A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation an ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/X9PAw4i5kiPueKkZqCCcNVYZnnc?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-7698.md b/2026/CVE-2026-7698.md index 934c14f67b9..b2750d0ea92 100644 --- a/2026/CVE-2026-7698.md +++ b/2026/CVE-2026-7698.md @@ -11,7 +11,7 @@ A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7. ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/Yslcw7QqWiRjUZkCcvkcJI62n2c +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-78182.md b/2026/CVE-2026-78182.md index 3256b00fa46..cb74f190688 100644 --- a/2026/CVE-2026-78182.md +++ b/2026/CVE-2026-78182.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHE ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/docx/WgJYd7q4CopTQKxqWuWcJEpinde?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8211.md b/2026/CVE-2026-8211.md index 66d64d02285..25d6838d4be 100644 --- a/2026/CVE-2026-8211.md +++ b/2026/CVE-2026-8211.md @@ -12,7 +12,7 @@ A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this iss ### POC #### Reference -- https://bv3acdnplbr.feishu.cn/docx/Kk1tdEAfAoV6kZxVozUc8UA4nog?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8214.md b/2026/CVE-2026-8214.md index 8fb39fa0ca7..06ef616106a 100644 --- a/2026/CVE-2026-8214.md +++ b/2026/CVE-2026-8214.md @@ -10,7 +10,7 @@ A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03 ### POC #### Reference -- https://gist.github.com/0xb1lal/3ef872a445310c5866d07d6a5b1803fa +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8215.md b/2026/CVE-2026-8215.md index 6276fad19a9..d826c5d216b 100644 --- a/2026/CVE-2026-8215.md +++ b/2026/CVE-2026-8215.md @@ -10,7 +10,7 @@ A vulnerability was determined in Industrial Application Software IAS Canias ERP ### POC #### Reference -- https://gist.github.com/0xb1lal/3885c69998516685e3ea833403b9db2b +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8217.md b/2026/CVE-2026-8217.md index 8167347bebb..84ff525470f 100644 --- a/2026/CVE-2026-8217.md +++ b/2026/CVE-2026-8217.md @@ -11,7 +11,7 @@ A security flaw has been discovered in Industrial Application Software IAS Cania ### POC #### Reference -- https://gist.github.com/0xb1lal/6ccc2356e7e0a26f7b8a6bd6f0d84bbb +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8218.md b/2026/CVE-2026-8218.md index a233e095642..655a4c4718f 100644 --- a/2026/CVE-2026-8218.md +++ b/2026/CVE-2026-8218.md @@ -11,7 +11,7 @@ A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affect ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8219.md b/2026/CVE-2026-8219.md index b17f350e86d..e89b5f6a4bf 100644 --- a/2026/CVE-2026-8219.md +++ b/2026/CVE-2026-8219.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0 ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8220.md b/2026/CVE-2026-8220.md index 9432c039010..8228e5c843c 100644 --- a/2026/CVE-2026-8220.md +++ b/2026/CVE-2026-8220.md @@ -11,7 +11,7 @@ A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8221.md b/2026/CVE-2026-8221.md index a7e7d9d2550..7cd2eb9d86f 100644 --- a/2026/CVE-2026-8221.md +++ b/2026/CVE-2026-8221.md @@ -11,7 +11,7 @@ A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unk ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8241.md b/2026/CVE-2026-8241.md index 7197bd8722a..68335142f00 100644 --- a/2026/CVE-2026-8241.md +++ b/2026/CVE-2026-8241.md @@ -11,7 +11,7 @@ A vulnerability has been found in Industrial Application Software IAS Canias ERP ### POC #### Reference -- https://gist.github.com/0xb1lal/6f3f050f08cff569ecbde586e63c6bea +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8242.md b/2026/CVE-2026-8242.md index 749837b35f4..1d75cb7ccb4 100644 --- a/2026/CVE-2026-8242.md +++ b/2026/CVE-2026-8242.md @@ -11,7 +11,7 @@ A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03 ### POC #### Reference -- https://gist.github.com/0xb1lal/85422a63c10a001c75a22365457de624 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8244.md b/2026/CVE-2026-8244.md index 77e11a701ab..1097dd4e4ce 100644 --- a/2026/CVE-2026-8244.md +++ b/2026/CVE-2026-8244.md @@ -10,7 +10,7 @@ A vulnerability was identified in Industrial Application Software IAS Canias ERP ### POC #### Reference -- https://gist.github.com/0xb1lal/758bbc5e4d82efea248e675da934ac69 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8253.md b/2026/CVE-2026-8253.md index 45fb38595e2..9158138df6d 100644 --- a/2026/CVE-2026-8253.md +++ b/2026/CVE-2026-8253.md @@ -11,7 +11,7 @@ A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected b ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8254.md b/2026/CVE-2026-8254.md index 812265c19fd..54bebaa0fe0 100644 --- a/2026/CVE-2026-8254.md +++ b/2026/CVE-2026-8254.md @@ -11,7 +11,7 @@ A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affec ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8255.md b/2026/CVE-2026-8255.md index ba3ecf972ca..65c706262d0 100644 --- a/2026/CVE-2026-8255.md +++ b/2026/CVE-2026-8255.md @@ -11,7 +11,7 @@ A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affec ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8256.md b/2026/CVE-2026-8256.md index 629153bd75e..2ec5c750a69 100644 --- a/2026/CVE-2026-8256.md +++ b/2026/CVE-2026-8256.md @@ -11,7 +11,7 @@ A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0 ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8262.md b/2026/CVE-2026-8262.md index db9d8501212..a59e286f3a4 100644 --- a/2026/CVE-2026-8262.md +++ b/2026/CVE-2026-8262.md @@ -11,7 +11,7 @@ A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impac ### POC #### Reference -- https://olografix.org/acme/_poc/ERP_Online-POC1.gif +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8737.md b/2026/CVE-2026-8737.md index 1fe4704d3ef..12115d2a817 100644 --- a/2026/CVE-2026-8737.md +++ b/2026/CVE-2026-8737.md @@ -11,7 +11,7 @@ A weakness has been identified in Sanluan PublicCMS 5.202506.d. This issue affec ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/VqmGhijVKGBM +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8738.md b/2026/CVE-2026-8738.md index 3dc3abf87e8..d09bb99c17c 100644 --- a/2026/CVE-2026-8738.md +++ b/2026/CVE-2026-8738.md @@ -10,7 +10,7 @@ A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d. Impa ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/ayeMf4xWK0ZZ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8739.md b/2026/CVE-2026-8739.md index 3c3d9321fea..98f86a28d1c 100644 --- a/2026/CVE-2026-8739.md +++ b/2026/CVE-2026-8739.md @@ -11,7 +11,7 @@ A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected eleme ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/PCVUlOncmwTC +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8740.md b/2026/CVE-2026-8740.md index daa7b3563f4..39f46d0d03b 100644 --- a/2026/CVE-2026-8740.md +++ b/2026/CVE-2026-8740.md @@ -11,7 +11,7 @@ A flaw has been found in Sanluan PublicCMS 5.202506.d. The impacted element is t ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/ILcCnOvJ1fMc +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8747.md b/2026/CVE-2026-8747.md index 2e945dc2e18..a6904412f43 100644 --- a/2026/CVE-2026-8747.md +++ b/2026/CVE-2026-8747.md @@ -11,7 +11,7 @@ A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the functio ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/31wtzNoJbxKQ +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8750.md b/2026/CVE-2026-8750.md index 8e26689252b..0cb5fc9c445 100644 --- a/2026/CVE-2026-8750.md +++ b/2026/CVE-2026-8750.md @@ -11,7 +11,7 @@ A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/wWjmsfKHRJi3 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8751.md b/2026/CVE-2026-8751.md index a55ca3467e4..fa4906fd98f 100644 --- a/2026/CVE-2026-8751.md +++ b/2026/CVE-2026-8751.md @@ -11,7 +11,7 @@ A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/b5nsQg6EcsBS +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8752.md b/2026/CVE-2026-8752.md index f6a1f6fc80a..2b11cc4bf3d 100644 --- a/2026/CVE-2026-8752.md +++ b/2026/CVE-2026-8752.md @@ -11,7 +11,7 @@ A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability aff ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/pyVa0GWPuAZE +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8753.md b/2026/CVE-2026-8753.md index 2c9211ef07b..8335e50a15e 100644 --- a/2026/CVE-2026-8753.md +++ b/2026/CVE-2026-8753.md @@ -75,7 +75,7 @@ A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This ### POC #### Reference -- https://vulnplus-note.wetolink.com/share/R0hHqwMywhsm +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-8758.md b/2026/CVE-2026-8758.md index 2017e4237a7..9ff9d07e6e8 100644 --- a/2026/CVE-2026-8758.md +++ b/2026/CVE-2026-8758.md @@ -11,7 +11,7 @@ A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/XmoNwpJjJiQrBtkLMitccF56ntb +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9409.md b/2026/CVE-2026-9409.md index 171fc952534..b48ab40b815 100644 --- a/2026/CVE-2026-9409.md +++ b/2026/CVE-2026-9409.md @@ -11,7 +11,7 @@ A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae2 ### POC #### Reference -- https://gist.github.com/c4ttr4ck/c891dd0fa550e910a1724cbd96d93a80 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9410.md b/2026/CVE-2026-9410.md index 4fb0f38fd3b..05a1907df45 100644 --- a/2026/CVE-2026-9410.md +++ b/2026/CVE-2026-9410.md @@ -11,7 +11,7 @@ A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee26 ### POC #### Reference -- https://gist.github.com/c4ttr4ck/c35c134709743deb7dfad5b878295402 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9411.md b/2026/CVE-2026-9411.md index 62ab0ac09f5..068ebe41eef 100644 --- a/2026/CVE-2026-9411.md +++ b/2026/CVE-2026-9411.md @@ -11,7 +11,7 @@ A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This is ### POC #### Reference -- https://gist.github.com/c4ttr4ck/f60dfb9fc65a98ad6dde1840dc2c1a5e +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9412.md b/2026/CVE-2026-9412.md index 09f7cc891aa..584839c9cd9 100644 --- a/2026/CVE-2026-9412.md +++ b/2026/CVE-2026-9412.md @@ -11,7 +11,7 @@ A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Im ### POC #### Reference -- https://gist.github.com/c4ttr4ck/db84fc2af3e542acf1eab685264bcfc1 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9413.md b/2026/CVE-2026-9413.md index a766ef25748..5c32af43142 100644 --- a/2026/CVE-2026-9413.md +++ b/2026/CVE-2026-9413.md @@ -11,7 +11,7 @@ A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. Th ### POC #### Reference -- https://gist.github.com/c4ttr4ck/cb6a07bc54600a14de2676d8b96c3026 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9414.md b/2026/CVE-2026-9414.md index 9b9584753be..678a507e7e0 100644 --- a/2026/CVE-2026-9414.md +++ b/2026/CVE-2026-9414.md @@ -12,7 +12,7 @@ A security flaw has been discovered in SourceCodester Indian Invoicing System up ### POC #### Reference -- https://gist.github.com/c4ttr4ck/97c5babe1f16fa3243333528a40b7550 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9444.md b/2026/CVE-2026-9444.md index c77e4f71019..b5dee27fc73 100644 --- a/2026/CVE-2026-9444.md +++ b/2026/CVE-2026-9444.md @@ -11,7 +11,7 @@ A vulnerability was detected in SourceCodester Simple POS and Inventory System 1 ### POC #### Reference -- https://gist.github.com/c4ttr4ck/5d05aaee5b43f259ebe8bb8bce5c658f +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9445.md b/2026/CVE-2026-9445.md index 60c7a85cbd5..f3451141e67 100644 --- a/2026/CVE-2026-9445.md +++ b/2026/CVE-2026-9445.md @@ -11,7 +11,7 @@ A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Imp ### POC #### Reference -- https://gist.github.com/c4ttr4ck/dd5c36ac4317232be183b7b90139d064 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9446.md b/2026/CVE-2026-9446.md index dbc383831aa..659fd9d0ab5 100644 --- a/2026/CVE-2026-9446.md +++ b/2026/CVE-2026-9446.md @@ -11,7 +11,7 @@ A vulnerability has been found in SourceCodester Simple POS and Inventory System ### POC #### Reference -- https://gist.github.com/c4ttr4ck/599151a2b90c1cd620933c992873c67a +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9447.md b/2026/CVE-2026-9447.md index 40472cd515a..bfa54f66a80 100644 --- a/2026/CVE-2026-9447.md +++ b/2026/CVE-2026-9447.md @@ -11,7 +11,7 @@ A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0. ### POC #### Reference -- https://gist.github.com/c4ttr4ck/24c157c90227c3f5cd5e5d871449fed8 +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9465.md b/2026/CVE-2026-9465.md index 9ac04c3962f..2be8ffe1cf3 100644 --- a/2026/CVE-2026-9465.md +++ b/2026/CVE-2026-9465.md @@ -11,7 +11,7 @@ A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/MOEfw7m4xiwxifkGWwDcNzEPnD0?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9466.md b/2026/CVE-2026-9466.md index 2d64164c619..6bb617ba7f9 100644 --- a/2026/CVE-2026-9466.md +++ b/2026/CVE-2026-9466.md @@ -10,7 +10,7 @@ A vulnerability was determined in Tiandy Easy7 Integrated Management Platform 7. ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/DRghw6X8piOtClkjBkHcfgvtnPx?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9523.md b/2026/CVE-2026-9523.md index 6bea3077a26..6703316bbb5 100644 --- a/2026/CVE-2026-9523.md +++ b/2026/CVE-2026-9523.md @@ -11,7 +11,7 @@ A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/NpZHw0lypi6ztJkWLNxcGKR5nlb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9544.md b/2026/CVE-2026-9544.md index 35904dbb908..23c3a20a91a 100644 --- a/2026/CVE-2026-9544.md +++ b/2026/CVE-2026-9544.md @@ -11,7 +11,7 @@ A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Busine ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/A9WcwRkFsijnyIkf6vlcx13znoh +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9550.md b/2026/CVE-2026-9550.md index ccc9a00d114..bde114b9bda 100644 --- a/2026/CVE-2026-9550.md +++ b/2026/CVE-2026-9550.md @@ -10,7 +10,7 @@ A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operati ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/FC6swHuyqiLVyfkwKcNc8sCjnfb +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9551.md b/2026/CVE-2026-9551.md index 4b1e425c5ee..56c9b3e5efc 100644 --- a/2026/CVE-2026-9551.md +++ b/2026/CVE-2026-9551.md @@ -11,7 +11,7 @@ A vulnerability was identified in Das Parking Management System 停车场管理 ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/XW9QwcTjCixlLiklQfBcJCcYn0e?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/2026/CVE-2026-9552.md b/2026/CVE-2026-9552.md index 87d46d28e3f..de93ebd36a5 100644 --- a/2026/CVE-2026-9552.md +++ b/2026/CVE-2026-9552.md @@ -11,7 +11,7 @@ A security flaw has been discovered in Das Parking Management System 停车场 ### POC #### Reference -- https://ucn9h68n9289.feishu.cn/wiki/IvjXwhgMUinqOckXHIQcrf2Nnjb?from=from_copylink +No PoCs from references. #### Github No PoCs found on GitHub currently. diff --git a/references.txt b/references.txt index 914fd12ae62..1491a1c3995 100644 --- a/references.txt +++ b/references.txt @@ -1,26 +1,19 @@ CVE-2000-0045 - http://www.securityfocus.com/bid/926 -CVE-2000-0052 - http://www.l0pht.com/advisories/pam_advisory CVE-2000-0119 - http://marc.info/?l=bugtraq&m=94936267131123&w=2 CVE-2000-0219 - https://kc.mcafee.com/corporate/index?page=content&id=SB10053 CVE-2000-0267 - http://www.cisco.com/warp/public/707/catos-enable-bypass-pub.shtml CVE-2000-0268 - http://www.cisco.com/warp/public/707/iostelnetopt-pub.shtml -CVE-2000-0275 - http://www.l0pht.com/advisories/cc-pinextract.txt CVE-2000-0342 - http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077 CVE-2000-0359 - http://www.securityfocus.com/bid/1248 CVE-2000-0368 - http://www.cisco.com/warp/public/770/ioshist-pub.shtml CVE-2000-0380 - http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml -CVE-2000-0384 - http://www.l0pht.com/advisories/ipivot7180.html -CVE-2000-0405 - http://www.l0pht.com/advisories/asniff_advisory.txt -CVE-2000-0427 - http://www.l0pht.com/advisories/etoken-piepa.txt CVE-2000-0428 - http://www.nai.com/nai_labs/asp_set/advisory/39_Trend.asp CVE-2000-0455 - http://www.nai.com/nai_labs/asp_set/advisory/41initialized.asp CVE-2000-0500 - http://marc.info/?l=bugtraq&m=96161462915381&w=2 CVE-2000-0538 - http://marc.info/?l=bugtraq&m=96045469627806&w=2 CVE-2000-0613 - http://www.cisco.com/warp/public/707/pixtcpreset-pub.shtml CVE-2000-0622 - http://www.nai.com/research/covert/advisories/043.asp -CVE-2000-0625 - http://www.l0pht.com/advisories/netzero.txt CVE-2000-0632 - http://www.nai.com/nai_labs/asp_set/advisory/43_Advisory.asp -CVE-2000-0635 - http://www.zdnet.com/zdnn/stories/news/0,4586,2600258,00.html CVE-2000-0673 - http://www.nai.com/research/covert/advisories/044.asp CVE-2000-0700 - http://www.cisco.com/warp/public/707/gsraclbypassdos-pub.shtml CVE-2000-0867 - http://www.redhat.com/support/errata/RHSA-2000-061.html @@ -47,8 +40,6 @@ CVE-2000-1103 - http://www.securityfocus.com/archive/1/147120 CVE-2000-1196 - http://packetstormsecurity.org/0004-exploits/ooo1.txt CVE-2000-1207 - http://marc.info/?l=bugtraq&m=97034397026473&w=2 CVE-2000-1216 - http://www.kb.cert.org/vuls/id/433499 -CVE-2000-1220 - http://www.l0pht.com/advisories/lpd_advisory -CVE-2000-1221 - http://www.l0pht.com/advisories/lpd_advisory CVE-2001-0010 - http://www.nai.com/research/covert/advisories/047.asp CVE-2001-0011 - http://www.nai.com/research/covert/advisories/047.asp CVE-2001-0012 - http://www.nai.com/research/covert/advisories/047.asp @@ -81,7 +72,6 @@ CVE-2001-0441 - http://www.redhat.com/support/errata/RHSA-2001-028.html CVE-2001-0455 - http://www.cisco.com/warp/public/707/Aironet340-pub.shtml CVE-2001-0457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6211 CVE-2001-0464 - http://marc.info/?l=bugtraq&m=98761402029302&w=2 -CVE-2001-0465 - http://www.turbotax.com/atr/update/ CVE-2001-0486 - http://marc.info/?l=bugtraq&m=98865027328391&w=2 CVE-2001-0498 - http://www.nai.com/research/covert/advisories/049.asp CVE-2001-0499 - http://www.nai.com/research/covert/advisories/050.asp @@ -327,8 +317,6 @@ CVE-2002-1375 - http://security.e-matters.de/advisories/042002.html CVE-2002-1376 - http://marc.info/?l=bugtraq&m=103971644013961&w=2 CVE-2002-1376 - http://security.e-matters.de/advisories/042002.html CVE-2002-1383 - http://marc.info/?l=bugtraq&m=104032149026670&w=2 -CVE-2002-1398 - http://www.novell.com/linux/security/advisories/2002_038_postgresql.html -CVE-2002-1400 - http://www.novell.com/linux/security/advisories/2002_038_postgresql.html CVE-2002-1444 - http://www.securityfocus.com/bid/5477 CVE-2002-1447 - http://www.cisco.com/warp/public/707/cisco-unix-vpnclient-buffer-overflow-pub.shtml CVE-2002-1456 - http://marc.info/?l=bugtraq&m=103046375002380&w=2 @@ -368,7 +356,6 @@ CVE-2002-2208 - http://www.cisco.com/warp/public/707/eigrp_issue.pdf CVE-2002-2217 - https://www.exploit-db.com/exploits/2318 CVE-2002-2226 - http://securityreason.com/securityalert/3160 CVE-2002-2239 - http://www.cisco.com/warp/public/707/osm-lc-ios-pkt-vuln-pub.shtml -CVE-2002-2246 - http://www.deerfield.com/products/visnetic_website/ CVE-2002-2281 - http://marc.info/?l=bugtraq&m=103798147613151&w=2 CVE-2002-2284 - http://marc.info/?l=bugtraq&m=103798147613151&w=2 CVE-2002-2380 - http://www.securityfocus.com/bid/6064 @@ -395,9 +382,6 @@ CVE-2003-0106 - http://marc.info/?l=ntbugtraq&m=104868285106289&w=2 CVE-2003-0107 - http://marc.info/?l=bugtraq&m=104610337726297&w=2 CVE-2003-0109 - http://marc.info/?l=bugtraq&m=104861839130254&w=2 CVE-2003-0121 - http://marc.info/?l=bugtraq&m=104716030503607&w=2 -CVE-2003-0128 - http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 -CVE-2003-0129 - http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 -CVE-2003-0130 - http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 CVE-2003-0132 - http://marc.info/?l=bugtraq&m=104982175321731&w=2 CVE-2003-0132 - http://marc.info/?l=bugtraq&m=104994309010974&w=2 CVE-2003-0132 - http://marc.info/?l=bugtraq&m=105001663120995&w=2 @@ -444,7 +428,6 @@ CVE-2003-0476 - http://marc.info/?l=bugtraq&m=105664924024009&w=2 CVE-2003-0485 - http://marc.info/?l=bugtraq&m=105613243117155&w=2 CVE-2003-0501 - http://marc.info/?l=bugtraq&m=105621758104242 CVE-2003-0501 - http://www.redhat.com/support/errata/RHSA-2003-239.html -CVE-2003-0504 - http://www.security-corporation.com/articles-20030702-005.html CVE-2003-0508 - http://marc.info/?l=bugtraq&m=105709569312583&w=2 CVE-2003-0508 - http://marc.info/?l=bugtraq&m=105785749721291&w=2 CVE-2003-0509 - http://marc.info/?l=bugtraq&m=105709450711395&w=2 @@ -498,7 +481,6 @@ CVE-2003-0735 - http://marc.info/?l=bugtraq&m=106062021711496&w=2 CVE-2003-0736 - http://marc.info/?l=bugtraq&m=106062021711496&w=2 CVE-2003-0737 - http://marc.info/?l=bugtraq&m=106062021711496&w=2 CVE-2003-0738 - http://marc.info/?l=bugtraq&m=106062021711496&w=2 -CVE-2003-0739 - http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1106 CVE-2003-0740 - http://marc.info/?l=bugtraq&m=106260760211958&w=2 CVE-2003-0746 - http://www.kb.cert.org/vuls/id/377804 CVE-2003-0758 - http://www.coresecurity.com/common/showdoc.php?idx=366&idxseccion=10 @@ -737,9 +719,7 @@ CVE-2004-0574 - https://docs.microsoft.com/en-us/security-updates/securitybullet CVE-2004-0575 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-034 CVE-2004-0589 - http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml CVE-2004-0594 - http://marc.info/?l=bugtraq&m=108981780109154&w=2 -CVE-2004-0594 - http://www.novell.com/linux/security/advisories/2004_21_php4.html CVE-2004-0595 - http://marc.info/?l=bugtraq&m=108981780109154&w=2 -CVE-2004-0595 - http://www.novell.com/linux/security/advisories/2004_21_php4.html CVE-2004-0597 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-009 CVE-2004-0600 - http://marc.info/?l=bugtraq&m=109053195818351&w=2 CVE-2004-0605 - http://marc.info/?l=bugtraq&m=108766803817406&w=2 @@ -1122,7 +1102,6 @@ CVE-2004-2057 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 CVE-2004-2058 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 CVE-2004-2059 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 CVE-2004-2060 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 -CVE-2004-2067 - http://www.jaws.com.mx/index.php?gadget=blog&action=single_view&id=10 CVE-2004-2077 - http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml CVE-2004-2099 - http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt CVE-2004-2099 - http://marc.info/?l=bugtraq&m=107479094508691&w=2 @@ -1144,7 +1123,6 @@ CVE-2004-2300 - http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt CVE-2004-2360 - http://aluigi.altervista.org/adv/battlemages-adv.txt CVE-2004-2361 - http://aluigi.altervista.org/adv/hgmcrash-adv.txt CVE-2004-2361 - http://marc.info/?l=bugtraq&m=107764783411414&w=2 -CVE-2004-2366 - http://www.cuteftp.com/gsftps/history.asp CVE-2004-2371 - http://aluigi.altervista.org/adv/grboom-adv.txt CVE-2004-2432 - http://www.packetstormsecurity.org/0406-exploits/WinAgentsTFTP.txt CVE-2004-2449 - http://aluigi.altervista.org/adv/wilco-again-adv.txt @@ -1176,7 +1154,6 @@ CVE-2004-2685 - https://www.exploit-db.com/exploits/621 CVE-2004-2695 - http://www.vbulletin.com/forum/bugs.php?do=view&bugid=3379 CVE-2004-2719 - https://www.exploit-db.com/exploits/164 CVE-2004-2720 - http://securityreason.com/securityalert/3200 -CVE-2004-2720 - http://www.sec-tec.co.uk/vulnerability/snitzxss.html CVE-2004-2721 - http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549 CVE-2004-2738 - http://marc.info/?l=bugtraq&m=110391024404947&w=2 CVE-2004-2754 - http://securityreason.com/securityalert/3371 @@ -1525,8 +1502,6 @@ CVE-2005-1192 - http://securityreason.com/securityalert/262 CVE-2005-1193 - http://www.kb.cert.org/vuls/id/113196 CVE-2005-1194 - http://www.redhat.com/support/errata/RHSA-2005-381.html CVE-2005-1199 - http://marc.info/?l=bugtraq&m=111393619021575&w=2 -CVE-2005-1202 - http://sourceforge.net/project/shownotes.php?release_id=320768 -CVE-2005-1203 - http://sourceforge.net/project/shownotes.php?release_id=320768 CVE-2005-1205 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-033 CVE-2005-1206 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-027 CVE-2005-1207 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-028 @@ -1573,7 +1548,6 @@ CVE-2005-1366 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-011.txt CVE-2005-1367 - http://marc.info/?l=full-disclosure&m=111625623909003&w=2 CVE-2005-1367 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt CVE-2005-1384 - http://marc.info/?l=bugtraq&m=111473522804665&w=2 -CVE-2005-1384 - http://pridels0.blogspot.com/2006/03/phpcoin-poc.html CVE-2005-1393 - http://marc.info/?l=full-disclosure&m=111489411524630&w=2 CVE-2005-1393 - http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt CVE-2005-1394 - http://marc.info/?l=full-disclosure&m=111489411524630&w=2 @@ -1581,7 +1555,6 @@ CVE-2005-1394 - http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt CVE-2005-1398 - http://lostmon.blogspot.com/2005/04/phpcart-price-manipulation.html CVE-2005-1401 - http://aluigi.altervista.org/adv/mtpbugs-adv.txt CVE-2005-1402 - http://aluigi.altervista.org/adv/mtpbugs-adv.txt -CVE-2005-1415 - http://www.cuteftp.com/gsftps/history.asp CVE-2005-1425 - https://www.exploit-db.com/exploits/8609 CVE-2005-1426 - https://www.exploit-db.com/exploits/8610 CVE-2005-1440 - http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html @@ -1664,8 +1637,6 @@ CVE-2005-1702 - http://aluigi.altervista.org/adv/warkings-adv.txt CVE-2005-1702 - http://marc.info/?l=bugtraq&m=111686776303832&w=2 CVE-2005-1703 - http://aluigi.altervista.org/adv/warkings-adv.txt CVE-2005-1703 - http://marc.info/?l=bugtraq&m=111686776303832&w=2 -CVE-2005-1712 - http://sourceforge.net/project/shownotes.php?release_id=328092 -CVE-2005-1713 - http://sourceforge.net/project/shownotes.php?release_id=328092 CVE-2005-1718 - http://aluigi.altervista.org/adv/wartimesboom-adv.txt CVE-2005-1741 - http://aluigi.altervista.org/adv/haloloop-adv.txt CVE-2005-1752 - http://marc.info/?l=bugtraq&m=111695779919830&w=2 @@ -1799,7 +1770,6 @@ CVE-2005-2154 - http://seclists.org/lists/bugtraq/2005/Jul/0009.html CVE-2005-2159 - http://marc.info/?l=bugtraq&m=112051398718830&w=2 CVE-2005-2160 - http://marc.info/?l=bugtraq&m=112060187204457&w=2 CVE-2005-2163 - http://marc.info/?l=bugtraq&m=112059745606348&w=2 -CVE-2005-2177 - http://www.vmware.com/download/esx/esx-254-200610-patch.html CVE-2005-2178 - http://marc.info/?l=bugtraq&m=112059815028059&w=2 CVE-2005-2179 - http://marc.info/?l=bugtraq&m=112067013827970&w=2 CVE-2005-2180 - http://marc.info/?l=bugtraq&m=112066901231154&w=2 @@ -2001,7 +1971,6 @@ CVE-2005-2991 - http://securityreason.com/securityalert/12 CVE-2005-2992 - http://securityreason.com/securityalert/11 CVE-2005-2993 - http://securityreason.com/securityalert/360 CVE-2005-3010 - http://securityreason.com/securityalert/14 -CVE-2005-3011 - http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html CVE-2005-3026 - http://marc.info/?l=bugtraq&m=112714879101323&w=2 CVE-2005-3026 - http://marc.info/?l=bugtraq&m=112716394925851&w=2 CVE-2005-3026 - http://securityreason.com/securityalert/13 @@ -2048,7 +2017,6 @@ CVE-2005-3156 - http://marc.info/?l=bugtraq&m=112812059917394&w=2 CVE-2005-3157 - http://marc.info/?l=bugtraq&m=112793982604963&w=2 CVE-2005-3158 - http://marc.info/?l=bugtraq&m=112801702000944&w=2 CVE-2005-3161 - http://securityreason.com/securityalert/54 -CVE-2005-3177 - http://support.microsoft.com/kb/831374 CVE-2005-3178 - http://marc.info/?l=bugtraq&m=112862493918840&w=2 CVE-2005-3178 - http://www.redhat.com/support/errata/RHSA-2005-802.html CVE-2005-3180 - http://www.redhat.com/support/errata/RHSA-2005-808.html @@ -2265,7 +2233,6 @@ CVE-2005-3857 - http://www.securityfocus.com/archive/1/427981/100/0/threaded CVE-2005-3857 - http://www.securityfocus.com/archive/1/428028/100/0/threaded CVE-2005-3859 - http://securityreason.com/securityalert/209 CVE-2005-3861 - http://securityreason.com/securityalert/210 -CVE-2005-3867 - http://pridels0.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html CVE-2005-3886 - http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml CVE-2005-3887 - http://marc.info/?l=bugtraq&m=113261573023912&w=2 CVE-2005-3888 - http://marc.info/?l=bugtraq&m=113261573023912&w=2 @@ -2274,7 +2241,6 @@ CVE-2005-3890 - http://marc.info/?l=bugtraq&m=113261573023912&w=2 CVE-2005-3891 - http://marc.info/?l=bugtraq&m=113261573023912&w=2 CVE-2005-3892 - http://marc.info/?l=bugtraq&m=113261573023912&w=2 CVE-2005-3903 - http://securityreason.com/securityalert/251 -CVE-2005-3915 - http://www.clavister.com/support/support_update_ISAKMP.html CVE-2005-3919 - http://securityreason.com/securityalert/211 CVE-2005-3921 - http://securityreason.com/securityalert/227 CVE-2005-3921 - http://www.cisco.com/warp/public/707/cisco-sa-20051201-http.shtml @@ -2286,7 +2252,6 @@ CVE-2005-3931 - http://securityreason.com/securityalert/218 CVE-2005-3949 - http://securityreason.com/securityalert/215 CVE-2005-3952 - https://www.exploit-db.com/exploits/3456 CVE-2005-3961 - http://securityreason.com/securityalert/215 -CVE-2005-3967 - http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html CVE-2005-3991 - http://securityreason.com/securityalert/221 CVE-2005-3992 - http://securityreason.com/securityalert/226 CVE-2005-4005 - http://securityreason.com/securityalert/31 @@ -2337,13 +2302,10 @@ CVE-2005-4332 - http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA CVE-2005-4349 - http://marc.info/?l=bugtraq&m=113486637512821&w=2 CVE-2005-4349 - http://securityreason.com/securityalert/270 CVE-2005-4351 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt -CVE-2005-4351 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt -CVE-2005-4352 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt CVE-2005-4357 - http://securityreason.com/securityalert/269 CVE-2005-4358 - http://securityreason.com/securityalert/269 CVE-2005-4360 - http://securityreason.com/securityalert/271 CVE-2005-4360 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041 -CVE-2005-4398 - http://pridels0.blogspot.com/2005/12/lemoon-xss-vuln.html CVE-2005-4402 - http://marc.info/?l=full-disclosure&m=113502692010867&w=2 CVE-2005-4411 - https://www.exploit-db.com/exploits/1375 CVE-2005-4415 - http://packetstormsecurity.org/0512-exploits/ztml.txt @@ -2362,8 +2324,6 @@ CVE-2005-4463 - http://echo.or.id/adv/adv24-theday-2005.txt CVE-2005-4463 - http://securityreason.com/securityalert/286 CVE-2005-4466 - http://securityreason.com/securityalert/281 CVE-2005-4466 - http://www.hat-squad.com/en/000171.html -CVE-2005-4494 - http://pridels0.blogspot.com/2005/12/spip-xss-vuln.html -CVE-2005-4496 - http://pridels0.blogspot.com/2005/12/syntaxcms-xss-vuln.html CVE-2005-4504 - http://security-protocols.com/advisory/sp-x22-advisory.txt CVE-2005-4506 - http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt CVE-2005-4507 - http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt @@ -2395,13 +2355,8 @@ CVE-2005-4550 - http://marc.info/?l=full-disclosure&m=113532633229270&w=2 CVE-2005-4550 - http://securityreason.com/securityalert/297 CVE-2005-4563 - http://securityreason.com/securityalert/278 CVE-2005-4573 - http://securityreason.com/securityalert/273 -CVE-2005-4574 - http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html -CVE-2005-4575 - http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html -CVE-2005-4576 - http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html CVE-2005-4584 - http://aluigi.altervista.org/adv/bzflagboom-adv.txt CVE-2005-4593 - http://securityreason.com/securityalert/303 -CVE-2005-4596 - http://pridels0.blogspot.com/2005/12/adesguestbook-xss-vuln.html -CVE-2005-4598 - http://pridels0.blogspot.com/2005/12/ooapp-guestbook-xss-vuln.html CVE-2005-4600 - http://securityreason.com/securityalert/306 CVE-2005-4600 - https://www.exploit-db.com/exploits/4441 CVE-2005-4601 - http://www.ubuntu.com/usn/usn-246-1 @@ -2409,11 +2364,6 @@ CVE-2005-4602 - http://securityreason.com/securityalert/311 CVE-2005-4603 - http://securityreason.com/securityalert/310 CVE-2005-4605 - http://www.securityfocus.com/archive/1/427981/100/0/threaded CVE-2005-4606 - http://securityreason.com/securityalert/305 -CVE-2005-4607 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html -CVE-2005-4608 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html -CVE-2005-4609 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html -CVE-2005-4637 - http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html -CVE-2005-4638 - http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html CVE-2005-4659 - http://sourceforge.net/tracker/index.php?func=detail&aid=1344032&group_id=40604&atid=428516 CVE-2005-4668 - http://securityreason.com/securityalert/147 CVE-2005-4681 - http://seclists.org/lists/bugtraq/2005/Dec/0263.html @@ -2508,7 +2458,6 @@ CVE-2006-0065 - http://evuln.com/vulns/1/summary.html CVE-2006-0065 - http://securityreason.com/securityalert/315 CVE-2006-0066 - http://evuln.com/vulns/9/summary.html CVE-2006-0067 - http://evuln.com/vulns/2/summary.html -CVE-2006-0068 - http://pridels0.blogspot.com/2006/01/primo-cart-sql-inj.html CVE-2006-0069 - http://evuln.com/vulns/4/summary.html CVE-2006-0074 - http://evuln.com/vulns/5/summary.html CVE-2006-0074 - https://www.exploit-db.com/exploits/8706 @@ -2912,7 +2861,6 @@ CVE-2006-1042 - http://securityreason.com/securityalert/537 CVE-2006-1045 - http://securityreason.com/securityalert/514 CVE-2006-1045 - http://www.redhat.com/support/errata/RHSA-2006-0330.html CVE-2006-1046 - http://aluigi.altervista.org/adv/monopdx-adv.txt -CVE-2006-1056 - http://www.vmware.com/download/esx/esx-254-200610-patch.html CVE-2006-1073 - http://securityreason.com/securityalert/542 CVE-2006-1074 - http://aluigi.altervista.org/adv/lieroxxx-adv.txt CVE-2006-1075 - http://aluigi.altervista.org/adv/lieroxxx-adv.txt @@ -2928,9 +2876,7 @@ CVE-2006-1081 - http://securityreason.com/securityalert/536 CVE-2006-1082 - http://securityreason.com/securityalert/533 CVE-2006-1091 - http://securityreason.com/securityalert/535 CVE-2006-1094 - http://www.nukedx.com/?viewdoc=17 -CVE-2006-1096 - http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html CVE-2006-1097 - http://www.nukedx.com/?viewdoc=17 -CVE-2006-1098 - http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html CVE-2006-1100 - http://aluigi.altervista.org/adv/evilcube-adv.txt CVE-2006-1101 - http://aluigi.altervista.org/adv/evilcube-adv.txt CVE-2006-1102 - http://aluigi.altervista.org/adv/evilcube-adv.txt @@ -3052,8 +2998,6 @@ CVE-2006-1334 - http://evuln.com/vulns/101/summary.html CVE-2006-1334 - http://securityreason.com/securityalert/638 CVE-2006-1341 - http://evuln.com/vulns/102/description.html CVE-2006-1341 - http://securityreason.com/securityalert/646 -CVE-2006-1342 - http://www.vmware.com/download/esx/esx-254-200610-patch.html -CVE-2006-1343 - http://www.vmware.com/download/esx/esx-254-200610-patch.html CVE-2006-1346 - https://www.exploit-db.com/exploits/1595 CVE-2006-1347 - https://www.exploit-db.com/exploits/1595 CVE-2006-1348 - https://www.exploit-db.com/exploits/1595 @@ -3079,8 +3023,6 @@ CVE-2006-1457 - http://www.kb.cert.org/vuls/id/519473 CVE-2006-1478 - http://securityreason.com/securityalert/641 CVE-2006-1480 - https://www.exploit-db.com/exploits/1608 CVE-2006-1481 - https://www.exploit-db.com/exploits/1609 -CVE-2006-1492 - http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html -CVE-2006-1493 - http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html CVE-2006-1495 - https://www.exploit-db.com/exploits/1617 CVE-2006-1499 - http://evuln.com/vulns/108/summary.html CVE-2006-1502 - http://securityreason.com/securityalert/532 @@ -3107,7 +3049,6 @@ CVE-2006-1541 - http://www.nukedx.com/?viewdoc=22 CVE-2006-1541 - https://www.exploit-db.com/exploits/1623 CVE-2006-1542 - https://www.exploit-db.com/exploits/1591 CVE-2006-1549 - http://securityreason.com/securityalert/2312 -CVE-2006-1551 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php CVE-2006-1553 - http://evuln.com/vulns/106/description.html CVE-2006-1554 - http://evuln.com/vulns/106/description.html CVE-2006-1555 - http://evuln.com/vulns/106/description.html @@ -3185,7 +3126,6 @@ CVE-2006-1738 - http://www.redhat.com/support/errata/RHSA-2006-0330.html CVE-2006-1739 - http://www.redhat.com/support/errata/RHSA-2006-0330.html CVE-2006-1741 - http://www.redhat.com/support/errata/RHSA-2006-0330.html CVE-2006-1742 - http://www.redhat.com/support/errata/RHSA-2006-0330.html -CVE-2006-1747 - https://www.exploit-db.com/exploits/1658 CVE-2006-1755 - http://evuln.com/vulns/120/summary.html CVE-2006-1756 - http://evuln.com/vulns/120/summary.html CVE-2006-1763 - http://securityreason.com/securityalert/689 @@ -3194,10 +3134,8 @@ CVE-2006-1777 - https://www.exploit-db.com/exploits/1663 CVE-2006-1778 - http://securityreason.com/securityalert/702 CVE-2006-1778 - https://www.exploit-db.com/exploits/1663 CVE-2006-1779 - https://www.exploit-db.com/exploits/1663 -CVE-2006-1781 - http://pridels0.blogspot.com/2006/04/monstertoplist.html CVE-2006-1781 - https://www.exploit-db.com/exploits/3530 CVE-2006-1784 - https://www.exploit-db.com/exploits/1665 -CVE-2006-1789 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php CVE-2006-1790 - http://www.redhat.com/support/errata/RHSA-2006-0330.html CVE-2006-1798 - http://evuln.com/vulns/124/summary.html CVE-2006-1799 - https://www.exploit-db.com/exploits/1669 @@ -3212,16 +3150,13 @@ CVE-2006-1832 - https://www.exploit-db.com/exploits/1677 CVE-2006-1834 - http://marc.info/?l=full-disclosure&m=114493114031891&w=2 CVE-2006-1837 - https://www.exploit-db.com/exploits/1682 CVE-2006-1838 - https://www.exploit-db.com/exploits/1682 -CVE-2006-1864 - http://www.vmware.com/download/esx/esx-254-200610-patch.html CVE-2006-1888 - http://securityreason.com/securityalert/733 CVE-2006-1891 - http://securityreason.com/securityalert/765 CVE-2006-1917 - https://www.exploit-db.com/exploits/1683 CVE-2006-1919 - https://www.exploit-db.com/exploits/1694 CVE-2006-1921 - https://www.exploit-db.com/exploits/1695 -CVE-2006-1922 - http://pridels0.blogspot.com/2006/04/totalcalendar-remote-code-execution.html CVE-2006-1927 - http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml CVE-2006-1928 - http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml -CVE-2006-1929 - http://pridels0.blogspot.com/2006/04/i-rater-platinum-remote-file-inclusion.html CVE-2006-1942 - http://www.networksecurity.fi/advisories/netscape-view-image.html CVE-2006-1942 - http://www.securityfocus.com/archive/1/431267/100/0/threaded CVE-2006-1942 - http://www.securityfocus.com/archive/1/446658/100/200/threaded @@ -3283,7 +3218,6 @@ CVE-2006-2061 - http://securityreason.com/securityalert/796 CVE-2006-2066 - http://www.nukedx.com/?viewdoc=26 CVE-2006-2067 - http://www.nukedx.com/?viewdoc=26 CVE-2006-2070 - http://securityreason.com/securityalert/800 -CVE-2006-2071 - http://www.vmware.com/download/esx/esx-254-200610-patch.html CVE-2006-2081 - http://securityreason.com/securityalert/802 CVE-2006-2081 - http://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.html CVE-2006-2084 - http://securityreason.com/securityalert/812 @@ -3339,8 +3273,6 @@ CVE-2006-2167 - http://securityreason.com/securityalert/831 CVE-2006-2174 - http://securityreason.com/securityalert/832 CVE-2006-2175 - https://www.exploit-db.com/exploits/1740 CVE-2006-2177 - http://securityreason.com/securityalert/833 -CVE-2006-2181 - http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html -CVE-2006-2182 - http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html CVE-2006-2186 - http://securityreason.com/securityalert/834 CVE-2006-2189 - http://securityreason.com/securityalert/836 CVE-2006-2194 - http://www.ubuntu.com/usn/usn-310-1 @@ -3358,7 +3290,6 @@ CVE-2006-2236 - https://www.exploit-db.com/exploits/1750 CVE-2006-2238 - http://www.security-protocols.com/sp-x27-advisory.php CVE-2006-2239 - http://evuln.com/vulns/133/summary.html CVE-2006-2242 - https://www.exploit-db.com/exploits/1749 -CVE-2006-2245 - http://pridels0.blogspot.com/2006/05/phpbb-auction-mod-remote-file.html CVE-2006-2249 - http://securityreason.com/securityalert/860 CVE-2006-2250 - http://securityreason.com/securityalert/860 CVE-2006-2253 - https://www.exploit-db.com/exploits/1752 @@ -3369,7 +3300,6 @@ CVE-2006-2268 - https://www.exploit-db.com/exploits/7622 CVE-2006-2276 - http://www.redhat.com/support/errata/RHSA-2006-0525.html CVE-2006-2284 - https://www.exploit-db.com/exploits/1766 CVE-2006-2297 - http://securityreason.com/securityalert/886 -CVE-2006-2315 - https://www.exploit-db.com/exploits/1762 CVE-2006-2322 - http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtml CVE-2006-2323 - http://securityreason.com/securityalert/156 CVE-2006-2324 - http://secdev.zoller.lu/research/zango.htm @@ -3405,7 +3335,6 @@ CVE-2006-2389 - https://docs.microsoft.com/en-us/security-updates/securitybullet CVE-2006-2392 - https://www.exploit-db.com/exploits/1779 CVE-2006-2393 - http://aluigi.altervista.org/adv/empiredos-adv.txt CVE-2006-2393 - http://securityreason.com/securityalert/896 -CVE-2006-2395 - http://pridels0.blogspot.com/2006/05/popphoto-remote-file-inclusion-vuln.html CVE-2006-2399 - http://aluigi.altervista.org/adv/outgunx-adv.txt CVE-2006-2399 - http://securityreason.com/securityalert/898 CVE-2006-2400 - http://aluigi.altervista.org/adv/outgunx-adv.txt @@ -3451,9 +3380,6 @@ CVE-2006-2521 - https://www.exploit-db.com/exploits/1808 CVE-2006-2523 - https://www.exploit-db.com/exploits/1805 CVE-2006-2541 - https://www.exploit-db.com/exploits/1807 CVE-2006-2548 - http://securityreason.com/securityalert/942 -CVE-2006-2548 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-002.php -CVE-2006-2548 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php -CVE-2006-2550 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php CVE-2006-2554 - http://aluigi.altervista.org/adv/genecysbof-adv.txt CVE-2006-2554 - http://securityreason.com/securityalert/944 CVE-2006-2555 - http://aluigi.altervista.org/adv/genecysbof-adv.txt @@ -3564,7 +3490,6 @@ CVE-2006-2847 - https://www.exploit-db.com/exploits/1859 CVE-2006-2848 - https://www.exploit-db.com/exploits/1859 CVE-2006-2849 - https://www.exploit-db.com/exploits/1860 CVE-2006-2860 - https://www.exploit-db.com/exploits/1871 -CVE-2006-2861 - http://pridels0.blogspot.com/2006/06/particle-wiki-sql-inj.html CVE-2006-2863 - https://www.exploit-db.com/exploits/1872 CVE-2006-2864 - https://www.exploit-db.com/exploits/1870 CVE-2006-2866 - http://securityreason.com/securityalert/1053 @@ -3593,23 +3518,10 @@ CVE-2006-2899 - http://securityreason.com/securityalert/1063 CVE-2006-2900 - http://securityreason.com/securityalert/1059 CVE-2006-2928 - http://securityreason.com/securityalert/1068 CVE-2006-2929 - https://www.exploit-db.com/exploits/1886 -CVE-2006-2936 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html CVE-2006-2937 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml CVE-2006-2937 - http://www.ubuntu.com/usn/usn-353-1 -CVE-2006-2937 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -CVE-2006-2937 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2006-2937 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2006-2937 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2006-2937 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2006-2937 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2006-2940 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml CVE-2006-2940 - http://www.ubuntu.com/usn/usn-353-1 -CVE-2006-2940 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -CVE-2006-2940 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2006-2940 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2006-2940 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2006-2940 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2006-2940 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2006-2962 - https://www.exploit-db.com/exploits/1895 CVE-2006-2965 - http://securityreason.com/securityalert/1071 CVE-2006-2966 - http://securityreason.com/securityalert/1070 @@ -3676,7 +3588,6 @@ CVE-2006-3200 - http://securityreason.com/securityalert/1132 CVE-2006-3211 - http://securityreason.com/securityalert/1141 CVE-2006-3221 - https://www.exploit-db.com/exploits/1938 CVE-2006-3221 - https://www.exploit-db.com/exploits/1939 -CVE-2006-3222 - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html CVE-2006-3226 - http://securityreason.com/securityalert/1157 CVE-2006-3228 - https://www.exploit-db.com/exploits/1935 CVE-2006-3252 - http://securityreason.com/securityalert/1152 @@ -3704,7 +3615,6 @@ CVE-2006-3289 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml CVE-2006-3290 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml CVE-2006-3291 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-ap.shtml CVE-2006-3294 - https://www.exploit-db.com/exploits/1955 -CVE-2006-3298 - http://www.security.nnov.ru/Gnews281.html CVE-2006-3299 - http://securityreason.com/securityalert/1170 CVE-2006-3300 - https://www.exploit-db.com/exploits/1948 CVE-2006-3304 - https://www.exploit-db.com/exploits/1953 @@ -3769,7 +3679,6 @@ CVE-2006-3450 - https://docs.microsoft.com/en-us/security-updates/securitybullet CVE-2006-3451 - http://securityreason.com/securityalert/1343 CVE-2006-3451 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 CVE-2006-3459 - http://secunia.com/blog/76 -CVE-2006-3467 - http://www.vmware.com/download/esx/esx-254-200610-patch.html CVE-2006-3478 - https://www.exploit-db.com/exploits/1983 CVE-2006-3479 - http://securityreason.com/securityalert/1205 CVE-2006-3491 - http://aluigi.altervista.org/adv/kailleraex-adv.txt @@ -3807,7 +3716,6 @@ CVE-2006-3583 - http://securityreason.com/securityalert/1339 CVE-2006-3584 - http://securityreason.com/securityalert/1339 CVE-2006-3585 - http://securityreason.com/securityalert/1339 CVE-2006-3586 - http://securityreason.com/securityalert/1339 -CVE-2006-3589 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html CVE-2006-3590 - http://isc.sans.org/diary.php?storyid=1484 CVE-2006-3590 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048 CVE-2006-3592 - http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml @@ -3856,9 +3764,6 @@ CVE-2006-3735 - https://www.exploit-db.com/exploits/2019 CVE-2006-3736 - https://www.exploit-db.com/exploits/2020 CVE-2006-3738 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml CVE-2006-3738 - http://www.ubuntu.com/usn/usn-353-1 -CVE-2006-3738 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -CVE-2006-3739 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html -CVE-2006-3740 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html CVE-2006-3747 - http://securityreason.com/securityalert/1312 CVE-2006-3748 - https://www.exploit-db.com/exploits/2023 CVE-2006-3749 - http://securityreason.com/securityalert/1249 @@ -3945,7 +3850,6 @@ CVE-2006-3879 - http://securityreason.com/securityalert/1288 CVE-2006-3880 - http://securityreason.com/securityalert/1282 CVE-2006-3883 - http://securityreason.com/securityalert/1287 CVE-2006-3884 - http://securityreason.com/securityalert/1287 -CVE-2006-3885 - http://www.sec-tec.co.uk/vulnerability/r55w_directory_traversal.html CVE-2006-3890 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 CVE-2006-3890 - https://www.exploit-db.com/exploits/2785 CVE-2006-3903 - http://marc.info/?l=bugtraq&m=114791192612460&w=2 @@ -4014,7 +3918,6 @@ CVE-2006-3993 - http://securityreason.com/securityalert/1323 CVE-2006-3993 - https://www.exploit-db.com/exploits/2098 CVE-2006-3994 - https://www.exploit-db.com/exploits/2105 CVE-2006-3995 - https://www.exploit-db.com/exploits/2089 -CVE-2006-3995 - https://www.exploit-db.com/exploits/3553 CVE-2006-3996 - http://securityreason.com/securityalert/1330 CVE-2006-3996 - https://www.exploit-db.com/exploits/2088 CVE-2006-3997 - http://securityreason.com/securityalert/1329 @@ -4048,7 +3951,6 @@ CVE-2006-4033 - http://securityreason.com/securityalert/1351 CVE-2006-4033 - http://vuln.sg/lhaplus152-en.html CVE-2006-4035 - http://securityreason.com/securityalert/1350 CVE-2006-4036 - http://securityreason.com/securityalert/1348 -CVE-2006-4040 - https://www.exploit-db.com/exploits/2093 CVE-2006-4042 - http://securityreason.com/securityalert/1347 CVE-2006-4042 - https://www.exploit-db.com/exploits/2118 CVE-2006-4043 - http://securityreason.com/securityalert/1347 @@ -4237,28 +4139,11 @@ CVE-2006-4325 - http://evuln.com/vulns/134/description.html CVE-2006-4327 - http://evuln.com/vulns/136/description.html CVE-2006-4328 - http://evuln.com/vulns/136/description.html CVE-2006-4329 - https://www.exploit-db.com/exploits/2229 -CVE-2006-4334 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html -CVE-2006-4335 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html -CVE-2006-4336 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html -CVE-2006-4337 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html -CVE-2006-4338 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html CVE-2006-4339 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml CVE-2006-4339 - http://www.redhat.com/support/errata/RHSA-2007-0073.html -CVE-2006-4339 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -CVE-2006-4339 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2006-4339 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2006-4339 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2006-4339 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2006-4339 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2006-4340 - http://www.ubuntu.com/usn/usn-361-1 CVE-2006-4343 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml CVE-2006-4343 - http://www.ubuntu.com/usn/usn-353-1 -CVE-2006-4343 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -CVE-2006-4343 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2006-4343 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2006-4343 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2006-4343 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2006-4343 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2006-4343 - https://www.exploit-db.com/exploits/4773 CVE-2006-4348 - http://securityreason.com/securityalert/1447 CVE-2006-4348 - https://www.exploit-db.com/exploits/2215 @@ -4512,7 +4397,6 @@ CVE-2006-4797 - http://evuln.com/vulns/137/summary.html CVE-2006-4797 - http://securityreason.com/securityalert/1580 CVE-2006-4798 - http://securityreason.com/securityalert/1579 CVE-2006-4801 - http://www.netragard.com/pdfs/research/ROXIO_RACE_NETRAGARD-20060624.txt -CVE-2006-4810 - http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html CVE-2006-4812 - http://securityreason.com/securityalert/1691 CVE-2006-4823 - https://www.exploit-db.com/exploits/2363 CVE-2006-4824 - https://www.exploit-db.com/exploits/2356 @@ -4649,7 +4533,6 @@ CVE-2006-5070 - https://www.exploit-db.com/exploits/2434 CVE-2006-5077 - https://www.exploit-db.com/exploits/2429 CVE-2006-5078 - https://www.exploit-db.com/exploits/2427 CVE-2006-5079 - https://www.exploit-db.com/exploits/2437 -CVE-2006-5083 - https://www.exploit-db.com/exploits/2430 CVE-2006-5084 - http://security-protocols.com/vids/skype_osx_0day.htm CVE-2006-5084 - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3259 CVE-2006-5085 - http://securityreason.com/securityalert/1653 @@ -4927,7 +4810,6 @@ CVE-2006-5596 - https://www.exploit-db.com/exploits/2637 CVE-2006-5597 - https://www.exploit-db.com/exploits/2651 CVE-2006-5599 - http://securityreason.com/securityalert/1792 CVE-2006-5600 - http://securityreason.com/securityalert/1793 -CVE-2006-5606 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-007.php?lang=en CVE-2006-5607 - http://securityreason.com/securityalert/1796 CVE-2006-5609 - http://securityreason.com/securityalert/1797 CVE-2006-5612 - http://securityreason.com/securityalert/1795 @@ -5005,9 +4887,7 @@ CVE-2006-5745 - https://www.exploit-db.com/exploits/2743 CVE-2006-5747 - http://www.ubuntu.com/usn/usn-382-1 CVE-2006-5747 - https://bugzilla.mozilla.org/show_bug.cgi?id=355569 CVE-2006-5748 - http://www.ubuntu.com/usn/usn-382-1 -CVE-2006-5749 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html CVE-2006-5752 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html -CVE-2006-5753 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html CVE-2006-5758 - http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson CVE-2006-5758 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 CVE-2006-5759 - http://securityreason.com/securityalert/1825 @@ -5044,7 +4924,6 @@ CVE-2006-5795 - https://www.exploit-db.com/exploits/2727 CVE-2006-5796 - http://marc.info/?l=bugtraq&m=116283614914510&w=2 CVE-2006-5796 - https://www.exploit-db.com/exploits/2724 CVE-2006-5802 - https://www.exploit-db.com/exploits/2722 -CVE-2006-5803 - https://www.exploit-db.com/exploits/2723 CVE-2006-5804 - http://securityreason.com/securityalert/1833 CVE-2006-5806 - http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml CVE-2006-5807 - http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml @@ -5165,7 +5044,6 @@ CVE-2006-5983 - http://securityreason.com/securityalert/1885 CVE-2006-5984 - http://securityreason.com/securityalert/1884 CVE-2006-5987 - http://securityreason.com/securityalert/1886 CVE-2006-5991 - http://securityreason.com/securityalert/1887 -CVE-2006-5994 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9005698&intsrc=hm_list CVE-2006-5994 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 CVE-2006-6007 - http://securityreason.com/securityalert/1888 CVE-2006-6010 - http://securityreason.com/securityalert/1889 @@ -5208,8 +5086,6 @@ CVE-2006-6088 - http://securityreason.com/securityalert/1912 CVE-2006-6093 - https://www.exploit-db.com/exploits/2817 CVE-2006-6095 - http://marc.info/?l=bugtraq&m=116387481223790&w=2 CVE-2006-6096 - http://marc.info/?l=bugtraq&m=116387481223790&w=2 -CVE-2006-6097 - http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html -CVE-2006-6106 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html CVE-2006-6115 - https://www.exploit-db.com/exploits/2828 CVE-2006-6116 - https://www.exploit-db.com/exploits/2830 CVE-2006-6117 - https://www.exploit-db.com/exploits/2829 @@ -5253,7 +5129,6 @@ CVE-2006-6225 - https://www.exploit-db.com/exploits/1963 CVE-2006-6226 - http://aluigi.altervista.org/adv/neoenginex-adv.txt CVE-2006-6227 - http://aluigi.altervista.org/adv/neoenginex-adv.txt CVE-2006-6235 - http://www.redhat.com/support/errata/RHSA-2006-0754.html -CVE-2006-6236 - https://www.exploit-db.com/exploits/3040 CVE-2006-6237 - https://www.exploit-db.com/exploits/2841 CVE-2006-6242 - https://www.exploit-db.com/exploits/2869 CVE-2006-6243 - http://securityreason.com/securityalert/1959 @@ -5270,7 +5145,6 @@ CVE-2006-6271 - http://securityreason.com/securityalert/1960 CVE-2006-6274 - http://attrition.org/pipermail/vim/2006-November/001147.html CVE-2006-6274 - http://securityreason.com/securityalert/1956 CVE-2006-6285 - http://attrition.org/pipermail/vim/2006-December/001159.html -CVE-2006-6285 - https://www.exploit-db.com/exploits/2868 CVE-2006-6287 - https://www.exploit-db.com/exploits/2873 CVE-2006-6288 - http://www.securityfocus.com/archive/1/485564/100/100/threaded CVE-2006-6288 - https://www.exploit-db.com/exploits/4839 @@ -5318,7 +5192,6 @@ CVE-2006-6456 - https://docs.microsoft.com/en-us/security-updates/securitybullet CVE-2006-6462 - https://www.exploit-db.com/exploits/2897 CVE-2006-6463 - http://securityreason.com/securityalert/2016 CVE-2006-6464 - http://securityreason.com/securityalert/2016 -CVE-2006-6465 - https://www.exploit-db.com/exploits/2875 CVE-2006-6475 - http://securityreason.com/securityalert/2052 CVE-2006-6476 - http://securityreason.com/securityalert/2052 CVE-2006-6477 - http://securityreason.com/securityalert/2052 @@ -5357,7 +5230,6 @@ CVE-2006-6560 - https://www.exploit-db.com/exploits/2921 CVE-2006-6563 - https://www.exploit-db.com/exploits/3330 CVE-2006-6565 - https://www.exploit-db.com/exploits/2914 CVE-2006-6566 - https://www.exploit-db.com/exploits/2904 -CVE-2006-6566 - https://www.exploit-db.com/exploits/2918 CVE-2006-6567 - https://www.exploit-db.com/exploits/2924 CVE-2006-6568 - https://www.exploit-db.com/exploits/2924 CVE-2006-6569 - http://securityreason.com/securityalert/2035 @@ -5407,7 +5279,6 @@ CVE-2006-6690 - http://securityreason.com/securityalert/2056 CVE-2006-6691 - https://www.exploit-db.com/exploits/2964 CVE-2006-6694 - https://www.exploit-db.com/exploits/2556 CVE-2006-6696 - http://isc.sans.org/diary.php?n&storyid=1965 -CVE-2006-6696 - http://www.security.nnov.ru/Gnews944.html CVE-2006-6696 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021 CVE-2006-6697 - http://securityreason.com/securityalert/2057 CVE-2006-6701 - http://www.netragard.com/pdfs/research/ATMAIL-XSRF-ADVISORY-20061206.txt @@ -5538,9 +5409,6 @@ CVE-2006-6951 - http://securityreason.com/securityalert/2173 CVE-2006-6957 - http://securityreason.com/securityalert/2194 CVE-2006-6958 - http://packetstormsecurity.org/0606-exploits/phpbluedragon-2.txt CVE-2006-6958 - http://securityreason.com/securityalert/2193 -CVE-2006-6959 - http://www.sentinel.gr/advisories/SGA-0001.txt -CVE-2006-6960 - http://www.sentinel.gr/advisories/SGA-0001.txt -CVE-2006-6961 - http://www.sentinel.gr/advisories/SGA-0001.txt CVE-2006-6962 - https://www.exploit-db.com/exploits/1959 CVE-2006-6963 - http://securityreason.com/securityalert/2188 CVE-2006-6976 - https://www.exploit-db.com/exploits/2555 @@ -5622,7 +5490,6 @@ CVE-2006-7183 - https://www.exploit-db.com/exploits/2850 CVE-2006-7185 - https://www.exploit-db.com/exploits/2766 CVE-2006-7186 - http://www.bantychick.com/live/?action=forum&board=shootbreeze&op=display&num=19&start=15 CVE-2006-7192 - http://securityreason.com/securityalert/2530 -CVE-2006-7192 - http://www.cpni.gov.uk/docs/re-20061020-00710.pdf CVE-2006-7194 - http://marc.info/?l=bugtraq&m=116283849004075&w=2 CVE-2006-7194 - https://www.exploit-db.com/exploits/2726 CVE-2006-7195 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx @@ -5632,7 +5499,6 @@ CVE-2006-7210 - https://www.exploit-db.com/exploits/2194 CVE-2006-7210 - https://www.exploit-db.com/exploits/2204 CVE-2006-7210 - https://www.exploit-db.com/exploits/2210 CVE-2006-7228 - http://www.redhat.com/support/errata/RHSA-2008-0546.html -CVE-2006-7233 - http://www.igniterealtime.org/issues/browse/JM-629 CVE-2006-7234 - https://bugzilla.redhat.com/show_bug.cgi?id=214205 CVE-2007-0008 - http://www.redhat.com/support/errata/RHSA-2007-0108.html CVE-2007-0009 - http://www.redhat.com/support/errata/RHSA-2007-0108.html @@ -5680,24 +5546,6 @@ CVE-2007-0057 - http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAcce CVE-2007-0058 - http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml CVE-2007-0059 - http://www.gnucitizen.org/blog/backdooring-quicktime-movies/ CVE-2007-0059 - http://www.kb.cert.org/vuls/id/304064 -CVE-2007-0061 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-0061 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-0061 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-0061 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-0061 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-0061 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2007-0062 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-0062 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-0062 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-0062 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-0062 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-0062 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2007-0063 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-0063 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-0063 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-0063 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-0063 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-0063 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2007-0064 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068 CVE-2007-0065 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008 CVE-2007-0066 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001 @@ -5846,7 +5694,6 @@ CVE-2007-0339 - http://securityreason.com/securityalert/2154 CVE-2007-0340 - https://www.exploit-db.com/exploits/3124 CVE-2007-0342 - http://security-protocols.com/sp-x41-advisory.php CVE-2007-0344 - https://www.exploit-db.com/exploits/3139 -CVE-2007-0345 - https://www.exploit-db.com/exploits/3136 CVE-2007-0347 - http://securityreason.com/securityalert/2192 CVE-2007-0352 - http://securityreason.com/securityalert/2156 CVE-2007-0352 - https://www.exploit-db.com/exploits/3149 @@ -6182,7 +6029,6 @@ CVE-2007-1065 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplican CVE-2007-1066 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml CVE-2007-1067 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml CVE-2007-1068 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml -CVE-2007-1069 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 CVE-2007-1071 - http://security-protocols.com/sp-x39-advisory.php CVE-2007-1072 - http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml CVE-2007-1072 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml @@ -6295,7 +6141,6 @@ CVE-2007-1331 - http://securityreason.com/securityalert/2385 CVE-2007-1331 - http://www.scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt CVE-2007-1332 - http://securityreason.com/securityalert/2385 CVE-2007-1332 - http://www.scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt -CVE-2007-1337 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 CVE-2007-1339 - https://www.exploit-db.com/exploits/3416 CVE-2007-1340 - https://www.exploit-db.com/exploits/3406 CVE-2007-1342 - http://securityreason.com/securityalert/2396 @@ -6304,7 +6149,6 @@ CVE-2007-1347 - https://www.exploit-db.com/exploits/3419 CVE-2007-1350 - http://securityreason.com/securityalert/2395 CVE-2007-1355 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx CVE-2007-1355 - http://securityreason.com/securityalert/2722 -CVE-2007-1357 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html CVE-2007-1358 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx CVE-2007-1371 - http://securityreason.com/securityalert/2399 CVE-2007-1371 - http://www.radscan.com/conquest/cq-ml/msg00169.html @@ -6412,11 +6256,9 @@ CVE-2007-1571 - https://www.exploit-db.com/exploits/3471 CVE-2007-1577 - https://www.exploit-db.com/exploits/3522 CVE-2007-1578 - https://www.exploit-db.com/exploits/3527 CVE-2007-1579 - https://www.exploit-db.com/exploits/3537 -CVE-2007-1580 - https://www.exploit-db.com/exploits/3523 CVE-2007-1581 - https://www.exploit-db.com/exploits/3529 CVE-2007-1582 - https://www.exploit-db.com/exploits/3525 CVE-2007-1584 - https://www.exploit-db.com/exploits/3517 -CVE-2007-1592 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html CVE-2007-1594 - http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html CVE-2007-1596 - https://www.exploit-db.com/exploits/3539 CVE-2007-1600 - https://www.exploit-db.com/exploits/3533 @@ -6445,7 +6287,6 @@ CVE-2007-1646 - http://securityreason.com/securityalert/2475 CVE-2007-1647 - https://www.exploit-db.com/exploits/3508 CVE-2007-1648 - https://www.exploit-db.com/exploits/3547 CVE-2007-1658 - http://isc.sans.org/diary.html?storyid=2507 -CVE-2007-1658 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9014194 CVE-2007-1658 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034 CVE-2007-1660 - http://www.redhat.com/support/errata/RHSA-2008-0546.html CVE-2007-1669 - http://securityreason.com/securityalert/2680 @@ -6470,7 +6311,6 @@ CVE-2007-1707 - https://www.exploit-db.com/exploits/3562 CVE-2007-1708 - https://www.exploit-db.com/exploits/3563 CVE-2007-1709 - http://securityreason.com/securityalert/2512 CVE-2007-1709 - https://www.exploit-db.com/exploits/3576 -CVE-2007-1710 - https://www.exploit-db.com/exploits/3573 CVE-2007-1712 - https://www.exploit-db.com/exploits/3551 CVE-2007-1714 - http://securityreason.com/securityalert/2481 CVE-2007-1715 - https://www.exploit-db.com/exploits/3568 @@ -6493,7 +6333,6 @@ CVE-2007-1735 - http://securityreason.com/securityalert/2489 CVE-2007-1735 - https://www.exploit-db.com/exploits/3593 CVE-2007-1736 - http://securityreason.com/securityalert/2488 CVE-2007-1737 - http://securityreason.com/securityalert/2488 -CVE-2007-1744 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 CVE-2007-1747 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-025 CVE-2007-1749 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-050 CVE-2007-1750 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 @@ -6553,8 +6392,6 @@ CVE-2007-1866 - http://securityreason.com/securityalert/2518 CVE-2007-1867 - https://www.exploit-db.com/exploits/3648 CVE-2007-1871 - http://securityreason.com/securityalert/2569 CVE-2007-1872 - http://securityreason.com/securityalert/2568 -CVE-2007-1876 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 -CVE-2007-1877 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 CVE-2007-1878 - http://securityreason.com/securityalert/2525 CVE-2007-1878 - http://www.gnucitizen.org/blog/firebug-goes-evil CVE-2007-1882 - http://securityreason.com/securityalert/2527 @@ -6595,8 +6432,6 @@ CVE-2007-1931 - https://www.exploit-db.com/exploits/3679 CVE-2007-1932 - https://www.exploit-db.com/exploits/3687 CVE-2007-1933 - https://www.exploit-db.com/exploits/3689 CVE-2007-1934 - https://www.exploit-db.com/exploits/3683 -CVE-2007-1935 - https://www.exploit-db.com/exploits/3682 -CVE-2007-1936 - https://www.exploit-db.com/exploits/3682 CVE-2007-1937 - https://www.exploit-db.com/exploits/3681 CVE-2007-1942 - http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html CVE-2007-1942 - http://securityreason.com/securityalert/2558 @@ -6627,7 +6462,6 @@ CVE-2007-1974 - https://www.exploit-db.com/exploits/3644 CVE-2007-1974 - https://www.exploit-db.com/exploits/3645 CVE-2007-1974 - https://www.exploit-db.com/exploits/3646 CVE-2007-1975 - http://securityreason.com/securityalert/2567 -CVE-2007-1976 - https://www.exploit-db.com/exploits/3642 CVE-2007-1978 - https://www.exploit-db.com/exploits/3640 CVE-2007-1979 - https://www.exploit-db.com/exploits/3655 CVE-2007-1980 - https://www.exploit-db.com/exploits/3639 @@ -6655,8 +6489,6 @@ CVE-2007-2009 - https://www.exploit-db.com/exploits/3705 CVE-2007-2011 - http://securityreason.com/securityalert/2556 CVE-2007-2015 - http://securityreason.com/securityalert/2553 CVE-2007-2016 - http://securityreason.com/securityalert/2560 -CVE-2007-2017 - http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html -CVE-2007-2018 - http://pridels0.blogspot.com/2007/03/alstrasoft-video-share-enterprise.html CVE-2007-2019 - http://securityreason.com/securityalert/2566 CVE-2007-2020 - http://securityreason.com/securityalert/2561 CVE-2007-2021 - http://securityreason.com/securityalert/2565 @@ -7022,7 +6854,6 @@ CVE-2007-2597 - https://www.exploit-db.com/exploits/3885 CVE-2007-2598 - https://www.exploit-db.com/exploits/3886 CVE-2007-2599 - https://www.exploit-db.com/exploits/3887 CVE-2007-2600 - https://www.exploit-db.com/exploits/3887 -CVE-2007-2601 - https://www.exploit-db.com/exploits/3889 CVE-2007-2602 - http://securityreason.com/securityalert/2708 CVE-2007-2603 - http://securityreason.com/securityalert/2708 CVE-2007-2604 - http://securityreason.com/securityalert/2708 @@ -7209,7 +7040,6 @@ CVE-2007-2946 - https://www.exploit-db.com/exploits/3986 CVE-2007-2947 - https://www.exploit-db.com/exploits/3991 CVE-2007-2957 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=614035&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=614035 CVE-2007-2958 - http://bugs.gentoo.org/show_bug.cgi?id=190104 -CVE-2007-2958 - http://www.novell.com/linux/security/advisories/2007_20_sr.html CVE-2007-2959 - http://securityreason.com/securityalert/2747 CVE-2007-2961 - http://sourceforge.net/project/shownotes.php?group_id=185741&release_id=512101 CVE-2007-2962 - http://securityreason.com/securityalert/2748 @@ -7218,7 +7048,6 @@ CVE-2007-2969 - https://www.exploit-db.com/exploits/4000 CVE-2007-2971 - https://www.exploit-db.com/exploits/3988 CVE-2007-2972 - http://marc.info/?l=full-disclosure&m=118040810718045&w=2 CVE-2007-2974 - http://securityreason.com/securityalert/2764 -CVE-2007-2975 - http://www.igniterealtime.org/issues/browse/JM-1049 CVE-2007-2978 - http://securityreason.com/securityalert/2756 CVE-2007-2979 - http://securityreason.com/securityalert/2755 CVE-2007-2985 - https://www.exploit-db.com/exploits/4006 @@ -7237,14 +7066,7 @@ CVE-2007-3003 - http://securityreason.com/securityalert/2769 CVE-2007-3006 - https://www.exploit-db.com/exploits/4017 CVE-2007-3006 - https://www.exploit-db.com/exploits/6329 CVE-2007-3010 - http://marc.info/?l=full-disclosure&m=119002152126755&w=2 -CVE-2007-3010 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php CVE-2007-3011 - http://securityreason.com/securityalert/2858 -CVE-2007-3011 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php -CVE-2007-3012 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php -CVE-2007-3013 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-004.php -CVE-2007-3014 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-005.php -CVE-2007-3017 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-006.php -CVE-2007-3018 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-007.php CVE-2007-3027 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 CVE-2007-3028 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-039 CVE-2007-3029 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-036 @@ -7295,7 +7117,6 @@ CVE-2007-3111 - https://www.exploit-db.com/exploits/4023 CVE-2007-3118 - https://www.exploit-db.com/exploits/4034 CVE-2007-3119 - https://www.exploit-db.com/exploits/4040 CVE-2007-3131 - http://securityreason.com/securityalert/2783 -CVE-2007-3132 - http://www.symantec.com/avcenter/security/Content/2007.06.05b.html CVE-2007-3133 - http://securityreason.com/securityalert/2782 CVE-2007-3135 - http://securityreason.com/securityalert/2787 CVE-2007-3136 - https://www.exploit-db.com/exploits/4041 @@ -7304,10 +7125,6 @@ CVE-2007-3138 - https://www.exploit-db.com/exploits/4025 CVE-2007-3139 - https://www.exploit-db.com/exploits/4025 CVE-2007-3140 - https://www.exploit-db.com/exploits/4039 CVE-2007-3141 - http://securityreason.com/securityalert/2786 -CVE-2007-3142 - http://www.0x000000.com/?i=334 -CVE-2007-3143 - http://www.0x000000.com/?i=334 -CVE-2007-3144 - http://www.0x000000.com/?i=334 -CVE-2007-3145 - http://www.0x000000.com/?i=334 CVE-2007-3146 - http://securityreason.com/securityalert/2788 CVE-2007-3147 - https://www.exploit-db.com/exploits/4042 CVE-2007-3148 - https://www.exploit-db.com/exploits/4043 @@ -7438,7 +7255,6 @@ CVE-2007-3449 - https://www.exploit-db.com/exploits/4104 CVE-2007-3451 - https://www.exploit-db.com/exploits/4104 CVE-2007-3452 - https://www.exploit-db.com/exploits/4108 CVE-2007-3453 - http://securityreason.com/securityalert/2843 -CVE-2007-3456 - http://www.mindedsecurity.com/labs/advisories/MSA01110707 CVE-2007-3459 - http://securityreason.com/securityalert/2844 CVE-2007-3459 - https://www.exploit-db.com/exploits/4110 CVE-2007-3460 - https://www.exploit-db.com/exploits/4112 @@ -7543,7 +7359,6 @@ CVE-2007-3665 - http://www.securityfocus.com/archive/1/473212 CVE-2007-3666 - http://www.securityfocus.com/archive/1/473212 CVE-2007-3670 - http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/ CVE-2007-3670 - http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/ -CVE-2007-3671 - http://www.immunityinc.com/downloads/0day_IPO.pdf CVE-2007-3675 - http://www.kaspersky.com/news?id=207575572 CVE-2007-3678 - http://vuln.sg/quarkxpress72-en.html CVE-2007-3681 - https://www.exploit-db.com/exploits/4165 @@ -7576,12 +7391,6 @@ CVE-2007-3790 - https://www.exploit-db.com/exploits/4175 CVE-2007-3792 - http://securityreason.com/securityalert/2888 CVE-2007-3798 - http://bugs.gentoo.org/show_bug.cgi?id=184815 CVE-2007-3798 - http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c -CVE-2007-3803 - http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf -CVE-2007-3803 - http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf -CVE-2007-3804 - http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf -CVE-2007-3804 - http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf -CVE-2007-3805 - http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf -CVE-2007-3805 - http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf CVE-2007-3807 - http://securityreason.com/securityalert/2893 CVE-2007-3808 - http://www.exploit-db.com/exploits/4186 CVE-2007-3809 - https://www.exploit-db.com/exploits/4185 @@ -7690,12 +7499,6 @@ CVE-2007-4055 - https://www.exploit-db.com/exploits/4239 CVE-2007-4056 - https://www.exploit-db.com/exploits/4238 CVE-2007-4057 - https://www.exploit-db.com/exploits/4235 CVE-2007-4058 - https://www.exploit-db.com/exploits/4244 -CVE-2007-4059 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-4059 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-4059 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-4059 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-4059 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-4059 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2007-4059 - https://www.exploit-db.com/exploits/4240 CVE-2007-4060 - https://www.exploit-db.com/exploits/4243 CVE-2007-4061 - https://www.exploit-db.com/exploits/4237 @@ -7724,12 +7527,6 @@ CVE-2007-4128 - https://www.exploit-db.com/exploits/4248 CVE-2007-4138 - http://securityreason.com/securityalert/3135 CVE-2007-4140 - https://www.exploit-db.com/exploits/4252 CVE-2007-4145 - http://securityreason.com/securityalert/2959 -CVE-2007-4155 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-4155 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-4155 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-4155 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-4155 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-4155 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2007-4155 - https://www.exploit-db.com/exploits/4245 CVE-2007-4156 - https://www.exploit-db.com/exploits/4246 CVE-2007-4171 - https://www.exploit-db.com/exploits/4254 @@ -7805,7 +7602,6 @@ CVE-2007-4339 - http://securityreason.com/securityalert/3008 CVE-2007-4342 - http://securityreason.com/securityalert/3005 CVE-2007-4349 - http://securityreason.com/securityalert/4501 CVE-2007-4350 - http://securityreason.com/securityalert/4447 -CVE-2007-4351 - http://www.cups.org/str.php?L2561 CVE-2007-4358 - http://aluigi.altervista.org/adv/zoidboom2-adv.txt CVE-2007-4358 - http://aluigi.org/poc/zoidboom2.zip CVE-2007-4358 - http://securityreason.com/securityalert/3014 @@ -7905,18 +7701,6 @@ CVE-2007-4487 - http://securityreason.com/securityalert/3051 CVE-2007-4488 - http://securityreason.com/securityalert/3050 CVE-2007-4489 - https://www.exploit-db.com/exploits/4299 CVE-2007-4490 - http://securityreason.com/securityalert/3052 -CVE-2007-4496 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-4496 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-4496 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-4496 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-4496 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-4496 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2007-4497 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-4497 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-4497 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-4497 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-4497 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-4497 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2007-4498 - http://securityreason.com/securityalert/3059 CVE-2007-4502 - https://www.exploit-db.com/exploits/4310 CVE-2007-4503 - https://www.exploit-db.com/exploits/4308 @@ -8010,7 +7794,6 @@ CVE-2007-4722 - https://www.exploit-db.com/exploits/4868 CVE-2007-4723 - http://securityreason.com/securityalert/3100 CVE-2007-4726 - https://www.exploit-db.com/exploits/4362 CVE-2007-4727 - http://securityreason.com/securityalert/3127 -CVE-2007-4727 - http://www.novell.com/linux/security/advisories/2007_20_sr.html CVE-2007-4731 - http://securityreason.com/securityalert/3128 CVE-2007-4734 - https://www.exploit-db.com/exploits/4355 CVE-2007-4735 - https://www.exploit-db.com/exploits/4354 @@ -8178,14 +7961,6 @@ CVE-2007-5017 - https://www.exploit-db.com/exploits/4428 CVE-2007-5018 - https://www.exploit-db.com/exploits/4429 CVE-2007-5019 - https://www.exploit-db.com/exploits/4432 CVE-2007-5020 - http://www.gnucitizen.org/blog/0day-pdf-pwns-windows -CVE-2007-5023 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-5023 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-5023 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-5023 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-5023 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-5023 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2007-5024 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-5025 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html CVE-2007-5026 - http://securityreason.com/securityalert/3156 CVE-2007-5027 - http://securityreason.com/securityalert/3159 CVE-2007-5032 - http://securityreason.com/securityalert/3157 @@ -8253,8 +8028,6 @@ CVE-2007-5130 - http://securityreason.com/securityalert/3172 CVE-2007-5131 - https://www.exploit-db.com/exploits/4459 CVE-2007-5134 - http://www.cisco.com/warp/public/707/cisco-sr-20070926-lb.shtml CVE-2007-5135 - http://securityreason.com/securityalert/3179 -CVE-2007-5135 - http://www.novell.com/linux/security/advisories/2007_20_sr.html -CVE-2007-5137 - http://www.novell.com/linux/security/advisories/2007_20_sr.html CVE-2007-5138 - https://www.exploit-db.com/exploits/4461 CVE-2007-5139 - https://www.exploit-db.com/exploits/4462 CVE-2007-5140 - https://www.exploit-db.com/exploits/4463 @@ -8289,9 +8062,6 @@ CVE-2007-5185 - https://www.exploit-db.com/exploits/4477 CVE-2007-5186 - https://www.exploit-db.com/exploits/4476 CVE-2007-5187 - https://www.exploit-db.com/exploits/4475 CVE-2007-5189 - http://securityreason.com/securityalert/3186 -CVE-2007-5195 - http://www.novell.com/linux/security/advisories/2007_20_sr.html -CVE-2007-5196 - http://www.novell.com/linux/security/advisories/2007_20_sr.html -CVE-2007-5200 - http://www.novell.com/linux/security/advisories/2007_20_sr.html CVE-2007-5212 - http://securityreason.com/securityalert/3188 CVE-2007-5213 - http://securityreason.com/securityalert/3188 CVE-2007-5214 - http://securityreason.com/securityalert/3188 @@ -8346,11 +8116,6 @@ CVE-2007-5267 - http://www.coresecurity.com/?action=item&id=2148 CVE-2007-5268 - http://www.coresecurity.com/?action=item&id=2148 CVE-2007-5269 - http://www.coresecurity.com/?action=item&id=2148 CVE-2007-5269 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2007-5269 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-5269 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-5269 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-5269 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-5269 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2007-5271 - https://www.exploit-db.com/exploits/4485 CVE-2007-5272 - https://www.exploit-db.com/exploits/4486 CVE-2007-5273 - http://crypto.stanford.edu/dns/dns-rebinding.pdf @@ -8416,12 +8181,6 @@ CVE-2007-5418 - http://securityvulns.com/Rdocument960.html CVE-2007-5423 - http://securityvulns.ru/Sdocument162.html CVE-2007-5423 - https://www.exploit-db.com/exploits/4509 CVE-2007-5438 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2007-5438 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2007-5438 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-5438 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-5438 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-5438 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-5438 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2007-5440 - http://securityvulns.com/Rdocument959.html CVE-2007-5446 - https://www.exploit-db.com/exploits/4526 CVE-2007-5447 - https://www.exploit-db.com/exploits/4517 @@ -8454,9 +8213,6 @@ CVE-2007-5487 - https://www.exploit-db.com/exploits/4531 CVE-2007-5489 - https://www.exploit-db.com/exploits/4538 CVE-2007-5490 - https://www.exploit-db.com/exploits/4539 CVE-2007-5503 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2007-5503 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-5503 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-5503 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2007-5511 - https://www.exploit-db.com/exploits/4570 CVE-2007-5511 - https://www.exploit-db.com/exploits/4571 CVE-2007-5511 - https://www.exploit-db.com/exploits/4572 @@ -8476,16 +8232,6 @@ CVE-2007-5597 - http://www.securityfocus.com/bid/26119 CVE-2007-5600 - https://www.exploit-db.com/exploits/4538 CVE-2007-5603 - http://securityreason.com/securityalert/3342 CVE-2007-5603 - https://www.exploit-db.com/exploits/4594 -CVE-2007-5617 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-5617 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-5617 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-5617 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2007-5618 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2007-5618 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2007-5618 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2007-5618 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2007-5618 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2007-5619 - http://www.vmware.com/support/server/doc/releasenotes_server.html CVE-2007-5620 - https://www.exploit-db.com/exploits/4546 CVE-2007-5625 - http://securityreason.com/securityalert/3275 CVE-2007-5627 - https://www.exploit-db.com/exploits/4554 @@ -8544,7 +8290,6 @@ CVE-2007-5786 - https://www.exploit-db.com/exploits/4575 CVE-2007-5800 - https://www.exploit-db.com/exploits/4593 CVE-2007-5802 - http://securityreason.com/securityalert/3335 CVE-2007-5806 - http://securityreason.com/securityalert/3340 -CVE-2007-5811 - https://www.exploit-db.com/exploits/4590 CVE-2007-5812 - https://www.exploit-db.com/exploits/4591 CVE-2007-5813 - https://www.exploit-db.com/exploits/4592 CVE-2007-5814 - http://securityreason.com/securityalert/3342 @@ -8567,7 +8312,6 @@ CVE-2007-5845 - https://www.exploit-db.com/exploits/3221 CVE-2007-5845 - https://www.exploit-db.com/exploits/4602 CVE-2007-5846 - http://www.ubuntu.com/usn/usn-564-1 CVE-2007-5846 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730 -CVE-2007-5849 - http://www.cups.org/str.php?L2589 CVE-2007-5887 - https://www.exploit-db.com/exploits/4609 CVE-2007-5889 - http://securityreason.com/securityalert/3345 CVE-2007-5898 - http://www.redhat.com/support/errata/RHSA-2008-0546.html @@ -8753,7 +8497,6 @@ CVE-2007-6340 - http://securityreason.com/securityalert/3611 CVE-2007-6344 - https://www.exploit-db.com/exploits/4719 CVE-2007-6347 - https://www.exploit-db.com/exploits/4722 CVE-2007-6348 - http://marc.info/?l=squirrelmail-devel&m=119765235203392&w=2 -CVE-2007-6357 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9052538&source=rss_topic17 CVE-2007-6359 - http://digit-labs.org/files/exploits/xnu-superblob-dos.c CVE-2007-6362 - https://www.exploit-db.com/exploits/4691 CVE-2007-6366 - https://www.exploit-db.com/exploits/4693 @@ -9025,10 +8768,8 @@ CVE-2008-0082 - https://docs.microsoft.com/en-us/security-updates/securitybullet CVE-2008-0083 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-022 CVE-2008-0084 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-004 CVE-2008-0085 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2008-0085 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2008-0085 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 CVE-2008-0086 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2008-0086 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2008-0086 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 CVE-2008-0087 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-020 CVE-2008-0088 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-003 @@ -9051,10 +8792,8 @@ CVE-2008-0103 - https://docs.microsoft.com/en-us/security-updates/securitybullet CVE-2008-0104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012 CVE-2008-0105 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011 CVE-2008-0106 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2008-0106 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2008-0106 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 CVE-2008-0107 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2008-0107 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2008-0107 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040 CVE-2008-0108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011 CVE-2008-0108 - https://www.exploit-db.com/exploits/5107 @@ -9177,11 +8916,9 @@ CVE-2008-0290 - https://www.exploit-db.com/exploits/4887 CVE-2008-0291 - https://www.exploit-db.com/exploits/4910 CVE-2008-0297 - https://www.exploit-db.com/exploits/4897 CVE-2008-0298 - http://securityreason.com/securityalert/3549 -CVE-2008-0300 - http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php CVE-2008-0300 - https://www.exploit-db.com/exploits/5232 CVE-2008-0301 - http://marc.info/?l=full-disclosure&m=120523564611595&w=2 CVE-2008-0301 - http://securityreason.com/securityalert/3728 -CVE-2008-0301 - http://www.redteam-pentesting.de/advisories/rt-sa-2008-002.php CVE-2008-0301 - https://www.exploit-db.com/exploits/5233 CVE-2008-0304 - http://www.ubuntu.com/usn/usn-582-2 CVE-2008-0310 - https://www.exploit-db.com/exploits/5355 @@ -9282,9 +9019,7 @@ CVE-2008-0452 - https://www.exploit-db.com/exploits/4973 CVE-2008-0453 - https://www.exploit-db.com/exploits/4960 CVE-2008-0454 - http://www.kb.cert.org/vuls/id/248184 CVE-2008-0455 - http://securityreason.com/securityalert/3575 -CVE-2008-0455 - http://www.mindedsecurity.com/MSA01150108.html CVE-2008-0456 - http://securityreason.com/securityalert/3575 -CVE-2008-0456 - http://www.mindedsecurity.com/MSA01150108.html CVE-2008-0457 - https://www.exploit-db.com/exploits/5078 CVE-2008-0458 - https://www.exploit-db.com/exploits/4975 CVE-2008-0459 - https://www.exploit-db.com/exploits/4976 @@ -9415,9 +9150,7 @@ CVE-2008-0652 - https://www.exploit-db.com/exploits/5073 CVE-2008-0653 - https://www.exploit-db.com/exploits/5072 CVE-2008-0654 - http://securityreason.com/securityalert/3622 CVE-2008-0656 - http://securityreason.com/securityalert/3626 -CVE-2008-0659 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483 CVE-2008-0659 - https://www.exploit-db.com/exploits/5025 -CVE-2008-0660 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483 CVE-2008-0660 - https://www.exploit-db.com/exploits/5049 CVE-2008-0661 - http://securityreason.com/securityalert/3623 CVE-2008-0661 - https://www.exploit-db.com/exploits/5067 @@ -9568,10 +9301,6 @@ CVE-2008-0921 - https://www.exploit-db.com/exploits/5170 CVE-2008-0922 - https://www.exploit-db.com/exploits/5168 CVE-2008-0923 - http://securityreason.com/securityalert/3700 CVE-2008-0923 - http://www.coresecurity.com/?action=item&id=2129 -CVE-2008-0923 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-0923 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-0923 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-0923 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-0927 - https://www.exploit-db.com/exploits/5547 CVE-2008-0934 - https://www.exploit-db.com/exploits/5172 CVE-2008-0939 - https://www.exploit-db.com/exploits/5135 @@ -9780,8 +9509,6 @@ CVE-2008-1337 - http://securityreason.com/securityalert/3741 CVE-2008-1338 - http://aluigi.altervista.org/adv/perforces-adv.txt CVE-2008-1338 - http://aluigi.org/poc/perforces.zip CVE-2008-1338 - http://securityreason.com/securityalert/3735 -CVE-2008-1340 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1340 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-1344 - https://www.exploit-db.com/exploits/5246 CVE-2008-1345 - https://www.exploit-db.com/exploits/5246 CVE-2008-1346 - https://www.exploit-db.com/exploits/5247 @@ -9797,28 +9524,8 @@ CVE-2008-1357 - http://aluigi.altervista.org/adv/meccaffi-adv.txt CVE-2008-1357 - http://securityreason.com/securityalert/3748 CVE-2008-1357 - https://knowledge.mcafee.com/article/234/615103_f.sal_public.html CVE-2008-1358 - https://www.exploit-db.com/exploits/5248 -CVE-2008-1361 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-1361 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1361 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-1361 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-1361 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2008-1362 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-1362 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1362 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-1362 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-1362 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2008-1363 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-1363 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1363 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-1363 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-1363 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -CVE-2008-1364 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-1364 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-1364 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html CVE-2008-1365 - http://aluigi.altervista.org/adv/officescaz-adv.txt CVE-2008-1366 - http://aluigi.altervista.org/adv/officescaz-adv.txt -CVE-2008-1392 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1392 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-1398 - https://www.exploit-db.com/exploits/5256 CVE-2008-1400 - https://www.exploit-db.com/exploits/5269 CVE-2008-1401 - https://www.exploit-db.com/exploits/5269 @@ -9906,7 +9613,6 @@ CVE-2008-1539 - https://www.exploit-db.com/exploits/5295 CVE-2008-1541 - https://www.exploit-db.com/exploits/5304 CVE-2008-1544 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-031 CVE-2008-1545 - http://securityreason.com/securityalert/3786 -CVE-2008-1545 - http://www.mindedsecurity.com/MSA01240108.html CVE-2008-1546 - http://securityreason.com/securityalert/3794 CVE-2008-1547 - http://securityreason.com/securityalert/4441 CVE-2008-1551 - https://www.exploit-db.com/exploits/5290 @@ -9925,7 +9631,6 @@ CVE-2008-1602 - http://securityreason.com/securityalert/3798 CVE-2008-1608 - https://www.exploit-db.com/exploits/5502 CVE-2008-1609 - https://www.exploit-db.com/exploits/2474/ CVE-2008-1609 - https://www.exploit-db.com/exploits/5317 -CVE-2008-1610 - http://www.offensive-security.com/0day/quick-tftp-poc.py.txt CVE-2008-1610 - https://www.exploit-db.com/exploits/5315 CVE-2008-1611 - https://www.exploit-db.com/exploits/5314 CVE-2008-1613 - https://www.exploit-db.com/exploits/5482 @@ -9975,7 +9680,6 @@ CVE-2008-1724 - https://www.exploit-db.com/exploits/5398 CVE-2008-1725 - https://www.exploit-db.com/exploits/5416 CVE-2008-1726 - https://www.exploit-db.com/exploits/5421 CVE-2008-1727 - https://www.exploit-db.com/exploits/5418 -CVE-2008-1728 - http://www.igniterealtime.org/issues/browse/JM-1289 CVE-2008-1730 - https://www.exploit-db.com/exploits/5419 CVE-2008-1732 - https://www.exploit-db.com/exploits/5410 CVE-2008-1735 - http://securityreason.com/securityalert/3838 @@ -10018,25 +9722,10 @@ CVE-2008-1801 - https://www.exploit-db.com/exploits/5561 CVE-2008-1802 - https://www.exploit-db.com/exploits/5585 CVE-2008-1806 - http://www.ubuntu.com/usn/usn-643-1 CVE-2008-1806 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-1806 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-1806 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1806 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-1806 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-1806 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-1807 - http://www.ubuntu.com/usn/usn-643-1 CVE-2008-1807 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-1807 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-1807 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1807 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-1807 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-1807 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-1808 - http://www.ubuntu.com/usn/usn-643-1 CVE-2008-1808 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-1808 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-1808 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-1808 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-1808 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-1808 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-1838 - https://www.exploit-db.com/exploits/5444 CVE-2008-1840 - http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069 CVE-2008-1841 - http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069 @@ -10229,7 +9918,6 @@ CVE-2008-2125 - https://www.exploit-db.com/exploits/5560 CVE-2008-2127 - https://www.exploit-db.com/exploits/5558 CVE-2008-2128 - https://www.exploit-db.com/exploits/5558 CVE-2008-2129 - https://www.exploit-db.com/exploits/5554 -CVE-2008-2131 - http://users.own-hero.net/~decoder/advisories/mvnforum-jsxss.txt CVE-2008-2132 - https://www.exploit-db.com/exploits/5556 CVE-2008-2135 - https://www.exploit-db.com/exploits/5559 CVE-2008-2137 - http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604 @@ -10393,7 +10081,6 @@ CVE-2008-2501 - https://www.exploit-db.com/exploits/5683 CVE-2008-2504 - https://www.exploit-db.com/exploits/5665 CVE-2008-2505 - https://www.exploit-db.com/exploits/5664 CVE-2008-2506 - https://www.exploit-db.com/exploits/5664 -CVE-2008-2511 - http://retrogod.altervista.org/9sg_CA_poc.html CVE-2008-2511 - https://www.exploit-db.com/exploits/5682 CVE-2008-2519 - http://vuln.sg/coreftp211565-en.html CVE-2008-2520 - https://www.exploit-db.com/exploits/5596 @@ -11296,7 +10983,6 @@ CVE-2008-3604 - http://securityreason.com/securityalert/4145 CVE-2008-3604 - https://www.exploit-db.com/exploits/6230 CVE-2008-3606 - http://securityreason.com/securityalert/4146 CVE-2008-3607 - http://securityreason.com/securityalert/4147 -CVE-2008-3640 - http://www.cups.org/str.php?L2919 CVE-2008-3648 - http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt CVE-2008-3649 - http://securityreason.com/securityalert/4149 CVE-2008-3649 - https://www.exploit-db.com/exploits/6167 @@ -11323,63 +11009,20 @@ CVE-2008-3681 - http://securityreason.com/securityalert/4157 CVE-2008-3681 - https://www.exploit-db.com/exploits/6234 CVE-2008-3691 - http://securityreason.com/securityalert/4202 CVE-2008-3691 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3691 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3691 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3691 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3691 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3691 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3691 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3692 - http://securityreason.com/securityalert/4202 CVE-2008-3692 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3692 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3692 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3692 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3692 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3692 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3692 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3693 - http://securityreason.com/securityalert/4202 CVE-2008-3693 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3693 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3693 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3693 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3693 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3693 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3693 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3694 - http://securityreason.com/securityalert/4202 CVE-2008-3694 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3694 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3694 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3694 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3694 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3694 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3694 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3695 - http://securityreason.com/securityalert/4202 CVE-2008-3695 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3695 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3695 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3695 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3695 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3695 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3695 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3696 - http://securityreason.com/securityalert/4202 CVE-2008-3696 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3696 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3696 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3696 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3696 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3696 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3696 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3697 - http://securityreason.com/securityalert/4202 CVE-2008-3697 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3697 - http://www.vmware.com/support/server/doc/releasenotes_server.html CVE-2008-3698 - http://securityreason.com/securityalert/4202 CVE-2008-3698 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html -CVE-2008-3698 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3698 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3698 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3698 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3698 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3698 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3702 - http://securityreason.com/securityalert/4159 CVE-2008-3702 - https://www.exploit-db.com/exploits/6216 CVE-2008-3703 - http://securityreason.com/securityalert/4161 @@ -11536,12 +11179,6 @@ CVE-2008-3883 - https://bugs.gentoo.org/show_bug.cgi?id=235770 CVE-2008-3889 - http://securityreason.com/securityalert/4239 CVE-2008-3889 - https://www.exploit-db.com/exploits/6472 CVE-2008-3892 - http://securityreason.com/securityalert/4202 -CVE-2008-3892 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html -CVE-2008-3892 - http://www.vmware.com/support/player/doc/releasenotes_player.html -CVE-2008-3892 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html -CVE-2008-3892 - http://www.vmware.com/support/server/doc/releasenotes_server.html -CVE-2008-3892 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -CVE-2008-3892 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html CVE-2008-3892 - https://www.exploit-db.com/exploits/6345 CVE-2008-3894 - http://securityreason.com/securityalert/4207 CVE-2008-3895 - http://securityreason.com/securityalert/4211 @@ -12668,7 +12305,6 @@ CVE-2008-5209 - http://securityreason.com/securityalert/4625 CVE-2008-5209 - https://www.exploit-db.com/exploits/5575 CVE-2008-5210 - https://www.exploit-db.com/exploits/5586 CVE-2008-5211 - http://securityreason.com/securityalert/4629 -CVE-2008-5211 - http://users.own-hero.net/~decoder/advisories/sphider134-xss.txt CVE-2008-5212 - http://securityreason.com/securityalert/4627 CVE-2008-5212 - https://www.exploit-db.com/exploits/5591 CVE-2008-5213 - http://securityreason.com/securityalert/4632 @@ -12838,7 +12474,6 @@ CVE-2008-5415 - http://community.ca.com/blogs/casecurityresponseblog/archive/200 CVE-2008-5415 - http://securityreason.com/securityalert/4708 CVE-2008-5416 - http://securityreason.com/securityalert/4706 CVE-2008-5416 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2008-5416 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2008-5416 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-004 CVE-2008-5416 - https://www.exploit-db.com/exploits/7501 CVE-2008-5418 - http://securityreason.com/securityalert/4707 @@ -13748,16 +13383,9 @@ CVE-2008-6499 - https://www.exploit-db.com/exploits/7384 CVE-2008-6500 - http://packetstormsecurity.org/0812-exploits/aspshoppingcart-xss.txt CVE-2008-6501 - https://www.exploit-db.com/exploits/7409 CVE-2008-6502 - https://www.exploit-db.com/exploits/7409 -CVE-2008-6508 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt -CVE-2008-6508 - http://www.igniterealtime.org/issues/browse/JM-1489 CVE-2008-6508 - https://www.exploit-db.com/exploits/7075 -CVE-2008-6509 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt -CVE-2008-6509 - http://www.igniterealtime.org/issues/browse/JM-1488 CVE-2008-6509 - https://www.exploit-db.com/exploits/7075 -CVE-2008-6510 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt -CVE-2008-6510 - http://www.igniterealtime.org/issues/browse/JM-629 CVE-2008-6510 - https://www.exploit-db.com/exploits/7075 -CVE-2008-6511 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt CVE-2008-6511 - https://www.exploit-db.com/exploits/7075 CVE-2008-6513 - https://www.exploit-db.com/exploits/7312 CVE-2008-6515 - http://packetstormsecurity.org/0812-exploits/yappang-xss.txt @@ -13914,7 +13542,6 @@ CVE-2008-6793 - https://www.exploit-db.com/exploits/7001 CVE-2008-6794 - https://www.exploit-db.com/exploits/6923 CVE-2008-6795 - https://www.exploit-db.com/exploits/6981 CVE-2008-6796 - https://www.exploit-db.com/exploits/7008 -CVE-2008-6797 - http://www.mitel.com/resources/NuPoint_and_Exchange.pdf CVE-2008-6798 - https://www.exploit-db.com/exploits/7094 CVE-2008-6804 - https://www.exploit-db.com/exploits/6886 CVE-2008-6805 - https://www.exploit-db.com/exploits/6764 @@ -14025,7 +13652,6 @@ CVE-2008-6949 - https://www.exploit-db.com/exploits/7076 CVE-2008-6950 - https://www.exploit-db.com/exploits/7120 CVE-2008-6951 - https://www.exploit-db.com/exploits/7203 CVE-2008-6952 - https://www.exploit-db.com/exploits/7162 -CVE-2008-6953 - http://retrogod.altervista.org/9sg_oovoo_url_poc.html CVE-2008-6953 - https://www.exploit-db.com/exploits/7090 CVE-2008-6955 - https://www.exploit-db.com/exploits/7136 CVE-2008-6956 - https://www.exploit-db.com/exploits/7136 @@ -14053,7 +13679,6 @@ CVE-2008-6986 - http://www.zen-cart.com/forum/showthread.php?p=604473 CVE-2008-6988 - https://www.exploit-db.com/exploits/6428 CVE-2008-6989 - https://www.exploit-db.com/exploits/6428 CVE-2008-6991 - https://www.exploit-db.com/exploits/6343 -CVE-2008-6994 - http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599 CVE-2008-6994 - https://www.exploit-db.com/exploits/6365 CVE-2008-6994 - https://www.exploit-db.com/exploits/6367 CVE-2008-6995 - https://www.exploit-db.com/exploits/6353 @@ -14441,7 +14066,6 @@ CVE-2009-0493 - https://www.exploit-db.com/exploits/7686 CVE-2009-0494 - https://www.exploit-db.com/exploits/7734 CVE-2009-0495 - https://www.exploit-db.com/exploits/7743 CVE-2009-0496 - http://www.coresecurity.com/content/openfire-multiple-vulnerabilities -CVE-2009-0496 - http://www.igniterealtime.org/issues/browse/JM-1506 CVE-2009-0497 - http://www.coresecurity.com/content/openfire-multiple-vulnerabilities CVE-2009-0498 - https://www.exploit-db.com/exploits/7744 CVE-2009-0513 - https://www.exploit-db.com/exploits/8025 @@ -14690,7 +14314,6 @@ CVE-2009-1053 - http://e-rdc.org/v1/news.php?readmore=129 CVE-2009-1057 - https://www.exploit-db.com/exploits/8180 CVE-2009-1058 - https://www.exploit-db.com/exploits/8180 CVE-2009-1059 - https://www.exploit-db.com/exploits/8180 -CVE-2009-1060 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978 CVE-2009-1063 - https://www.exploit-db.com/exploits/8270 CVE-2009-1064 - http://www.waraxe.us/advisory-73.html CVE-2009-1064 - https://www.exploit-db.com/exploits/8257 @@ -15331,12 +14954,10 @@ CVE-2009-2397 - http://www.exploit-db.com/exploits/9041 CVE-2009-2401 - http://www.exploit-db.com/exploits/9014 CVE-2009-2402 - http://www.exploit-db.com/exploits/9014 CVE-2009-2403 - http://www.exploit-db.com/exploits/9033 -CVE-2009-2404 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html CVE-2009-2404 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2009-2406 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2407 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2408 - http://isc.sans.org/diary.html?storyid=7003 -CVE-2009-2408 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html CVE-2009-2409 - http://www.vmware.com/security/advisories/VMSA-2010-0019.html CVE-2009-2414 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2416 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html @@ -15466,7 +15087,6 @@ CVE-2009-2675 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2676 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2692 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2693 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2009-2693 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2009-2694 - http://www.coresecurity.com/content/libpurple-arbitrary-write CVE-2009-2698 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2699 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html @@ -15500,7 +15120,6 @@ CVE-2009-2787 - http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt CVE-2009-2790 - http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt CVE-2009-2791 - http://www.exploit-db.com/exploits/9331 CVE-2009-2792 - http://www.exploit-db.com/exploits/9313 -CVE-2009-2841 - http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabilities-111109 CVE-2009-2847 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2848 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html CVE-2009-2876 - http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-012-cisco.html @@ -15522,9 +15141,7 @@ CVE-2009-2896 - http://www.exploit-db.com/exploits/9220 CVE-2009-2897 - http://www.coresecurity.com/content/hyperic-hq-vulnerabilities CVE-2009-2898 - http://www.coresecurity.com/content/hyperic-hq-vulnerabilities CVE-2009-2901 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2009-2901 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2009-2902 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2009-2902 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2009-2915 - http://packetstormsecurity.org/0908-exploits/discuz60-sql.txt CVE-2009-2916 - http://aluigi.altervista.org/adv/vietcong2fs-adv.txt CVE-2009-2917 - http://www.exploit-db.com/exploits/9382 @@ -15559,17 +15176,6 @@ CVE-2009-3061 - http://packetstormsecurity.org/0909-exploits/alqatarigroup-sql.t CVE-2009-3065 - http://www.exploit-db.com/exploits/9577 CVE-2009-3066 - http://packetstormsecurity.org/0909-exploits/propertywatch-xss.txt CVE-2009-3067 - http://packetstormsecurity.org/0909-exploits/resvman-xss.txt -CVE-2009-3069 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3070 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3071 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3072 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3073 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3074 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3075 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3076 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3077 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3078 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html -CVE-2009-3079 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html CVE-2009-3103 - http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html CVE-2009-3103 - http://isc.sans.org/diary.html?storyid=7093 CVE-2009-3103 - http://www.exploit-db.com/exploits/9594 @@ -15674,7 +15280,6 @@ CVE-2009-3368 - http://www.exploit-db.com/exploits/9648 CVE-2009-3370 - https://bugzilla.mozilla.org/show_bug.cgi?id=511615 CVE-2009-3371 - https://bugzilla.mozilla.org/show_bug.cgi?id=514554 CVE-2009-3373 - https://bugzilla.mozilla.org/show_bug.cgi?id=511689 -CVE-2009-3389 - http://www.theora.org/news/#libtheora-1.1.0 CVE-2009-3410 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CVE-2009-3411 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CVE-2009-3412 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html @@ -15727,8 +15332,6 @@ CVE-2009-3536 - http://www.exploit-db.com/exploits/9200 CVE-2009-3539 - http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt CVE-2009-3542 - http://packetstormsecurity.org/0907-exploits/ls-lfi.txt CVE-2009-3548 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2009-3548 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html -CVE-2009-3553 - http://www.cups.org/str.php?L3200 CVE-2009-3555 - http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html CVE-2009-3555 - http://clicky.me/tlsvuln CVE-2009-3555 - http://seclists.org/fulldisclosure/2009/Nov/139 @@ -15741,7 +15344,6 @@ CVE-2009-3555 - http://www.redhat.com/support/errata/RHSA-2011-0880.html CVE-2009-3555 - http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html CVE-2009-3555 - http://www.vmware.com/security/advisories/VMSA-2010-0019.html CVE-2009-3555 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2009-3555 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2009-3555 - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html CVE-2009-3563 - https://www.kb.cert.org/vuls/id/417980 CVE-2009-3564 - https://puppet.com/security/cve/cve-2009-3564 @@ -15768,7 +15370,6 @@ CVE-2009-3608 - http://www.ocert.org/advisories/ocert-2009-016.html CVE-2009-3616 - https://bugzilla.redhat.com/show_bug.cgi?id=508567 CVE-2009-3621 - http://lkml.org/lkml/2009/10/19/50 CVE-2009-3622 - http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/ -CVE-2009-3622 - http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html CVE-2009-3622 - https://bugzilla.redhat.com/show_bug.cgi?id=530056 CVE-2009-3625 - http://www.openwall.com/lists/oss-security/2009/10/22/3 CVE-2009-3625 - http://www.openwall.com/lists/oss-security/2009/10/22/6 @@ -16250,57 +15851,45 @@ CVE-2010-0081 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175 CVE-2010-0082 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0082 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0082 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0082 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0083 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0084 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0084 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0084 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0084 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0084 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0085 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0085 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0085 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0085 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0085 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0086 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2010-0087 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0087 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0087 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0087 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0088 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0088 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0088 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0088 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0088 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0089 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0089 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0089 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0090 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0090 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0090 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0091 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0091 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0091 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0091 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0091 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0092 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0092 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0092 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0092 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0093 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0093 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0093 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0093 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0094 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0094 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0094 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0094 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0094 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0095 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0095 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0095 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0095 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0095 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0103 - http://www.symantec.com/connect/blogs/trojan-found-usb-battery-charger-software CVE-2010-0105 - http://securityreason.com/achievement_securityalert/83 CVE-2010-0149 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml @@ -16381,7 +15970,6 @@ CVE-2010-0425 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-18 CVE-2010-0425 - http://www.senseofsecurity.com.au/advisories/SOS-10-002 CVE-2010-0425 - https://www.exploit-db.com/exploits/11650 CVE-2010-0433 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0433 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0434 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 CVE-2010-0434 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html CVE-2010-0437 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html @@ -16402,7 +15990,6 @@ CVE-2010-0470 - http://packetstormsecurity.org/1001-exploits/comtrend-xss.txt CVE-2010-0478 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-025 CVE-2010-0480 - http://securityreason.com/securityalert/8336 CVE-2010-0483 - http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt -CVE-2010-0483 - http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk CVE-2010-0483 - http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/ CVE-2010-0484 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032 CVE-2010-0485 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032 @@ -16490,12 +16077,10 @@ CVE-2010-0730 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html CVE-2010-0734 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html CVE-2010-0738 - http://securityreason.com/securityalert/8408 CVE-2010-0740 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0740 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0746 - https://bugzilla.redhat.com/show_bug.cgi?id=523178 CVE-2010-0753 - http://www.exploit-db.com/exploits/11549 CVE-2010-0753 - http://www.packetstormsecurity.com/1002-exploits/joomlasqlreport-sql.txt CVE-2010-0754 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt -CVE-2010-0754 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-006.txt CVE-2010-0755 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt CVE-2010-0756 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt CVE-2010-0757 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt @@ -16538,61 +16123,47 @@ CVE-2010-0837 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0837 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0837 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0837 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0837 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0838 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0838 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0838 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0838 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0838 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0839 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0839 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0839 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0839 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0840 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0840 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0840 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0840 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0840 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0841 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0841 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0841 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0841 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0842 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0842 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0842 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0842 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0843 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0843 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0843 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0843 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0844 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0844 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0844 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0845 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0845 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0845 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0845 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0846 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0846 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0846 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0846 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0847 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0847 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0847 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0847 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0847 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0848 - http://ubuntu.com/usn/usn-923-1 CVE-2010-0848 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0848 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0848 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0848 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0849 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CVE-2010-0849 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0849 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0849 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0850 - http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html CVE-2010-0850 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0850 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0851 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2010-0852 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2010-0853 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html @@ -16629,7 +16200,6 @@ CVE-2010-0883 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099 CVE-2010-0884 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2010-0885 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2010-0886 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-0886 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-0888 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2010-0889 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html CVE-2010-0890 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html @@ -16765,9 +16335,7 @@ CVE-2010-1091 - http://www.exploit-db.com/exploits/11588 CVE-2010-1105 - http://www.packetstormsecurity.com/1001-exploits/advertisemanager-xssrfitraversal.txt CVE-2010-1106 - http://www.packetstormsecurity.com/1001-exploits/advertisemanager-xssrfitraversal.txt CVE-2010-1109 - http://packetstormsecurity.org/1001-exploits/phpmysport-sqlaccess.txt -CVE-2010-1109 - http://phpmysport.sourceforge.net/en/forum/bugs/sujet_2851.html CVE-2010-1110 - http://packetstormsecurity.org/1001-exploits/phpmysport-sqlaccess.txt -CVE-2010-1110 - http://phpmysport.sourceforge.net/en/forum/bugs/sujet_2851.html CVE-2010-1111 - http://www.packetstormsecurity.com/1001-exploits/jokescomplete-xss.txt CVE-2010-1112 - http://packetstormsecurity.org/1001-exploits/klonews-xss.txt CVE-2010-1113 - http://www.packetstormsecurity.com/1001-exploits/webservercreator-traversalxssrfi.txt @@ -16790,7 +16358,6 @@ CVE-2010-1142 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html CVE-2010-1150 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_15_3/phase3/RELEASE-NOTES CVE-2010-1150 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_16_0beta2/phase3/RELEASE-NOTES CVE-2010-1157 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-1157 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-1158 - http://www.openwall.com/lists/oss-security/2010/04/08/9 CVE-2010-1158 - http://www.openwall.com/lists/oss-security/2010/04/14/3 CVE-2010-1158 - https://bugzilla.redhat.com/show_bug.cgi?id=580605 @@ -16927,7 +16494,6 @@ CVE-2010-1370 - http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt CVE-2010-1371 - http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt CVE-2010-1372 - http://packetstormsecurity.org/1002-exploits/joomlahdflvplayer-sql.txt CVE-2010-1422 - https://bugzilla.mozilla.org/show_bug.cgi?id=552255 -CVE-2010-1429 - https://www.exploit-db.com/exploits/44009/ CVE-2010-1431 - http://seclists.org/fulldisclosure/2010/Apr/272 CVE-2010-1436 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html CVE-2010-1437 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html @@ -17083,9 +16649,6 @@ CVE-2010-1742 - http://packetstormsecurity.org/1004-exploits/scratcher-sqlxss.tx CVE-2010-1743 - http://packetstormsecurity.org/1004-exploits/scratcher-sqlxss.txt CVE-2010-1744 - http://packetstormsecurity.org/1004-exploits/b2bgoldscript-sql.txt CVE-2010-1748 - http://cups.org/str.php?L3577 -CVE-2010-1818 - http://threatpost.com/en_us/blogs/new-remote-flaw-apple-quicktime-bypasses-aslr-and-dep-083010 -CVE-2010-1851 - http://www.cnet.com/8301-31361_1-20004265-254.html -CVE-2010-1852 - http://www.cnet.com/8301-31361_1-20004265-254.html CVE-2010-1855 - http://packetstormsecurity.org/1003-exploits/ppwb-sql.txt CVE-2010-1856 - http://packetstormsecurity.org/1003-exploits/repairshop2-xss.txt CVE-2010-1858 - http://packetstormsecurity.org/1003-exploits/joomlasmestorage-lfi.txt @@ -17325,7 +16888,6 @@ CVE-2010-2188 - http://www.redhat.com/support/errata/RHSA-2010-0470.html CVE-2010-2226 - http://www.ubuntu.com/usn/USN-1000-1 CVE-2010-2226 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html CVE-2010-2227 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-2227 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-2235 - http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz CVE-2010-2240 - http://www.redhat.com/support/errata/RHSA-2010-0670.html CVE-2010-2243 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad6759fbf35d104dbf573cd6f4c6784ad6823f7e @@ -17343,12 +16905,8 @@ CVE-2010-2260 - http://packetstormsecurity.org/1001-exploits/bandwidthmeter-xss. CVE-2010-2263 - http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html CVE-2010-2263 - http://www.exploit-db.com/exploits/13822 CVE-2010-2265 - http://www.kb.cert.org/vuls/id/578319 -CVE-2010-2273 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 CVE-2010-2273 - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/ -CVE-2010-2274 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 -CVE-2010-2275 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 CVE-2010-2275 - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/ -CVE-2010-2276 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 CVE-2010-2290 - https://kc.mcafee.com/corporate/index?page=content&id=SB10010 CVE-2010-2295 - https://bugzilla.mozilla.org/show_bug.cgi?id=552255 CVE-2010-2301 - https://bugs.webkit.org/show_bug.cgi?id=38922 @@ -17540,7 +17098,6 @@ CVE-2010-2766 - https://bugzilla.mozilla.org/show_bug.cgi?id=580445 CVE-2010-2768 - https://bugzilla.mozilla.org/show_bug.cgi?id=579744 CVE-2010-2769 - https://bugzilla.mozilla.org/show_bug.cgi?id=520189 CVE-2010-2770 - https://bugzilla.mozilla.org/show_bug.cgi?id=583520 -CVE-2010-2772 - http://www.wired.com/threatlevel/2010/07/siemens-scada/ CVE-2010-2791 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html CVE-2010-2795 - https://issues.jasig.org/browse/PHPCAS-61 CVE-2010-2795 - https://wiki.jasig.org/display/CASC/phpCAS+ChangeLog @@ -17612,7 +17169,6 @@ CVE-2010-2922 - http://packetstormsecurity.org/1007-exploits/akyblog-sql.txt CVE-2010-2923 - http://packetstormsecurity.org/1007-exploits/joomlayoutube-sql.txt CVE-2010-2925 - http://packetstormsecurity.org/1007-exploits/freewaycms-sql.txt CVE-2010-2928 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html -CVE-2010-2928 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html CVE-2010-2932 - http://www.exploit-db.com/exploits/14504 CVE-2010-2935 - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html CVE-2010-2936 - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html @@ -17772,7 +17328,6 @@ CVE-2010-3328 - https://docs.microsoft.com/en-us/security-updates/securitybullet CVE-2010-3329 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 CVE-2010-3330 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 CVE-2010-3331 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 -CVE-2010-3332 - http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310 CVE-2010-3338 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-092 CVE-2010-3340 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 CVE-2010-3342 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 @@ -18153,9 +17708,7 @@ CVE-2010-3879 - https://bugzilla.redhat.com/show_bug.cgi?id=651183 CVE-2010-3880 - http://www.redhat.com/support/errata/RHSA-2011-0004.html CVE-2010-3880 - http://www.redhat.com/support/errata/RHSA-2011-0007.html CVE-2010-3880 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html -CVE-2010-3888 - http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061 CVE-2010-3888 - http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities -CVE-2010-3889 - http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061 CVE-2010-3889 - http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities CVE-2010-3904 - http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html CVE-2010-3904 - http://www.ubuntu.com/usn/USN-1000-1 @@ -18261,11 +17814,6 @@ CVE-2010-4196 - http://www.kb.cert.org/vuls/id/189929 CVE-2010-4210 - https://www.exploit-db.com/exploits/15206/ CVE-2010-4228 - http://securityreason.com/securityalert/8149 CVE-2010-4230 - http://www.exploit-db.com/exploits/15504 -CVE-2010-4230 - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt -CVE-2010-4231 - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt -CVE-2010-4232 - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt -CVE-2010-4233 - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt -CVE-2010-4234 - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt CVE-2010-4238 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html CVE-2010-4239 - https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-lfi.txt CVE-2010-4240 - https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-xss.txt @@ -18287,7 +17835,6 @@ CVE-2010-4252 - https://bugzilla.redhat.com/show_bug.cgi?id=659297 CVE-2010-4253 - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html CVE-2010-4254 - http://www.exploit-db.com/exploits/15974 CVE-2010-4255 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html -CVE-2010-4257 - http://www.xakep.ru/magazine/xa/124/052/1.asp CVE-2010-4258 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=33dd94ae1ccbfb7bf0fb6c692bc3d1c4269e6177 CVE-2010-4258 - https://lkml.org/lkml/2010/12/1/543 CVE-2010-4259 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052201.html @@ -18499,7 +18046,6 @@ CVE-2010-4569 - http://www.bugzilla.org/security/3.2.9/ CVE-2010-4570 - http://www.bugzilla.org/security/3.2.9/ CVE-2010-4572 - http://www.bugzilla.org/security/3.2.9/ CVE-2010-4588 - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx -CVE-2010-4595 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ86207 CVE-2010-4597 - http://www.exploit-db.com/exploits/15767 CVE-2010-4603 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM22186 CVE-2010-4604 - http://www.securityfocus.com/archive/1/515263/100/0/threaded @@ -18581,7 +18127,6 @@ CVE-2010-4800 - http://www.exploit-db.com/exploits/15233 CVE-2010-4801 - http://packetstormsecurity.org/1010-exploits/baconmap10-lfi.txt CVE-2010-4801 - http://securityreason.com/securityalert/8229 CVE-2010-4801 - http://www.exploit-db.com/exploits/15234 -CVE-2010-4804 - http://www.csc.ncsu.edu/faculty/jiang/nexuss.html CVE-2010-4805 - http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread CVE-2010-4819 - https://bugs.freedesktop.org/show_bug.cgi?id=28801 CVE-2010-4839 - http://www.exploit-db.com/exploits/15513 @@ -18695,20 +18240,11 @@ CVE-2010-4940 - http://packetstormsecurity.org/1009-exploits/wanewsletter-sql.tx CVE-2010-4942 - http://packetstormsecurity.org/1009-exploits/exoopportecal-sql.txt CVE-2010-4945 - http://packetstormsecurity.org/0901-exploits/joomlacamel-sql.txt CVE-2010-4945 - http://packetstormsecurity.org/1008-exploits/joomlacamelcitydb2-sql.txt -CVE-2010-4950 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ -CVE-2010-4951 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ -CVE-2010-4952 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ -CVE-2010-4953 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ CVE-2010-4954 - http://packetstormsecurity.org/1009-exploits/xtcommercegambio-sql.txt CVE-2010-4955 - http://packetstormsecurity.org/1008-exploits/apboard-sql.txt -CVE-2010-4956 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ -CVE-2010-4957 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ CVE-2010-4958 - http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt CVE-2010-4958 - http://securityreason.com/securityalert/8468 CVE-2010-4959 - http://www.packetstormsecurity.com/1007-exploits/prepodcastportal-sql.txt -CVE-2010-4960 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ -CVE-2010-4961 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ -CVE-2010-4962 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ CVE-2010-4963 - http://packetstormsecurity.org/1008-exploits/bxr-sqlxssxsrf.txt CVE-2010-4963 - http://securityreason.com/securityalert/8470 CVE-2010-4968 - http://packetstormsecurity.org/1007-exploits/joomlawmtpic-sql.txt @@ -19351,12 +18887,6 @@ CVE-2011-1010 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html CVE-2011-1012 - http://securityreason.com/securityalert/8115 CVE-2011-1017 - http://securityreason.com/securityalert/8115 CVE-2011-1047 - http://securityreason.com/securityalert/8099 -CVE-2011-1049 - https://www.hex-rays.com/vulnfix.shtml -CVE-2011-1050 - https://www.hex-rays.com/vulnfix.shtml -CVE-2011-1051 - https://www.hex-rays.com/vulnfix.shtml -CVE-2011-1052 - https://www.hex-rays.com/vulnfix.shtml -CVE-2011-1053 - https://www.hex-rays.com/vulnfix.shtml -CVE-2011-1054 - https://www.hex-rays.com/vulnfix.shtml CVE-2011-1055 - http://www.exploit-db.com/exploits/16171 CVE-2011-1060 - http://evuln.com/vulns/174/summary.html CVE-2011-1060 - http://securityreason.com/securityalert/8101 @@ -19375,7 +18905,6 @@ CVE-2011-1087 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4931.php CVE-2011-1090 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html CVE-2011-1092 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 CVE-2011-1095 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html -CVE-2011-1096 - http://www.csoonline.com/article/692366/widely-used-encryption-standard-is-insecure-say-experts CVE-2011-1099 - http://securityreason.com/securityalert/8121 CVE-2011-1099 - http://www.exploit-db.com/exploits/16933 CVE-2011-1100 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-4992.php @@ -19411,12 +18940,9 @@ CVE-2011-1290 - http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls CVE-2011-1331 - http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability CVE-2011-1344 - http://www.zdnet.com/blog/security/safarimacbook-first-to-fall-at-pwn2own-2011/8358 CVE-2011-1345 - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 -CVE-2011-1345 - https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 CVE-2011-1346 - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 -CVE-2011-1346 - https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 CVE-2011-1347 - http://www.zdnet.com/blog/security/pwn2own-2011-ie8-on-windows-7-hijacked-with-3-vulnerabilities/8367 CVE-2011-1347 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 -CVE-2011-1347 - https://threatpost.com/en_us/blogs/pwn2own-winner-stephen-fewer-031011 CVE-2011-1407 - http://www.ubuntu.com/usn/USN-1135-1 CVE-2011-1411 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html CVE-2011-1412 - http://securityreason.com/securityalert/8324 @@ -19542,7 +19068,6 @@ CVE-2011-1669 - http://www.exploit-db.com/exploits/17119 CVE-2011-1670 - http://securityreason.com/securityalert/8195 CVE-2011-1670 - http://www.exploit-db.com/exploits/17098 CVE-2011-1671 - http://securityreason.com/securityalert/8196 -CVE-2011-1671 - http://www.mavitunasecurity.com/XSS-vulnerability-in-Tracks/ CVE-2011-1685 - https://bugzilla.redhat.com/show_bug.cgi?id=696795 CVE-2011-1686 - https://bugzilla.redhat.com/show_bug.cgi?id=696795 CVE-2011-1687 - https://bugzilla.redhat.com/show_bug.cgi?id=696795 @@ -19557,7 +19082,6 @@ CVE-2011-1717 - http://www.androidpolice.com/2011/04/14/exclusive-vulnerability- CVE-2011-1717 - http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/ CVE-2011-1721 - http://securityreason.com/securityalert/8212 CVE-2011-1723 - http://securityreason.com/securityalert/8211 -CVE-2011-1723 - http://www.mavitunasecurity.com/XSS-vulnerability-in-Redmine/ CVE-2011-1749 - http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download CVE-2011-1751 - https://github.com/nelhage/virtunoid CVE-2011-1760 - https://bugzilla.redhat.com/show_bug.cgi?id=700883 @@ -19567,7 +19091,6 @@ CVE-2011-1776 - http://securityreason.com/securityalert/8369 CVE-2011-1829 - http://packages.debian.org/changelogs/pool/main/a/apt/current/changelog CVE-2011-1833 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 CVE-2011-1838 - http://securityreason.com/securityalert/8257 -CVE-2011-1838 - http://www.mavitunasecurity.com/XSS-vulnerability-in-Twiki/ CVE-2011-1857 - http://securityreason.com/securityalert/8273 CVE-2011-1858 - http://securityreason.com/securityalert/8273 CVE-2011-1859 - http://securityreason.com/securityalert/8273 @@ -19742,14 +19265,12 @@ CVE-2011-2372 - https://bugzilla.mozilla.org/show_bug.cgi?id=657462 CVE-2011-2378 - https://bugzilla.mozilla.org/show_bug.cgi?id=648065 CVE-2011-2382 - http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt CVE-2011-2382 - http://ju12.tistory.com/attachment/cfile4.uf@151FAB4C4DDC9E0002A6FE.ppt -CVE-2011-2382 - http://www.networkworld.com/community/node/74259 CVE-2011-2382 - http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/ CVE-2011-2382 - http://www.youtube.com/watch?v=V95CX-3JpK0 CVE-2011-2382 - http://www.youtube.com/watch?v=VsSkcnIFCxM CVE-2011-2382 - https://sites.google.com/site/tentacoloviola/cookiejacking/Cookiejacking2011_final.ppt CVE-2011-2383 - http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt CVE-2011-2383 - http://ju12.tistory.com/attachment/cfile4.uf@151FAB4C4DDC9E0002A6FE.ppt -CVE-2011-2383 - http://www.networkworld.com/community/node/74259 CVE-2011-2383 - http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/ CVE-2011-2383 - http://www.youtube.com/watch?v=V95CX-3JpK0 CVE-2011-2383 - http://www.youtube.com/watch?v=VsSkcnIFCxM @@ -19948,7 +19469,6 @@ CVE-2011-3390 - http://securityreason.com/securityalert/8370 CVE-2011-3390 - http://voidroot.blogspot.com/2011/08/xss-in-ibm-open-admin-tool.html CVE-2011-3393 - http://securityreason.com/securityalert/8376 CVE-2011-3394 - http://securityreason.com/securityalert/8376 -CVE-2011-3402 - http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two CVE-2011-3402 - http://www.symantec.com/connect/w32-duqu_status-updates_installer-zero-day-exploit CVE-2011-3402 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087 CVE-2011-3410 - http://www.kb.cert.org/vuls/id/361441 @@ -20165,7 +19685,6 @@ CVE-2011-4153 - http://www.exploit-db.com/exploits/18370/ CVE-2011-4161 - http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112 CVE-2011-4231 - http://www.cisco.com/en/US/docs/ios/ios_xe/3/release/notes/asr1k_caveats_34s.html CVE-2011-4293 - http://moodle.org/mod/forum/discuss.php?d=182736 -CVE-2011-4314 - http://openid.net/2011/05/05/attribute-exchange-security-alert/ CVE-2011-4317 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html CVE-2011-4317 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html CVE-2011-4317 - https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue @@ -20385,7 +19904,6 @@ CVE-2011-5054 - http://c-skills.blogspot.com/2011/11/openpam-trickery.html CVE-2011-5075 - http://www.exploit-db.com/exploits/18132/ CVE-2011-5075 - http://www.openwall.com/lists/oss-security/2011/11/22/3 CVE-2011-5081 - http://seclists.org/bugtraq/2011/Apr/266 -CVE-2011-5082 - http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982 CVE-2011-5083 - http://cxsecurity.com/issue/WLB-2011090012 CVE-2011-5083 - http://vigilance.fr/vulnerability/Dotclear-file-upload-via-swfupload-swf-11396 CVE-2011-5094 - http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html @@ -20673,7 +20191,6 @@ CVE-2012-0782 - http://www.exploit-db.com/exploits/18417 CVE-2012-0785 - https://www.cloudbees.com/jenkins-security-advisory-2012-01-12 CVE-2012-0786 - https://github.com/hercules-team/augeas/commit/16387744 CVE-2012-0815 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html -CVE-2012-0825 - http://openid.net/2011/05/05/attribute-exchange-security-alert/ CVE-2012-0829 - http://www.openwall.com/lists/oss-security/2012/02/02/10 CVE-2012-0830 - http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/ CVE-2012-0830 - http://www.h-online.com/security/news/item/Critical-PHP-vulnerability-being-fixed-1427316.html @@ -20723,7 +20240,6 @@ CVE-2012-0895 - http://packetstormsecurity.org/files/108631/countperday-download CVE-2012-0895 - http://www.exploit-db.com/exploits/18355 CVE-2012-0896 - http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt CVE-2012-0896 - http://www.exploit-db.com/exploits/18355 -CVE-2012-0900 - http://www.darksecurity.de/advisories/SSCHADV2011-042.txt CVE-2012-0903 - http://seclists.org/fulldisclosure/2012/Jan/244 CVE-2012-0903 - http://www.vulnerability-lab.com/get_content.php?id=378 CVE-2012-0904 - http://www.exploit-db.com/exploits/18309 @@ -20732,9 +20248,6 @@ CVE-2012-0906 - http://www.exploit-db.com/exploits/18386 CVE-2012-0907 - http://aluigi.altervista.org/adv/neoaxis_1-adv.txt CVE-2012-0911 - http://www.exploit-db.com/exploits/19573 CVE-2012-0911 - http://www.exploit-db.com/exploits/19630 -CVE-2012-0929 - https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 -CVE-2012-0930 - https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 -CVE-2012-0931 - https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03 CVE-2012-0932 - http://packetstormsecurity.org/files/108887/leadcapturepagesystem-xss.txt CVE-2012-0933 - http://packetstormsecurity.org/files/108869/acidcat-xss.txt CVE-2012-0936 - http://issues.opennms.org/browse/NMS-5128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs @@ -20910,7 +20423,6 @@ CVE-2012-1216 - http://packetstormsecurity.org/files/109706/PBBoard-2.1.4-Cross- CVE-2012-1217 - http://packetstormsecurity.org/files/109665/STHS-v2-Web-Portal-2.2-SQL-Injection.html CVE-2012-1218 - http://www.vulnerability-lab.com/get_content.php?id=402 CVE-2012-1219 - http://www.vulnerability-lab.com/get_content.php?id=402 -CVE-2012-1224 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt CVE-2012-1226 - http://www.exploit-db.com/exploits/18480 CVE-2012-1226 - http://www.securityfocus.com/archive/1/521583 CVE-2012-1226 - http://www.vulnerability-lab.com/get_content.php?id=428 @@ -20934,9 +20446,6 @@ CVE-2012-1417 - http://packetstormsecurity.org/files/110320/yealink-xss.txt CVE-2012-1464 - http://www.exploit-db.com/exploits/18543 CVE-2012-1465 - http://www.exploit-db.com/exploits/18541 CVE-2012-1466 - http://www.exploit-db.com/exploits/18542 -CVE-2012-1467 - https://www.htbridge.com/advisory/HTB23079 -CVE-2012-1468 - https://www.htbridge.com/advisory/HTB23079 -CVE-2012-1469 - https://www.htbridge.com/advisory/HTB23079 CVE-2012-1493 - http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/ CVE-2012-1495 - https://packetstormsecurity.com/files/112323/WebCalendar-1.2.4-Pre-Auth-Remote-Code-Injection.html CVE-2012-1495 - https://packetstormsecurity.com/files/112332/WebCalendar-1.2.4-Remote-Code-Execution.html @@ -21161,10 +20670,8 @@ CVE-2012-1904 - http://packetstormsecurity.org/files/111162/RealPlayer-1.1.4-Mem CVE-2012-1908 - http://www.splunk.com/view/SP-CAAAGTK#38585 CVE-2012-1910 - https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831 CVE-2012-1911 - http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929 -CVE-2012-1911 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt CVE-2012-1911 - http://www.exploit-db.com/exploits/18578 CVE-2012-1912 - http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929 -CVE-2012-1912 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt CVE-2012-1912 - http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html CVE-2012-1912 - http://www.exploit-db.com/exploits/18578 CVE-2012-1916 - http://www.kb.cert.org/vuls/id/743555 @@ -21242,7 +20749,6 @@ CVE-2012-2096 - http://drupal.org/node/1528614 CVE-2012-2098 - http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.html CVE-2012-2098 - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 CVE-2012-2098 - https://www.oracle.com/security-alerts/cpujan2021.html -CVE-2012-2099 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt CVE-2012-2113 - https://bugzilla.redhat.com/show_bug.cgi?id=810551 CVE-2012-2115 - http://seclists.org/fulldisclosure/2012/Jan/27 CVE-2012-2115 - http://www.mavitunasecurity.com/sql-injection-vulnerability-in-openemr/ @@ -21359,7 +20865,6 @@ CVE-2012-2751 - http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-c CVE-2012-2751 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html CVE-2012-2760 - http://packetstormsecurity.org/files/112991/Mod_Auth_OpenID-Session-Stealing.html CVE-2012-2763 - http://www.openwall.com/lists/oss-security/2012/05/31/1 -CVE-2012-2763 - http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html CVE-2012-2772 - http://ffmpeg.org/security.html CVE-2012-2774 - http://ffmpeg.org/security.html CVE-2012-2775 - http://ffmpeg.org/security.html @@ -21392,7 +20897,6 @@ CVE-2012-2804 - http://ffmpeg.org/security.html CVE-2012-2808 - http://blog.watchfire.com/files/androiddnsweakprng.pdf CVE-2012-2814 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html CVE-2012-2903 - http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html -CVE-2012-2904 - http://www.longtailvideo.com/support/forums/jw-player/bug-reports/26699/xss-exists-in-debug-functionality CVE-2012-2905 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.php CVE-2012-2906 - http://packetstormsecurity.org/files/112804/Artiphp-CMS-5.5.0-Cross-Site-Scripting.html CVE-2012-2906 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5090.php @@ -21484,7 +20988,6 @@ CVE-2012-3132 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-151 CVE-2012-3134 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html CVE-2012-3135 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html CVE-2012-3137 - http://arstechnica.com/security/2012/09/oracle-database-stealth-password-cracking-vulnerability/ -CVE-2012-3137 - http://threatpost.com/en_us/blogs/flaw-oracle-logon-protocol-leads-easy-password-cracking-092012?utm_source=Threatpost&utm_medium=Tabs&utm_campaign=Today%27s+Most+Popular CVE-2012-3137 - http://www.darkreading.com/authentication/167901072/security/application-security/240007643/attack-easily-cracks-oracle-database-passwords.html CVE-2012-3137 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html CVE-2012-3137 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html @@ -21589,7 +21092,6 @@ CVE-2012-3228 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-151 CVE-2012-3229 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html CVE-2012-3230 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html CVE-2012-3236 - http://www.exploit-db.com/exploits/19482 -CVE-2012-3236 - http://www.reactionpenetrationtesting.co.uk/FIT-file-handling-dos.html CVE-2012-3342 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html CVE-2012-3347 - http://www.kb.cert.org/vuls/id/773035 CVE-2012-3347 - http://www.kb.cert.org/vuls/id/MAPG-8RQL83 @@ -21615,7 +21117,6 @@ CVE-2012-3414 - https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets- CVE-2012-3418 - https://bugzilla.redhat.com/show_bug.cgi?id=840920 CVE-2012-3430 - http://www.ubuntu.com/usn/USN-1568-1 CVE-2012-3430 - http://www.ubuntu.com/usn/USN-1577-1 -CVE-2012-3434 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt CVE-2012-3440 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html CVE-2012-3448 - https://www.exploit-db.com/exploits/38030/ CVE-2012-3450 - https://bugs.php.net/bug.php?id=61755 @@ -21642,7 +21143,6 @@ CVE-2012-3571 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul CVE-2012-3577 - http://packetstormsecurity.org/files/113287/WordPress-Nmedia-WP-Member-Conversation-1.35.0-Shell-Upload.html CVE-2012-3578 - http://packetstormsecurity.org/files/113323/WordPress-FCChat-Widget-2.x-Shell-Upload.html CVE-2012-3579 - http://packetstormsecurity.com/files/116277/Symantec-Messaging-Gateway-9.5-Default-SSH-Password.html -CVE-2012-3585 - http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html CVE-2012-3752 - http://packetstormsecurity.com/files/118359/Apple-QuickTime-7.7.2-TeXML-Style-Element-font-table-Field-Stack-Buffer-Overflow.html CVE-2012-3753 - http://packetstormsecurity.com/files/118421/Apple-QuickTime-7.7.2-MIME-Type-Buffer-Overflow.html CVE-2012-3755 - http://packetstormsecurity.org/files/118231/Apple-QuickTime-7.7.2-Buffer-Overflow.html @@ -21739,7 +21239,6 @@ CVE-2012-4220 - http://www.kb.cert.org/vuls/id/702452 CVE-2012-4221 - http://www.kb.cert.org/vuls/id/702452 CVE-2012-4222 - http://www.kb.cert.org/vuls/id/702452 CVE-2012-4226 - http://packetstormsecurity.com/files/115463/WordPress-Quick-Post-Widget-1.9.1-Cross-Site-Scripting.html -CVE-2012-4226 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt CVE-2012-4230 - http://packetstormsecurity.com/files/120750/TinyMCE-3.5.8-Cross-Site-Scripting.html CVE-2012-4230 - http://seclists.org/fulldisclosure/2013/Mar/114 CVE-2012-4230 - http://www.madirish.net/554 @@ -21853,7 +21352,6 @@ CVE-2012-4528 - http://seclists.org/fulldisclosure/2012/Oct/113 CVE-2012-4530 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b66c5984017533316fd1951770302649baf1aa33 CVE-2012-4530 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 CVE-2012-4530 - https://github.com/torvalds/linux/commit/b66c5984017533316fd1951770302649baf1aa33 -CVE-2012-4532 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-014.txt CVE-2012-4540 - https://bugzilla.redhat.com/show_bug.cgi?id=869040 CVE-2012-4553 - http://drupal.org/node/1815912 CVE-2012-4554 - http://drupal.org/node/1815912 @@ -21890,7 +21388,6 @@ CVE-2012-4658 - http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/i CVE-2012-4676 - http://www.openwall.com/lists/oss-security/2012/08/14/1 CVE-2012-4680 - http://www.foofus.net/?page_id=616 CVE-2012-4681 - http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html -CVE-2012-4681 - https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day CVE-2012-4700 - http://www.integraxor.com/blog/security-issue-for-activex-enabled-browser-vulnerability-note CVE-2012-4728 - http://packetstormsecurity.com/files/120713/Corel-Quattro-Pro-X6-Standard-Edition-NULL-Pointer-Dereference.html CVE-2012-4743 - http://www.vulnerability-lab.com/get_content.php?id=504 @@ -21966,13 +21463,9 @@ CVE-2012-4927 - http://freecode.com/projects/limesurvey/releases/342070 CVE-2012-4927 - http://packetstormsecurity.org/files/110100/limesurvey-sql.txt CVE-2012-4928 - http://packetstormsecurity.org/files/110046/Oxwall-1.1.1-Cross-Site-Scripting.html CVE-2012-4929 - http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor -CVE-2012-4929 - http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312 -CVE-2012-4929 - http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512 CVE-2012-4929 - http://www.theregister.co.uk/2012/09/14/crime_tls_attack/ CVE-2012-4929 - https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls CVE-2012-4929 - https://github.com/mpgn/CRIME-poc -CVE-2012-4929 - https://threatpost.com/en_us/blogs/demo-crime-tls-attack-091212 -CVE-2012-4930 - http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312 CVE-2012-4930 - http://www.theregister.co.uk/2012/09/14/crime_tls_attack/ CVE-2012-4930 - https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls CVE-2012-4934 - http://www.kb.cert.org/vuls/id/207540 @@ -21993,14 +21486,9 @@ CVE-2012-4950 - http://www.kb.cert.org/vuls/id/802596 CVE-2012-4951 - http://www.kb.cert.org/vuls/id/180091 CVE-2012-4953 - http://www.kb.cert.org/vuls/id/985625 CVE-2012-4955 - http://www.kb.cert.org/vuls/id/558132 -CVE-2012-4956 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 -CVE-2012-4957 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 -CVE-2012-4958 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 -CVE-2012-4959 - https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959 CVE-2012-4969 - http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild CVE-2012-4987 - http://packetstormsecurity.org/files/117691/Realplayer-Watchfolders-Long-Filepath-Overflow.html CVE-2012-4988 - http://seclists.org/fulldisclosure/2012/Oct/36 -CVE-2012-4988 - http://www.reactionpenetrationtesting.co.uk/xnview-jls-heap.html CVE-2012-4988 - https://www.exploit-db.com/exploits/21741/ CVE-2012-4992 - http://seclists.org/fulldisclosure/2012/Mar/7 CVE-2012-4992 - http://www.exploit-db.com/exploits/18555 @@ -22233,7 +21721,6 @@ CVE-2012-5911 - http://vulnerability-lab.com/get_content.php?id=482 CVE-2012-5912 - http://packetstormsecurity.org/files/111274/PicoPublisher-2.0-SQL-Injection.html CVE-2012-5912 - http://www.exploit-db.com/exploits/18670 CVE-2012-5913 - http://packetstormsecurity.org/files/111249/WordPress-Integrator-1.32-Cross-Site-Scripting.html -CVE-2012-5913 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-010.txt CVE-2012-5914 - http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html CVE-2012-5915 - http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html CVE-2012-5916 - http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html @@ -22319,7 +21806,6 @@ CVE-2012-6448 - https://www.exploit-db.com/exploits/38153 CVE-2012-6449 - https://packetstormsecurity.com/files/119113/C-Panel-WHM-11.34.0-Cross-Site-Scripting.html CVE-2012-6493 - http://packetstormsecurity.com/files/119260/Nexpose-Security-Console-Cross-Site-Request-Forgery.html CVE-2012-6493 - http://www.exploit-db.com/exploits/23924 -CVE-2012-6498 - http://thaicert.or.th/alerts/admin/2012/al2012ad025.html CVE-2012-6498 - http://www.youtube.com/watch?v=CfvTCSS3LGY CVE-2012-6504 - http://www.exploit-db.com/exploits/18788 CVE-2012-6505 - http://www.exploit-db.com/exploits/18788 @@ -22343,13 +21829,11 @@ CVE-2012-6518 - http://www.vulnerability-lab.com/get_content.php?id=518 CVE-2012-6519 - http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.html CVE-2012-6519 - http://www.exploit-db.com/exploits/18804 CVE-2012-6519 - http://www.vulnerability-lab.com/get_content.php?id=518 -CVE-2012-6520 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt CVE-2012-6520 - http://www.openwall.com/lists/oss-security/2012/04/13/4 CVE-2012-6520 - http://www.openwall.com/lists/oss-security/2012/04/15/1 CVE-2012-6521 - http://packetstormsecurity.org/files/115253/Elefant-CMS-1.2.0-Cross-Site-Scripting.html CVE-2012-6522 - http://www.exploit-db.com/exploits/18711 CVE-2012-6526 - http://packetstormsecurity.org/files/108756/vastalfreelance-sql.txt -CVE-2012-6528 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-002.txt CVE-2012-6534 - http://seclists.org/fulldisclosure/2012/Oct/25 CVE-2012-6534 - https://www.exploit-db.com/exploits/21744/ CVE-2012-6542 - http://www.ubuntu.com/usn/USN-1808-1 @@ -22390,10 +21874,8 @@ CVE-2012-6628 - http://packetstormsecurity.org/files/112694/WordPress-Newsletter CVE-2012-6630 - http://packetstormsecurity.org/files/112697/WordPress-Media-Categories-1.1.1-Cross-Site-Scripting.html CVE-2012-6631 - http://packetstormsecurity.org/files/112655/NetBill-Billing-System-1.2-CSRF-XSS.html CVE-2012-6632 - http://packetstormsecurity.org/files/112655/NetBill-Billing-System-1.2-CSRF-XSS.html -CVE-2012-6636 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf CVE-2012-6637 - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt CVE-2012-6637 - http://seclists.org/bugtraq/2014/Jan/96 -CVE-2012-6637 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf CVE-2012-6643 - http://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt CVE-2012-6644 - http://packetstormsecurity.org/files/108489/clipbucket-sqlxss.txt CVE-2012-6645 - http://drupal.org/node/1432318 @@ -22443,13 +21925,11 @@ CVE-2013-0141 - https://kc.mcafee.com/corporate/index?page=content&id=SB10042 CVE-2013-0149 - http://www.kb.cert.org/vuls/id/229804 CVE-2013-0150 - https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/ CVE-2013-0156 - http://www.insinuator.net/2013/01/rails-yaml/ -CVE-2013-0156 - https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156 CVE-2013-0158 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb CVE-2013-0160 - http://www.openwall.com/lists/oss-security/2013/01/08/3 CVE-2013-0160 - http://www.ubuntu.com/usn/USN-2129-1 CVE-2013-0160 - https://bugzilla.redhat.com/show_bug.cgi?id=892983 CVE-2013-0169 - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 -CVE-2013-0169 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf CVE-2013-0175 - https://github.com/sferik/multi_xml/pull/34 CVE-2013-0177 - http://packetstormsecurity.com/files/119673/Apache-OFBiz-Cross-Site-Scripting.html CVE-2013-0191 - http://sourceforge.net/p/pam-pgsql/bugs/13/ @@ -22531,7 +22011,6 @@ CVE-2013-0419 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013 CVE-2013-0422 - http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two.html CVE-2013-0422 - http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/ CVE-2013-0422 - http://seclists.org/bugtraq/2013/Jan/48 -CVE-2013-0422 - https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013 CVE-2013-0423 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html CVE-2013-0424 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html CVE-2013-0425 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html @@ -22696,10 +22175,8 @@ CVE-2013-1414 - http://www.exploit-db.com/exploits/26528/ CVE-2013-1418 - https://github.com/krb5/krb5/commit/c2ccf4197f697c4ff143b8a786acdd875e70a89d CVE-2013-1436 - http://www.openwall.com/lists/oss-security/2013/07/26/5 CVE-2013-1438 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html -CVE-2013-1450 - http://pastebin.com/raw.php?i=rz9BcBey CVE-2013-1450 - http://www.youtube.com/ChristianHaiderPoC CVE-2013-1450 - http://www.youtube.com/watch?v=TPqagWAvo8U -CVE-2013-1451 - http://pastebin.com/raw.php?i=rz9BcBey CVE-2013-1451 - http://www.youtube.com/ChristianHaiderPoC CVE-2013-1451 - http://www.youtube.com/watch?v=TPqagWAvo8U CVE-2013-1453 - http://karmainsecurity.com/KIS-2013-03 @@ -22731,7 +22208,6 @@ CVE-2013-1483 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013 CVE-2013-1488 - http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html CVE-2013-1488 - http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/ CVE-2013-1489 - http://seclists.org/fulldisclosure/2013/Jan/241 -CVE-2013-1489 - http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/ CVE-2013-1489 - http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150 CVE-2013-1489 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html CVE-2013-1489 - http://www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/ @@ -22877,18 +22353,12 @@ CVE-2013-1606 - http://www.coresecurity.com/advisories/buffer-overflow-ubiquiti- CVE-2013-1606 - http://www.exploit-db.com/exploits/26138/ CVE-2013-1616 - http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html CVE-2013-1617 - http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html -CVE-2013-1618 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf -CVE-2013-1619 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf CVE-2013-1620 - http://seclists.org/fulldisclosure/2014/Dec/23 -CVE-2013-1620 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf CVE-2013-1620 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html CVE-2013-1620 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html CVE-2013-1620 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html CVE-2013-1620 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html CVE-2013-1620 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html -CVE-2013-1621 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf -CVE-2013-1623 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf -CVE-2013-1624 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf CVE-2013-1629 - http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/ CVE-2013-1629 - https://github.com/pypa/pip/issues/425 CVE-2013-1630 - http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/ @@ -22897,8 +22367,6 @@ CVE-2013-1633 - http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_ CVE-2013-1636 - http://packetstormsecurity.com/files/120433/WordPress-Pretty-Link-1.6.3-Cross-Site-Scripting.html CVE-2013-1636 - http://packetstormsecurity.com/files/121623/Joomla-Jnews-8.0.1-Cross-Site-Scripting.html CVE-2013-1640 - http://ubuntu.com/usn/usn-1759-1 -CVE-2013-1641 - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-030.txt -CVE-2013-1642 - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-030.txt CVE-2013-1652 - http://ubuntu.com/usn/usn-1759-1 CVE-2013-1653 - http://ubuntu.com/usn/usn-1759-1 CVE-2013-1654 - http://ubuntu.com/usn/usn-1759-1 @@ -23031,7 +22499,6 @@ CVE-2013-20002 - https://en.0day.today/exploit/22090 CVE-2013-20002 - https://packetstormsecurity.com/files/124149/WordPress-Elemin-Shell-Upload.html CVE-2013-20002 - https://themify.me/blog/urgent-vulnerability-found-in-themify-framework-please-read CVE-2013-20003 - https://orangecyberdefense.com/global/blog/sensepost/blackhat-conference-z-wave-security/ -CVE-2013-20003 - https://sensepost.com/cms/resources/conferences/2013/bh_zwave/Security%20Evaluation%20of%20Z-Wave_WP.pdf CVE-2013-2006 - https://bugs.launchpad.net/ossn/+bug/1168252 CVE-2013-2010 - http://packetstormsecurity.com/files/130999/WordPress-W3-Total-Cache-PHP-Code-Execution.html CVE-2013-2017 - http://www.openwall.com/lists/oss-security/2013/04/29/10 @@ -23296,7 +22763,6 @@ CVE-2013-2561 - http://www.oracle.com/technetwork/topics/security/bulletinjul201 CVE-2013-2562 - http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt CVE-2013-2563 - http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt CVE-2013-2564 - http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt -CVE-2013-2566 - http://www.isg.rhul.ac.uk/tls/ CVE-2013-2566 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html CVE-2013-2566 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html CVE-2013-2566 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html @@ -23330,7 +22796,6 @@ CVE-2013-2578 - http://www.coresecurity.com/advisories/multiple-vulnerabilities- CVE-2013-2579 - http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras CVE-2013-2580 - http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras CVE-2013-2581 - http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras -CVE-2013-2585 - http://www.isecauditors.com/advisories-2013#2013-004 CVE-2013-2586 - http://packetstormsecurity.com/files/123407/XAMPP-1.8.1-Local-Write-Access.html CVE-2013-2586 - http://www.exploit-db.com/exploits/28654 CVE-2013-2594 - http://packetstormsecurity.com/files/121402/Hornbill-Supportworks-ITSM-1.0.0-SQL-Injection.html @@ -23344,12 +22809,8 @@ CVE-2013-2617 - http://seclists.org/fulldisclosure/2013/Mar/124 CVE-2013-2618 - http://packetstormsecurity.com/files/121034/Network-Weathermap-0.97a-Cross-Site-Scripting.html CVE-2013-2619 - http://packetstormsecurity.com/files/121035/Aspen-0.8-Directory-Traversal.html CVE-2013-2619 - http://seclists.org/fulldisclosure/2013/Apr/2 -CVE-2013-2621 - https://www.isecauditors.com/advisories-2013#2013-009 CVE-2013-2622 - https://packetstormsecurity.com/files/123557/Uebimiau-2.7.11-Cross-Site-Scripting-Open-Redirection.html -CVE-2013-2623 - https://www.isecauditors.com/advisories-2013#2013-009 -CVE-2013-2624 - https://www.isecauditors.com/advisories-2013#2013-009 CVE-2013-2631 - https://packetstormsecurity.com/files/121128/TinyWebGallery-1.8.9-Path-Disclosure.html -CVE-2013-2631 - https://www.isecauditors.com/advisories-2013#2013-012 CVE-2013-2634 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 CVE-2013-2634 - http://www.ubuntu.com/usn/USN-1814-1 CVE-2013-2635 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 @@ -23543,7 +23004,6 @@ CVE-2013-3585 - http://www.kb.cert.org/vuls/id/882286 CVE-2013-3586 - http://www.kb.cert.org/vuls/id/882286 CVE-2013-3587 - http://breachattack.com/ CVE-2013-3587 - https://www.blackhat.com/us-13/briefings.html#Prado -CVE-2013-3591 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats CVE-2013-3594 - http://www.kb.cert.org/vuls/id/122582 CVE-2013-3595 - http://www.kb.cert.org/vuls/id/122582 CVE-2013-3599 - http://www.kb.cert.org/vuls/id/960908 @@ -23559,17 +23019,11 @@ CVE-2013-3608 - http://www.kb.cert.org/vuls/id/648646 CVE-2013-3609 - http://www.kb.cert.org/vuls/id/648646 CVE-2013-3616 - http://www.kb.cert.org/vuls/id/521348 CVE-2013-3617 - http://www.kb.cert.org/vuls/id/533894 -CVE-2013-3617 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats CVE-2013-3626 - http://www.kb.cert.org/vuls/id/436214 CVE-2013-3627 - http://www.kb.cert.org/vuls/id/613886 CVE-2013-3627 - https://kc.mcafee.com/corporate/index?page=content&id=SB10055 -CVE-2013-3628 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats -CVE-2013-3629 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats CVE-2013-3630 - http://packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html -CVE-2013-3630 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats CVE-2013-3631 - http://www.kb.cert.org/vuls/id/326830 -CVE-2013-3631 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats -CVE-2013-3632 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats CVE-2013-3635 - http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html CVE-2013-3636 - http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html CVE-2013-3637 - http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html @@ -23597,7 +23051,6 @@ CVE-2013-3690 - http://seclists.org/fulldisclosure/2013/Jun/84 CVE-2013-3691 - http://seclists.org/fulldisclosure/2013/Jun/84 CVE-2013-3693 - http://btsc.webapps.blackberry.com/btsc/viewdocument.do;jsessionid=1C7CE6911426BCFAF2A80C3834F4DF0F?externalId=KB35139&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl CVE-2013-3718 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-3718 -CVE-2013-3720 - http://www.darksecurity.de/advisories/2013/SSCHADV2013-004.txt CVE-2013-3721 - http://packetstormsecurity.com/files/120976/PsychoStats-3.2.2b-Blind-SQL-Injection.html CVE-2013-3727 - http://packetstormsecurity.com/files/122282/Kasseler-CMS-2-r1223-CSRF-XSS-SQL-Injection.html CVE-2013-3727 - http://seclists.org/bugtraq/2013/Jul/26 @@ -24311,14 +23764,12 @@ CVE-2013-5988 - https://packetstormsecurity.com/files/cve/CVE-2013-5988 CVE-2013-6010 - http://packetstormsecurity.com/files/123327 CVE-2013-6017 - http://www.kb.cert.org/vuls/id/204950 CVE-2013-6021 - http://www.kb.cert.org/vuls/id/233990 -CVE-2013-6021 - https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/ CVE-2013-6022 - http://www.kb.cert.org/vuls/id/450646 CVE-2013-6023 - http://www.exploit-db.com/exploits/29959 CVE-2013-6023 - http://www.kb.cert.org/vuls/id/785838 CVE-2013-6025 - http://www.kb.cert.org/vuls/id/303900 CVE-2013-6025 - https://www.exploit-db.com/exploits/38805/ CVE-2013-6026 - http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/ -CVE-2013-6027 - http://pastebin.com/raw.php?i=vbiG42VD CVE-2013-6028 - http://www.kb.cert.org/vuls/id/204950 CVE-2013-6029 - http://www.kb.cert.org/vuls/id/346278 CVE-2013-6030 - http://www.kb.cert.org/vuls/id/168751 @@ -24336,7 +23787,6 @@ CVE-2013-6074 - http://packetstormsecurity.com/files/123934/Open-Xchange-AppSuit CVE-2013-6078 - http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/ CVE-2013-6079 - http://packetstormsecurity.com/files/122677 CVE-2013-6114 - http://www.exploit-db.com/exploits/28811/ -CVE-2013-6117 - http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html CVE-2013-6117 - http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html CVE-2013-6117 - http://seclists.org/bugtraq/2013/Nov/62 CVE-2013-6117 - http://www.exploit-db.com/exploits/29673 @@ -24366,7 +23816,6 @@ CVE-2013-6223 - http://seclists.org/fulldisclosure/2013/Nov/210 CVE-2013-6224 - http://packetstormsecurity.com/files/124222 CVE-2013-6225 - http://www.exploit-db.com/exploits/29672 CVE-2013-6227 - https://www.exploit-db.com/exploits/46206/ -CVE-2013-6229 - http://www.isecauditors.com/advisories-2013#2013-014 CVE-2013-6231 - http://www.exploit-db.com/exploits/31990 CVE-2013-6232 - http://packetstormsecurity.com/files/125495 CVE-2013-6232 - http://www.exploit-db.com/exploits/32038 @@ -24577,14 +24026,12 @@ CVE-2013-7091 - http://www.exploit-db.com/exploits/30472 CVE-2013-7092 - http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html CVE-2013-7103 - http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html CVE-2013-7104 - http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html -CVE-2013-7127 - http://www.securelist.com/en/blog/8168/Loophole_in_Safari CVE-2013-7129 - http://packetstormsecurity.com/files/124240 CVE-2013-7136 - http://www.planitcomputing.ie/upc-wifi-attack.pdf CVE-2013-7140 - http://seclists.org/bugtraq/2014/Jan/57 CVE-2013-7141 - http://seclists.org/bugtraq/2014/Jan/57 CVE-2013-7142 - http://seclists.org/bugtraq/2014/Jan/57 CVE-2013-7143 - http://seclists.org/bugtraq/2014/Jan/57 -CVE-2013-7144 - https://www.thaicert.or.th/papers/general/2013/pa2013ge010.html CVE-2013-7175 - http://www.kb.cert.org/vuls/id/869702 CVE-2013-7179 - http://www.kb.cert.org/vuls/id/431726 CVE-2013-7183 - http://www.kb.cert.org/vuls/id/431726 @@ -24868,7 +24315,6 @@ CVE-2014-0195 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-197 CVE-2014-0195 - http://www.vmware.com/security/advisories/VMSA-2014-0006.html CVE-2014-0195 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html CVE-2014-0195 - https://kc.mcafee.com/corporate/index?page=content&id=SB10075 -CVE-2014-0196 - http://pastebin.com/raw.php?i=yTSFUBgZ CVE-2014-0196 - http://www.exploit-db.com/exploits/33516 CVE-2014-0196 - https://bugzilla.redhat.com/show_bug.cgi?id=1094232 CVE-2014-0198 - http://seclists.org/fulldisclosure/2014/Dec/23 @@ -24947,7 +24393,6 @@ CVE-2014-0330 - http://www.kb.cert.org/vuls/id/813382 CVE-2014-0331 - http://seclists.org/fulldisclosure/2014/Apr/53 CVE-2014-0331 - http://www.kb.cert.org/vuls/id/667340 CVE-2014-0332 - http://www.kb.cert.org/vuls/id/727318 -CVE-2014-0332 - http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_XSS_Resolved_in_7.1_SP2_and_7.2.pdf CVE-2014-0335 - http://www.kb.cert.org/vuls/id/823452 CVE-2014-0336 - http://www.kb.cert.org/vuls/id/823452 CVE-2014-0337 - http://www.kb.cert.org/vuls/id/917700 @@ -25039,16 +24484,12 @@ CVE-2014-0749 - http://packetstormsecurity.com/files/126855/TORQUE-Resource-Mana CVE-2014-0749 - http://www.exploit-db.com/exploits/33554 CVE-2014-0749 - https://labs.mwrinfosecurity.com/advisories/2014/05/14/torque-buffer-overflow CVE-2014-0780 - https://www.exploit-db.com/exploits/42699/ -CVE-2014-0781 - https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities CVE-2014-0781 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a CVE-2014-0782 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a -CVE-2014-0783 - https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities CVE-2014-0783 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a -CVE-2014-0784 - https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities CVE-2014-0784 - https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a CVE-2014-0787 - https://www.exploit-db.com/exploits/42724/ CVE-2014-0792 - https://sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist -CVE-2014-0792 - https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability CVE-2014-0834 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV52863 CVE-2014-0864 - http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html CVE-2014-0864 - http://seclists.org/fulldisclosure/2014/Jun/173 @@ -25151,7 +24592,6 @@ CVE-2014-10023 - http://packetstormsecurity.com/files/125007 CVE-2014-10029 - http://packetstormsecurity.com/files/129225/FluxBB-1.5.6-SQL-Injection.html CVE-2014-10029 - http://seclists.org/fulldisclosure/2014/Nov/73 CVE-2014-10033 - http://www.exploit-db.com/exploits/31515 -CVE-2014-10033 - http://www.secgeek.net/oscommerce-v2x-sql-injection-vulnerability/ CVE-2014-10034 - http://packetstormsecurity.com/files/125480 CVE-2014-10034 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5170.php CVE-2014-10035 - http://packetstormsecurity.com/files/125480 @@ -25186,7 +24626,6 @@ CVE-2014-10377 - https://wpvulndb.com/vulnerabilities/9812 CVE-2014-10392 - https://wpvulndb.com/vulnerabilities/9621 CVE-2014-10396 - https://packetstormsecurity.com/files/128186/ CVE-2014-10397 - https://packetstormsecurity.com/files/128188/ -CVE-2014-10398 - https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt CVE-2014-10401 - https://github.com/perl5-dbi/dbi/commit/caedc0d7d602f5b2ae5efc1b00f39efeafb7b05a CVE-2014-10401 - https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.632-9th-Nov-2014 CVE-2014-1201 - https://github.com/pedrib/PoC/blob/master/lorexActivex/lorex-report.txt @@ -25238,7 +24677,6 @@ CVE-2014-125126 - https://www.exploit-db.com/exploits/31264 CVE-2014-125127 - https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2014/CVE-2014-125127 CVE-2014-125128 - https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2014/CVE-2014-125128 CVE-2014-1359 - http://packetstormsecurity.com/files/167630/launchd-Heap-Corruption.html -CVE-2014-1372 - https://code.google.com/p/google-security-research/issues/detail?id=18 CVE-2014-1401 - http://packetstormsecurity.com/files/125079 CVE-2014-1402 - http://openwall.com/lists/oss-security/2014/01/10/2 CVE-2014-1402 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734747 @@ -25523,26 +24961,18 @@ CVE-2014-1876 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-197 CVE-2014-1877 - http://seclists.org/oss-sec/2014/q1/258 CVE-2014-1881 - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt CVE-2014-1881 - http://seclists.org/bugtraq/2014/Jan/96 -CVE-2014-1881 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf CVE-2014-1882 - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt CVE-2014-1882 - http://seclists.org/bugtraq/2014/Jan/96 -CVE-2014-1882 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf CVE-2014-1883 - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt CVE-2014-1883 - http://seclists.org/bugtraq/2014/Jan/96 -CVE-2014-1883 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf CVE-2014-1884 - http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt CVE-2014-1884 - http://seclists.org/bugtraq/2014/Jan/96 -CVE-2014-1884 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf -CVE-2014-1885 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf -CVE-2014-1886 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf -CVE-2014-1887 - http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf CVE-2014-1888 - http://packetstormsecurity.com/files/125212/WordPress-Buddypress-1.9.1-Cross-Site-Scripting.html CVE-2014-1903 - http://packetstormsecurity.com/files/125166/FreePBX-2.x-Code-Execution.html CVE-2014-1903 - http://packetstormsecurity.com/files/125215/FreePBX-2.9-Remote-Code-Execution.html CVE-2014-1906 - http://packetstormsecurity.com/files/125454 CVE-2014-1907 - http://packetstormsecurity.com/files/125454 CVE-2014-1912 - http://bugs.python.org/issue20246 -CVE-2014-1912 - http://pastebin.com/raw.php?i=GHXSmNEg CVE-2014-1912 - http://www.exploit-db.com/exploits/31875 CVE-2014-1912 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html CVE-2014-1912 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html @@ -25578,7 +25008,6 @@ CVE-2014-2026 - http://packetstormsecurity.com/files/129590/Intrexx-Professional CVE-2014-2026 - http://www.christian-schneider.net/advisories/CVE-2014-2026.txt CVE-2014-2027 - http://openwall.com/lists/oss-security/2014/02/19/10 CVE-2014-2027 - http://openwall.com/lists/oss-security/2014/02/19/4 -CVE-2014-2034 - https://support.sonatype.com/entries/42374566-CVE-2014-2034-Nexus-Security-Advisory-REST-API CVE-2014-2038 - http://www.ubuntu.com/usn/USN-2140-1 CVE-2014-2040 - http://www.vapid.dhs.org/advisories/wordpress/plugins/MediaFileRenamer-1.7.0/index.html CVE-2014-2044 - http://packetstormsecurity.com/files/125585/ownCloud-4.0.x-4.5.x-Remote-Code-Execution.html @@ -25590,7 +25019,6 @@ CVE-2014-2073 - http://packetstormsecurity.com/files/125325/Catia-V5-6R2013-Stac CVE-2014-2075 - http://www.tibco.com/mk/advisory.jsp CVE-2014-2081 - http://packetstormsecurity.com/files/127997/VTLS-Virtua-SQL-Injection.html CVE-2014-2087 - http://seclists.org/fulldisclosure/2014/Mar/137 -CVE-2014-2087 - https://www.rcesecurity.com/2014/03/cve-2014-2087-free-download-manager-cdownloads_deleted-updatedownload-remote-code-execution CVE-2014-2088 - http://packetstormsecurity.com/files/125350/ILIAS-4.4.1-Cross-Site-Scripting-Shell-Upload.html CVE-2014-2089 - http://packetstormsecurity.com/files/125350/ILIAS-4.4.1-Cross-Site-Scripting-Shell-Upload.html CVE-2014-2090 - http://packetstormsecurity.com/files/125350/ILIAS-4.4.1-Cross-Site-Scripting-Shell-Upload.html @@ -25631,7 +25059,6 @@ CVE-2014-2254 - http://www.siemens.com/innovation/pool/de/forschungsfelder/sieme CVE-2014-2256 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf CVE-2014-2258 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf CVE-2014-2260 - http://packetstormsecurity.com/files/124804/Ajenti-1.2.13-Cross-Site-Scripting.html -CVE-2014-2265 - http://www.hedgehogsecurity.co.uk/2014/02/26/contactform7-vulnerability/ CVE-2014-2274 - https://security.dxw.com/advisories/stored-xss-and-csrf-vulnerabilities-in-subscribe-to-comments-reloaded-140129/ CVE-2014-2278 - http://packetstormsecurity.com/files/125726 CVE-2014-2279 - http://packetstormsecurity.com/files/125726 @@ -26013,7 +25440,6 @@ CVE-2014-3149 - http://packetstormsecurity.com/files/127328/IP.Board-3.4.x-3.3.x CVE-2014-3149 - http://www.christian-schneider.net/advisories/CVE-2014-3149.txt CVE-2014-3158 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CVE-2014-3181 - http://www.ubuntu.com/usn/USN-2376-1 -CVE-2014-3182 - https://code.google.com/p/google-security-research/issues/detail?id=89 CVE-2014-3184 - http://www.ubuntu.com/usn/USN-2376-1 CVE-2014-3185 - http://www.ubuntu.com/usn/USN-2376-1 CVE-2014-3186 - http://www.ubuntu.com/usn/USN-2376-1 @@ -26031,10 +25457,6 @@ CVE-2014-3225 - http://www.exploit-db.com/exploits/33252 CVE-2014-3227 - http://openwall.com/lists/oss-security/2014/04/29/4 CVE-2014-3227 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746306 CVE-2014-3247 - http://www.exploit-db.com/exploits/33250 -CVE-2014-3248 - http://puppetlabs.com/security/cve/cve-2014-3248 -CVE-2014-3249 - http://puppetlabs.com/security/cve/cve-2014-3249 -CVE-2014-3250 - https://puppet.com/security/cve/CVE-2014-3250 -CVE-2014-3251 - http://puppetlabs.com/security/cve/cve-2014-3251 CVE-2014-3289 - http://packetstormsecurity.com/files/127004/Cisco-Ironport-Email-Security-Virtual-Appliance-8.0.0-671-XSS.html CVE-2014-3289 - http://seclists.org/fulldisclosure/2014/Jun/57 CVE-2014-3306 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm @@ -26082,9 +25504,7 @@ CVE-2014-3479 - http://www.oracle.com/technetwork/topics/security/bulletinjan201 CVE-2014-3479 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html CVE-2014-3480 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CVE-2014-3480 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html -CVE-2014-3482 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J CVE-2014-3482 - https://hackerone.com/reports/28449 -CVE-2014-3483 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J CVE-2014-3483 - https://hackerone.com/reports/28450 CVE-2014-3486 - https://bugzilla.redhat.com/show_bug.cgi?id=1107528 CVE-2014-3487 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html @@ -26093,16 +25513,8 @@ CVE-2014-3490 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4 CVE-2014-3496 - https://bugzilla.redhat.com/show_bug.cgi?id=1110470 CVE-2014-3503 - http://packetstormsecurity.com/files/127375/Apache-Syncope-Insecure-Password-Generation.html CVE-2014-3504 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html -CVE-2014-3505 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm -CVE-2014-3506 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm -CVE-2014-3507 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm CVE-2014-3507 - https://kc.mcafee.com/corporate/index?page=content&id=SB10109 -CVE-2014-3508 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm -CVE-2014-3509 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm -CVE-2014-3510 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm -CVE-2014-3511 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm CVE-2014-3511 - https://kc.mcafee.com/corporate/index?page=content&id=SB10084 -CVE-2014-3512 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm CVE-2014-3513 - https://kc.mcafee.com/corporate/index?page=content&id=SB10091 CVE-2014-3515 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CVE-2014-3515 - https://hackerone.com/reports/28445 @@ -26444,9 +25856,6 @@ CVE-2014-4172 - https://issues.jasig.org/browse/CASC-228 CVE-2014-4187 - http://packetstormsecurity.com/files/127098/ClipBucket-CMS-Cross-Site-Scripting.html CVE-2014-4194 - http://packetstormsecurity.com/files/127164/ZeroCMS-1.0-SQL-Injection.html CVE-2014-4195 - http://packetstormsecurity.com/files/127262/ZeroCMS-1.0-Cross-Site-Scripting.html -CVE-2014-4196 - https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt -CVE-2014-4197 - https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt -CVE-2014-4198 - https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt CVE-2014-4199 - http://seclists.org/fulldisclosure/2014/Aug/71 CVE-2014-4200 - http://seclists.org/fulldisclosure/2014/Aug/71 CVE-2014-4201 - http://seclists.org/fulldisclosure/2014/Dec/23 @@ -26733,8 +26142,6 @@ CVE-2014-4345 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3 CVE-2014-4345 - https://github.com/krb5/krb5/commit/dc7ed55c689d57de7f7408b34631bf06fec9dab1 CVE-2014-4346 - http://seclists.org/fulldisclosure/2014/Jul/77 CVE-2014-4347 - http://seclists.org/fulldisclosure/2014/Jul/77 -CVE-2014-4395 - https://code.google.com/p/google-security-research/issues/detail?id=29 -CVE-2014-4402 - https://code.google.com/p/google-security-research/issues/detail?id=33 CVE-2014-4406 - http://www.cloudscan.me/2014/09/cve-2014-4406-apple-sa-2014-09-17-5-os.html CVE-2014-4492 - http://packetstormsecurity.com/files/134393/Mac-OS-X-Networkd-XPC-Type-Confusion-Sandbox-Escape.html CVE-2014-4498 - https://trmm.net/Thunderstrike @@ -27028,7 +26435,6 @@ CVE-2014-5130 - http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-U CVE-2014-5131 - http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html CVE-2014-5132 - http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html CVE-2014-5138 - https://packetstormsecurity.com/files/128053/Sierra-Library-Services-Platform-1.2_3-XSS-Enumeration.html -CVE-2014-5139 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm CVE-2014-5140 - http://packetstormsecurity.com/files/128183/Loaded-Commerce-7-Shopping-Cart-SQL-Injection.html CVE-2014-5140 - http://resources.infosecinstitute.com/exploiting-systemic-query-vulnerabilities-attempt-re-invent-pdo/ CVE-2014-5140 - http://www.exploit-db.com/exploits/34552 @@ -27228,7 +26634,6 @@ CVE-2014-5540 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3 CVE-2014-5541 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-5541 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-5542 - http://www.kb.cert.org/vuls/id/582497 -CVE-2014-5542 - http://www.kb.cert.org/vuls/id/638641 CVE-2014-5542 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-5543 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-5543 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing @@ -27423,7 +26828,6 @@ CVE-2014-5639 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3 CVE-2014-5640 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-5640 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-5641 - http://www.kb.cert.org/vuls/id/582497 -CVE-2014-5641 - http://www.kb.cert.org/vuls/id/714937 CVE-2014-5641 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-5642 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-5642 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing @@ -27533,7 +26937,6 @@ CVE-2014-5694 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-5694 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-5695 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-5695 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing -CVE-2014-5696 - http://www.kb.cert.org/vuls/id/148041 CVE-2014-5696 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-5696 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-5697 - http://www.kb.cert.org/vuls/id/582497 @@ -28291,7 +27694,6 @@ CVE-2014-6278 - https://www.exploit-db.com/exploits/39568/ CVE-2014-6278 - https://www.exploit-db.com/exploits/39887/ CVE-2014-6280 - http://packetstormsecurity.com/files/128286/OsClass-3.4.1-Cross-Site-Scripting.html CVE-2014-6280 - https://www.netsparker.com/xss-vulnerabilities-in-osclass/ -CVE-2014-6284 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200 CVE-2014-6287 - http://packetstormsecurity.com/files/128243/HttpFileServer-2.3.x-Remote-Command-Execution.html CVE-2014-6287 - http://packetstormsecurity.com/files/135122/Rejetto-HTTP-File-Server-2.3.x-Remote-Code-Execution.html CVE-2014-6287 - http://packetstormsecurity.com/files/160264/Rejetto-HttpFileServer-2.3.x-Remote-Command-Execution.html @@ -28852,7 +28254,6 @@ CVE-2014-6777 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3 CVE-2014-6778 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-6778 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-6779 - http://www.kb.cert.org/vuls/id/582497 -CVE-2014-6779 - http://www.kb.cert.org/vuls/id/781201 CVE-2014-6779 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-6780 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-6780 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing @@ -30431,13 +29832,11 @@ CVE-2014-7810 - http://www.oracle.com/technetwork/topics/security/bulletinoct201 CVE-2014-7810 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html CVE-2014-7817 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html CVE-2014-7817 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html -CVE-2014-7818 - https://puppet.com/security/cve/cve-2014-7829 CVE-2014-7821 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CVE-2014-7822 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html CVE-2014-7822 - http://www.ubuntu.com/usn/USN-2543-1 CVE-2014-7822 - https://www.exploit-db.com/exploits/36743/ CVE-2014-7829 - https://hackerone.com/reports/43440 -CVE-2014-7829 - https://puppet.com/security/cve/cve-2014-7829 CVE-2014-7840 - https://bugzilla.redhat.com/show_bug.cgi?id=1163075 CVE-2014-7841 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 CVE-2014-7841 - https://bugzilla.redhat.com/show_bug.cgi?id=1163087 @@ -30483,7 +29882,6 @@ CVE-2014-7951 - http://packetstormsecurity.com/files/131510/ADB-Backup-Traversal CVE-2014-7951 - https://www.exploit-db.com/exploits/36813/ CVE-2014-7952 - http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html CVE-2014-7952 - http://seclists.org/fulldisclosure/2015/Jul/46 -CVE-2014-7952 - http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability CVE-2014-7952 - https://github.com/irsl/ADB-Backup-APK-Injection/ CVE-2014-7954 - http://packetstormsecurity.com/files/131509/Android-4.4-MTP-Path-Traversal.html CVE-2014-7956 - http://packetstormsecurity.com/files/129890/WordPress-Pods-2.4.3-CSRF-Cross-Site-Scripting.html @@ -30782,7 +30180,6 @@ CVE-2014-8537 - https://kc.mcafee.com/corporate/index?page=content&id=SB10044 CVE-2014-8538 - http://www.kb.cert.org/vuls/id/582497 CVE-2014-8538 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing CVE-2014-8539 - http://packetstormsecurity.com/files/129171/Joomla-Simple-Email-Form-1.8.5-Cross-Site-Scripting.html -CVE-2014-8540 - https://about.gitlab.com/2014/10/30/gitlab-7-4-3-released/ CVE-2014-8541 - http://www.ubuntu.com/usn/USN-2944-1 CVE-2014-8555 - http://packetstormsecurity.com/files/129052/Progress-OpenEdge-11.2-Directory-Traversal.html CVE-2014-8557 - http://packetstormsecurity.com/files/129009/JExperts-Tecnologia-Channel-Software-Cross-Site-Scripting.html @@ -31194,7 +30591,6 @@ CVE-2014-9385 - http://www.kb.cert.org/vuls/id/449452 CVE-2014-9385 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing CVE-2014-9386 - http://www.kb.cert.org/vuls/id/449452 CVE-2014-9386 - https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing -CVE-2014-9389 - https://support.sonatype.com/entries/84705937-CVE-2014-9389-Nexus-Security-Advisory-Directory-Traversal CVE-2014-9391 - http://packetstormsecurity.com/files/129637/WordPress-gSlideShow-0.1-CSRF-XSS.html CVE-2014-9392 - http://packetstormsecurity.com/files/129638/WordPress-PictoBrowser-0.3.1-CSRF-XSS.html CVE-2014-9393 - http://packetstormsecurity.com/files/129639/WordPress-Twitter-0.7-CSRF-XSS.html @@ -31245,7 +30641,6 @@ CVE-2014-9436 - http://packetstormsecurity.com/files/129705/SysAid-Server-Arbitr CVE-2014-9436 - http://seclists.org/fulldisclosure/2014/Dec/99 CVE-2014-9437 - http://packetstormsecurity.com/files/129509 CVE-2014-9438 - http://packetstormsecurity.com/files/129619/vBulletin-Moderator-Control-Panel-4.2.2-CSRF.html -CVE-2014-9438 - https://rstforums.com/forum/88810-csrf-vbulletin-modcp.rst CVE-2014-9440 - http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html CVE-2014-9440 - http://www.exploit-db.com/exploits/35591 CVE-2014-9441 - http://packetstormsecurity.com/files/129507 @@ -31261,8 +30656,6 @@ CVE-2014-9454 - http://packetstormsecurity.com/files/129503/WordPress-Simple-Sti CVE-2014-9455 - http://packetstormsecurity.com/files/129451/ClassAd-3.0-SQL-Injection.html CVE-2014-9456 - http://www.exploit-db.com/exploits/35589 CVE-2014-9457 - http://www.exploit-db.com/exploits/35625 -CVE-2014-9458 - https://www.hex-rays.com/bugbounty.shtml -CVE-2014-9458 - https://www.hex-rays.com/vulnfix.shtml CVE-2014-9459 - http://packetstormsecurity.com/files/129751/e107-2.0-Alpha2-Cross-Site-Request-Forgery.html CVE-2014-9459 - http://seclists.org/fulldisclosure/2014/Dec/124 CVE-2014-9460 - http://packetstormsecurity.com/files/129501/WordPress-WP-ViperGB-1.3.10-CSRF-XSS.html @@ -31302,7 +30695,6 @@ CVE-2014-9561 - http://seclists.org/fulldisclosure/2015/Jan/21 CVE-2014-9562 - http://seclists.org/fulldisclosure/2015/Feb/8 CVE-2014-9566 - http://packetstormsecurity.com/files/130637/Solarwinds-Orion-Service-SQL-Injection.html CVE-2014-9567 - http://packetstormsecurity.com/files/129759/ProjectSend-Arbitrary-File-Upload.html -CVE-2014-9568 - http://puppetlabs.com/security/cve/cve-2014-9568 CVE-2014-9575 - http://packetstormsecurity.com/files/129656/VDG-Security-SENSE-2.3.13-File-Disclosure-Bypass-Buffer-Overflow.html CVE-2014-9575 - http://seclists.org/fulldisclosure/2014/Dec/76 CVE-2014-9576 - http://packetstormsecurity.com/files/129656/VDG-Security-SENSE-2.3.13-File-Disclosure-Bypass-Buffer-Overflow.html @@ -31402,7 +30794,6 @@ CVE-2014-9708 - http://packetstormsecurity.com/files/131157/Appweb-Web-Server-De CVE-2014-9708 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html CVE-2014-9709 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CVE-2014-9709 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html -CVE-2014-9709 - https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43 CVE-2014-9711 - http://packetstormsecurity.com/files/130903/Websense-Explorer-Report-Scheduler-Cross-Site-Scripting.html CVE-2014-9711 - http://packetstormsecurity.com/files/130905/Websense-Reporting-Cross-Site-Scripting.html CVE-2014-9711 - https://www.securify.nl/advisory/SFY20140911/cross_site_scripting_vulnerability_in_websense_explorer_report_scheduler.html @@ -31608,7 +30999,6 @@ CVE-2015-0235 - https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWa CVE-2015-0235 - https://kc.mcafee.com/corporate/index?page=content&id=SB10100 CVE-2015-0235 - https://seclists.org/bugtraq/2019/Jun/14 CVE-2015-0235 - https://security.netapp.com/advisory/ntap-20150127-0001/ -CVE-2015-0235 - https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt CVE-2015-0239 - http://www.openwall.com/lists/oss-security/2015/01/27/6 CVE-2015-0239 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html CVE-2015-0239 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html @@ -32094,7 +31484,6 @@ CVE-2015-1028 - http://www.exploit-db.com/exploits/35747 CVE-2015-1028 - http://www.exploit-db.com/exploits/35750 CVE-2015-1028 - http://www.exploit-db.com/exploits/35751 CVE-2015-1028 - http://www.xlabs.com.br/blog/?p=339 -CVE-2015-1029 - http://puppetlabs.com/security/cve/cve-2015-1029 CVE-2015-1032 - http://packetstormsecurity.com/files/130007/Kiwix-Cross-Site-Scripting.html CVE-2015-1040 - http://packetstormsecurity.com/files/129865/CMS-BEdita-3.4.0-Cross-Site-Scripting.html CVE-2015-1041 - http://packetstormsecurity.com/files/129872/CMS-e107-1.0.4-Cross-Site-Scripting.html @@ -32120,11 +31509,9 @@ CVE-2015-1100 - https://www.exploit-db.com/exploits/36814/ CVE-2015-1130 - https://www.exploit-db.com/exploits/36692/ CVE-2015-1157 - http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/ CVE-2015-1158 - http://www.kb.cert.org/vuls/id/810572 -CVE-2015-1158 - https://www.cups.org/str.php?L4609 CVE-2015-1158 - https://www.exploit-db.com/exploits/37336/ CVE-2015-1158 - https://www.exploit-db.com/exploits/41233/ CVE-2015-1159 - http://www.kb.cert.org/vuls/id/810572 -CVE-2015-1159 - https://www.cups.org/str.php?L4609 CVE-2015-1169 - http://packetstormsecurity.com/files/130053/CAS-Server-3.5.2-LDAP-Authentication-Bypass.html CVE-2015-1169 - https://issues.jasig.org/browse/CAS-1429 CVE-2015-1170 - http://nvidia.custhelp.com/app/answers/detail/a_id/3634 @@ -32182,7 +31569,6 @@ CVE-2015-1338 - http://seclists.org/fulldisclosure/2015/Sep/101 CVE-2015-1338 - http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/ CVE-2015-1338 - https://www.exploit-db.com/exploits/38353/ CVE-2015-1345 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html -CVE-2015-1349 - https://kb.isc.org/article/AA-01235 CVE-2015-1351 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CVE-2015-1351 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html CVE-2015-1352 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html @@ -32299,7 +31685,6 @@ CVE-2015-1497 - https://support.accelerite.com/hc/en-us/articles/203659814-Accel CVE-2015-1497 - https://www.exploit-db.com/exploits/40491/ CVE-2015-1503 - http://packetstormsecurity.com/files/147505/IceWarp-Mail-Server-Directory-Traversal.html CVE-2015-1503 - https://www.exploit-db.com/exploits/44587/ -CVE-2015-1503 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-001/?fid=5614 CVE-2015-1512 - http://packetstormsecurity.com/files/130119/FancyFon-FAMOC-3.16.5-Cross-Site-Scripting.html CVE-2015-1512 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-011.txt CVE-2015-1513 - http://packetstormsecurity.com/files/130194/SIPhone-Enterprise-PBX-SQL-Injection.html @@ -32310,12 +31695,8 @@ CVE-2015-1517 - http://packetstormsecurity.com/files/130440/Piwigo-2.7.3-SQL-Inj CVE-2015-1518 - http://packetstormsecurity.com/files/130322/Radexscript-CMS-2.2.0-SQL-Injection.html CVE-2015-1518 - http://seclists.org/fulldisclosure/2015/Feb/39 CVE-2015-1518 - http://www.exploit-db.com/exploits/36023 -CVE-2015-1536 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ CVE-2015-1538 - http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html -CVE-2015-1538 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ CVE-2015-1538 - https://www.exploit-db.com/exploits/38124/ -CVE-2015-1539 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-1541 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ CVE-2015-1547 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CVE-2015-1547 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html CVE-2015-1547 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html @@ -32482,7 +31863,6 @@ CVE-2015-1842 - https://access.redhat.com/errata/RHSA-2015:0789 CVE-2015-1842 - https://access.redhat.com/errata/RHSA-2015:0831 CVE-2015-1842 - https://access.redhat.com/errata/RHSA-2015:0832 CVE-2015-1852 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html -CVE-2015-1855 - https://puppetlabs.com/security/cve/cve-2015-1855 CVE-2015-1856 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CVE-2015-1862 - http://packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html CVE-2015-1862 - http://packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Exploit.html @@ -33115,7 +32495,6 @@ CVE-2015-2853 - http://www.kb.cert.org/vuls/id/498348 CVE-2015-2854 - http://www.kb.cert.org/vuls/id/498348 CVE-2015-2855 - http://www.kb.cert.org/vuls/id/498348 CVE-2015-2857 - http://packetstormsecurity.com/files/132665/Accellion-FTA-getStatus-verify_oauth_token-Command-Execution.html -CVE-2015-2857 - https://community.rapid7.com/community/metasploit/blog/2015/07/10/r7-2015-08-accellion-file-transfer-appliance-vulnerabilities-cve-2015-2856-cve-2015-2857 CVE-2015-2857 - https://www.exploit-db.com/exploits/37597/ CVE-2015-2859 - http://www.kb.cert.org/vuls/id/264092 CVE-2015-2859 - https://kc.mcafee.com/corporate/index?page=content&id=KB84628 @@ -33475,28 +32854,12 @@ CVE-2015-3812 - http://www.oracle.com/technetwork/topics/security/bulletinapr201 CVE-2015-3812 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html CVE-2015-3813 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html CVE-2015-3814 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html -CVE-2015-3824 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3826 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3827 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3828 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3829 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3831 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3832 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3833 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3834 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3835 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3836 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3837 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ CVE-2015-3839 - http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-attack-surfaces/ CVE-2015-3839 - http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/ CVE-2015-3840 - http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-attack-surfaces/ CVE-2015-3840 - http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/ -CVE-2015-3842 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3843 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ -CVE-2015-3844 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ CVE-2015-3854 - http://seclists.org/fulldisclosure/2016/May/71 CVE-2015-3854 - http://seclists.org/fulldisclosure/2016/May/72 -CVE-2015-3860 - http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/ CVE-2015-3864 - https://www.exploit-db.com/exploits/38226/ CVE-2015-3864 - https://www.exploit-db.com/exploits/39640/ CVE-2015-3864 - https://www.exploit-db.com/exploits/40436/ @@ -33589,9 +32952,7 @@ CVE-2015-4038 - https://wpvulndb.com/vulnerabilities/7998 CVE-2015-4039 - http://packetstormsecurity.com/files/132011/WordPress-WP-Membership-1.2.3-Cross-Site-Scripting.html CVE-2015-4039 - https://www.exploit-db.com/exploits/37074/ CVE-2015-4040 - http://packetstormsecurity.com/files/133931/F5-BigIP-10.2.4-Build-595.0-HF3-Path-Traversal.html -CVE-2015-4045 - https://sysdream.com/uploads/media/default/0001/01/8c6a70098657b4474fe7abe9bcdd5e73b234b610.pdf CVE-2015-4045 - https://www.alienvault.com/forums/discussion/5127/ -CVE-2015-4046 - https://sysdream.com/uploads/media/default/0001/01/8c6a70098657b4474fe7abe9bcdd5e73b234b610.pdf CVE-2015-4046 - https://www.alienvault.com/forums/discussion/5127/ CVE-2015-4047 - http://packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html CVE-2015-4051 - http://packetstormsecurity.com/files/132168/Beckhoff-IPC-Diagnositcs-Authentication-Bypass.html @@ -33827,7 +33188,6 @@ CVE-2015-4604 - http://www.oracle.com/technetwork/topics/security/linuxbulletinj CVE-2015-4605 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html CVE-2015-4614 - https://www.exploit-db.com/exploits/37534/ CVE-2015-4616 - https://www.exploit-db.com/exploits/37534/ -CVE-2015-4620 - https://kb.isc.org/article/AA-01306 CVE-2015-4620 - https://kc.mcafee.com/corporate/index?page=content&id=SB10124 CVE-2015-4624 - http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.html CVE-2015-4624 - http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.html @@ -34288,7 +33648,6 @@ CVE-2015-5194 - http://www.oracle.com/technetwork/topics/security/linuxbulletina CVE-2015-5195 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html CVE-2015-5207 - http://packetstormsecurity.com/files/136840/Apache-Cordova-iOS-3.9.1-Access-Bypass.html CVE-2015-5208 - http://packetstormsecurity.com/files/136839/Apache-Cordova-iOS-3.9.1-Arbitrary-Plugin-Execution.html -CVE-2015-5211 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/ CVE-2015-5212 - http://www.openoffice.org/security/cves/CVE-2015-5212.html CVE-2015-5212 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html CVE-2015-5213 - http://www.openoffice.org/security/cves/CVE-2015-5213.html @@ -34306,7 +33665,6 @@ CVE-2015-5235 - http://www.oracle.com/technetwork/topics/security/linuxbulletina CVE-2015-5243 - https://github.com/jsmitty12/phpWhois/blob/master/CHANGELOG.md CVE-2015-5243 - https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180425-01_phpWhois_Code_Execution CVE-2015-5248 - https://bugzilla.redhat.com/show_bug.cgi?id=1272326 -CVE-2015-5248 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-017/?fid=7150 CVE-2015-5252 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html CVE-2015-5252 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html CVE-2015-5254 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html @@ -34429,8 +33787,6 @@ CVE-2015-5472 - https://wpvulndb.com/vulnerabilities/8091 CVE-2015-5477 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 CVE-2015-5477 - http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html CVE-2015-5477 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html -CVE-2015-5477 - https://kb.isc.org/article/AA-01272 -CVE-2015-5477 - https://kb.isc.org/article/AA-01306 CVE-2015-5477 - https://kc.mcafee.com/corporate/index?page=content&id=SB10126 CVE-2015-5477 - https://www.exploit-db.com/exploits/37721/ CVE-2015-5477 - https://www.exploit-db.com/exploits/37723/ @@ -34624,7 +33980,6 @@ CVE-2015-5715 - https://wpvulndb.com/vulnerabilities/8188 CVE-2015-5718 - http://packetstormsecurity.com/files/132968/Websense-Triton-Content-Manager-8.0.0-Build-1165-Buffer-Overflow.html CVE-2015-5718 - http://seclists.org/fulldisclosure/2015/Aug/8 CVE-2015-5722 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html -CVE-2015-5722 - https://kb.isc.org/article/AA-01306 CVE-2015-5722 - https://kc.mcafee.com/corporate/index?page=content&id=SB10134 CVE-2015-5725 - https://github.com/bcit-ci/CodeIgniter/issues/4020 CVE-2015-5729 - http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html @@ -34670,7 +34025,6 @@ CVE-2015-5956 - http://seclists.org/fulldisclosure/2015/Sep/57 CVE-2015-5958 - http://packetstormsecurity.com/files/132865/phpFileManager-0.9.8-Remote-Command-Execution.html CVE-2015-5963 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CVE-2015-5964 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html -CVE-2015-5986 - https://kb.isc.org/article/AA-01306 CVE-2015-5986 - https://kc.mcafee.com/corporate/index?page=content&id=SB10134 CVE-2015-5987 - https://www.kb.cert.org/vuls/id/201168 CVE-2015-5988 - https://www.kb.cert.org/vuls/id/201168 @@ -34857,7 +34211,6 @@ CVE-2015-6568 - https://www.exploit-db.com/exploits/38000/ CVE-2015-6568 - https://www.exploit-db.com/exploits/40004/ CVE-2015-6569 - https://floodlight.atlassian.net/wiki/spaces/floodlightcontroller/pages/24805419/Floodlight+v1.2 CVE-2015-6574 - https://cert-portal.siemens.com/productcert/pdf/ssa-223771.pdf -CVE-2015-6575 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ CVE-2015-6576 - http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html CVE-2015-6584 - http://packetstormsecurity.com/files/133555/DataTables-1.10.8-Cross-Site-Scripting.html CVE-2015-6584 - http://seclists.org/fulldisclosure/2015/Sep/37 @@ -34982,7 +34335,6 @@ CVE-2015-6919 - http://packetstormsecurity.com/files/133375/Joomla-GoogleSearch- CVE-2015-6920 - http://packetstormsecurity.com/files/133371/WordPress-sourceAFRICA-0.1.3-Cross-Site-Scripting.html CVE-2015-6920 - https://wpvulndb.com/vulnerabilities/8169 CVE-2015-6922 - http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.html -CVE-2015-6922 - https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-Advisory CVE-2015-6922 - https://www.exploit-db.com/exploits/38351/ CVE-2015-6923 - http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html CVE-2015-6923 - http://seclists.org/fulldisclosure/2015/Sep/72 @@ -34999,7 +34351,6 @@ CVE-2015-6937 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4 CVE-2015-6937 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html CVE-2015-6939 - http://packetstormsecurity.com/files/133907/Joomla-CMS-3.4.3-Cross-Site-Scripting.html CVE-2015-6940 - http://packetstormsecurity.com/files/133601/Pentaho-5.2.x-BA-Suite-PDI-Information-Disclosure.html -CVE-2015-6940 - https://support.pentaho.com/entries/78884125-Security-Vulnerability-Announcement-Feb-2015 CVE-2015-6943 - http://packetstormsecurity.com/files/133428/Serendipity-2.0.1-Blind-SQL-Injection.html CVE-2015-6943 - http://seclists.org/fulldisclosure/2015/Sep/10 CVE-2015-6944 - http://packetstormsecurity.com/files/133466/JSPMySQL-Administrador-1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html @@ -35018,7 +34369,6 @@ CVE-2015-6968 - http://seclists.org/fulldisclosure/2015/Sep/6 CVE-2015-6969 - http://packetstormsecurity.com/files/133427/Serendipity-2.0.1-Cross-Site-Scripting.html CVE-2015-6969 - http://seclists.org/fulldisclosure/2015/Sep/9 CVE-2015-6970 - https://www.exploit-db.com/exploits/38369/ -CVE-2015-6971 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-018/?fid=7172 CVE-2015-6972 - http://packetstormsecurity.com/files/133558/Openfire-3.10.2-Cross-Site-Scripting.html CVE-2015-6972 - https://www.exploit-db.com/exploits/38191/ CVE-2015-6973 - http://packetstormsecurity.com/files/133554/Openfire-3.10.2-Cross-Site-Request-Forgery.html @@ -35211,7 +34561,6 @@ CVE-2015-7296 - http://www.kb.cert.org/vuls/id/906576 CVE-2015-7297 - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html CVE-2015-7297 - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html CVE-2015-7297 - https://www.exploit-db.com/exploits/38797/ -CVE-2015-7297 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ CVE-2015-7299 - http://packetstormsecurity.com/files/133953/K2-SmartForms-BlackPearl-SQL-Injection.html CVE-2015-7309 - http://packetstormsecurity.com/files/133539/CMS-Bolt-2.2.4-File-Upload.html CVE-2015-7309 - http://seclists.org/fulldisclosure/2015/Aug/66 @@ -35435,7 +34784,6 @@ CVE-2015-7705 - https://www.kb.cert.org/vuls/id/718152 CVE-2015-7706 - http://packetstormsecurity.com/files/134760/Secure-Data-Space-3.1.1-2-Cross-Site-Scripting.html CVE-2015-7706 - http://seclists.org/fulldisclosure/2015/Dec/36 CVE-2015-7707 - http://packetstormsecurity.com/files/133559/Openfire-3.10.2-Privilege-Escalation.html -CVE-2015-7707 - https://igniterealtime.org/issues/browse/OF-941 CVE-2015-7707 - https://www.exploit-db.com/exploits/38190/ CVE-2015-7708 - http://packetstormsecurity.com/files/133712/4images-1.7.11-Cross-Site-Scripting.html CVE-2015-7708 - http://seclists.org/fulldisclosure/2015/Sep/95 @@ -35515,11 +34863,9 @@ CVE-2015-7855 - https://www.exploit-db.com/exploits/40840/ CVE-2015-7857 - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html CVE-2015-7857 - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html CVE-2015-7857 - https://www.exploit-db.com/exploits/38797/ -CVE-2015-7857 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ CVE-2015-7858 - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html CVE-2015-7858 - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html CVE-2015-7858 - https://www.exploit-db.com/exploits/38797/ -CVE-2015-7858 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ CVE-2015-7860 - http://www.kb.cert.org/vuls/id/966927 CVE-2015-7861 - http://www.kb.cert.org/vuls/id/966927 CVE-2015-7862 - https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features @@ -35668,7 +35014,6 @@ CVE-2015-8242 - http://www.oracle.com/technetwork/topics/security/bulletinjan201 CVE-2015-8242 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html CVE-2015-8247 - http://packetstormsecurity.com/files/134797/Synnefo-Client-Cross-Site-Scripting.html CVE-2015-8249 - http://packetstormsecurity.com/files/134806/ManageEngine-Desktop-Central-9-FileUploadServlet-ConnectionId.html -CVE-2015-8249 - https://community.rapid7.com/community/infosec/blog/2015/12/14/r7-2015-22-manageengine-desktop-central-9-fileuploadservlet-connectionid-vulnerability-cve-2015-8249 CVE-2015-8249 - https://www.exploit-db.com/exploits/38982/ CVE-2015-8252 - https://www.kb.cert.org/vuls/id/792004 CVE-2015-8253 - https://www.kb.cert.org/vuls/id/792004 @@ -35934,7 +35279,6 @@ CVE-2015-8606 - http://www.openwall.com/lists/oss-security/2015/12/17/1 CVE-2015-8606 - http://www.openwall.com/lists/oss-security/2015/12/17/11 CVE-2015-8606 - http://www.openwall.com/lists/oss-security/2015/12/18/5 CVE-2015-8606 - http://www.silverstripe.org/download/security-releases/ss-2015-026 -CVE-2015-8606 - https://cybersecurityworks.com/zerodays/cve-2015-8606-silverstripe.html CVE-2015-8607 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html CVE-2015-8607 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2015-8608 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html @@ -36312,11 +35656,9 @@ CVE-2015-9228 - http://www.openwall.com/lists/oss-security/2015/10/27/6 CVE-2015-9228 - https://github.com/cybersecurityworks/Disclosed/issues/6 CVE-2015-9228 - https://packetstormsecurity.com/files/135061/WordPress-NextGEN-Gallery-2.1.10-Shell-Upload.html CVE-2015-9228 - https://wpvulndb.com/vulnerabilities/9758 -CVE-2015-9229 - https://cybersecurityworks.com/zerodays/cve-2015-9229-nextgen-gallery.html CVE-2015-9229 - https://github.com/cybersecurityworks/Disclosed/issues/5 CVE-2015-9230 - http://www.openwall.com/lists/oss-security/2015/10/27/3 CVE-2015-9230 - https://cxsecurity.com/issue/WLB-2016010011 -CVE-2015-9230 - https://cybersecurityworks.com/zerodays/cve-2015-9230-bulletproof.html CVE-2015-9230 - https://forum.ait-pro.com/forums/topic/bps-changelog/ CVE-2015-9230 - https://github.com/cybersecurityworks/Disclosed/issues/3 CVE-2015-9230 - https://packetstormsecurity.com/files/135125/BulletProof-Security-.52.4-Cross-Site-Scripting.html @@ -36343,7 +35685,6 @@ CVE-2015-9251 - https://www.oracle.com/technetwork/security-advisory/cpujan2019- CVE-2015-9251 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html CVE-2015-9251 - https://www.tenable.com/security/tns-2019-08 CVE-2015-9253 - https://www.futureweb.at/security/CVE-2015-9253/ -CVE-2015-9260 - https://cybersecurityworks.com/zerodays/cve-2015-9260-bedita.html CVE-2015-9260 - https://github.com/bedita/bedita/issues/755#issuecomment-148036760 CVE-2015-9260 - https://github.com/cybersecurityworks/Disclosed/issues/8 CVE-2015-9261 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html @@ -36411,7 +35752,6 @@ CVE-2015-9408 - https://packetstormsecurity.com/files/133593/ CVE-2015-9408 - https://wpvulndb.com/vulnerabilities/8194 CVE-2015-9409 - https://packetstormsecurity.com/files/133594/ CVE-2015-9409 - https://wpvulndb.com/vulnerabilities/8190 -CVE-2015-9410 - https://cybersecurityworks.com/zerodays/cve-2015-9410-blubrry.html CVE-2015-9410 - https://github.com/cybersecurityworks/Disclosed/issues/7 CVE-2015-9411 - https://wpvulndb.com/vulnerabilities/8183 CVE-2015-9412 - https://wpvulndb.com/vulnerabilities/8182 @@ -36512,16 +35852,13 @@ CVE-2015-9501 - https://wpvulndb.com/vulnerabilities/7994 CVE-2015-9502 - https://wpvulndb.com/vulnerabilities/7987 CVE-2015-9503 - https://wpvulndb.com/vulnerabilities/7986 CVE-2015-9504 - https://wpvulndb.com/vulnerabilities/7957 -CVE-2015-9537 - https://cybersecurityworks.com/zerodays/cve-2015-9537-nextgen.html CVE-2015-9537 - https://github.com/cybersecurityworks/Disclosed/issues/1 CVE-2015-9537 - https://www.openwall.com/lists/oss-security/2015/10/27/4 CVE-2015-9538 - https://cxsecurity.com/issue/WLB-2015080165 -CVE-2015-9538 - https://cybersecurityworks.com/zerodays/cve-2015-9538-nextgen.html CVE-2015-9538 - https://github.com/cybersecurityworks/Disclosed/issues/2 CVE-2015-9538 - https://packetstormsecurity.com/files/135114/WordPress-NextGEN-Gallery-2.1.15-Cross-Site-Scripting-Path-Traversal.html CVE-2015-9538 - https://www.openwall.com/lists/oss-security/2015/08/28/4 CVE-2015-9538 - https://www.openwall.com/lists/oss-security/2015/09/01/7 -CVE-2015-9539 - https://cybersecurityworks.com/zerodays/cve-2015-9539-fastsecure.html CVE-2015-9539 - https://github.com/cybersecurityworks/Disclosed/issues/4 CVE-2015-9539 - https://www.openwall.com/lists/oss-security/2015/10/27/2 CVE-2015-9544 - https://github.com/ofirdagan/cross-domain-local-storage/issues/17 @@ -36533,11 +35870,9 @@ CVE-2015-9545 - https://grimhacker.com/exploiting-xdlocalstorage-localstorage-an CVE-2015-9546 - https://security.samsungmobile.com/securityUpdate.smsb CVE-2015-9547 - https://security.samsungmobile.com/securityUpdate.smsb CVE-2015-9548 - https://mattermost.com/security-updates/ -CVE-2015-9549 - https://cybersecurityworks.com/zerodays/cve-2015-9549-ocportal.html CVE-2015-9549 - https://github.com/cybersecurityworks/Disclosed/issues/11 CVE-2015-9549 - https://www.openwall.com/lists/oss-security/2015/12/19/2 CVE-2016-0006 - https://www.exploit-db.com/exploits/39311/ -CVE-2016-0007 - https://code.google.com/p/google-security-research/issues/detail?id=589 CVE-2016-0007 - https://www.exploit-db.com/exploits/39310/ CVE-2016-0007 - https://www.exploit-db.com/exploits/39311/ CVE-2016-0015 - http://packetstormsecurity.com/files/135232/Microsoft-DirectShow-Remote-Code-Execution.html @@ -37384,8 +36719,6 @@ CVE-2016-10363 - https://www.elastic.co/community/security CVE-2016-10364 - https://www.elastic.co/community/security CVE-2016-10365 - https://www.elastic.co/community/security CVE-2016-10366 - https://www.elastic.co/community/security -CVE-2016-10367 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341 -CVE-2016-10368 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341 CVE-2016-10370 - https://alephsecurity.com/vulns/aleph-2017022 CVE-2016-10372 - https://devicereversing.wordpress.com/2016/11/07/eirs-d1000-modem-is-wide-open-to-being-hacked/ CVE-2016-10372 - https://isc.sans.edu/forums/diary/TR069+NewNTPServer+Exploits+What+we+know+so+far/21763/ @@ -37504,7 +36837,6 @@ CVE-2016-10507 - https://github.com/uclouvain/openjpeg/issues/833 CVE-2016-10511 - https://hackerone.com/reports/168538 CVE-2016-10512 - https://packetstormsecurity.com/files/139844/Multitech-RightFax-Faxfinder-Credential-Disclosure.html CVE-2016-10513 - https://github.com/Piwigo/Piwigo/commit/9a93d1f44b06605af84520509e7a0e8b64ab0c05 -CVE-2016-10517 - https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES CVE-2016-10517 - https://www.reddit.com/r/redis/comments/5r8wxn/redis_327_is_out_important_security_fixes_inside/ CVE-2016-10518 - https://gist.github.com/c0nrad/e92005446c480707a74a CVE-2016-10519 - https://github.com/feross/bittorrent-dht/issues/87 @@ -37519,7 +36851,6 @@ CVE-2016-10706 - https://www.wordfence.com/blog/2016/05/jetpack-vulnerability/ CVE-2016-10707 - https://snyk.io/vuln/npm:jquery:20160529 CVE-2016-10708 - https://kc.mcafee.com/corporate/index?page=content&id=SB10284 CVE-2016-10709 - https://www.exploit-db.com/exploits/39709/ -CVE-2016-10710 - http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/ CVE-2016-10715 - https://packetstormsecurity.com/files/137648/JIRA-Artezio-Board-1.4-Cross-Site-Scripting-Information-Disclosure.html CVE-2016-10716 - https://packetstormsecurity.com/files/137649/JIRA-Mail.ru-Calendar-2.4.2.50_JIRA6-Cross-Site-Scripting.html CVE-2016-10717 - https://forums.malwarebytes.com/topic/158251-malwarebytes-hall-of-fame/ @@ -37549,7 +36880,6 @@ CVE-2016-10749 - https://www.openwall.com/lists/oss-security/2016/11/07/2 CVE-2016-10761 - https://www.kb.cert.org/vuls/id/981271 CVE-2016-10763 - https://hackerone.com/reports/152958 CVE-2016-1077 - http://packetstormsecurity.com/files/137035/Adobe-Reader-DC-15.010.20060-Memory-Corruption.html -CVE-2016-1077 - https://0patch.blogspot.com/2016/06/writing-0patch-for-acrobat-readers-use.html CVE-2016-1077 - https://www.exploit-db.com/exploits/39799/ CVE-2016-10861 - https://www.pentestpartners.com/security-blog/a-neet-csrf-to-reverse-shell-in-wi-fi-music-streamer/ CVE-2016-10862 - https://www.pentestpartners.com/security-blog/a-neet-csrf-to-reverse-shell-in-wi-fi-music-streamer/ @@ -37648,15 +36978,12 @@ CVE-2016-11010 - https://wpvulndb.com/vulnerabilities/8378 CVE-2016-11011 - https://wpvulndb.com/vulnerabilities/8378 CVE-2016-11012 - https://wpvulndb.com/vulnerabilities/8389 CVE-2016-11013 - https://github.com/agentevolution/wp-listings/pull/52 -CVE-2016-11014 - https://cybersecurityworks.com/zerodays/cve-2016-11014-netgear.html CVE-2016-11014 - https://github.com/cybersecurityworks/Disclosed/issues/14 CVE-2016-11014 - https://lists.openwall.net/full-disclosure/2016/01/11/5 CVE-2016-11014 - https://packetstormsecurity.com/files/135216/Netgear-1.0.0.24-Bypass-Improper-Session-Management.html -CVE-2016-11015 - https://cybersecurityworks.com/zerodays/cve-2016-11015-netgear.html CVE-2016-11015 - https://github.com/cybersecurityworks/Disclosed/issues/13 CVE-2016-11015 - https://lists.openwall.net/full-disclosure/2016/01/11/4 CVE-2016-11015 - https://packetstormsecurity.com/files/135215/Netgear-1.0.0.24-Cross-Site-Request-Forgery.html -CVE-2016-11016 - https://cybersecurityworks.com/zerodays/cve-2016-11016-netgear.html CVE-2016-11016 - https://github.com/cybersecurityworks/Disclosed/issues/12 CVE-2016-11016 - https://lists.openwall.net/full-disclosure/2016/01/11/1 CVE-2016-11016 - https://packetstormsecurity.com/files/135194/Netgear-1.0.0.24-Cross-Site-Scripting.html @@ -38068,7 +37395,6 @@ CVE-2016-1907 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDispla CVE-2016-1907 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 CVE-2016-1908 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html CVE-2016-1909 - http://packetstormsecurity.com/files/135225/FortiGate-OS-5.0.7-SSH-Backdoor.html -CVE-2016-1909 - https://www.exploit-db.com/exploits/39224/ CVE-2016-1910 - https://www.exploit-db.com/exploits/43495/ CVE-2016-1911 - http://seclists.org/fulldisclosure/2016/Apr/58 CVE-2016-1912 - http://packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting.html @@ -38551,7 +37877,6 @@ CVE-2016-2532 - http://www.oracle.com/technetwork/topics/security/bulletinjul201 CVE-2016-2533 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html CVE-2016-2539 - https://packetstormsecurity.com/files/136109/ATutor-LMS-2.2.1-CSRF-Remote-Code-Execution.html CVE-2016-2539 - https://www.exploit-db.com/exploits/39524/ -CVE-2016-2541 - https://fortiguard.com/zeroday/FG-VD-15-118 CVE-2016-2542 - https://www.oracle.com/security-alerts/cpuApr2021.html CVE-2016-2542 - https://www.tenable.com/security/tns-2019-08 CVE-2016-2543 - http://www.ubuntu.com/usn/USN-2930-2 @@ -38736,16 +38061,13 @@ CVE-2016-3116 - http://packetstormsecurity.com/files/136251/Dropbear-SSHD-xauth- CVE-2016-3116 - http://seclists.org/fulldisclosure/2016/Mar/47 CVE-2016-3116 - https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115 CVE-2016-3128 - http://support.blackberry.com/kb/articleDetail?articleNumber=000038913 -CVE-2016-3129 - http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None CVE-2016-3132 - https://bugs.php.net/bug.php?id=71735 CVE-2016-3134 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html CVE-2016-3134 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html CVE-2016-3134 - http://www.ubuntu.com/usn/USN-2930-2 CVE-2016-3134 - http://www.ubuntu.com/usn/USN-2932-1 -CVE-2016-3134 - https://code.google.com/p/google-security-research/issues/detail?id=758 CVE-2016-3135 - http://www.ubuntu.com/usn/USN-2930-2 CVE-2016-3135 - http://www.ubuntu.com/usn/USN-3056-1 -CVE-2016-3135 - https://code.google.com/p/google-security-research/issues/detail?id=758 CVE-2016-3136 - http://www.ubuntu.com/usn/USN-2970-1 CVE-2016-3136 - http://www.ubuntu.com/usn/USN-3000-1 CVE-2016-3136 - https://bugzilla.redhat.com/show_bug.cgi?id=1283370 @@ -38818,7 +38140,6 @@ CVE-2016-3321 - http://seclists.org/fulldisclosure/2016/Aug/44 CVE-2016-3321 - https://www.securify.nl/advisory/SFY20160301/internet_explorer_iframe_sandbox_local_file_name_disclosure_vulnerability.html CVE-2016-3324 - https://www.exploit-db.com/exploits/40748/ CVE-2016-3325 - https://www.exploit-db.com/exploits/40747/ -CVE-2016-3351 - https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ CVE-2016-3357 - https://www.exploit-db.com/exploits/40406/ CVE-2016-3371 - https://www.exploit-db.com/exploits/40429/ CVE-2016-3373 - https://www.exploit-db.com/exploits/40430/ @@ -38826,7 +38147,6 @@ CVE-2016-3374 - http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read- CVE-2016-3387 - https://www.exploit-db.com/exploits/40607/ CVE-2016-3388 - https://www.exploit-db.com/exploits/40606/ CVE-2016-3403 - http://seclists.org/fulldisclosure/2017/Jan/30 -CVE-2016-3403 - https://sysdream.com/news/lab/2017-01-12-cve-2016-3403-multiple-csrf-in-zimbra-administration-interface/ CVE-2016-3411 - https://www.exploit-db.com/exploits/45177/ CVE-2016-3416 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html CVE-2016-3417 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html @@ -39299,7 +38619,6 @@ CVE-2016-3727 - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 CVE-2016-3737 - https://www.tenable.com/security/research/tra-2016-22 CVE-2016-3739 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html CVE-2016-3739 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 -CVE-2016-3740 - https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html CVE-2016-3861 - https://www.exploit-db.com/exploits/40354/ CVE-2016-3912 - https://android.googlesource.com/platform/frameworks/base/+/6c049120c2d749f0c0289d822ec7d0aa692f55c5 CVE-2016-3914 - https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/3a3a5d145d380deef2d5b7c3150864cd04be397f @@ -39670,7 +38989,6 @@ CVE-2016-4797 - https://github.com/uclouvain/openjpeg/issues/733 CVE-2016-4797 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2016-4800 - https://www.oracle.com/security-alerts/cpuoct2020.html CVE-2016-4803 - http://seclists.org/fulldisclosure/2016/May/69 -CVE-2016-4803 - https://dotcms.com/docs/latest/change-log#release-3.3.2 CVE-2016-4803 - https://security.elarlang.eu/cve-2016-4803-dotcms-email-header-injection-vulnerability-full-disclosure.html CVE-2016-4805 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html CVE-2016-4805 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html @@ -39783,15 +39101,6 @@ CVE-2016-5044 - https://www.prevanders.net/dwarfbug.html CVE-2016-5048 - http://www.kb.cert.org/vuls/id/294272 CVE-2016-5049 - http://www.kb.cert.org/vuls/id/294272 CVE-2016-5050 - http://www.kb.cert.org/vuls/id/294272 -CVE-2016-5051 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5052 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5053 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5054 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5055 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5056 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5057 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5058 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 -CVE-2016-5059 - https://community.rapid7.com/community/infosec/blog/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059 CVE-2016-5060 - http://packetstormsecurity.com/files/137469/nGrinder-3.3-Cross-Site-Scripting.html CVE-2016-5060 - http://seclists.org/fulldisclosure/2016/Jun/23 CVE-2016-5061 - http://www.kb.cert.org/vuls/id/706359 @@ -39874,8 +39183,6 @@ CVE-2016-5240 - http://www.oracle.com/technetwork/topics/security/linuxbulletina CVE-2016-5243 - http://www.ubuntu.com/usn/USN-3052-1 CVE-2016-5243 - http://www.ubuntu.com/usn/USN-3056-1 CVE-2016-5244 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html -CVE-2016-5248 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073 -CVE-2016-5249 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073 CVE-2016-5252 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html CVE-2016-5253 - https://bugzilla.mozilla.org/show_bug.cgi?id=1246944 CVE-2016-5254 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html @@ -40759,7 +40066,6 @@ CVE-2016-7168 - http://www.openwall.com/lists/oss-security/2016/09/08/24 CVE-2016-7168 - https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_vulnerability_in_wordpress_due_to_unsafe_processing_of_file_names.html CVE-2016-7168 - https://wpvulndb.com/vulnerabilities/8615 CVE-2016-7169 - https://wpvulndb.com/vulnerabilities/8616 -CVE-2016-7172 - https://kb.netapp.com/support/s/article/NTAP-20161220-0001 CVE-2016-7177 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750 CVE-2016-7178 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751 CVE-2016-7179 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752 @@ -40943,13 +40249,9 @@ CVE-2016-7967 - http://www.openwall.com/lists/oss-security/2016/10/05/1 CVE-2016-7968 - http://www.openwall.com/lists/oss-security/2016/10/05/1 CVE-2016-7977 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html CVE-2016-7980 - http://www.openwall.com/lists/oss-security/2016/10/12/6 -CVE-2016-7980 - https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-exec-code-cross-site-request-forgery-cve-2016-7980/ CVE-2016-7981 - http://www.openwall.com/lists/oss-security/2016/10/12/7 CVE-2016-7982 - http://www.openwall.com/lists/oss-security/2016/10/12/8 -CVE-2016-7982 - https://sysdream.com/news/lab/2016-10-19-spip-3-1-1-3-1-2-file-enumeration-path-traversal-cve-2016-7982/ -CVE-2016-7998 - https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-template-compiler-composer-php-code-execution-cve-2016-7998/ CVE-2016-7999 - http://www.openwall.com/lists/oss-security/2016/10/12/10 -CVE-2016-7999 - https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-server-side-request-forgery-cve-2016-7999/ CVE-2016-8005 - https://kc.mcafee.com/corporate/index?page=content&id=SB10161 CVE-2016-8006 - https://kc.mcafee.com/corporate/index?page=content&id=KB87744 CVE-2016-8006 - https://www.narthar.it/DOC/McAfee_SIEM_9.6_Authentication_bypass_vulnerability.html @@ -41270,7 +40572,6 @@ CVE-2016-9263 - https://opnsec.com/2017/10/cve-2016-9263-unpatched-xsf-vulnerabi CVE-2016-9264 - https://blogs.gentoo.org/ago/2016/11/07/libming-listmp3-global-buffer-overflow-in-printmp3headers-listmp3-c/ CVE-2016-9265 - https://blogs.gentoo.org/ago/2016/11/09/libming-listmp3-divide-by-zero-in-printmp3headers-list CVE-2016-9266 - https://blogs.gentoo.org/ago/2016/11/09/libming-listmp3-left-shift-in-listmp3-c -CVE-2016-9271 - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_210 CVE-2016-9274 - https://github.com/git-for-windows/git/issues/944 CVE-2016-9275 - https://blogs.gentoo.org/ago/2016/11/07/libdwarf-heap-based-buffer-overflow-in-_dwarf_skim_forms-dwarf_macro5-c CVE-2016-9276 - https://blogs.gentoo.org/ago/2016/11/07/libdwarf-heap-based-buffer-overflow-in-dwarf_get_aranges_list-dwarf_arange-c @@ -41572,23 +40873,15 @@ CVE-2016-9950 - https://www.exploit-db.com/exploits/40937/ CVE-2016-9951 - https://bugs.launchpad.net/apport/+bug/1648806 CVE-2016-9951 - https://github.com/DonnchaC/ubuntu-apport-exploitation CVE-2016-9951 - https://www.exploit-db.com/exploits/40937/ -CVE-2016-9957 - https://bitbucket.org/mpyne/game-music-emu/wiki/Home CVE-2016-9957 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html -CVE-2016-9958 - https://bitbucket.org/mpyne/game-music-emu/wiki/Home CVE-2016-9958 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html -CVE-2016-9959 - https://bitbucket.org/mpyne/game-music-emu/wiki/Home CVE-2016-9959 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html -CVE-2016-9960 - https://bitbucket.org/mpyne/game-music-emu/wiki/Home CVE-2016-9960 - https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html -CVE-2016-9961 - https://bitbucket.org/mpyne/game-music-emu/wiki/Home CVE-2016-9961 - https://scarybeastsecurity.blogspot.cz/2016/12/redux-compromising-linux-using-snes.html CVE-2017-0003 - http://fortiguard.com/advisory/FG-VD-16-079 -CVE-2017-0022 - https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html -CVE-2017-0037 - https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html CVE-2017-0037 - https://www.exploit-db.com/exploits/41454/ CVE-2017-0037 - https://www.exploit-db.com/exploits/42354/ CVE-2017-0037 - https://www.exploit-db.com/exploits/43125/ -CVE-2017-0038 - https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html CVE-2017-0038 - https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS CVE-2017-0038 - https://www.exploit-db.com/exploits/41363/ CVE-2017-0045 - http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt @@ -41686,7 +40979,6 @@ CVE-2017-0259 - https://www.exploit-db.com/exploits/42007/ CVE-2017-0263 - https://www.exploit-db.com/exploits/44478/ CVE-2017-0263 - https://xiaodaozhi.com/exploit/117.html CVE-2017-0282 - https://www.exploit-db.com/exploits/42237/ -CVE-2017-0283 - https://0patch.blogspot.com/2017/07/0patching-quick-brown-fox-of-cve-2017.html CVE-2017-0283 - https://www.exploit-db.com/exploits/42234/ CVE-2017-0284 - https://www.exploit-db.com/exploits/42235/ CVE-2017-0285 - https://www.exploit-db.com/exploits/42236/ @@ -41694,7 +40986,6 @@ CVE-2017-0286 - https://www.exploit-db.com/exploits/42238/ CVE-2017-0287 - https://www.exploit-db.com/exploits/42239/ CVE-2017-0288 - https://www.exploit-db.com/exploits/42241/ CVE-2017-0289 - https://www.exploit-db.com/exploits/42240/ -CVE-2017-0290 - https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html CVE-2017-0290 - https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/ CVE-2017-0290 - https://www.exploit-db.com/exploits/41975/ CVE-2017-0299 - https://www.exploit-db.com/exploits/42219/ @@ -41828,8 +41119,6 @@ CVE-2017-1000027 - https://cp270.wordpress.com/2017/02/02/security-advisory-open CVE-2017-1000028 - https://www.exploit-db.com/exploits/45196/ CVE-2017-1000028 - https://www.exploit-db.com/exploits/45198/ CVE-2017-1000028 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904 -CVE-2017-1000029 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037 -CVE-2017-1000030 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037 CVE-2017-1000033 - https://cjc.im/advisories/0007/ CVE-2017-1000033 - https://wpvulndb.com/vulnerabilities/8862 CVE-2017-1000034 - http://doc.akka.io/docs/akka/2.4/security/2017-02-10-java-serialization.html @@ -41881,7 +41170,6 @@ CVE-2017-1000190 - https://github.com/ngallagher/simplexml/issues/18 CVE-2017-10002 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html CVE-2017-1000212 - https://github.com/tonini/alchemist-server/issues/14 CVE-2017-1000218 - https://github.com/hfiref0x/LightFTP/issues/5 -CVE-2017-1000221 - https://opencast.jira.com/browse/MH-11862 CVE-2017-1000224 - https://security.dxw.com/advisories/csrf-in-youtube-plugin/ CVE-2017-1000225 - https://security.dxw.com/advisories/reflected-xss-in-relevanssi-premium-when-using-relevanssi_didyoumean-could-allow-unauthenticated-attacker-to-do-almost-anything-an-admin-can/ CVE-2017-1000226 - https://security.dxw.com/advisories/stop-user-enumeration-rest-api/ @@ -42468,7 +41756,6 @@ CVE-2017-1092 - https://www.exploit-db.com/exploits/42091/ CVE-2017-1092 - https://www.exploit-db.com/exploits/42541/ CVE-2017-10924 - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10924 CVE-2017-10928 - https://github.com/ImageMagick/ImageMagick/issues/539 -CVE-2017-10952 - https://0patch.blogspot.com/2017/08/0patching-foxit-readers-saveas-0day-cve.html CVE-2017-10971 - https://bugzilla.suse.com/show_bug.cgi?id=1035283 CVE-2017-10972 - https://bugzilla.suse.com/show_bug.cgi?id=1035283 CVE-2017-10974 - http://hyp3rlinx.altervista.org/advisories/YAWS-WEB-SERVER-v1.91-UNAUTHENTICATED-REMOTE-FILE-DISCLOSURE.txt @@ -42554,9 +41841,7 @@ CVE-2017-11319 - http://packetstormsecurity.com/files/145230/Perspective-ICM-Inv CVE-2017-11319 - https://www.exploit-db.com/exploits/43210/ CVE-2017-11320 - http://seclists.org/fulldisclosure/2017/Aug/3 CVE-2017-11320 - https://www.exploit-db.com/exploits/42427/ -CVE-2017-11321 - https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/ CVE-2017-11321 - https://www.exploit-db.com/exploits/42937/ -CVE-2017-11322 - https://sysdream.com/news/lab/2017-09-29-cve-2017-11322-ucopia-wireless-appliance-5-1-8-privileges-escalation/ CVE-2017-11322 - https://www.exploit-db.com/exploits/42936/ CVE-2017-11323 - http://exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.html CVE-2017-11330 - http://seclists.org/fulldisclosure/2017/Jul/79 @@ -42796,7 +42081,6 @@ CVE-2017-11809 - https://www.exploit-db.com/exploits/42999/ CVE-2017-11810 - https://www.exploit-db.com/exploits/43131/ CVE-2017-11811 - https://www.exploit-db.com/exploits/43152/ CVE-2017-11823 - https://www.exploit-db.com/exploits/42997/ -CVE-2017-11826 - https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html CVE-2017-11826 - https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/ CVE-2017-11830 - https://www.exploit-db.com/exploits/43162/ CVE-2017-11831 - https://www.exploit-db.com/exploits/43165/ @@ -42808,8 +42092,6 @@ CVE-2017-11861 - https://www.exploit-db.com/exploits/43153/ CVE-2017-11870 - https://www.exploit-db.com/exploits/43182/ CVE-2017-11873 - https://www.exploit-db.com/exploits/43154/ CVE-2017-11882 - http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882 -CVE-2017-11882 - https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html -CVE-2017-11882 - https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html CVE-2017-11882 - https://github.com/embedi/CVE-2017-11882 CVE-2017-11882 - https://github.com/rxwx/CVE-2017-11882 CVE-2017-11882 - https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/ @@ -43047,7 +42329,6 @@ CVE-2017-12876 - http://www.openwall.com/lists/oss-security/2017/08/16/3 CVE-2017-12876 - https://blogs.gentoo.org/ago/2017/08/10/imagemagick-heap-based-buffer-overflow-in-omp_outlined-32-enhance-c/ CVE-2017-12877 - http://www.openwall.com/lists/oss-security/2017/08/16/2 CVE-2017-12877 - https://blogs.gentoo.org/ago/2017/08/10/imagemagick-use-after-free-in-destroyimage-image-c/ -CVE-2017-12879 - https://drive.google.com/open?id=0B6WbMqXSfqQFODZHUGtLdzU3eDA CVE-2017-12879 - https://youtu.be/QOLdH2oey8Q CVE-2017-12883 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2017-12904 - https://github.com/akrennmair/newsbeuter/commit/96e9506ae9e252c548665152d1b8968297128307 @@ -43121,13 +42402,10 @@ CVE-2017-12971 - http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER- CVE-2017-12971 - http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html CVE-2017-12971 - https://www.exploit-db.com/exploits/42520/ CVE-2017-12972 - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c -CVE-2017-12972 - https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc CVE-2017-12972 - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt CVE-2017-12973 - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6a29f10f723f406eb25555f55842c59a43a38912 -CVE-2017-12973 - https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/223/aescbc-return-immediately-on-invalid-hmac CVE-2017-12973 - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt CVE-2017-12974 - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f3a7a801f0c6b078899fed9226368eb7b44e2b2f -CVE-2017-12974 - https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/217/explicit-check-for-ec-public-key-on-curve CVE-2017-12974 - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt CVE-2017-12979 - https://github.com/splitbrain/dokuwiki/issues/2080 CVE-2017-12980 - https://github.com/splitbrain/dokuwiki/issues/2081 @@ -43585,12 +42863,10 @@ CVE-2017-14524 - http://seclists.org/fulldisclosure/2017/Sep/57 CVE-2017-14525 - http://seclists.org/fulldisclosure/2017/Sep/57 CVE-2017-14528 - http://bugzilla.maptools.org/show_bug.cgi?id=2730 CVE-2017-14529 - https://sourceware.org/bugzilla/show_bug.cgi?id=22113 -CVE-2017-14530 - https://cybersecurityworks.com/zerodays/cve-2017-14530-crony.html CVE-2017-14530 - https://github.com/cybersecurityworks/Disclosed/issues/9 CVE-2017-14533 - https://github.com/ImageMagick/ImageMagick/issues/648 CVE-2017-14535 - http://packetstormsecurity.com/files/162854/Trixbox-2.8.0.4-Remote-Code-Execution.html CVE-2017-14535 - https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/ -CVE-2017-14535 - https://www.linkedin.com/pulse/trixbox-os-command-injection-vulnerability-sachin-wagh-ceh-ecsa-/?published=t CVE-2017-14536 - https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-cross-site-scripting-vulnerabilities/ CVE-2017-14537 - http://packetstormsecurity.com/files/162853/Trixbox-2.8.0.4-Path-Traversal.html CVE-2017-14537 - https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/ @@ -43639,7 +42915,6 @@ CVE-2017-14646 - https://github.com/axiomatic-systems/Bento4/issues/188 CVE-2017-14647 - https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-overflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/ CVE-2017-14649 - https://blogs.gentoo.org/ago/2017/09/19/graphicsmagick-assertion-failure-in-pixel_cache-c/ CVE-2017-14650 - https://github.com/horde/horde/commit/eb3afd14c22c77ae0d29e2848f5ac726ef6e7c5b -CVE-2017-14651 - https://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html CVE-2017-14651 - https://github.com/cybersecurityworks/Disclosed/issues/15 CVE-2017-14652 - http://adrianhayter.com/exploits.php CVE-2017-14680 - http://seclists.org/bugtraq/2017/Sep/20 @@ -43665,7 +42940,6 @@ CVE-2017-14717 - https://forum.epesibim.com/d/4956-security-issue-multiple-store CVE-2017-14717 - https://www.exploit-db.com/exploits/42950/ CVE-2017-14719 - https://wpvulndb.com/vulnerabilities/8911 CVE-2017-14722 - https://wpvulndb.com/vulnerabilities/8912 -CVE-2017-14723 - https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e CVE-2017-14724 - https://wpvulndb.com/vulnerabilities/8913 CVE-2017-14725 - https://wpvulndb.com/vulnerabilities/8910 CVE-2017-14726 - https://wpvulndb.com/vulnerabilities/8914 @@ -43798,7 +43072,6 @@ CVE-2017-15115 - https://usn.ubuntu.com/3582-1/ CVE-2017-15115 - https://usn.ubuntu.com/3583-2/ CVE-2017-15118 - https://www.exploit-db.com/exploits/43194/ CVE-2017-15130 - https://usn.ubuntu.com/3587-2/ -CVE-2017-15134 - https://pagure.io/389-ds-base/c/6aa2acdc3cad9 CVE-2017-1515 - http://www.ibm.com/support/docview.wss?uid=swg22012789 CVE-2017-1516 - http://www.ibm.com/support/docview.wss?uid=swg22012789 CVE-2017-15185 - http://seclists.org/fulldisclosure/2017/Jul/82 @@ -43935,13 +43208,6 @@ CVE-2017-15665 - https://www.exploit-db.com/exploits/43454/ CVE-2017-15667 - https://www.exploit-db.com/exploits/43403/ CVE-2017-1567 - http://www.ibm.com/support/docview.wss?uid=swg22012789 CVE-2017-15673 - http://packetstormsecurity.com/files/145096/CSC-Cart-4.6.2-Shell-Upload.html -CVE-2017-15680 - https://docs.craftercms.org/en/3.0/security/advisory.html -CVE-2017-15681 - https://docs.craftercms.org/en/3.0/security/advisory.html -CVE-2017-15682 - https://docs.craftercms.org/en/3.0/security/advisory.html -CVE-2017-15683 - https://docs.craftercms.org/en/3.0/security/advisory.html -CVE-2017-15684 - https://docs.craftercms.org/en/3.0/security/advisory.html -CVE-2017-15685 - https://docs.craftercms.org/en/3.0/security/advisory.html -CVE-2017-15686 - https://docs.craftercms.org/en/3.0/security/advisory.html CVE-2017-15687 - https://www.exploit-db.com/exploits/43024/ CVE-2017-15706 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2017-15707 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html @@ -44201,8 +43467,6 @@ CVE-2017-16237 - https://www.exploit-db.com/exploits/43109/ CVE-2017-16244 - https://www.exploit-db.com/exploits/43106/ CVE-2017-16249 - http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html CVE-2017-16249 - https://www.exploit-db.com/exploits/43119/ -CVE-2017-16249 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211 -CVE-2017-16249 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-Brother-Printers/?page=1&year=0&month=0&LangType=1033 CVE-2017-16252 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0483 CVE-2017-16253 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483 CVE-2017-16254 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483 @@ -44609,7 +43873,6 @@ CVE-2017-17440 - https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg CVE-2017-17440 - https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00002.html CVE-2017-17440 - https://lists.gnu.org/archive/html/bug-libextractor/2017-11/msg00004.html CVE-2017-17442 - http://support.blackberry.com/kb/articleDetail?articleNumber=000047227 -CVE-2017-17446 - https://bitbucket.org/mpyne/game-music-emu/issues/14/addresssanitizer-negative-size-param-size CVE-2017-17446 - https://bugs.debian.org/883691 CVE-2017-17448 - https://usn.ubuntu.com/3620-1/ CVE-2017-17450 - https://usn.ubuntu.com/3583-2/ @@ -44641,7 +43904,6 @@ CVE-2017-17485 - https://github.com/irsl/jackson-rce-via-spel/ CVE-2017-17485 - https://www.oracle.com/security-alerts/cpuoct2020.html CVE-2017-17497 - https://github.com/htacg/tidy-html5/issues/656 CVE-2017-17498 - https://sourceforge.net/p/graphicsmagick/bugs/525/ -CVE-2017-17499 - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=33078&sid=5fbb164c3830293138917f9b14264ed1 CVE-2017-17500 - https://sourceforge.net/p/graphicsmagick/bugs/523/ CVE-2017-17501 - https://sourceforge.net/p/graphicsmagick/bugs/526/ CVE-2017-17502 - https://sourceforge.net/p/graphicsmagick/bugs/521/ @@ -44845,7 +44107,6 @@ CVE-2017-17714 - https://www.youtube.com/watch?v=Txp6IwR24jY CVE-2017-17716 - https://gitlab.com/gitlab-org/gitlab-ce/issues/30420 CVE-2017-17719 - http://seclists.org/fulldisclosure/2017/Dec/71 CVE-2017-17719 - https://wpvulndb.com/vulnerabilities/8981 -CVE-2017-17721 - https://0day.today/exploit/29277 CVE-2017-17721 - https://cxsecurity.com/issue/WLB-2017120155 CVE-2017-17721 - https://packetstormsecurity.com/files/145511/BEIMS-ContractorWeb-5.18.0.0-SQL-Injection.html CVE-2017-17721 - https://www.exploit-db.com/exploits/43379/ @@ -45199,7 +44460,6 @@ CVE-2017-18378 - https://www.exploit-db.com/exploits/42956 CVE-2017-18483 - https://www.pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera/ CVE-2017-18486 - https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html CVE-2017-18486 - https://www.exploit-db.com/exploits/42776 -CVE-2017-18486 - https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day CVE-2017-18499 - https://wpvulndb.com/vulnerabilities/9718 CVE-2017-18508 - https://wpvulndb.com/vulnerabilities/9719 CVE-2017-18509 - http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html @@ -45581,7 +44841,6 @@ CVE-2017-20183 - https://github.com/zzxiang/external-media-without-import/releas CVE-2017-20184 - https://www.exploit-db.com/exploits/42705 CVE-2017-20189 - https://clojure.atlassian.net/browse/CLJ-2204 CVE-2017-20189 - https://github.com/frohoff/ysoserial/pull/68/files -CVE-2017-20189 - https://hackmd.io/%40fe1w0/HyefvRQKp CVE-2017-20189 - https://hackmd.io/@fe1w0/HyefvRQKp CVE-2017-20189 - https://security.snyk.io/vuln/SNYK-JAVA-ORGCLOJURE-5740378 CVE-2017-20192 - https://klikki.fi/adv/formidable.html @@ -45593,10 +44852,7 @@ CVE-2017-2096 - http://jvn.jp/en/jp/JVN50197114/index.html CVE-2017-2122 - https://www.tenable.com/security/tns-2017-01 CVE-2017-2137 - https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997 CVE-2017-2168 - https://wpvulndb.com/vulnerabilities/8830 -CVE-2017-2176 - http://www.mod.go.jp/asdf/information/index.html -CVE-2017-2178 - http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html CVE-2017-2195 - https://wpvulndb.com/vulnerabilities/8844 -CVE-2017-2208 - http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html CVE-2017-2224 - https://wpvulndb.com/vulnerabilities/8859 CVE-2017-2284 - https://wpvulndb.com/vulnerabilities/8878 CVE-2017-2285 - https://wpvulndb.com/vulnerabilities/8879 @@ -45703,7 +44959,6 @@ CVE-2017-2671 - https://github.com/danieljiang0415/android_kernel_crash_poc CVE-2017-2671 - https://www.exploit-db.com/exploits/42135/ CVE-2017-2741 - https://www.exploit-db.com/exploits/42176/ CVE-2017-2741 - https://www.exploit-db.com/exploits/45273/ -CVE-2017-2779 - https://0patch.blogspot.com/2017/09/0patching-rsrc-arbitrary-null-write.html CVE-2017-2780 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0276 CVE-2017-2781 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0277 CVE-2017-2782 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0278 @@ -45870,11 +45125,9 @@ CVE-2017-3192 - https://www.kb.cert.org/vuls/id/553503 CVE-2017-3192 - https://www.scmagazine.com/d-link-dir-130-and-dir-330-routers-vulnerable/article/644553/ CVE-2017-3193 - https://www.kb.cert.org/vuls/id/305448 CVE-2017-3194 - https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/ -CVE-2017-3195 - http://redr2e.com/commvault-edge-cve-2017-3195/ CVE-2017-3195 - https://www.exploit-db.com/exploits/41823/ CVE-2017-3195 - https://www.kb.cert.org/vuls/id/214283 CVE-2017-3196 - http://blog.rewolf.pl/blog/?p=1778 -CVE-2017-3196 - https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/ CVE-2017-3196 - https://www.kb.cert.org/vuls/id/600671 CVE-2017-3197 - https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md CVE-2017-3197 - https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html @@ -46402,9 +45655,7 @@ CVE-2017-3738 - https://www.tenable.com/security/tns-2018-06 CVE-2017-3738 - https://www.tenable.com/security/tns-2018-07 CVE-2017-3807 - https://www.exploit-db.com/exploits/41369/ CVE-2017-3813 - https://www.exploit-db.com/exploits/41476/ -CVE-2017-3823 - https://0patch.blogspot.com/2017/01/micropatching-remote-code-execution-in.html CVE-2017-3881 - https://www.exploit-db.com/exploits/41872/ -CVE-2017-3881 - https://www.exploit-db.com/exploits/41874/ CVE-2017-3891 - http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 CVE-2017-3892 - http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 CVE-2017-3893 - http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 @@ -46459,11 +45710,6 @@ CVE-2017-4914 - https://www.exploit-db.com/exploits/42152/ CVE-2017-4915 - https://www.exploit-db.com/exploits/42045/ CVE-2017-4916 - https://www.exploit-db.com/exploits/42140/ CVE-2017-4917 - http://www.vmware.com/security/advisories/VMSA-2017-0010.html -CVE-2017-4918 - https://www.vmware.com/security/advisories/VMSA-2017-0011.html -CVE-2017-4924 - https://0patch.blogspot.com/2017/10/micropatching-hypervisor-with-running.html -CVE-2017-4930 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html -CVE-2017-4931 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html -CVE-2017-4932 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html CVE-2017-5005 - https://github.com/payatu/QuickHeal CVE-2017-5031 - https://bugzilla.mozilla.org/show_bug.cgi?id=1328762 CVE-2017-5116 - https://security.googleblog.com/2018/01/android-security-ecosystem-investments.html @@ -46487,8 +45733,6 @@ CVE-2017-5207 - https://github.com/netblue30/firejail/commit/5d43fdcd215203868d4 CVE-2017-5207 - https://github.com/netblue30/firejail/issues/1023 CVE-2017-5214 - https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt CVE-2017-5215 - https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt -CVE-2017-5218 - http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/ -CVE-2017-5219 - http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/ CVE-2017-5223 - https://www.exploit-db.com/exploits/43056/ CVE-2017-5225 - http://bugzilla.maptools.org/show_bug.cgi?id=2656 CVE-2017-5225 - http://bugzilla.maptools.org/show_bug.cgi?id=2657 @@ -46593,7 +45837,6 @@ CVE-2017-5460 - https://www.mozilla.org/security/advisories/mfsa2017-12/ CVE-2017-5461 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html CVE-2017-5461 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CVE-2017-5461 - https://bugzilla.mozilla.org/show_bug.cgi?id=1344380 -CVE-2017-5461 - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.4_release_notes CVE-2017-5461 - https://www.oracle.com//security-alerts/cpujul2021.html CVE-2017-5462 - https://www.mozilla.org/security/advisories/mfsa2017-12/ CVE-2017-5464 - https://www.mozilla.org/security/advisories/mfsa2017-12/ @@ -46831,12 +46074,8 @@ CVE-2017-5856 - https://bugzilla.redhat.com/show_bug.cgi?id=1418342 CVE-2017-5868 - https://hackerone.com/reports/231508 CVE-2017-5868 - https://hackerone.com/reports/232327 CVE-2017-5869 - http://www.openwall.com/lists/oss-security/2017/03/23/6 -CVE-2017-5869 - https://sysdream.com/news/lab/2017-03-23-cve-2017-5869-nuxeo-platform-remote-code-execution/ CVE-2017-5869 - https://www.exploit-db.com/exploits/41748/ CVE-2017-5870 - http://www.openwall.com/lists/oss-security/2017/05/03/8 -CVE-2017-5870 - https://sysdream.com/news/lab/2017-05-03-cve-2017-5870-multiple-xss-vulnerabilities-in-vimbadmin/ -CVE-2017-5871 - https://sysdream.com/news/lab/2017-11-20-cve-2017-5871-odoo-url-redirection-to-distrusted-site-open-redirect/ -CVE-2017-5872 - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=42 CVE-2017-5875 - https://github.com/dotCMS/core/issues/10643 CVE-2017-5876 - https://github.com/dotCMS/core/issues/10643 CVE-2017-5877 - https://github.com/dotCMS/core/issues/10643 @@ -46888,7 +46127,6 @@ CVE-2017-5983 - https://www.kb.cert.org/vuls/id/307983 CVE-2017-5984 - https://bugzilla.libav.org/show_bug.cgi?id=1019 CVE-2017-5991 - https://bugs.ghostscript.com/show_bug.cgi?id=697500 CVE-2017-5991 - https://www.exploit-db.com/exploits/42138/ -CVE-2017-5992 - https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1 CVE-2017-5992 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854442 CVE-2017-5997 - https://erpscan.io/advisories/erpscan-16-038-sap-message-server-http-remote-dos/ CVE-2017-6008 - https://www.exploit-db.com/exploits/43057/ @@ -46914,14 +46152,10 @@ CVE-2017-6078 - https://github.com/ilsani/rd/tree/master/security-advisories/fas CVE-2017-6086 - http://www.openwall.com/lists/oss-security/2017/05/03/7 CVE-2017-6086 - https://www.exploit-db.com/exploits/41967/ CVE-2017-6087 - http://www.openwall.com/lists/oss-security/2017/03/23/5 -CVE-2017-6087 - https://sysdream.com/news/lab/2017-03-14-cve-2017-6087-eon-5-0-remote-code-execution/ CVE-2017-6087 - https://www.exploit-db.com/exploits/41746/ CVE-2017-6088 - http://www.openwall.com/lists/oss-security/2017/03/23/4 -CVE-2017-6088 - https://sysdream.com/news/lab/2017-03-14-cve-2017-6088-eon-5-0-multiple-sql-injection/ CVE-2017-6088 - https://www.exploit-db.com/exploits/41747/ -CVE-2017-6089 - https://sysdream.com/news/lab/2017-09-29-cve-2017-6089-phpcollab-2-5-1-multiple-sql-injections-unauthenticated/ CVE-2017-6089 - https://www.exploit-db.com/exploits/42935/ -CVE-2017-6090 - https://sysdream.com/news/lab/2017-09-29-cve-2017-6090-phpcollab-2-5-1-arbitrary-file-upload-unauthenticated/ CVE-2017-6090 - https://www.exploit-db.com/exploits/42934/ CVE-2017-6090 - https://www.exploit-db.com/exploits/43519/ CVE-2017-6095 - https://wpvulndb.com/vulnerabilities/8740 @@ -47042,13 +46276,9 @@ CVE-2017-6516 - https://www.exploit-db.com/exploits/44150/ CVE-2017-6517 - http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.html CVE-2017-6517 - http://seclists.org/fulldisclosure/2017/Mar/44 CVE-2017-6526 - https://www.exploit-db.com/exploits/41578/ -CVE-2017-6526 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ CVE-2017-6527 - https://www.exploit-db.com/exploits/41578/ -CVE-2017-6527 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ CVE-2017-6528 - https://www.exploit-db.com/exploits/41578/ -CVE-2017-6528 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ CVE-2017-6529 - https://www.exploit-db.com/exploits/41578/ -CVE-2017-6529 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ CVE-2017-6530 - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt CVE-2017-6531 - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt CVE-2017-6532 - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt @@ -47263,7 +46493,6 @@ CVE-2017-7258 - https://sudoat.blogspot.in/2017/03/path-traversal-vulnerability- CVE-2017-7263 - https://blogs.gentoo.org/ago/2017/03/03/potrace-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c-incomplete-fix-for-cve-2016-8698/ CVE-2017-7264 - https://blogs.gentoo.org/ago/2017/02/09/mupdf-use-after-free-in-fz_subsample_pixmap-pixmap-c/ CVE-2017-7264 - https://bugs.ghostscript.com/show_bug.cgi?id=697515 -CVE-2017-7269 - https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html CVE-2017-7269 - https://medium.com/@iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812 CVE-2017-7269 - https://www.exploit-db.com/exploits/41738/ CVE-2017-7269 - https://www.exploit-db.com/exploits/41992/ @@ -47494,7 +46723,6 @@ CVE-2017-7962 - https://github.com/jsummers/imageworsener/issues/15 CVE-2017-7975 - https://bugs.ghostscript.com/show_bug.cgi?id=697693 CVE-2017-7976 - https://bugs.ghostscript.com/show_bug.cgi?id=697683 CVE-2017-7981 - https://www.exploit-db.com/exploits/41953/ -CVE-2017-7985 - https://fortiguard.com/zeroday/FG-VD-17-107 CVE-2017-7990 - https://www.youtube.com/watch?v=pfrIaNvIuFY CVE-2017-7991 - http://seclists.org/fulldisclosure/2017/Apr/78 CVE-2017-7991 - https://gist.github.com/404notf0und/ab59234d71fbf35b4926ffd646324f29 @@ -47502,10 +46730,8 @@ CVE-2017-7991 - https://packetstormsecurity.com/files/142258/Exponent-CMS-2.4.1- CVE-2017-7994 - https://github.com/icepng/PoC/tree/master/PoC1 CVE-2017-7994 - https://icepng.github.io/2017/04/21/PoDoFo-1/ CVE-2017-7997 - http://seclists.org/fulldisclosure/2018/Jan/14 -CVE-2017-7997 - https://sysdream.com/news/lab/2018-01-02-cve-2017-7997-gespage-sql-injection-vulnerability/ CVE-2017-7997 - https://www.exploit-db.com/exploits/43447/ CVE-2017-7998 - http://seclists.org/fulldisclosure/2018/Jan/13 -CVE-2017-7998 - https://sysdream.com/news/lab/2018-01-02-cve-2017-7998-gespage-stored-cross-site-scripting-xss-vulnerability/ CVE-2017-8013 - http://seclists.org/fulldisclosure/2017/Sep/36 CVE-2017-8015 - http://seclists.org/fulldisclosure/2017/Sep/14 CVE-2017-8028 - https://www.oracle.com/security-alerts/cpujan2021.html @@ -47781,7 +47007,6 @@ CVE-2017-8850 - https://alephsecurity.com/vulns/aleph-2017020 CVE-2017-8851 - https://alephsecurity.com/vulns/aleph-2017021 CVE-2017-8852 - https://www.coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vulnerability CVE-2017-8852 - https://www.exploit-db.com/exploits/41991/ -CVE-2017-8869 - https://www.exploit-db.com/exploits/42384/ CVE-2017-8870 - https://www.exploit-db.com/exploits/42385/ CVE-2017-8871 - https://www.exploit-db.com/exploits/42147/ CVE-2017-8872 - https://bugzilla.gnome.org/show_bug.cgi?id=775200 @@ -47856,7 +47081,6 @@ CVE-2017-9085 - https://packetstormsecurity.com/files/142587/Kodak-InSite-8.0-Cr CVE-2017-9095 - https://www.exploit-db.com/exploits/43187/ CVE-2017-9096 - https://www.oracle.com/security-alerts/cpuoct2020.html CVE-2017-9098 - http://www.securityfocus.com/bid/98593 -CVE-2017-9100 - http://touhidshaikh.com/blog/poc/d-link-dir600-auth-bypass/ CVE-2017-9100 - https://www.exploit-db.com/exploits/42039/ CVE-2017-9101 - https://www.exploit-db.com/exploits/42044/ CVE-2017-9101 - https://www.exploit-db.com/exploits/44598/ @@ -47949,7 +47173,6 @@ CVE-2017-9232 - https://www.exploit-db.com/exploits/44023/ CVE-2017-9233 - http://www.securityfocus.com/bid/99276 CVE-2017-9239 - https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test%28exiv2%29 CVE-2017-9239 - https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test(exiv2) -CVE-2017-9243 - http://touhidshaikh.com/blog/poc/qwr-1104-wireless-n-router-xss/ CVE-2017-9243 - https://www.exploit-db.com/exploits/42075/ CVE-2017-9248 - https://www.exploit-db.com/exploits/43873/ CVE-2017-9249 - https://github.com/s3131212/allendisk/issues/21 @@ -47989,7 +47212,6 @@ CVE-2017-9356 - http://seclists.org/bugtraq/2017/Jun/43 CVE-2017-9360 - https://jgj212.blogspot.tw/2017/05/a-sql-injection-vulnerability-in.html CVE-2017-9361 - https://jgj212.blogspot.tw/2017/05/a-stored-xss-vulnerability-in.html CVE-2017-9369 - http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 -CVE-2017-9370 - http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045350 CVE-2017-9374 - https://bugzilla.redhat.com/show_bug.cgi?id=1459132 CVE-2017-9379 - https://github.com/bigtreecms/BigTree-CMS/issues/287 CVE-2017-9380 - http://packetstormsecurity.com/files/163087/OpenEMR-5.0.0-Remote-Shell-Upload.html @@ -48020,10 +47242,8 @@ CVE-2017-9418 - https://www.exploit-db.com/exploits/42166/ CVE-2017-9419 - https://wpvulndb.com/vulnerabilities/8848 CVE-2017-9420 - https://wpvulndb.com/vulnerabilities/8842 CVE-2017-9424 - https://www.blackhat.com/us-17/briefings.html#friday-the-13th-json-attacks -CVE-2017-9425 - http://touhidshaikh.com/blog/poc/facetag-ext-piwigo-stored-xss/ CVE-2017-9425 - https://www.exploit-db.com/exploits/42098/ CVE-2017-9425 - https://www.youtube.com/watch?v=_ha7XBT_Omo -CVE-2017-9426 - http://touhidshaikh.com/blog/poc/facetag-extension-piwigo-sqli/ CVE-2017-9426 - https://www.exploit-db.com/exploits/42094/ CVE-2017-9426 - https://www.youtube.com/watch?v=MVCe_zYtFsQ CVE-2017-9427 - https://github.com/bigtreecms/BigTree-CMS/issues/288 @@ -48036,7 +47256,6 @@ CVE-2017-9441 - https://github.com/bigtreecms/BigTree-CMS/issues/290 CVE-2017-9442 - https://github.com/bigtreecms/BigTree-CMS/issues/291 CVE-2017-9443 - https://github.com/bigtreecms/BigTree-CMS/issues/292 CVE-2017-9444 - https://github.com/bigtreecms/BigTree-CMS/issues/293 -CVE-2017-9447 - https://www.exploit-db.com/exploits/442321/ CVE-2017-9448 - https://github.com/bigtreecms/BigTree-CMS/issues/294 CVE-2017-9449 - https://github.com/bigtreecms/BigTree-CMS/issues/295 CVE-2017-9450 - https://sintonen.fi/advisories/aws-cfn-bootstrap-local-code-execution-as-root.txt @@ -48280,7 +47499,6 @@ CVE-2017-9947 - http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-T CVE-2017-9948 - https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-uncovered-microsoft-skype-v72-v735 CVE-2017-9948 - https://www.vulnerability-lab.com/get_content.php?id=2071 CVE-2017-9955 - https://sourceware.org/bugzilla/show_bug.cgi?id=21665 -CVE-2017-9962 - http://www.schneider-electric.com/en/download/document/SEVD-2017-264-01/ CVE-2017-9978 - http://packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html CVE-2017-9978 - http://seclists.org/fulldisclosure/2017/Aug/23 CVE-2017-9978 - https://www.exploit-db.com/exploits/42517/ @@ -48396,7 +47614,6 @@ CVE-2018-0775 - https://www.exploit-db.com/exploits/43717/ CVE-2018-0776 - https://www.exploit-db.com/exploits/43723/ CVE-2018-0777 - https://www.exploit-db.com/exploits/43718/ CVE-2018-0780 - https://www.exploit-db.com/exploits/43720/ -CVE-2018-0802 - https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html CVE-2018-0802 - https://github.com/rxwx/CVE-2018-0802 CVE-2018-0802 - https://github.com/zldww2011/CVE-2018-0802_POC CVE-2018-0802 - https://research.checkpoint.com/another-office-equation-rce-vulnerability/ @@ -48497,7 +47714,6 @@ CVE-2018-1000122 - https://www.oracle.com/technetwork/security-advisory/cpujan20 CVE-2018-1000124 - https://github.com/mkucej/i-librarian/issues/116 CVE-2018-1000126 - https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee CVE-2018-1000131 - https://wpvulndb.com/vulnerabilities/9041 -CVE-2018-1000136 - https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2018-1000136---Electron-nodeIntegration-Bypass/ CVE-2018-1000137 - https://github.com/mkucej/i-librarian/issues/121 CVE-2018-1000138 - https://github.com/mkucej/i-librarian/issues/120 CVE-2018-1000139 - https://github.com/mkucej/i-librarian/issues/119 @@ -48510,7 +47726,6 @@ CVE-2018-1000156 - https://seclists.org/bugtraq/2019/Aug/29 CVE-2018-1000160 - https://github.com/RisingStack/protect/issues/16 CVE-2018-1000167 - https://tech.feedyourhead.at/content/remote-code-execution-in-suricata-update CVE-2018-1000168 - https://lists.debian.org/debian-lts-announce/2021/10/msg00011.html -CVE-2018-1000172 - https://fortiguard.com/zeroday/FG-VD-17-215 CVE-2018-1000180 - https://www.oracle.com/security-alerts/cpuApr2021.html CVE-2018-1000180 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2018-1000180 - https://www.oracle.com/security-alerts/cpuoct2020.html @@ -48617,7 +47832,6 @@ CVE-2018-1000887 - https://github.com/advisto/peel-shopping/issues/1 CVE-2018-1000888 - https://www.exploit-db.com/exploits/46108/ CVE-2018-1000890 - https://github.com/FrontAccountingERP/FA/issues/37 CVE-2018-1000890 - https://www.exploit-db.com/exploits/46037 -CVE-2018-1000998 - https://www.kvakil.me/posts/cvsweb/ CVE-2018-10016 - https://bugzilla.nasm.us/show_bug.cgi?id=3392473 CVE-2018-10018 - http://seclists.org/fulldisclosure/2018/Jul/55 CVE-2018-10018 - https://www.exploit-db.com/exploits/45017/ @@ -48679,14 +47893,11 @@ CVE-2018-10088 - https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit CVE-2018-10088 - https://www.exploit-db.com/exploits/44864/ CVE-2018-10091 - http://packetstormsecurity.com/files/151115/AudioCode-400HD-Cross-Site-scripting.html CVE-2018-10092 - http://www.openwall.com/lists/oss-security/2018/05/21/2 -CVE-2018-10092 - https://sysdream.com/news/lab/2018-05-21-cve-2018-10092-dolibarr-admin-panel-authenticated-remote-code-execution-rce-vulnerability/ CVE-2018-10093 - http://packetstormsecurity.com/files/151116/AudioCode-400HD-Remote-Command-Injection.html CVE-2018-10093 - https://www.exploit-db.com/exploits/46164/ CVE-2018-10094 - http://www.openwall.com/lists/oss-security/2018/05/21/1 -CVE-2018-10094 - https://sysdream.com/news/lab/2018-05-21-cve-2018-10094-dolibarr-sql-injection-vulnerability/ CVE-2018-10094 - https://www.exploit-db.com/exploits/44805/ CVE-2018-10095 - http://www.openwall.com/lists/oss-security/2018/05/21/3 -CVE-2018-10095 - https://sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerability/ CVE-2018-10097 - https://packetstormsecurity.com/files/146855/Domaintrader-2.5.3-Cross-Site-Scripting.html CVE-2018-10099 - https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549 CVE-2018-10099 - https://medium.com/@luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549 @@ -48754,7 +47965,6 @@ CVE-2018-10237 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2018-10241 - https://www.bishopfox.com/news/2018/05/solarwinds-serv-u-managed-file-transfer-denial-of-service/ CVE-2018-10248 - https://github.com/wuzhicms/wuzhicms/issues/130 CVE-2018-10249 - https://crayon-xin.github.io/2018/04/20/baijiacmsV3-CSRF-add-admin/ -CVE-2018-10252 - https://actiontecsupport.zendesk.com/hc/en-us/articles/115000432163-WCB6200Q-Firmware-Upgrade CVE-2018-10253 - https://www.exploit-db.com/exploits/44500/ CVE-2018-10254 - https://sourceforge.net/p/nasm/bugs/561/ CVE-2018-10255 - http://packetstormsecurity.com/files/147363/Blog-Master-Pro-1.0-CSV-Injection.html @@ -48819,19 +48029,12 @@ CVE-2018-10377 - https://integritylabs.io/advisories/cve-2018-10377 CVE-2018-1038 - https://blog.xpnsec.com/total-meltdown-cve-2018-1038/ CVE-2018-1038 - https://www.exploit-db.com/exploits/44581/ CVE-2018-10391 - https://github.com/wuzhicms/wuzhicms/issues/134 -CVE-2018-10403 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ -CVE-2018-10404 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ -CVE-2018-10405 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ -CVE-2018-10406 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ -CVE-2018-10407 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ -CVE-2018-10408 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ CVE-2018-1041 - https://www.exploit-db.com/exploits/44099/ CVE-2018-1042 - http://packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.html CVE-2018-10425 - https://github.com/rebol0x6c/2345poc CVE-2018-10428 - http://packetstormsecurity.com/files/147726/ILIAS-5.3.2-5.2.14-5.1.25-Cross-Site-Scripting.html CVE-2018-10428 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-007.txt CVE-2018-1043 - https://moodle.org/mod/forum/discuss.php?d=364382 -CVE-2018-10470 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ CVE-2018-1050 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 CVE-2018-10503 - https://github.com/monburan/attack-baijiacmsV4-with-csrf CVE-2018-10504 - https://www.exploit-db.com/exploits/44559/ @@ -48869,9 +48072,7 @@ CVE-2018-10565 - http://seclists.org/fulldisclosure/2018/May/6 CVE-2018-10566 - http://seclists.org/fulldisclosure/2018/May/7 CVE-2018-10569 - https://youtu.be/6d4BPbvddkE CVE-2018-10569 - https://youtu.be/m2to4PWmHkI -CVE-2018-10575 - https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000LIy CVE-2018-10575 - https://www.exploit-db.com/exploits/45409/ -CVE-2018-10576 - https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000LIy CVE-2018-10576 - https://www.exploit-db.com/exploits/45409/ CVE-2018-10577 - https://www.exploit-db.com/exploits/45409/ CVE-2018-10580 - http://packetstormsecurity.com/files/147575/MyBB-Latest-Posts-On-Profile-1.1-Cross-Site-Scripting.html @@ -49330,8 +48531,6 @@ CVE-2018-1121 - https://www.exploit-db.com/exploits/44806/ CVE-2018-1121 - https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt CVE-2018-11212 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2018-11212 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html -CVE-2018-11218 - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES -CVE-2018-11219 - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES CVE-2018-1122 - http://seclists.org/oss-sec/2018/q2/122 CVE-2018-1122 - https://www.exploit-db.com/exploits/44806/ CVE-2018-1122 - https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt @@ -49344,8 +48543,6 @@ CVE-2018-1123 - https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisor CVE-2018-11232 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2 CVE-2018-11233 - https://marc.info/?l=git&m=152761328506724&w=2 CVE-2018-11235 - https://marc.info/?l=git&m=152761328506724&w=2 -CVE-2018-11235 - https://www.exploit-db.com/exploits/44822/ -CVE-2018-11237 - https://www.exploit-db.com/exploits/44750/ CVE-2018-1124 - http://seclists.org/oss-sec/2018/q2/122 CVE-2018-1124 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 CVE-2018-1124 - https://kc.mcafee.com/corporate/index?page=content&id=SB10241 @@ -49394,14 +48591,12 @@ CVE-2018-11307 - https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-her CVE-2018-11307 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2018-11307 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2018-11307 - https://www.oracle.com/security-alerts/cpuoct2020.html -CVE-2018-11311 - https://www.exploit-db.com/exploits/44656/ CVE-2018-11314 - https://medium.com/%40brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325 CVE-2018-11314 - https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325 CVE-2018-11315 - https://medium.com/%40brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325 CVE-2018-11315 - https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325 CVE-2018-11316 - https://medium.com/%40brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325 CVE-2018-11316 - https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325 -CVE-2018-1132 - https://www.exploit-db.com/exploits/44747/ CVE-2018-1133 - https://www.exploit-db.com/exploits/46551/ CVE-2018-11332 - https://www.exploit-db.com/exploits/44775/ CVE-2018-11335 - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md @@ -49462,16 +48657,12 @@ CVE-2018-11478 - https://www.sec-consult.com/en/blog/advisories/unprotected-wifi CVE-2018-11479 - http://packetstormsecurity.com/files/156222/Windscribe-WindscribeService-Named-Pipe-Privilege-Escalation.html CVE-2018-1148 - https://www.tenable.com/security/tns-2018-05 CVE-2018-1149 - https://github.com/tenable/poc/tree/master/nuuo/nvrmini2 -CVE-2018-1149 - https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf CVE-2018-1149 - https://www.tenable.com/security/research/tra-2018-25 -CVE-2018-11491 - https://mars-cheng.github.io/blog/2018/CVE-2018-11491/ CVE-2018-11492 - http://packetstormsecurity.com/files/152542/ASUS-HG100-Denial-Of-Service.html -CVE-2018-11492 - https://mars-cheng.github.io/blog/2018/CVE-2018-11492/ CVE-2018-11492 - https://www.exploit-db.com/exploits/46720/ CVE-2018-11493 - https://github.com/wuzhicms/wuzhicms/issues/137 CVE-2018-11496 - https://github.com/ckolivas/lrzip/issues/96 CVE-2018-11498 - https://github.com/inikep/lizard/issues/16 -CVE-2018-1150 - https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf CVE-2018-1150 - https://www.tenable.com/security/research/tra-2018-25 CVE-2018-11500 - https://github.com/sanluan/PublicCMS/issues/11 CVE-2018-11501 - https://gkaim.com/cve-2018-11501-vikas-chaudhary/ @@ -49579,7 +48770,6 @@ CVE-2018-11689 - https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11689 CVE-2018-11690 - http://packetstormsecurity.com/files/148127/Joomla-2.4.0-Gridbox-Cross-Site-Scripting.html CVE-2018-11690 - http://seclists.org/fulldisclosure/2018/Jun/26 CVE-2018-11691 - http://www.emerson.com/documents/automation/deltav-smart-switches-en-179014.pdf -CVE-2018-11692 - https://www.exploit-db.com/exploits/44844/ CVE-2018-11693 - https://github.com/sass/libsass/issues/2661 CVE-2018-11694 - https://github.com/sass/libsass/issues/2663 CVE-2018-11695 - https://github.com/sass/libsass/issues/2664 @@ -49588,7 +48778,6 @@ CVE-2018-11697 - https://github.com/sass/libsass/issues/2656 CVE-2018-11698 - https://github.com/sass/libsass/issues/2662 CVE-2018-11709 - https://wpvulndb.com/vulnerabilities/9090 CVE-2018-1171 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html -CVE-2018-11711 - https://www.exploit-db.com/exploits/44845/ CVE-2018-11714 - https://www.exploit-db.com/exploits/44781/ CVE-2018-11715 - https://www.exploit-db.com/exploits/44833/ CVE-2018-11722 - https://github.com/wuzhicms/wuzhicms/issues/141 @@ -49752,8 +48941,6 @@ CVE-2018-1204 - https://www.exploit-db.com/exploits/44039/ CVE-2018-12040 - http://packetstormsecurity.com/files/148125/SensioLabs-Symfony-3.3.6-Cross-Site-Scripting.html CVE-2018-12045 - https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md CVE-2018-12046 - https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md -CVE-2018-12048 - https://www.exploit-db.com/exploits/44885/ -CVE-2018-12049 - https://www.exploit-db.com/exploits/44886/ CVE-2018-12051 - https://github.com/unh3x/just4cve/issues/5 CVE-2018-12052 - https://github.com/unh3x/just4cve/issues/3 CVE-2018-12052 - https://www.exploit-db.com/exploits/44873/ @@ -49763,7 +48950,6 @@ CVE-2018-12054 - https://github.com/unh3x/just4cve/issues/4 CVE-2018-12054 - https://www.exploit-db.com/exploits/44874/ CVE-2018-12055 - https://github.com/unh3x/just4cve/issues/2 CVE-2018-12055 - https://www.exploit-db.com/exploits/44866/ -CVE-2018-12071 - https://www.codeigniter.com/user_guide/changelog.html CVE-2018-12076 - https://sorsnce.com/2018/11/13/announcing-cve-2018-12076/ CVE-2018-12090 - https://www.exploit-db.com/exploits/45153/ CVE-2018-12094 - https://cxsecurity.com/issue/WLB-2018060091 @@ -49867,14 +49053,10 @@ CVE-2018-12316 - https://blog.securityevaluators.com/over-a-dozen-vulnerabilitie CVE-2018-12317 - https://blog.securityevaluators.com/over-a-dozen-vulnerabilities-discovered-in-asustor-as-602t-8dd5832a82cc CVE-2018-12318 - https://blog.securityevaluators.com/over-a-dozen-vulnerabilities-discovered-in-asustor-as-602t-8dd5832a82cc CVE-2018-12319 - https://blog.securityevaluators.com/over-a-dozen-vulnerabilities-discovered-in-asustor-as-602t-8dd5832a82cc -CVE-2018-12326 - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES CVE-2018-12326 - https://www.exploit-db.com/exploits/44904/ CVE-2018-12327 - https://usn.ubuntu.com/4229-1/ CVE-2018-12327 - https://www.exploit-db.com/exploits/44909/ CVE-2018-1235 - https://www.exploit-db.com/exploits/44920/ -CVE-2018-12353 - https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55 -CVE-2018-12354 - https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55 -CVE-2018-12355 - https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55 CVE-2018-12356 - http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html CVE-2018-12357 - https://www.arista.com/en/support/advisories-notices CVE-2018-12359 - https://usn.ubuntu.com/3714-1/ @@ -50006,10 +49188,7 @@ CVE-2018-12636 - https://www.exploit-db.com/exploits/44943/ CVE-2018-12638 - http://packetstormsecurity.com/files/151018/Base-Soundtouch-18.1.4-Cross-Site-Scripting.html CVE-2018-12648 - https://bugs.freedesktop.org/show_bug.cgi?id=106981 CVE-2018-12650 - http://packetstormsecurity.com/files/155232/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html -CVE-2018-12651 - https://www.knowcybersec.com/2018/12/CVE-2018-12651-reflected-XSS.html -CVE-2018-12652 - https://www.knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.html CVE-2018-12653 - http://packetstormsecurity.com/files/155244/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html -CVE-2018-12653 - https://www.knowcybersec.com/2019/02/CVE-2018-12653-reflected-XSS.html CVE-2018-12659 - https://github.com/slims/slims8_akasia/issues/103 CVE-2018-12666 - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/ CVE-2018-12667 - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/ @@ -50028,7 +49207,6 @@ CVE-2018-12693 - https://medium.com/advisability/the-in-security-of-the-tp-link- CVE-2018-12694 - https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc CVE-2018-1270 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html CVE-2018-1270 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html -CVE-2018-1270 - https://www.exploit-db.com/exploits/44796/ CVE-2018-1270 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2018-1270 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2018-1270 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html @@ -50148,12 +49326,9 @@ CVE-2018-13053 - https://usn.ubuntu.com/3821-2/ CVE-2018-13053 - https://usn.ubuntu.com/4118-1/ CVE-2018-1306 - https://www.exploit-db.com/exploits/45396/ CVE-2018-13060 - https://sysdream.com/news/lab/ -CVE-2018-13060 - https://sysdream.com/news/lab/2019-10-25-cve-2018-13060-easy-appointments-captcha-bypass/ CVE-2018-13063 - https://sysdream.com/news/lab/ -CVE-2018-13063 - https://sysdream.com/news/lab/2019-10-25-cve-2018-13063-easy-appointments-multiple-confidential-information-leakage/ CVE-2018-13065 - https://github.com/SpiderLabs/ModSecurity/issues/1829 CVE-2018-13065 - https://hackings8n.blogspot.com/2018/07/cve-2018-13065-modsecurity-300-has-xss.html -CVE-2018-13065 - https://www.exploit-db.com/exploits/44970/ CVE-2018-13066 - https://github.com/libming/libming/issues/146 CVE-2018-13067 - https://whitehatck01.blogspot.com/2018/06/opencart-v3-0-3-0-user-changes-password.html CVE-2018-13093 - https://bugzilla.kernel.org/show_bug.cgi?id=199367 @@ -50199,7 +49374,6 @@ CVE-2018-13110 - http://packetstormsecurity.com/files/148430/ADB-Group-Manipulat CVE-2018-13110 - http://seclists.org/fulldisclosure/2018/Jul/19 CVE-2018-13110 - https://www.exploit-db.com/exploits/44984/ CVE-2018-13110 - https://www.sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers/ -CVE-2018-13111 - https://hackinganarchy.wordpress.com/2018/09/20/cve-2018-13111/ CVE-2018-13112 - https://github.com/appneta/tcpreplay/issues/477 CVE-2018-13126 - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md CVE-2018-13127 - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md @@ -50218,7 +49392,6 @@ CVE-2018-13139 - https://github.com/erikd/libsndfile/issues/397 CVE-2018-13139 - https://usn.ubuntu.com/4013-1/ CVE-2018-13140 - http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html CVE-2018-13140 - http://seclists.org/fulldisclosure/2018/Sep/38 -CVE-2018-13140 - https://sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component/ CVE-2018-13160 - https://github.com/BlockChainsSecurity/EtherTokens/tree/master/etktokens CVE-2018-1320 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2018-1320 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html @@ -50228,7 +49401,6 @@ CVE-2018-1324 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2018-13250 - https://github.com/libming/libming/issues/147 CVE-2018-13251 - https://github.com/libming/libming/issues/149 CVE-2018-13256 - https://gkaim.com/cve-2018-13256-vikas-chaudhary/ -CVE-2018-13256 - https://www.exploit-db.com/exploits/45125/ CVE-2018-1327 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html CVE-2018-13306 - https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154 CVE-2018-13307 - https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154 @@ -50287,7 +49459,6 @@ CVE-2018-13380 - https://fortiguard.com/advisory/FG-IR-18-383 CVE-2018-13380 - https://fortiguard.com/advisory/FG-IR-20-230 CVE-2018-13383 - https://fortiguard.com/advisory/FG-IR-18-388 CVE-2018-13384 - https://fortiguard.com/advisory/FG-IR-19-002 -CVE-2018-13390 - https://bitbucket.org/atlassian/cloudtoken/wiki/CVE-2018-13390%20-%20Exposed%20credentials%20in%20daemon%20mode%20on%20Linux CVE-2018-13400 - http://www.securityfocus.com/bid/105751 CVE-2018-13401 - http://www.securityfocus.com/bid/105751 CVE-2018-13402 - http://www.securityfocus.com/bid/105751 @@ -50329,7 +49500,6 @@ CVE-2018-13785 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018- CVE-2018-13787 - https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/ CVE-2018-13800 - https://cert-portal.siemens.com/productcert/pdf/ssa-507847.pdf CVE-2018-13818 - https://www.exploit-db.com/exploits/44102/ -CVE-2018-13832 - https://hackpuntes.com/cve-2018-13832-wordpress-plugin-all-in-one-favicon-4-6-autenticado-multiples-cross-site-scripting-persistentes/ CVE-2018-13832 - https://www.exploit-db.com/exploits/45056/ CVE-2018-13849 - https://cxsecurity.com/issue/WLB-2018070095 CVE-2018-13849 - https://www.exploit-db.com/exploits/45003/ @@ -50348,7 +49518,6 @@ CVE-2018-13873 - https://github.com/TeamSeri0us/pocs/tree/master/hdf5 CVE-2018-13874 - https://github.com/TeamSeri0us/pocs/tree/master/hdf5 CVE-2018-13875 - https://github.com/TeamSeri0us/pocs/tree/master/hdf5 CVE-2018-13876 - https://github.com/TeamSeri0us/pocs/tree/master/hdf5 -CVE-2018-13877 - https://medium.com/coinmonks/denial-of-service-dos-attack-on-megacryptopolis-an-ethereum-game-cve-2018-13877-cdd7f7ef8b08 CVE-2018-13885 - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885 CVE-2018-13886 - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13886 CVE-2018-13887 - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13887 @@ -50439,7 +49608,6 @@ CVE-2018-14064 - https://www.exploit-db.com/exploits/45030/ CVE-2018-14068 - https://github.com/martinzhou2015/SRCMS/issues/20 CVE-2018-14069 - https://github.com/martinzhou2015/SRCMS/issues/20 CVE-2018-14082 - https://gkaim.com/cve-2018-14082-vikas-chaudhary/ -CVE-2018-14082 - https://www.exploit-db.com/exploits/45141/ CVE-2018-1418 - https://www.exploit-db.com/exploits/45005/ CVE-2018-1429 - http://www.securityfocus.com/bid/103491 CVE-2018-14325 - http://www.openwall.com/lists/oss-security/2018/07/16/1 @@ -50470,7 +49638,6 @@ CVE-2018-14418 - https://www.exploit-db.com/exploits/45062/ CVE-2018-14420 - https://github.com/AvaterXXX/Metinfo---XSS/blob/master/CSRF CVE-2018-14424 - https://usn.ubuntu.com/3737-1/ CVE-2018-14429 - http://packetstormsecurity.com/files/148855/man-cgi-Local-File-Inclusion.html -CVE-2018-14430 - https://hackpuntes.com/cve-2018-14430-wordpress-plugin-multi-step-form-125-multiples-xss-reflejados/ CVE-2018-14430 - https://wpvulndb.com/vulnerabilities/9106 CVE-2018-14443 - https://github.com/ArchimedesCAD/libredwg/issues/6 CVE-2018-14445 - https://github.com/axiomatic-systems/Bento4/issues/289 @@ -50509,7 +49676,6 @@ CVE-2018-14524 - https://github.com/LibreDWG/libredwg/issues/33 CVE-2018-14533 - https://neonsea.uk/blog/2018/07/21/tmp-to-rce.html CVE-2018-14533 - https://www.exploit-db.com/exploits/45089/ CVE-2018-14541 - https://gkaim.com/cve-2018-14541-vikas-chaudhary/ -CVE-2018-14541 - https://www.exploit-db.com/exploits/45140/ CVE-2018-14543 - https://github.com/axiomatic-systems/Bento4/issues/292 CVE-2018-14544 - https://github.com/axiomatic-systems/Bento4/issues/291 CVE-2018-14545 - https://github.com/axiomatic-systems/Bento4/issues/291 @@ -50689,13 +49855,6 @@ CVE-2018-14919 - http://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XS CVE-2018-14919 - http://seclists.org/fulldisclosure/2019/Apr/12 CVE-2018-14919 - https://seclists.org/fulldisclosure/2019/Apr/12 CVE-2018-14922 - http://packetstormsecurity.com/files/148836/Monstra-Dev-3.0.4-Cross-Site-Scripting.html -CVE-2018-14922 - https://www.exploit-db.com/exploits/45156/ -CVE-2018-14924 - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 -CVE-2018-14925 - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 -CVE-2018-14926 - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 -CVE-2018-14927 - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 -CVE-2018-14928 - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 -CVE-2018-14929 - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 CVE-2018-14930 - https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software.html CVE-2018-14931 - https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software_31.html CVE-2018-14933 - https://www.exploit-db.com/exploits/45070/ @@ -50813,7 +49972,6 @@ CVE-2018-15499 - https://github.com/DownWithUp/CVE-2018-15499 CVE-2018-15503 - https://x-c3ll.github.io/posts/swoole-deserialization-cve-2018-15503/ CVE-2018-15508 - https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access CVE-2018-15509 - https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access -CVE-2018-15514 - https://docs.docker.com/docker-for-windows/release-notes/ CVE-2018-15514 - https://srcincite.io/blog/2018/08/31/you-cant-contain-me-analyzing-and-exploiting-an-elevation-of-privilege-in-docker-for-windows.html CVE-2018-15515 - http://packetstormsecurity.com/files/150244/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-DLL-Hijacking.html CVE-2018-15515 - http://seclists.org/fulldisclosure/2018/Nov/29 @@ -50846,7 +50004,6 @@ CVE-2018-15562 - http://packetstormsecurity.com/files/149109/CMS-ISWEB-3.5.3-Cro CVE-2018-15563 - https://cxsecurity.com/issue/WLB-2018090261 CVE-2018-15565 - https://github.com/daveismyname/simple-cms/issues/3 CVE-2018-15568 - https://github.com/fmsdwifull/tp5cms/issues/3 -CVE-2018-15571 - https://hackpuntes.com/cve-2018-15571-wordpress-plugin-export-users-to-csv-1-1-1-csv-injection/ CVE-2018-15571 - https://www.exploit-db.com/exploits/45206/ CVE-2018-15572 - https://usn.ubuntu.com/3777-1/ CVE-2018-15572 - https://usn.ubuntu.com/3777-2/ @@ -50898,8 +50055,6 @@ CVE-2018-15686 - https://www.exploit-db.com/exploits/45714/ CVE-2018-15686 - https://www.oracle.com//security-alerts/cpujul2021.html CVE-2018-15687 - https://www.exploit-db.com/exploits/45715/ CVE-2018-15691 - https://www.exploit-db.com/exploits/45425/ -CVE-2018-15692 - https://www.kpmg.de/noindex/advisories/KPMG-2018-002.txt -CVE-2018-15693 - https://www.kpmg.de/noindex/advisories/KPMG-2018-001.txt CVE-2018-15703 - https://www.tenable.com/security/research/tra-2018-33 CVE-2018-15704 - https://www.tenable.com/security/research/tra-2018-33 CVE-2018-15705 - https://www.exploit-db.com/exploits/45774/ @@ -50987,7 +50142,6 @@ CVE-2018-15852 - https://bkd00r.wordpress.com/2018/08/24/cve-2018-15852-exploit- CVE-2018-15865 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877 CVE-2018-15870 - https://github.com/libming/libming/issues/122 CVE-2018-15871 - https://github.com/libming/libming/issues/123 -CVE-2018-15873 - https://hackpuntes.com/cve-2018-15873-sentrifugo-hrms-3-2-blind-sql-injection/ CVE-2018-15877 - http://packetstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html CVE-2018-15877 - http://packetstormsecurity.com/files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html CVE-2018-15877 - https://www.exploit-db.com/exploits/45274/ @@ -51008,10 +50162,8 @@ CVE-2018-15906 - http://packetstormsecurity.com/files/151473/SolarWinds-Serv-U-F CVE-2018-15906 - http://seclists.org/fulldisclosure/2019/Feb/4 CVE-2018-15912 - https://lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.html CVE-2018-15917 - https://github.com/bbalet/jorani/issues/254 -CVE-2018-15917 - https://hackpuntes.com/cve-2018-15917-jorani-leave-management-system-0-6-5-cross-site-scripting-persistente/ CVE-2018-15917 - https://www.exploit-db.com/exploits/45338/ CVE-2018-15918 - https://github.com/bbalet/jorani/issues/254 -CVE-2018-15918 - https://hackpuntes.com/cve-2018-15918-jorani-leave-management-system-0-6-5-sql-injection/ CVE-2018-15918 - https://www.exploit-db.com/exploits/45340/ CVE-2018-15919 - http://seclists.org/oss-sec/2018/q3/180 CVE-2018-15961 - https://www.exploit-db.com/exploits/45979/ @@ -51066,7 +50218,6 @@ CVE-2018-16223 - http://packetstormsecurity.com/files/150165/QBee-Camera-iSmartA CVE-2018-16223 - http://seclists.org/fulldisclosure/2018/Nov/2 CVE-2018-16224 - http://packetstormsecurity.com/files/150165/QBee-Camera-iSmartAlarm-Credential-Disclosure.html CVE-2018-16224 - http://seclists.org/fulldisclosure/2018/Nov/2 -CVE-2018-16225 - https://blog.francescoservida.ch/2018/09/16/cve-2018-16225-public-disclosure-qbee-camera-vulnerability/ CVE-2018-16233 - https://github.com/bg5sbk/MiniCMS/issues/22 CVE-2018-16247 - https://github.com/yzmcms/yzmcms/issues/3 CVE-2018-16252 - http://hyp3rlinx.altervista.org/advisories/FSPRO-LABS-EVENT-LOG-EXPLORER-XML-INJECTION-INFO-DISCLOSURE.txt @@ -51220,7 +50371,6 @@ CVE-2018-16646 - https://bugzilla.redhat.com/show_bug.cgi?id=1622951 CVE-2018-16647 - https://bugs.ghostscript.com/show_bug.cgi?id=699686 CVE-2018-16648 - https://bugs.ghostscript.com/show_bug.cgi?id=699685 CVE-2018-16653 - https://github.com/ZBWACD/CodeAudit/blob/master/rejucms_v2.1%20%20xss1 -CVE-2018-16656 - https://mars-cheng.github.io/blog/2019/CVE-2018-16656 CVE-2018-16658 - https://usn.ubuntu.com/3820-1/ CVE-2018-16658 - https://usn.ubuntu.com/3822-1/ CVE-2018-16659 - https://www.exploit-db.com/exploits/45500/ @@ -51265,9 +50415,7 @@ CVE-2018-16795 - https://www.open-emr.org/wiki/images/1/11/Openemr_insecurity.pd CVE-2018-16796 - https://seclists.org/bugtraq/2018/Sep/27 CVE-2018-16796 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-015.txt CVE-2018-16803 - https://www.linkedin.com/feed/update/urn:li:activity:6489145511902212096/ -CVE-2018-16803 - https://www.websec.nl/news.php CVE-2018-16806 - https://www.esat.kuleuven.be/cosic/fast-furious-and-insecure-passive-keyless-entry-and-start-in-modern-supercars/ -CVE-2018-16821 - http://www.seacms.net/thread-6249-1-1.html CVE-2018-16831 - https://github.com/smarty-php/smarty/issues/486 CVE-2018-16832 - https://github.com/ysrc/xunfeng/issues/177 CVE-2018-16833 - http://packetstormsecurity.com/files/149436/ManageEngine-Desktop-Central-10.0.271-Cross-Site-Scripting.html @@ -51430,7 +50578,6 @@ CVE-2018-17293 - https://github.com/WAVM/WAVM/issues/110#issuecomment-421764693 CVE-2018-17300 - https://github.com/CuppaCMS/CuppaCMS/issues/4 CVE-2018-17301 - https://github.com/espocrm/espocrm/issues/1038 CVE-2018-17302 - https://github.com/espocrm/espocrm/issues/1039 -CVE-2018-17305 - https://www.uipath.com/product/release-notes/uipath-v2018.1.7 CVE-2018-17309 - http://packetstormsecurity.com/files/149493/RICOH-MP-C406Z-Printer-Cross-Site-Scripting.html CVE-2018-17310 - http://packetstormsecurity.com/files/149494/RICOH-MP-C1803-JPN-Printer-Cross-Site-Scripting.html CVE-2018-17310 - https://www.exploit-db.com/exploits/45526/ @@ -51706,8 +50853,6 @@ CVE-2018-18090 - https://www.intel.com/content/www/us/en/security-center/advisor CVE-2018-18091 - https://support.lenovo.com/us/en/product_security/LEN-25084 CVE-2018-18091 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html CVE-2018-18198 - https://github.com/redaxo/redaxo4/issues/422 -CVE-2018-18207 - https://0day.today/exploit/description/31282 -CVE-2018-18208 - https://0day.today/exploit/description/31282 CVE-2018-18209 - https://github.com/chekun/DiliCMS/issues/59 CVE-2018-1821 - https://www.exploit-db.com/exploits/46017/ CVE-2018-18210 - https://github.com/chekun/DiliCMS/issues/59 @@ -51745,11 +50890,8 @@ CVE-2018-18318 - https://github.com/datadancer/HIAFuzz/blob/master/360%20Phone%2 CVE-2018-18319 - http://blog.51cto.com/010bjsoft/2298902 CVE-2018-18319 - https://github.com/qoli/Merlin.PHP/issues/27 CVE-2018-18320 - https://github.com/qoli/Merlin.PHP/issues/26 -CVE-2018-18322 - https://0day.today/exploit/31304 CVE-2018-18322 - https://www.exploit-db.com/exploits/45610/ -CVE-2018-18323 - https://0day.today/exploit/31304 CVE-2018-18323 - https://www.exploit-db.com/exploits/45610/ -CVE-2018-18324 - https://0day.today/exploit/31304 CVE-2018-18324 - https://www.exploit-db.com/exploits/45610/ CVE-2018-18325 - http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html CVE-2018-18326 - http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html @@ -51799,11 +50941,9 @@ CVE-2018-18458 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16 CVE-2018-18459 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm CVE-2018-18460 - https://github.com/rakjong/vuln/blob/master/wordpress_wp-live-chat-support_XSS.pdf CVE-2018-18471 - https://www.wizcase.com/blog/hack-2018/ -CVE-2018-18472 - https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo CVE-2018-18472 - https://www.wizcase.com/blog/hack-2018/ CVE-2018-18475 - http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html CVE-2018-18478 - https://github.com/librenms/librenms/issues/9170 -CVE-2018-18478 - https://hackpuntes.com/cve-2018-18478-libre-nms-1-43-cross-site-scripting-persistente/ CVE-2018-18480 - https://github.com/sandyre/libopencad/issues/43 CVE-2018-18481 - https://github.com/sandyre/libopencad/issues/43 CVE-2018-18483 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87602 @@ -51879,7 +51019,6 @@ CVE-2018-18644 - https://gitlab.com/gitlab-org/gitlab-ee/issues/7528 CVE-2018-18646 - https://gitlab.com/gitlab-org/gitlab-ce/issues/51142 CVE-2018-18650 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41219&p=41747#p41747 CVE-2018-18651 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41219&p=41747#p41747 -CVE-2018-18656 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Credential-Leak-Flaws-in-Windows-PureVPN-Client/ CVE-2018-18661 - http://bugzilla.maptools.org/show_bug.cgi?id=2819 CVE-2018-18662 - https://bugs.ghostscript.com/show_bug.cgi?id=700043 CVE-2018-18662 - https://github.com/TeamSeri0us/pocs/tree/master/mupdf @@ -51998,7 +51137,6 @@ CVE-2018-18805 - https://www.exploit-db.com/exploits/45721/ CVE-2018-18806 - http://packetstormsecurity.com/files/149996/School-Equipment-Monitoring-System-1.0-SQL-Injection.html CVE-2018-18809 - http://packetstormsecurity.com/files/154406/Tibco-JasperSoft-Path-Traversal.html CVE-2018-18809 - http://seclists.org/fulldisclosure/2019/Sep/17 -CVE-2018-18809 - https://cybersecurityworks.com/zerodays/cve-2018-18809-tibco.html CVE-2018-18809 - https://security.elarlang.eu/cve-2018-18809-path-traversal-in-tibco-jaspersoft.html CVE-2018-18822 - https://www.exploit-db.com/exploits/45704/ CVE-2018-18823 - https://www.linkedin.com/in/subodh-kumar-8a00b1125/ @@ -52055,11 +51193,8 @@ CVE-2018-18915 - https://github.com/Exiv2/exiv2/issues/511 CVE-2018-18919 - https://github.com/JaxsonWang/WP-Editor.md/issues/275 CVE-2018-18920 - https://www.reddit.com/r/ethereum/comments/9vkk2g/netta_labs_claim_to_have_found_a_vulnerability_in/e9d3wyx/ CVE-2018-18921 - https://medium.com/bugbountywriteup/cve-2018-18921-php-server-monitor-3-3-1-cross-site-request-forgery-a73e8dae563 -CVE-2018-18922 - https://0day.today/exploit/31658 -CVE-2018-18922 - https://hackpuntes.com/cve-2018-18922-ticketly-1-0-escalacion-de-privilegios-crear-cuenta-administrador/ CVE-2018-18922 - https://medium.com/@javierolmedo/cve-2018-18922-ticketly-1-0-privilege-escalation-add-admin-4d1b3696f367 CVE-2018-18922 - https://www.exploit-db.com/exploits/45892 -CVE-2018-18923 - https://hackpuntes.com/cve-2018-18923-ticketly-1-0-multiples-sql-injections/ CVE-2018-18923 - https://www.exploit-db.com/exploits/45902/ CVE-2018-18924 - https://www.exploit-db.com/exploits/45680/ CVE-2018-18928 - https://unicode-org.atlassian.net/browse/ICU-20246 @@ -52136,7 +51271,6 @@ CVE-2018-19139 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2018-1914 - http://www.ibm.com/support/docview.wss?uid=ibm10875372 CVE-2018-19145 - https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmsxss.html CVE-2018-19150 - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2018-09-19-pdf-architect-corruption.md -CVE-2018-19150 - https://nafiez.github.io/security/integer/2018/09/18/pdf-architect-corruption.html CVE-2018-19178 - https://github.com/zchuanzhao/jeesns/issues/6 CVE-2018-19180 - https://github.com/doublefast/yunucms/issues/1 CVE-2018-19181 - https://github.com/doublefast/yunucms/issues/1 @@ -52188,7 +51322,6 @@ CVE-2018-19242 - http://seclists.org/fulldisclosure/2018/Dec/21 CVE-2018-19244 - https://whitehatck01.blogspot.com/2018/11/charles-427-xml-external-entity.html CVE-2018-19246 - https://github.com/Athlon1600/php-proxy-app/issues/134 CVE-2018-19246 - https://www.exploit-db.com/exploits/45861/ -CVE-2018-19275 - https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-190002001-v10.pdf CVE-2018-19276 - http://packetstormsecurity.com/files/151553/OpenMRS-Platform-Insecure-Object-Deserialization.html CVE-2018-19276 - http://packetstormsecurity.com/files/155691/OpenMRS-Java-Deserialization-Remote-Code-Execution.html CVE-2018-19276 - https://know.bishopfox.com/advisories/news/2019/02/openmrs-insecure-object-deserialization @@ -52202,13 +51335,9 @@ CVE-2018-19290 - http://seclists.org/fulldisclosure/2018/Nov/44 CVE-2018-19291 - https://github.com/chekun/DiliCMS/issues/60 CVE-2018-19300 - https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772 CVE-2018-19320 - http://seclists.org/fulldisclosure/2018/Dec/39 -CVE-2018-19320 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities CVE-2018-19321 - http://seclists.org/fulldisclosure/2018/Dec/39 -CVE-2018-19321 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities CVE-2018-19322 - http://seclists.org/fulldisclosure/2018/Dec/39 -CVE-2018-19322 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities CVE-2018-19323 - http://seclists.org/fulldisclosure/2018/Dec/39 -CVE-2018-19323 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities CVE-2018-19328 - https://github.com/onkyoworm/poc/blob/master/laobancms/poc.md CVE-2018-19331 - https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmssql-injection.html CVE-2018-19332 - https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmscsrf.html @@ -52354,7 +51483,6 @@ CVE-2018-19646 - https://www.exploit-db.com/exploits/45542 CVE-2018-19649 - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html CVE-2018-19649 - http://seclists.org/fulldisclosure/2018/Dec/20 CVE-2018-19650 - http://packetstormsecurity.com/files/150549/ATool-1.0.0.22-Stack-Buffer-Overflow.html -CVE-2018-19651 - https://medium.com/@namhb/ssrf-to-lfi-in-interspire-email-marketer-698a748462a9 CVE-2018-19655 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890086 CVE-2018-19655 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906529 CVE-2018-19659 - http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html @@ -52454,14 +51582,11 @@ CVE-2018-19821 - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1- CVE-2018-19821 - http://seclists.org/fulldisclosure/2018/Dec/20 CVE-2018-19822 - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html CVE-2018-19822 - http://seclists.org/fulldisclosure/2018/Dec/20 -CVE-2018-19828 - https://hackpuntes.com/cve-2018-19828-integria-ims-5-0-83-cross-site-scripting-reflejado/ CVE-2018-19828 - https://www.exploit-db.com/exploits/46012/ -CVE-2018-19829 - https://hackpuntes.com/cve-2018-19829-integria-ims-5-0-83-cross-site-request-forgery/ CVE-2018-19829 - https://www.exploit-db.com/exploits/46013/ CVE-2018-19840 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html CVE-2018-19841 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html CVE-2018-19854 - https://usn.ubuntu.com/3901-1/ -CVE-2018-19855 - https://www.uipath.com/product/release-notes CVE-2018-19856 - https://gitlab.com/gitlab-org/gitlab-ce/issues/54857 CVE-2018-19858 - https://www.youtube.com/watch?v=-7YIzYtWhzM CVE-2018-19861 - http://packetstormsecurity.com/files/150689/MiniShare-1.4.1-HEAD-POST-Buffer-Overflow.html @@ -52656,9 +51781,6 @@ CVE-2018-20326 - http://packetstormsecurity.com/files/150918/PLC-Wireless-Router CVE-2018-20326 - https://www.exploit-db.com/exploits/46081/ CVE-2018-20326 - https://youtu.be/TwNi05yfQks CVE-2018-20331 - https://packetstormsecurity.com/files/150900 -CVE-2018-20334 - https://starlabs.sg/advisories/18-20334/ -CVE-2018-20335 - https://starlabs.sg/advisories/18-20335/ -CVE-2018-20336 - https://starlabs.sg/advisories/18-20336/ CVE-2018-20337 - https://github.com/LibRaw/LibRaw/issues/192 CVE-2018-20340 - https://blog.inhq.net/posts/yubico-libu2f-host-vuln-part1/ CVE-2018-20343 - https://github.com/Alexandre-Bartel/CVE-2018-20343 @@ -52703,7 +51825,6 @@ CVE-2018-20427 - https://github.com/libming/libming/issues/164 CVE-2018-20428 - https://github.com/libming/libming/issues/161 CVE-2018-20429 - https://github.com/libming/libming/issues/160 CVE-2018-20432 - http://packetstormsecurity.com/files/159058/COVR-3902-1.01B0-Hardcoded-Credentials.html -CVE-2018-20432 - https://cybersecurityworks.com/zerodays/cve-2018-20432-dlink.html CVE-2018-20434 - http://packetstormsecurity.com/files/153188/LibreNMS-addhost-Command-Injection.html CVE-2018-20434 - http://packetstormsecurity.com/files/153448/LibreNMS-1.46-addhost-Remote-Code-Execution.html CVE-2018-20448 - https://www.exploit-db.com/exploits/46067/ @@ -53110,20 +52231,6 @@ CVE-2018-2422 - https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018 CVE-2018-2423 - https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/ CVE-2018-2444 - https://launchpad.support.sap.com/#/notes/2621395 CVE-2018-2452 - https://launchpad.support.sap.com/#/notes/2623846 -CVE-2018-2473 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2476 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2477 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2478 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2479 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2481 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2482 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2483 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2485 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2487 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2488 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2489 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2490 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 -CVE-2018-2491 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 CVE-2018-25002 - https://www.drupal.org/sa-contrib-2018-024 CVE-2018-25019 - https://lists.openwall.net/full-disclosure/2018/01/10/17 CVE-2018-25019 - https://wpscan.com/vulnerability/9444f67b-8e3d-4cf0-b319-ed25e7db383a @@ -53822,7 +52929,6 @@ CVE-2018-3312 - http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5 CVE-2018-3314 - http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html CVE-2018-3315 - http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html CVE-2018-3316 - http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html -CVE-2018-3574 - https://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000049462 CVE-2018-3588 - https://www.qualcomm.com/company/product-security/bulletins CVE-2018-3589 - http://www.securityfocus.com/bid/103671 CVE-2018-3590 - http://www.securityfocus.com/bid/103671 @@ -54314,7 +53420,6 @@ CVE-2018-5221 - http://packetstormsecurity.com/files/145731/BarcodeWiz-ActiveX-C CVE-2018-5227 - https://ecosystem.atlassian.net/browse/APL-1361 CVE-2018-5229 - https://ecosystem.atlassian.net/browse/UPM-5871 CVE-2018-5233 - http://www.openwall.com/lists/oss-security/2018/03/15/1 -CVE-2018-5233 - https://sysdream.com/news/lab/2018-03-15-cve-2018-5233-grav-cms-admin-plugin-reflected-cross-site-scripting-xss-vulnerability/ CVE-2018-5234 - https://www.exploit-db.com/exploits/44574/ CVE-2018-5246 - https://github.com/ImageMagick/ImageMagick/issues/929 CVE-2018-5247 - https://github.com/ImageMagick/ImageMagick/issues/928 @@ -54794,7 +53899,6 @@ CVE-2018-6328 - https://www.exploit-db.com/exploits/44297/ CVE-2018-6328 - https://www.exploit-db.com/exploits/45559/ CVE-2018-6329 - https://www.exploit-db.com/exploits/44297/ CVE-2018-6329 - https://www.exploit-db.com/exploits/45913/ -CVE-2018-6336 - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/ CVE-2018-6350 - https://www.facebook.com/security/advisories/cve-2018-6350/ CVE-2018-6352 - https://bugzilla.redhat.com/show_bug.cgi?id=1539237 CVE-2018-6353 - https://github.com/spesmilo/electrum/issues/3678 @@ -54826,7 +53930,6 @@ CVE-2018-6389 - https://github.com/WazeHell/CVE-2018-6389 CVE-2018-6389 - https://thehackernews.com/2018/02/wordpress-dos-exploit.html CVE-2018-6389 - https://www.exploit-db.com/exploits/43968/ CVE-2018-6390 - https://github.com/Khwarezmia/WPS_POC/tree/master/wps_20180129 -CVE-2018-6391 - https://0day.today/exploit/29659 CVE-2018-6391 - https://packetstormsecurity.com/files/146117/netiswf2419-xsrf.txt CVE-2018-6391 - https://www.exploit-db.com/exploits/43919/ CVE-2018-6392 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c6939f65a116b1ffed345d29d8621ee4ffb32235 @@ -54839,11 +53942,8 @@ CVE-2018-6397 - https://www.exploit-db.com/exploits/43931/ CVE-2018-6398 - https://www.exploit-db.com/exploits/43932/ CVE-2018-6407 - https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/ CVE-2018-6408 - https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/ -CVE-2018-6409 - https://metalamin.github.io/MachForm-not-0-day-EN/ CVE-2018-6409 - https://www.exploit-db.com/exploits/44804/ -CVE-2018-6410 - https://metalamin.github.io/MachForm-not-0-day-EN/ CVE-2018-6410 - https://www.exploit-db.com/exploits/44804/ -CVE-2018-6411 - https://metalamin.github.io/MachForm-not-0-day-EN/ CVE-2018-6411 - https://www.exploit-db.com/exploits/44804/ CVE-2018-6443 - http://packetstormsecurity.com/files/153035/Brocade-Network-Advisor-14.4.1-Unauthenticated-Remote-Code-Execution.html CVE-2018-6458 - http://packetstormsecurity.com/files/147555/Easy-Hosting-Control-Panel-0.37.12.b-Cross-Site-Request-Forgery.html @@ -55035,18 +54135,10 @@ CVE-2018-6856 - http://seclists.org/fulldisclosure/2018/Jul/20 CVE-2018-6856 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/ CVE-2018-6857 - http://seclists.org/fulldisclosure/2018/Jul/20 CVE-2018-6857 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/ -CVE-2018-6858 - https://www.exploit-db.com/exploits/44010 -CVE-2018-6859 - https://www.exploit-db.com/exploits/44185/ -CVE-2018-6860 - https://www.exploit-db.com/exploits/44011 -CVE-2018-6861 - https://www.exploit-db.com/exploits/44012 -CVE-2018-6862 - https://www.exploit-db.com/exploits/44013 -CVE-2018-6863 - https://www.exploit-db.com/exploits/44014 -CVE-2018-6864 - https://www.exploit-db.com/exploits/44015 CVE-2018-6869 - https://github.com/gdraheim/zziplib/issues/22 CVE-2018-6871 - https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure CVE-2018-6871 - https://www.exploit-db.com/exploits/44022/ CVE-2018-6876 - https://github.com/ImageMagick/ImageMagick/issues/973 -CVE-2018-6878 - https://www.exploit-db.com/exploits/43991/ CVE-2018-6880 - https://kongxin.gitbook.io/empirecms/ CVE-2018-6881 - https://kongxin.gitbook.io/dedecms-5-7-bug/ CVE-2018-6881 - https://kongxin.gitbook.io/empirecms/ @@ -55094,8 +54186,6 @@ CVE-2018-6947 - https://www.exploit-db.com/exploits/44167/ CVE-2018-6947 - https://www.exploit-db.com/exploits/44168/ CVE-2018-6954 - https://github.com/systemd/systemd/issues/7986 CVE-2018-6961 - https://www.exploit-db.com/exploits/44959/ -CVE-2018-6975 - https://www.vmware.com/security/advisories/VMSA-2018-0023.html -CVE-2018-6976 - https://www.vmware.com/security/advisories/VMSA-2018-0023.html CVE-2018-7032 - https://bugs.debian.org/840014 CVE-2018-7072 - https://www.tenable.com/security/research/tra-2018-15 CVE-2018-7073 - https://www.tenable.com/security/research/tra-2018-15 @@ -55213,7 +54303,6 @@ CVE-2018-7456 - http://bugzilla.maptools.org/show_bug.cgi?id=2778 CVE-2018-7456 - https://github.com/xiaoqx/pocs/tree/master/libtiff CVE-2018-7465 - https://www.exploit-db.com/exploits/44625/ CVE-2018-7466 - https://www.exploit-db.com/exploits/44226/ -CVE-2018-7466 - https://www.exploit-db.com/exploits/44349/ CVE-2018-7469 - https://neetech18.blogspot.in/2018/02/stored-xss-vulnerability-in-php-scripts.html CVE-2018-7470 - https://github.com/ImageMagick/ImageMagick/issues/998 CVE-2018-7474 - http://seclists.org/fulldisclosure/2018/Mar/34 @@ -55245,7 +54334,6 @@ CVE-2018-7562 - https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabiliti CVE-2018-7563 - https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/ CVE-2018-7566 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 CVE-2018-7566 - https://www.oracle.com/security-alerts/cpujul2020.html -CVE-2018-7567 - https://0day.today/exploit/29938 CVE-2018-7568 - https://sourceware.org/bugzilla/show_bug.cgi?id=22894 CVE-2018-7569 - https://sourceware.org/bugzilla/show_bug.cgi?id=22895 CVE-2018-7573 - https://www.exploit-db.com/exploits/44596/ @@ -55290,7 +54378,6 @@ CVE-2018-7658 - https://www.exploit-db.com/exploits/44255/ CVE-2018-7659 - https://vipinxsec.blogspot.com/2018/04/stored-xss-in-documentum-d2-steps-to.html CVE-2018-7660 - https://vipinxsec.blogspot.com/2018/04/reflected-xss-in-documentum-d2.html CVE-2018-7661 - https://blog.manchestergreyhats.co.uk/2018/02/25/eavesdropping-on-wifi-baby-monitor/ -CVE-2018-7661 - https://www.exploit-db.com/exploits/442322/ CVE-2018-7664 - http://lists.openwall.net/full-disclosure/2018/02/27/1 CVE-2018-7665 - http://lists.openwall.net/full-disclosure/2018/02/27/1 CVE-2018-7666 - http://lists.openwall.net/full-disclosure/2018/02/27/1 @@ -55299,7 +54386,6 @@ CVE-2018-7668 - http://lists.openwall.net/full-disclosure/2018/02/28/1 CVE-2018-7669 - https://www.exploit-db.com/exploits/45152/ CVE-2018-7690 - https://www.exploit-db.com/exploits/45989/ CVE-2018-7691 - https://www.exploit-db.com/exploits/45990/ -CVE-2018-7700 - https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/ CVE-2018-7701 - http://seclists.org/fulldisclosure/2018/Mar/29 CVE-2018-7701 - https://www.exploit-db.com/exploits/44285/ CVE-2018-7702 - http://seclists.org/fulldisclosure/2018/Mar/29 @@ -55358,12 +54444,6 @@ CVE-2018-7809 - https://www.tenable.com/security/research/tra-2018-38 CVE-2018-7810 - https://www.tenable.com/security/research/tra-2018-38 CVE-2018-7811 - https://www.tenable.com/security/research/tra-2018-38 CVE-2018-7812 - https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-7812 -CVE-2018-7816 - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ -CVE-2018-7825 - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ -CVE-2018-7826 - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ -CVE-2018-7827 - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ -CVE-2018-7828 - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ -CVE-2018-7829 - https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/ CVE-2018-7830 - https://www.tenable.com/security/research/tra-2018-38 CVE-2018-7831 - https://www.tenable.com/security/research/tra-2018-38 CVE-2018-7841 - http://packetstormsecurity.com/files/152862/Schneider-Electric-U.Motion-Builder-1.3.4-Command-Injection.html @@ -55550,7 +54630,6 @@ CVE-2018-8797 - https://research.checkpoint.com/reverse-rdp-attack-code-executio CVE-2018-8798 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ CVE-2018-8799 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ CVE-2018-8800 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ -CVE-2018-8802 - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=49 CVE-2018-8804 - https://github.com/ImageMagick/ImageMagick/issues/1025 CVE-2018-8805 - https://github.com/QQ704568679/YXcms-Code-audit/blob/master/Yxcms%20Code%20audit CVE-2018-8806 - https://github.com/libming/libming/issues/128 @@ -55671,7 +54750,6 @@ CVE-2018-9032 - https://www.exploit-db.com/exploits/44378/ CVE-2018-9032 - https://www.youtube.com/watch?v=Wmm4p8znS3s CVE-2018-9034 - https://www.exploit-db.com/exploits/44366/ CVE-2018-9035 - https://www.exploit-db.com/exploits/44367/ -CVE-2018-9037 - https://www.exploit-db.com/exploits/44621/ CVE-2018-9038 - https://www.exploit-db.com/exploits/44512/ CVE-2018-9040 - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060c4 CVE-2018-9041 - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c402004 @@ -55951,20 +55029,8 @@ CVE-2019-0319 - http://packetstormsecurity.com/files/153661/SAPUI5-1.0.0-SAP-Gat CVE-2019-0319 - https://cxsecurity.com/ascii/WLB-2019050283 CVE-2019-0363 - https://launchpad.support.sap.com/#/notes/2817491 CVE-2019-0364 - https://launchpad.support.sap.com/#/notes/2817491 -CVE-2019-0367 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0368 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0369 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0370 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0374 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0375 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0376 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0377 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0378 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 CVE-2019-0379 - https://launchpad.support.sap.com/#/notes/2826015 -CVE-2019-0379 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 -CVE-2019-0380 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 CVE-2019-0381 - https://launchpad.support.sap.com/#/notes/2792430 -CVE-2019-0381 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 CVE-2019-0539 - https://www.exploit-db.com/exploits/46203/ CVE-2019-0539 - https://www.exploit-db.com/exploits/46204/ CVE-2019-0539 - https://www.exploit-db.com/exploits/46485/ @@ -56128,7 +55194,6 @@ CVE-2019-1010060 - https://github.com/astropy/astropy/pull/7274 CVE-2019-1010084 - https://github.com/bigpresh/Dancer-Plugin-SimpleCRUD/pull/109 CVE-2019-1010091 - https://github.com/tinymce/tinymce/issues/4394 CVE-2019-10101 - https://medium.com/bugbountywriteup/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb -CVE-2019-1010104 - https://metalamin.github.io/Quick-Chat-SQLi-EN/ CVE-2019-1010112 - https://github.com/LiodAir/images/blob/master/csrf.md CVE-2019-1010124 - http://packetstormsecurity.com/files/154263/WordPress-WooCommerce-Product-Feed-2.2.18-Cross-Site-Scripting.html CVE-2019-1010124 - https://wpvulndb.com/vulnerabilities/9856 @@ -56144,11 +55209,9 @@ CVE-2019-1010153 - https://gist.github.com/Lz1y/31595b060cd6a031896fdf2b3a1273f5 CVE-2019-1010155 - https://www.youtube.com/watch?v=7sk6agpcA_s CVE-2019-1010155 - https://youtu.be/BQQbp2vn_wY CVE-2019-1010163 - https://packetstormsecurity.com/files/145181/SocuSoft-Co.-Photo-2-Video-Converter-8.0.0-Code-Execution-DoS.html -CVE-2019-1010163 - https://ret2eax.github.io/posts/socusoft-bof.html CVE-2019-1010163 - https://www.exploit-db.com/exploits/43208/ CVE-2019-1010178 - https://www.youtube.com/watch?v=vOlw2DP9WbE CVE-2019-1010193 - https://github.com/hisiphp/hisiphp/issues/3 -CVE-2019-1010207 - https://0day.today/exploit/31255 CVE-2019-1010207 - https://packetstormsecurity.com/files/149665/wppieregister3015-xss.txt CVE-2019-1010209 - https://gist.github.com/pouyadarabi/467d3167551fb0712d3264c72db092af CVE-2019-1010238 - https://www.oracle.com/security-alerts/cpuapr2020.html @@ -56201,11 +55264,7 @@ CVE-2019-10185 - http://packetstormsecurity.com/files/154748/IcedTeaWeb-Validati CVE-2019-10185 - https://github.com/AdoptOpenJDK/IcedTea-Web/pull/344 CVE-2019-10185 - https://seclists.org/bugtraq/2019/Oct/5 CVE-2019-1019 - http://packetstormsecurity.com/files/153639/Microsoft-Windows-HTTP-To-SMB-NTLM-Reflection-Privilege-Escalation.html -CVE-2019-10192 - https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES -CVE-2019-10192 - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES CVE-2019-10192 - https://www.oracle.com/security-alerts/cpujul2020.html -CVE-2019-10193 - https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES -CVE-2019-10193 - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES CVE-2019-10193 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2019-1020002 - https://github.com/pterodactyl/panel/security/advisories/GHSA-vcm9-hx3q-qwj8 CVE-2019-1020010 - https://github.com/syuilo/misskey/security/advisories/GHSA-6qw9-6jxq-xj3p @@ -56416,10 +55475,6 @@ CVE-2019-10687 - http://packetstormsecurity.com/files/154184/KBPublisher-6.0.2.1 CVE-2019-1069 - https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html CVE-2019-1069 - https://www.kb.cert.org/vuls/id/119704 CVE-2019-10692 - http://packetstormsecurity.com/files/159640/WordPress-Rest-Google-Maps-SQL-Injection.html -CVE-2019-10705 - https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd -CVE-2019-10705 - https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd -CVE-2019-10706 - https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd -CVE-2019-10706 - https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd CVE-2019-10709 - http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.html CVE-2019-10709 - https://blog.telspace.co.za/2019/08/tsa-2019-001-asus-precision-touchpad.html CVE-2019-10710 - https://dojo.bullguard.com/dojo-by-bullguard/blog/cam-hi-risk/ @@ -56569,7 +55624,6 @@ CVE-2019-11002 - https://github.com/Dogfalo/materialize/issues/6286 CVE-2019-11003 - https://github.com/Dogfalo/materialize/issues/6286 CVE-2019-11004 - https://github.com/Dogfalo/materialize/issues/6286 CVE-2019-11013 - http://packetstormsecurity.com/files/154196/Nimble-Streamer-3.x-Directory-Traversal.html -CVE-2019-11013 - https://mayaseven.com/nimble-directory-traversal-in-nimble-streamer-version-3-0-2-2-to-3-5-4-9/ CVE-2019-11015 - https://www.andmp.com/2019/04/unpatched-vulnerability-in-xiaomi-miui-os-lock-screen.html CVE-2019-11017 - http://packetstormsecurity.com/files/152465/D-Link-DI-524-2.06RU-Cross-Site-Scripting.html CVE-2019-11017 - https://www.exploit-db.com/exploits/46687 @@ -56584,7 +55638,6 @@ CVE-2019-11028 - http://packetstormsecurity.com/files/152643/GAT-Ship-Web-Module CVE-2019-11029 - https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution CVE-2019-11030 - https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution CVE-2019-11031 - https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution -CVE-2019-11033 - https://support.applaudsolutions.com/hc/en-us/articles/203794318-Download-latest-Applaud-HCM-patch CVE-2019-11034 - https://usn.ubuntu.com/3953-2/ CVE-2019-11035 - https://usn.ubuntu.com/3953-2/ CVE-2019-11038 - https://bugzilla.suse.com/show_bug.cgi?id=1140118 @@ -56605,7 +55658,6 @@ CVE-2019-11048 - https://hackerone.com/reports/905015 CVE-2019-11048 - https://usn.ubuntu.com/4375-1/ CVE-2019-11048 - https://www.oracle.com/security-alerts/cpuApr2021.html CVE-2019-11048 - https://www.oracle.com/security-alerts/cpuoct2020.html -CVE-2019-11057 - https://cybersecurityworks.com/zerodays/cve-2019-11057-vtiger.html CVE-2019-11057 - https://medium.com/%40mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c CVE-2019-11057 - https://medium.com/@mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c CVE-2019-11059 - https://github.com/u-boot/u-boot/commits/master @@ -56879,7 +55931,6 @@ CVE-2019-11590 - https://lists.openwall.net/full-disclosure/2019/04/05/11 CVE-2019-11591 - http://seclists.org/fulldisclosure/2019/Apr/37 CVE-2019-11591 - https://lists.openwall.net/full-disclosure/2019/04/05/12 CVE-2019-11591 - https://wpvulndb.com/vulnerabilities/9252 -CVE-2019-11593 - https://adblockplus.org/releases/adblock-plus-352-for-chrome-firefox-and-opera-released CVE-2019-11597 - https://github.com/ImageMagick/ImageMagick/issues/1555 CVE-2019-11598 - https://github.com/ImageMagick/ImageMagick/issues/1540 CVE-2019-11599 - http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html @@ -56910,8 +55961,6 @@ CVE-2019-11642 - http://seclists.org/fulldisclosure/2019/May/1 CVE-2019-11643 - http://seclists.org/fulldisclosure/2019/May/2 CVE-2019-11660 - http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html CVE-2019-11682 - https://packetstormsecurity.com/files/152694/MailCarrier-2.51-HELP-Remote-Buffer-Overflow.html -CVE-2019-11686 - https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd -CVE-2019-11686 - https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s CVE-2019-11687 - https://github.com/d00rt/pedicom CVE-2019-11687 - https://github.com/d00rt/pedicom/blob/master/doc/Attacking_Digital_Imaging_and_Communication_in_Medicine_(DICOM)_file_format_standard_-_Markel_Picado_Ortiz_(d00rt).pdf CVE-2019-11687 - https://labs.cylera.com/2019.04.16/pe-dicom-medical-malware @@ -57122,8 +56171,6 @@ CVE-2019-12170 - https://github.com/fuzzlove/ATutor-Instructor-Backup-Arbitrary- CVE-2019-12171 - https://drive.google.com/open?id=1msz6pb08crPC0VT7s_Z_KTsKm9CbLJEXNsmRwzoNLy8 CVE-2019-12172 - https://github.com/typora/typora-issues/issues/2166 CVE-2019-12173 - https://github.com/MacDownApp/macdown/issues/1050 -CVE-2019-12176 - https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8 -CVE-2019-12177 - https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8 CVE-2019-12177 - https://posts.specterops.io/razer-synapse-3-elevation-of-privilege-6d2802bd0585 CVE-2019-12180 - https://lab.mediaservice.net/advisory/2020-04-readyapi-soapui.txt CVE-2019-12181 - http://packetstormsecurity.com/files/153333/Serv-U-FTP-Server-15.1.6-Privilege-Escalation.html @@ -57157,7 +56204,6 @@ CVE-2019-12276 - http://packetstormsecurity.com/files/153373/GrandNode-4.40-Path CVE-2019-12279 - http://packetstormsecurity.com/files/153040/Nagios-XI-5.6.1-SQL-Injection.html CVE-2019-12279 - https://github.com/JameelNabbo/exploits/blob/master/nagiosxi%20username%20sql%20injection.txt CVE-2019-12280 - http://packetstormsecurity.com/files/153374/PC-Doctor-Toolbox-DLL-Hijacking.html -CVE-2019-12280 - https://safebreach.com/Press-Post/SafeBreach-Identifies-Serious-Vulnerability-In-PC-Doctor-Software CVE-2019-12288 - http://f1security.co.kr/cve/cve_190314.htm CVE-2019-12289 - http://f1security.co.kr/cve/cve_190314.htm CVE-2019-12299 - https://medium.com/insidersec0x42/centraleyezer-stored-xss-using-html-entities-cve-2019-12299-5c295ae54ef @@ -57264,7 +56310,6 @@ CVE-2019-12461 - http://packetstormsecurity.com/files/158174/WebPort-1.19.1-Cros CVE-2019-12461 - https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS/ CVE-2019-12476 - https://github.com/0katz/CVE-2019-12476 CVE-2019-12477 - http://packetstormsecurity.com/files/153191/Supra-Smart-Cloud-TV-Remote-File-Inclusion.html -CVE-2019-12479 - https://security401.com/twentytwenty-storage-path-traversal/ CVE-2019-12480 - http://packetstormsecurity.com/files/153716/BACnet-Stack-0.8.6-Denial-Of-Service.html CVE-2019-12480 - https://1modm.github.io/CVE-2019-12480.html CVE-2019-12481 - https://github.com/gpac/gpac/issues/1249 @@ -57309,7 +56354,6 @@ CVE-2019-12553 - https://github.com/ereisr00/bagofbugz/blob/master/010Editor/str CVE-2019-12554 - https://github.com/ereisr00/bagofbugz/blob/master/010Editor/WSubStr.bt CVE-2019-12555 - https://github.com/ereisr00/bagofbugz/blob/master/010Editor/SubStr.bt CVE-2019-12562 - http://packetstormsecurity.com/files/154673/DotNetNuke-Cross-Site-Scripting.html -CVE-2019-12562 - https://mayaseven.com/cve-2019-12562-stored-cross-site-scripting-in-dotnetnuke-dnn-version-v9-3-2/ CVE-2019-12564 - https://github.com/srsec/-srsec-/issues/1 CVE-2019-12569 - https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-006.md CVE-2019-12570 - https://wpvulndb.com/vulnerabilities/9964 @@ -57320,11 +56364,8 @@ CVE-2019-12577 - https://github.com/mirchr/security-research/blob/master/vulnera CVE-2019-12581 - https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/ CVE-2019-12583 - https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/ CVE-2019-12586 - https://github.com/Matheus-Garbelini/esp32_esp8266_attacks -CVE-2019-12586 - https://matheus-garbelini.github.io/home/post/esp32-esp8266-eap-crash/ CVE-2019-12587 - https://github.com/Matheus-Garbelini/esp32_esp8266_attacks -CVE-2019-12587 - https://matheus-garbelini.github.io/home/post/zero-pmk-installation/ CVE-2019-12588 - https://github.com/Matheus-Garbelini/esp32_esp8266_attacks -CVE-2019-12588 - https://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/ CVE-2019-12589 - https://github.com/netblue30/firejail/commit/eecf35c2f8249489a1d3e512bb07f0d427183134 CVE-2019-12589 - https://github.com/netblue30/firejail/issues/2718 CVE-2019-12589 - https://github.com/netblue30/firejail/releases/tag/0.9.60 @@ -57338,9 +56379,7 @@ CVE-2019-12616 - http://packetstormsecurity.com/files/153251/phpMyAdmin-4.8-Cros CVE-2019-1262 - http://packetstormsecurity.com/files/154591/Microsoft-SharePoint-2013-SP1-Cross-Site-Scripting.html CVE-2019-12643 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-iosxe-rest-auth-bypass CVE-2019-12708 - https://www.tenable.com/security/research/tra-2019-44 -CVE-2019-12719 - https://drive.google.com/open?id=1Khz7x6b32g7JYCyA6ZQ6NGEc4I0yFA45 CVE-2019-12719 - https://www.exploit-db.com/exploits/47541 -CVE-2019-12720 - https://drive.google.com/file/d/1QYgj4FU0MjSIhgXwddg4L5no9KYn8E9v/view CVE-2019-12720 - https://www.exploit-db.com/exploits/47542 CVE-2019-12725 - http://packetstormsecurity.com/files/160211/ZeroShell-3.9.0-Remote-Command-Execution.html CVE-2019-12725 - http://packetstormsecurity.com/files/162561/ZeroShell-3.9.0-Remote-Command-Execution.html @@ -57348,7 +56387,6 @@ CVE-2019-12725 - https://www.tarlogic.com/advisories/zeroshell-rce-root.txt CVE-2019-12727 - https://github.com/X-C3LL/PoC-CVEs/blob/master/Aircam-DoS/Aircam-DoS.py CVE-2019-12728 - https://github.com/grails/grails-core/issues/11250 CVE-2019-12730 - https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n4.1.4 -CVE-2019-12731 - https://www.detack.de/en/cve-2019-12731 CVE-2019-12733 - http://packetstormsecurity.com/files/155585/SiteVision-4.x-5.x-Remote-Code-Execution.html CVE-2019-12733 - http://seclists.org/fulldisclosure/2019/Dec/12 CVE-2019-12733 - https://www.sitevision.se/ @@ -57438,10 +56476,6 @@ CVE-2019-12904 - https://dev.gnupg.org/T4541 CVE-2019-12905 - http://packetstormsecurity.com/files/158173/FileRun-2019.05.21-Cross-Site-Scripting.html CVE-2019-12905 - https://github.com/EmreOvunc/FileRun-Vulnerabilities/ CVE-2019-12905 - https://github.com/EmreOvunc/FileRun-Vulnerabilities/issues/3 -CVE-2019-12911 - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ -CVE-2019-12912 - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ -CVE-2019-12913 - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ -CVE-2019-12914 - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ CVE-2019-12919 - https://www.exploit-db.com/exploits/46993 CVE-2019-12920 - https://www.exploit-db.com/exploits/46993 CVE-2019-12921 - https://github.com/d0ge/data-processing/blob/master/CVE-2019-12921.md @@ -57452,18 +56486,11 @@ CVE-2019-12934 - https://zeroauth.ltd/blog/2019/07/17/cve-2019-12934-wp-code-hig CVE-2019-12935 - http://packetstormsecurity.com/files/153145/Shopware-5.5.6-Cross-Site-Scripting.html CVE-2019-12936 - https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-Notes CVE-2019-12936 - https://support.bluestacks.com/hc/en-us/articles/360028842471 -CVE-2019-12938 - https://bitbucket.org/analogic/mailserver/issues/665/posteio-logs-leak -CVE-2019-12942 - https://www.kth.se/polopoly_fs/1.923565.1568098364!/Vulnerability_Report_TTLock_State_Consistency.pdf -CVE-2019-12943 - https://www.kth.se/polopoly_fs/1.923564.1568098316!/Vulnerability_Report_TTLock_Password_Reset.pdf -CVE-2019-12944 - https://www.kth.se/polopoly_fs/1.931930.1571073241!/Vulnerability_Report_Glue_State_Consistency.pdf CVE-2019-12949 - https://github.com/tarantula-team/CVE-2019-12949 CVE-2019-12954 - https://www.esecforte.com/cve-2019-12954-solarwinds-network-performance-monitor-orion-platform-2018-npm-12-3-netpath-1-1-3-vulnerable-for-stored-xss/ CVE-2019-12962 - http://packetstormsecurity.com/files/161867/LiveZilla-Server-8.0.1.0-Cross-Site-Scripting.html CVE-2019-12966 - https://github.com/zxlie/FeHelper/issues/63 CVE-2019-12967 - https://securiteam.io/2019/10/20/cve-2019-12967-moolticute-improper-access-control/ -CVE-2019-12968 - https://bitbucket.org/Doomseeker/doomseeker/commits/ae456aac888cb794ea3292f7f99cb87d6b22a555 -CVE-2019-12968 - https://bitbucket.org/Doomseeker/doomseeker/commits/b9a90f1f56e704c5cbeefe83da2f9ce939920278 -CVE-2019-12968 - https://bitbucket.org/Doomseeker/doomseeker/pull-requests/74/more-openbsd-issues-3654-the-srb2-thingy/diff CVE-2019-12970 - http://packetstormsecurity.com/files/153495/SquirrelMail-1.4.22-Cross-Site-Scripting.html CVE-2019-12970 - https://seclists.org/bugtraq/2019/Jul/0 CVE-2019-12970 - https://seclists.org/bugtraq/2019/Jul/50 @@ -57667,8 +56694,6 @@ CVE-2019-13450 - https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million- CVE-2019-13450 - https://news.ycombinator.com/item?id=20387298 CVE-2019-1346 - http://packetstormsecurity.com/files/154801/Microsoft-Windows-Kernel-CI-HashKComputeFirstPageHash-Out-Of-Bounds-Read.html CVE-2019-13462 - https://www.lansweeper.com/forum/yaf_topics33_Announcements.aspx -CVE-2019-13466 - https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities -CVE-2019-13467 - https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities CVE-2019-1347 - http://packetstormsecurity.com/files/154802/Microsoft-Windows-Kernel-nt-MiRelocateImage-Out-Of-Bounds-Read.html CVE-2019-13472 - https://www.vulnerability-lab.com/get_content.php?id=2184 CVE-2019-13473 - http://packetstormsecurity.com/files/154416/Dabman-And-Imperial-Web-Radio-Devices-Undocumented-Telnet-Backdoor.html @@ -57702,7 +56727,6 @@ CVE-2019-13565 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2019-13566 - https://github.com/ros/ros_comm/issues/1752 CVE-2019-13567 - https://gist.github.com/wbowling/13f9f90365c171806b9ffba2c841026b CVE-2019-13569 - https://wpvulndb.com/vulnerabilities/9467 -CVE-2019-13570 - https://ajdg.solutions/2019/07/11/adrotate-pro-5-3-important-update-for-security-and-ads-txt/ CVE-2019-13570 - https://wpvulndb.com/vulnerabilities/9475 CVE-2019-13571 - https://github.com/beerpwn/ctf/blob/master/CVE/CVE-2019-13571/report.pdf CVE-2019-13571 - https://github.com/beerpwn/ctf/tree/master/CVE/CVE-2019-13571 @@ -58028,7 +57052,6 @@ CVE-2019-14345 - https://medium.com/%40Pablo0xSantiago/cve-2019-14345-ff6f6d9fd3 CVE-2019-14345 - https://medium.com/@Pablo0xSantiago/cve-2019-14345-ff6f6d9fd30f CVE-2019-14346 - http://packetstormsecurity.com/files/153989/Adive-Framework-2.0.7-Cross-Site-Request-Forgery.html CVE-2019-14347 - http://packetstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.html -CVE-2019-14347 - https://hackpuntes.com/cve-2019-14347-escalacion-de-privilegios-en-adive/ CVE-2019-14348 - http://packetstormsecurity.com/files/153963/WordPress-JoomSport-3.3-SQL-Injection.html CVE-2019-14348 - https://wpvulndb.com/vulnerabilities/9499 CVE-2019-14349 - https://github.com/espocrm/espocrm/issues/1358 @@ -58089,7 +57112,6 @@ CVE-2019-14478 - https://compass-security.com/fileadmin/Research/Advisories/2020 CVE-2019-14481 - https://compass-security.com/fileadmin/Research/Advisories/2020-15_CSNC-2019-016_AdRem_NetCrunch_Cross-Site_Request_Forgery_CSRF.txt CVE-2019-14492 - https://github.com/opencv/opencv/issues/15124 CVE-2019-14494 - https://gitlab.freedesktop.org/poppler/poppler/issues/802 -CVE-2019-14510 - https://lockstepgroup.com/blog/abusing-the-kaseya-lan-cache-fsadmin/ CVE-2019-14511 - https://sphinxsearch.com/blog/ CVE-2019-14513 - https://github.com/Slovejoy/dnsmasq-pre2.76 CVE-2019-14517 - https://github.com/pandao/editor.md/issues/709 @@ -58137,7 +57159,6 @@ CVE-2019-14683 - https://www.pluginvulnerabilities.com/2019/06/21/cross-site-req CVE-2019-14684 - https://safebreach.com/Post/Trend-Micro-Password-Manager-Privilege-Escalation-to-SYSTEM CVE-2019-14685 - http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html CVE-2019-14685 - http://seclists.org/fulldisclosure/2019/Aug/26 -CVE-2019-14685 - https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68 CVE-2019-14687 - https://medium.com/@infiniti_css/fa839acaad59 CVE-2019-14694 - http://rce4fun.blogspot.com/2019/08/comodo-antivirus-sandbox-race-condition.html CVE-2019-14694 - https://github.com/SouhailHammou/Exploits/blob/master/CVE-2019-14694%20-%20Comodo%20AV%20Sandbox%20Race%20Condition%20UAF/comodo_av_uaf_poc.c @@ -58280,7 +57301,6 @@ CVE-2019-14930 - https://www.mogozobo.com/?p=3593 CVE-2019-14931 - https://www.mogozobo.com/ CVE-2019-14931 - https://www.mogozobo.com/?p=3593 CVE-2019-14935 - https://www.3cx.com/community/threads/security-issue-with-3cx-windows-client-install.64432/ -CVE-2019-14943 - https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4530 CVE-2019-14945 - https://wpvulndb.com/vulnerabilities/9506 CVE-2019-14946 - https://wpvulndb.com/vulnerabilities/9449 CVE-2019-14947 - https://wpvulndb.com/vulnerabilities/9449 @@ -58348,7 +57368,6 @@ CVE-2019-15090 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.12 CVE-2019-15090 - https://usn.ubuntu.com/4115-1/ CVE-2019-15090 - https://usn.ubuntu.com/4118-1/ CVE-2019-15092 - http://packetstormsecurity.com/files/154203/WordPress-Import-Export-WordPress-Users-1.3.1-CSV-Injection.html -CVE-2019-15092 - https://hackpuntes.com/cve-2019-15092-wordpress-plugin-import-export-users-1-3-0-csv-injection/ CVE-2019-15092 - https://wpvulndb.com/vulnerabilities/9704 CVE-2019-15095 - https://github.com/wkeyuan/DWSurvey/issues/48 CVE-2019-15098 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html @@ -58380,7 +57399,6 @@ CVE-2019-15126 - https://tools.cisco.com/security/center/content/CiscoSecurityAd CVE-2019-15128 - https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user/ CVE-2019-15129 - https://gist.github.com/izadgot/38a7dd553f8024ed3154134dae0414fd CVE-2019-15130 - https://gist.github.com/izadgot/38a7dd553f8024ed3154134dae0414fd -CVE-2019-15131 - https://code42.com/r/support/CVE-2019-15131 CVE-2019-15131 - https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories CVE-2019-15134 - https://github.com/RIOT-OS/RIOT/pull/12001 CVE-2019-15140 - https://github.com/ImageMagick/ImageMagick/issues/1554 @@ -58439,7 +57457,6 @@ CVE-2019-15222 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.8 CVE-2019-15222 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d78e1c2b7f4be00bbe62141603a631dc7812f35 CVE-2019-15223 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.8 CVE-2019-15223 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b074ab7fc0d575247b9cc9f93bb7e007ca38840 -CVE-2019-15229 - https://www.sevenlayers.com/index.php/238-fuelcms-1-4-4-csrf CVE-2019-15233 - https://github.com/l0nax/CVE-2019-15233 CVE-2019-15235 - https://packetstormsecurity.com/files/155676/Control-Web-Panel-0.9.8.864-phpMyAdmin-Password-Disclosure.html CVE-2019-15238 - https://wpvulndb.com/vulnerabilities/9505 @@ -58571,7 +57588,6 @@ CVE-2019-15622 - https://hackerone.com/reports/518669 CVE-2019-15623 - https://hackerone.com/reports/508490 CVE-2019-15624 - https://hackerone.com/reports/508493 CVE-2019-15627 - http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html -CVE-2019-15628 - https://safebreach.com/Post/Trend-Micro-Security-16-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-15628 CVE-2019-1563 - http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html CVE-2019-1563 - https://kc.mcafee.com/corporate/index?page=content&id=SB10365 CVE-2019-1563 - https://seclists.org/bugtraq/2019/Oct/1 @@ -58623,31 +57639,10 @@ CVE-2019-15711 - https://fortiguard.com/psirt/FG-IR-19-238 CVE-2019-15714 - https://github.com/entropic-dev/entropic/issues/251 CVE-2019-15715 - http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html CVE-2019-15719 - http://packetstormsecurity.com/files/154782/PBS-Professional-19.2.3-Authentication-Bypass.html -CVE-2019-15720 - https://www.sevenlayers.com/index.php/243-cloudberry-backup-local-privilege-escalation -CVE-2019-15721 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15722 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15723 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15724 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15725 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ CVE-2019-15725 - https://gitlab.com/gitlab-org/gitlab-ee/issues/11431 -CVE-2019-15726 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15727 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15728 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15729 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ CVE-2019-1573 - https://www.kb.cert.org/vuls/id/192371 -CVE-2019-15730 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15731 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15732 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15733 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15734 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15736 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15737 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15738 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15739 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ -CVE-2019-15740 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ CVE-2019-15741 - http://packetstormsecurity.com/files/154734/GitLab-Omnibus-12.2.1-Logrotate-Privilege-Escalation.html CVE-2019-15741 - http://seclists.org/fulldisclosure/2019/Oct/7 -CVE-2019-15741 - https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/ CVE-2019-15741 - https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4380 CVE-2019-15742 - http://packetstormsecurity.com/files/155952/Plantronics-Hub-SpokesUpdateService-Privilege-Escalation.html CVE-2019-15752 - http://packetstormsecurity.com/files/157404/Docker-Credential-Wincred.exe-Privilege-Escalation.html @@ -58992,24 +57987,18 @@ CVE-2019-16416 - https://gist.github.com/svennergr/501409fbdb0ef4a8b0f07a26a2815 CVE-2019-16417 - https://gist.github.com/svennergr/204038bda1849ebce9af32eea9e55038 CVE-2019-1642 - https://www.exploit-db.com/exploits/46263/ CVE-2019-1649 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot -CVE-2019-16512 - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 CVE-2019-16512 - https://know.bishopfox.com/advisories CVE-2019-16512 - https://know.bishopfox.com/advisories/connectwise-control -CVE-2019-16513 - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 CVE-2019-16513 - https://know.bishopfox.com/advisories CVE-2019-16513 - https://know.bishopfox.com/advisories/connectwise-control -CVE-2019-16514 - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 CVE-2019-16514 - https://know.bishopfox.com/advisories CVE-2019-16514 - https://know.bishopfox.com/advisories/connectwise-control -CVE-2019-16515 - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 CVE-2019-16515 - https://know.bishopfox.com/advisories CVE-2019-16515 - https://know.bishopfox.com/advisories/connectwise-control CVE-2019-16515 - https://wpvulndb.com/vulnerabilities/10013 CVE-2019-16516 - http://packetstormsecurity.com/files/165432/ConnectWise-Control-19.2.24707-Username-Enumeration.html -CVE-2019-16516 - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 CVE-2019-16516 - https://know.bishopfox.com/advisories CVE-2019-16516 - https://know.bishopfox.com/advisories/connectwise-control -CVE-2019-16517 - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 CVE-2019-16517 - https://know.bishopfox.com/advisories CVE-2019-16517 - https://know.bishopfox.com/advisories/connectwise-control CVE-2019-1652 - http://packetstormsecurity.com/files/152262/Cisco-RV320-Command-Injection.html @@ -59065,7 +58054,6 @@ CVE-2019-16640 - https://0x.mk/?p=239 CVE-2019-16641 - https://0x.mk/?p=239 CVE-2019-16645 - http://packetstormsecurity.com/files/154652/GoAhead-2.5.0-Host-Header-Injection.html CVE-2019-16645 - https://github.com/Ramikan/Vulnerabilities/blob/master/GoAhead%20Web%20server%20HTTP%20Header%20Injection -CVE-2019-16647 - https://safebreach.com/Post/Maxthon-Browser-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-16647 CVE-2019-16649 - https://eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-attack/ CVE-2019-16649 - https://github.com/eclypsium/USBAnywhere CVE-2019-16650 - https://eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-attack/ @@ -59093,10 +58081,6 @@ CVE-2019-16678 - https://github.com/yzmcms/yzmcms/issues/27 CVE-2019-16679 - http://packetstormsecurity.com/files/154578/Gila-CMS-Local-File-Inclusion.html CVE-2019-16680 - https://bugzilla.gnome.org/show_bug.cgi?id=794337 CVE-2019-16681 - https://github.com/tarantula-team/Traveloka-Android-App-Critical-Vulnerability -CVE-2019-16685 - http://verneet.com/cve-2019-16685/ -CVE-2019-16686 - http://verneet.com/cve-2019-16686 -CVE-2019-16687 - http://verneet.com/cve-2019-16687 -CVE-2019-16688 - http://verneet.com/cve-2019-16688 CVE-2019-16692 - http://packetstormsecurity.com/files/154651/phpIPAM-1.4-SQL-Injection.html CVE-2019-16701 - http://packetstormsecurity.com/files/154587/pfSense-2.3.4-2.4.4-p3-Remote-Code-Injection.html CVE-2019-16702 - http://packetstormsecurity.com/files/155578/Integard-Pro-NoJs-2.2.0.9026-Remote-Buffer-Overflow.html @@ -59154,12 +58138,9 @@ CVE-2019-16862 - https://github.com/lodestone-security/CVEs/blob/master/CVE-2019 CVE-2019-16864 - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2019-16864 CVE-2019-16868 - https://github.com/emlog/emlog/issues/48 CVE-2019-16869 - https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-16869/5.0.0.Alpha1/exploit -CVE-2019-16872 - https://fortiguard.com/zeroday/FG-VD-19-120 -CVE-2019-16874 - https://fortiguard.com/zeroday/FG-VD-19-121 CVE-2019-16884 - https://github.com/opencontainers/runc/issues/2128 CVE-2019-16885 - http://packetstormsecurity.com/files/155583/OkayCMS-2.3.4-Remote-Code-Execution.html CVE-2019-16885 - http://seclists.org/fulldisclosure/2019/Dec/15 -CVE-2019-16885 - https://www.ait.ac.at/ait-sa-20191129-01-unauthenticated-remote-code-execution-okaycms CVE-2019-16891 - https://dappsec.substack.com/p/an-advisory-for-cve-2019-16891-from CVE-2019-16891 - https://sec.vnpt.vn/2019/09/liferay-deserialization-json-deserialization-part-4/ CVE-2019-16891 - https://www.youtube.com/watch?v=DjMEfQW3bf0 @@ -59179,9 +58160,7 @@ CVE-2019-16914 - https://www.seebug.org/vuldb/ssvid-98023 CVE-2019-16915 - https://www.seebug.org/vuldb/ssvid-98024 CVE-2019-16917 - http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html CVE-2019-16920 - https://www.kb.cert.org/vuls/id/766427 -CVE-2019-16931 - https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf CVE-2019-16931 - https://wpvulndb.com/vulnerabilities/9893 -CVE-2019-16932 - https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf CVE-2019-16932 - https://wpvulndb.com/vulnerabilities/9892 CVE-2019-16935 - https://bugs.python.org/issue38243 CVE-2019-16935 - https://hackerone.com/reports/705420 @@ -59284,7 +58263,6 @@ CVE-2019-17091 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019 CVE-2019-17092 - http://packetstormsecurity.com/files/154851/OpenProject-10.0.1-9.0.3-Cross-Site-Scripting.html CVE-2019-17092 - http://seclists.org/fulldisclosure/2019/Oct/29 CVE-2019-17092 - https://seclists.org/bugtraq/2019/Oct/19 -CVE-2019-17093 - https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPL-and-Potential-Abuses CVE-2019-17094 - https://labs.bitdefender.com/2019/12/multiple-vulnerabilities-in-belkin-wemo-insight-switch/ CVE-2019-17098 - https://labs.bitdefender.com/2020/08/smart-locks-not-so-smart-with-wi-fi-security/ CVE-2019-17101 - https://labs.bitdefender.com/2020/04/cracking-the-netatmo-smart-indoor-security-camera/ @@ -59395,7 +58373,6 @@ CVE-2019-17393 - http://seclists.org/fulldisclosure/2019/Oct/33 CVE-2019-17394 - https://pastebin.com/h8v0qxZH CVE-2019-17395 - https://pastebin.com/8dvs5RcJ CVE-2019-17396 - https://pastebin.com/9VBiRpAR -CVE-2019-17397 - https://pastebin.com/hGg5efMe CVE-2019-17398 - https://pastebin.com/5ZDDCqgL CVE-2019-17400 - https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/ CVE-2019-17401 - https://github.com/libyal/liblnk/issues/40 @@ -59422,7 +58399,6 @@ CVE-2019-17453 - https://github.com/axiomatic-systems/Bento4/issues/436 CVE-2019-17453 - https://github.com/axiomatic-systems/Bento4/issues/437 CVE-2019-17454 - https://github.com/axiomatic-systems/Bento4/issues/435 CVE-2019-17455 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942145 -CVE-2019-17455 - https://gitlab.com/jas/libntlm/issues/2 CVE-2019-17489 - https://github.com/shi-yang/jnoj/issues/51 CVE-2019-17490 - https://github.com/shi-yang/jnoj/issues/51 CVE-2019-17491 - https://github.com/shi-yang/jnoj/issues/51 @@ -59508,7 +58484,6 @@ CVE-2019-17613 - https://github.com/Ers4tz/vuln/blob/master/qibosoft/qibosoft_v7 CVE-2019-17621 - http://packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html CVE-2019-17621 - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104 CVE-2019-17621 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104 -CVE-2019-17621 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9 CVE-2019-17624 - http://packetstormsecurity.com/files/154868/X.Org-X-Server-1.20.4-Local-Stack-Overflow.html CVE-2019-17624 - https://www.exploit-db.com/exploits/47507 CVE-2019-17625 - https://github.com/ramboxapp/community-edition/issues/2418 @@ -59532,18 +58507,9 @@ CVE-2019-17662 - http://packetstormsecurity.com/files/154896/ThinVNC-1.0b1-Authe CVE-2019-17662 - https://github.com/shashankmangal2/Exploits/blob/master/ThinVNC-RemoteAccess/POC.py CVE-2019-17662 - https://redteamzone.com/ThinVNC/ CVE-2019-17666 - https://arstechnica.com/information-technology/2019/10/unpatched-linux-flaw-may-let-attackers-crash-or-compromise-nearby-devices/ -CVE-2019-17669 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html -CVE-2019-17670 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html -CVE-2019-17671 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html -CVE-2019-17672 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html -CVE-2019-17673 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html -CVE-2019-17674 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html -CVE-2019-17675 - https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html CVE-2019-1785 - https://bugzilla.clamav.net/show_bug.cgi?id=12284 CVE-2019-1791 - http://www.securityfocus.com/bid/108390 -CVE-2019-18193 - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=52 CVE-2019-18194 - https://www.youtube.com/watch?v=88qeaLq98Gc -CVE-2019-18196 - https://safebreach.com/Post/TeamViewer-Windows-Client-v11-to-v14-DLL-Preloading-and-Potential-Abuses-CVE-2019-18196 CVE-2019-18197 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-18198 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 CVE-2019-18199 - http://packetstormsecurity.com/files/154954/Fujitsu-Wireless-Keyboard-Set-LX390-Replay-Attacks.html @@ -59559,7 +58525,6 @@ CVE-2019-18203 - https://medium.com/zero2flag/cve-2019-18203-bfa65918e591 CVE-2019-1821 - http://packetstormsecurity.com/files/153350/Cisco-Prime-Infrastructure-Health-Monitor-TarArchive-Directory-Traversal.html CVE-2019-18212 - https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/ CVE-2019-18213 - https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/ -CVE-2019-18215 - https://safebreach.com/Post/Comodo-Internet-Security-DLL-Preloading-and-Potential-Abuses-CVE-2019-18215 CVE-2019-18216 - https://blog.modpr0.be/2019/10/18/asus-rog-bios-reset-on-lost-battery-power/ CVE-2019-18221 - https://vuldb.com/?id.144170 CVE-2019-18276 - http://packetstormsecurity.com/files/155498/Bash-5.0-Patch-11-Privilege-Escalation.html @@ -59594,7 +58559,6 @@ CVE-2019-18304 - http://packetstormsecurity.com/files/155665/Siemens-Security-Ad CVE-2019-18305 - http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html CVE-2019-18306 - http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html CVE-2019-18307 - http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html -CVE-2019-18344 - https://www.sevenlayers.com/index.php/262-online-grading-system-1-0-sqli CVE-2019-18345 - http://packetstormsecurity.com/files/155630/DAViCal-CalDAV-Server-1.1.8-Reflective-Cross-Site-Scripting.html CVE-2019-18345 - https://hackdefense.com/publications/cve-2019-18345-davical-caldav-server-vulnerability/ CVE-2019-18346 - http://packetstormsecurity.com/files/155629/DAViCal-CalDAV-Server-1.1.8-Cross-Site-Request-Forgery.html @@ -59609,7 +58573,6 @@ CVE-2019-18350 - https://github.com/ant-design/ant-design-pro/pull/5461 CVE-2019-18359 - https://sourceforge.net/p/mp3gain/bugs/46/ CVE-2019-18370 - https://github.com/UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC/blob/master/remote_command_execution_vulnerability.py CVE-2019-18371 - https://github.com/UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC/blob/master/arbitrary_file_read_vulnerability.py -CVE-2019-18387 - https://www.sevenlayers.com/index.php/266-hotel-and-lodge-management-system-1-0-sqli CVE-2019-18396 - http://packetstormsecurity.com/files/155296/Technicolor-TD5130.2-Remote-Command-Execution.html CVE-2019-18396 - https://medium.com/%40c4pt41nnn/cve-2019-18396-command-injection-in-technicolor-router-da5dd2134052 CVE-2019-18396 - https://medium.com/@c4pt41nnn/cve-2019-18396-command-injection-in-technicolor-router-da5dd2134052 @@ -59703,13 +58666,10 @@ CVE-2019-18845 - https://github.com/active-labs/Advisories/blob/master/2019/ACTI CVE-2019-18846 - http://packetstormsecurity.com/files/156474/Open-Xchange-App-Suite-Documents-Server-Side-Request-Forgery.html CVE-2019-18846 - http://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html CVE-2019-18852 - https://github.com/ChandlerChin/Dlink_vuls/blob/master/A%20hard%20coded%20telnet%20user%20was%20discovered%20in%20multiple%20Dlink%20routers.pdf -CVE-2019-18854 - https://fortiguard.com/zeroday/FG-VD-19-113 CVE-2019-18854 - https://wordpress.org/plugins/safe-svg/#developers CVE-2019-18854 - https://wpvulndb.com/vulnerabilities/9937 -CVE-2019-18855 - https://fortiguard.com/zeroday/FG-VD-19-113 CVE-2019-18855 - https://wordpress.org/plugins/safe-svg/#developers CVE-2019-18855 - https://wpvulndb.com/vulnerabilities/9937 -CVE-2019-18856 - https://fortiguard.com/zeroday/FG-VD-19-115 CVE-2019-18858 - https://www.tenable.com/security/research/tra-2019-48 CVE-2019-18859 - http://packetstormsecurity.com/files/155926/Digi-AnywhereUSB-14-Cross-Site-Scripting.html CVE-2019-18859 - https://gist.github.com/RNPG/e0d25ad51aa5c288b9005900f88a4f03 @@ -59751,21 +58711,13 @@ CVE-2019-18952 - http://packetstormsecurity.com/files/155324/Xfilesharing-2.5.1- CVE-2019-18954 - https://github.com/cl0udz/vulnerabilities/tree/master/pomelo-critical-state-manipulation CVE-2019-18956 - https://github.com/blackarrowsec/advisories/tree/master/2019/CVE-2019-18956 CVE-2019-18957 - http://packetstormsecurity.com/files/155320/MicroStrategy-Library-Cross-Site-Scripting.html -CVE-2019-18958 - https://a-man-in-the-cookie.blogspot.com/2019/11/nitro-pro-vulnerability.html CVE-2019-1897 - https://www.tenable.com/security/research/tra-2019-29 CVE-2019-18976 - https://packetstormsecurity.com/files/155436/Asterisk-Project-Security-Advisory-AST-2019-008.html CVE-2019-18976 - https://www.cybersecurity-help.cz/vdb/SB2019112218?affChecked=1 CVE-2019-18979 - https://medium.com/%40kusolwatcharaapanukorn/0-days-adaware-antivirus-quarantine-flaws-allow-privilege-escalation-3d1f3c8214ec CVE-2019-18979 - https://medium.com/@kusolwatcharaapanukorn/0-days-adaware-antivirus-quarantine-flaws-allow-privilege-escalation-3d1f3c8214ec CVE-2019-1898 - https://www.tenable.com/security/research/tra-2019-29 -CVE-2019-18989 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/ CVE-2019-1899 - https://www.tenable.com/security/research/tra-2019-29 -CVE-2019-18990 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/ -CVE-2019-18991 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/ -CVE-2019-19000 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19001 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19002 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19003 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch CVE-2019-19004 - https://github.com/autotrace/autotrace/pull/40 CVE-2019-19005 - https://github.com/autotrace/autotrace/pull/40 CVE-2019-19006 - https://community.freepbx.org/t/freepbx-security-vulnerability-sec-2019-001/62772 @@ -59846,17 +58798,7 @@ CVE-2019-19081 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 CVE-2019-19082 - https://usn.ubuntu.com/4287-2/ CVE-2019-19083 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8 CVE-2019-19083 - https://usn.ubuntu.com/4208-1/ -CVE-2019-19089 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19090 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19091 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19092 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19093 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19094 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19095 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19096 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2019-19097 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch CVE-2019-19113 - https://github.com/newbee-ltd/newbee-mall/issues/1 -CVE-2019-19115 - https://safebreach.com/Post/Nahimic-APO-Software-Component-Driver-Deployed-with-MSI-Computers-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-19115 CVE-2019-1912 - http://packetstormsecurity.com/files/154667/Realtek-Managed-Switch-Controller-RTL83xx-Stack-Overflow.html CVE-2019-19127 - http://packetstormsecurity.com/files/156903/SITS-Vision-9.7.0-Authentication-Bypass.html CVE-2019-1913 - http://packetstormsecurity.com/files/154667/Realtek-Managed-Switch-Controller-RTL83xx-Stack-Overflow.html @@ -59864,7 +58806,6 @@ CVE-2019-19133 - http://packetstormsecurity.com/files/155558/WordPress-CSS-Hero- CVE-2019-19133 - http://seclists.org/fulldisclosure/2019/Dec/6 CVE-2019-19133 - https://wpvulndb.com/vulnerabilities/9966 CVE-2019-19134 - https://wpvulndb.com/vulnerabilities/10095 -CVE-2019-19135 - https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2019-19135.pdf CVE-2019-19135 - https://opcfoundation.org/security-bulletins/ CVE-2019-1914 - http://packetstormsecurity.com/files/154667/Realtek-Managed-Switch-Controller-RTL83xx-Stack-Overflow.html CVE-2019-19142 - http://packetstormsecurity.com/files/156589/Intelbras-Wireless-N-150Mbps-WRN240-Authentication-Bypass.html @@ -59875,7 +58816,6 @@ CVE-2019-19191 - https://bugzilla.suse.com/show_bug.cgi?id=1157471 CVE-2019-19191 - https://issues.shibboleth.net/jira/browse/SSPCPP-874 CVE-2019-19195 - https://www.microchip.com/wwwproducts/en/ATSAMB11 CVE-2019-19197 - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-11-16-kyrol-internet-security-driver-issue.md -CVE-2019-19197 - https://nafiez.github.io/security/vulnerability/2019/11/16/kyrol-internet-security-driver-issue.html CVE-2019-19198 - http://packetstormsecurity.com/files/155615/WordPress-Scoutnet-Kalender-1.1.0-Cross-Site-Scripting.html CVE-2019-19198 - https://wpvulndb.com/vulnerabilities/9969 CVE-2019-19198 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-045.txt @@ -59925,14 +58865,12 @@ CVE-2019-19242 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-19244 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-19245 - http://hyp3rlinx.altervista.org CVE-2019-19245 - https://packetstormsecurity.com/files/155505/Xinet-Elegant-6-Asset-Library-Web-Interface-6.1.655-SQL-Injection.html -CVE-2019-19262 - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-2-released/ CVE-2019-19265 - http://seclists.org/fulldisclosure/2020/Jan/0 CVE-2019-19265 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-015/-icewarp-cross-site-scripting-in-notes-for-contacts CVE-2019-19266 - http://seclists.org/fulldisclosure/2020/Jan/1 CVE-2019-19266 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-016/-icewarp-cross-site-scripting-in-notes CVE-2019-19269 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-19273 - https://security.samsungmobile.com/securityUpdate.smsb -CVE-2019-19306 - https://cybersecurityworks.com/zerodays/cve-2019-19306-zoho.html CVE-2019-19306 - https://github.com/cybersecurityworks/Disclosed/issues/16 CVE-2019-19306 - https://wpvulndb.com/vulnerabilities/9919 CVE-2019-19311 - https://gitlab.com/gitlab-org/gitlab/issues/31536 @@ -59986,10 +58924,6 @@ CVE-2019-19447 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447 CVE-2019-19448 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19448 CVE-2019-19449 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449 CVE-2019-19452 - https://www.coresecurity.com/advisories/viper-rgb-driver-multiple-vulnerabilities -CVE-2019-19453 - https://www.gruppotim.it/redteam -CVE-2019-19454 - https://www.gruppotim.it/redteam -CVE-2019-19455 - https://www.gruppotim.it/redteam -CVE-2019-19456 - https://www.gruppotim.it/redteam CVE-2019-19457 - https://packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html CVE-2019-19458 - https://packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html CVE-2019-19458 - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-salto-proaccess-space/ @@ -60060,7 +58994,6 @@ CVE-2019-19536 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9 CVE-2019-19536 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ead16e53c2f0ed946d82d4037c630e2f60f4ab69 CVE-2019-19537 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10 CVE-2019-19537 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=303911cfc5b95d33687d9046133ff184cf5043ff -CVE-2019-19538 - https://community.freepbx.org/t/freepbx-security-vulnerability-sec-2019-00 CVE-2019-19538 - https://wiki.freepbx.org/display/FOP/2019-12-03+Remote+Command+Execution CVE-2019-19540 - https://wpvulndb.com/vulnerabilities/9974 CVE-2019-19541 - https://wpvulndb.com/vulnerabilities/9974 @@ -60073,7 +59006,6 @@ CVE-2019-19552 - https://wiki.freepbx.org/display/FOP/2019-12-03+Multiple+XSS+Vu CVE-2019-19553 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-19576 - http://packetstormsecurity.com/files/155577/Verot-2.0.3-Remote-Code-Execution.html CVE-2019-19576 - https://github.com/jra89/CVE-2019-19576 -CVE-2019-19576 - https://medium.com/@jra8908/cve-2019-19576-e9da712b779 CVE-2019-19585 - http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html CVE-2019-19590 - https://github.com/radareorg/radare2/issues/15543 CVE-2019-19592 - https://sumukh30.blogspot.com/2020/01/normal-0-false-false-false-en-us-x-none.html?m=1 @@ -60100,14 +59032,11 @@ CVE-2019-19631 - https://know.bishopfox.com/advisories/big-monitoring-fabric CVE-2019-19632 - https://know.bishopfox.com/advisories CVE-2019-19632 - https://know.bishopfox.com/advisories/big-monitoring-fabric CVE-2019-19634 - https://github.com/jra89/CVE-2019-19634 -CVE-2019-19634 - https://medium.com/@jra8908/cve-2019-19634-arbitrary-file-upload-in-class-upload-php-ccaf9e13875e CVE-2019-19642 - https://www.dark-sec.net/2019/12/supermicro-ipmi-exploitation.html CVE-2019-19645 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-19646 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-19646 - https://www.sqlite.org/ CVE-2019-19648 - https://github.com/VirusTotal/yara/issues/1178 -CVE-2019-19676 - https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-csv-injection.html -CVE-2019-19681 - https://medium.com/@k4m1ll0/remote-code-execution-vulnerability-in-pandorafms-7-x-8ce55d4b1d5a CVE-2019-19697 - http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txt CVE-2019-19697 - https://seclists.org/bugtraq/2020/Jan/29 CVE-2019-19699 - https://github.com/SpengeSec/CVE-2019-19699 @@ -60121,14 +59050,6 @@ CVE-2019-19726 - http://www.openwall.com/lists/oss-security/2023/10/03/2 CVE-2019-19726 - https://seclists.org/bugtraq/2019/Dec/25 CVE-2019-19726 - https://www.openwall.com/lists/oss-security/2019/12/11/9 CVE-2019-19731 - http://packetstormsecurity.com/files/155666/Roxy-Fileman-1.4.5-For-.NET-Directory-Traversal.html -CVE-2019-19732 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19733 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19734 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19735 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19736 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19737 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19738 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19739 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 CVE-2019-19740 - http://packetstormsecurity.com/files/156113/Octeth-Oempro-4.8-SQL-Injection.html CVE-2019-19741 - https://medium.com/%40tobiasgyoerfi/ea-origin-10-5-55-33574-createdirectory-arbitrary-dacl-write-privilege-escalation-cve-2019-19741-5f18adfabb27 CVE-2019-19741 - https://medium.com/@tobiasgyoerfi/ea-origin-10-5-55-33574-createdirectory-arbitrary-dacl-write-privilege-escalation-cve-2019-19741-5f18adfabb27 @@ -60153,10 +59074,7 @@ CVE-2019-19781 - http://packetstormsecurity.com/files/155947/Citrix-ADC-NetScale CVE-2019-19781 - http://packetstormsecurity.com/files/155972/Citrix-ADC-Gateway-Path-Traversal.html CVE-2019-19781 - https://badpackets.net/over-25000-citrix-netscaler-endpoints-vulnerable-to-cve-2019-19781/ CVE-2019-19782 - https://github.com/sketler/sketler.github.io/blob/master/_posts/2019-11-11-AceaXeftp-RCE-Via-Buffer-Overflow.markdown -CVE-2019-19782 - https://sketler.github.io/cve_research/AceaXeftp-RCE-Via-Buffer-Overflow/ CVE-2019-19800 - https://www.manageengine.com -CVE-2019-19805 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 -CVE-2019-19806 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459 CVE-2019-19807 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 CVE-2019-19813 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19813 CVE-2019-19813 - https://usn.ubuntu.com/4414-1/ @@ -60165,7 +59083,6 @@ CVE-2019-19815 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19815 CVE-2019-19816 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 CVE-2019-19816 - https://usn.ubuntu.com/4414-1/ CVE-2019-19820 - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-12-04-kyrol-internet-security-invalid-pointer-vulnerability.md -CVE-2019-19820 - https://nafiez.github.io/security/vulnerability/2019/12/04/kyrol-internet-security-invalid-pointer-vulnerability.html CVE-2019-19822 - http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html CVE-2019-19822 - http://seclists.org/fulldisclosure/2020/Jan/36 CVE-2019-19822 - http://seclists.org/fulldisclosure/2020/Jan/38 @@ -60189,12 +59106,6 @@ CVE-2019-19851 - https://wiki.freepbx.org/display/FOP/2020-01-09+XSS+Injection+v CVE-2019-19851 - https://wiki.freepbx.org/display/FOP/List+of+Securities+Vulnerabilities CVE-2019-19852 - https://wiki.freepbx.org/display/FOP/2020-01-09+XSS+Injection+vulnerability+in+Call+Event+Logging+module CVE-2019-19852 - https://wiki.freepbx.org/display/FOP/List+of+Securities+Vulnerabilities -CVE-2019-19854 - https://websec.nl/news.php -CVE-2019-19855 - https://websec.nl/news.php -CVE-2019-19856 - https://websec.nl/news.php -CVE-2019-19857 - https://websec.nl/news.php -CVE-2019-19858 - https://websec.nl/news.php -CVE-2019-19859 - https://www.websec.nl/news.php CVE-2019-19880 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-19885 - https://cert.vde.com/en-us/advisories/vde-2020-043 CVE-2019-19887 - https://github.com/rockcarry/ffjpeg/issues/14 @@ -60208,7 +59119,6 @@ CVE-2019-19913 - http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cros CVE-2019-19913 - http://seclists.org/fulldisclosure/2020/Apr/9 CVE-2019-19915 - https://wpvulndb.com/vulnerabilities/9979 CVE-2019-19916 - https://github.com/V1n1v131r4/MIME-Confusion-Attack-on-Midori-Browser/blob/master/README.md -CVE-2019-19916 - https://portswigger.net/research/bypassing-csp-using-polyglot-jpegs CVE-2019-19921 - https://github.com/opencontainers/runc/issues/2197 CVE-2019-19922 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 CVE-2019-19922 - https://www.oracle.com/security-alerts/cpuApr2021.html @@ -60318,16 +59228,11 @@ CVE-2019-20054 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux. CVE-2019-20055 - https://code610.blogspot.com/2019/12/testing-ssrf-in-liquifireos.html CVE-2019-20056 - https://github.com/saitoha/libsixel/issues/126 CVE-2019-20057 - https://github.com/ProxymanApp/Proxyman/issues/364 -CVE-2019-20059 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -CVE-2019-20060 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -CVE-2019-20061 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -CVE-2019-20062 - https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad CVE-2019-20063 - https://github.com/hoene/libmysofa/issues/67 CVE-2019-20071 - https://drive.google.com/open?id=1p4HJ5C20TqY0rVNffdD5Zd7S_bGvDhnk CVE-2019-20072 - https://drive.google.com/open?id=1IGRYVci8fxic0jJJb-pAfAK1kJ4V2yGM CVE-2019-20073 - https://drive.google.com/open?id=1CxLrSKAczEZpm_7FERIrCGGJAs2mp6Go CVE-2019-20074 - https://drive.google.com/open?id=1MH6DMhP1JsV_RptGXDze0Vo9MDuCH9se -CVE-2019-20074 - https://fatihhcelik.blogspot.com/2019/12/clear-text-password-netis-dl4323.html CVE-2019-20075 - https://drive.google.com/open?id=1795_joGaL3QXMFeJoJPiNgB_d913XePx CVE-2019-20076 - https://drive.google.com/open?id=1HrYqVKlSxhQqB5tNhhLIgpyfi0Y2ZL80 CVE-2019-20079 - https://packetstormsecurity.com/files/154898 @@ -60383,8 +59288,6 @@ CVE-2019-20179 - https://medium.com/%40Pablo0xSantiago/cve-2019-20179-so-plannin CVE-2019-20179 - https://medium.com/@Pablo0xSantiago/cve-2019-20179-so-planning-1-45-sql-injection-5f0050ad81d1 CVE-2019-20180 - https://medium.com/%40Pablo0xSantiago/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8 CVE-2019-20180 - https://medium.com/@Pablo0xSantiago/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8 -CVE-2019-20181 - https://medium.com/@Pablo0xSantiago/cve-2019-20181-awesome-support-wordpress-helpdesk-support-plugin-5-8-0-84a0c022cf53 -CVE-2019-20182 - https://medium.com/@Pablo0xSantiago/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f CVE-2019-20183 - https://medium.com/%40Pablo0xSantiago/cve-2019-20183-employee-records-system-bypass-file-upload-to-rce-ea2653660b34 CVE-2019-20183 - https://medium.com/@Pablo0xSantiago/cve-2019-20183-employee-records-system-bypass-file-upload-to-rce-ea2653660b34 CVE-2019-20184 - https://medium.com/%40Pablo0xSantiago/cve-2019-20184-keepass-2-4-1-csv-injection-33f08de3c11a @@ -60429,15 +59332,12 @@ CVE-2019-20212 - https://wpvulndb.com/vulnerabilities/10014 CVE-2019-20212 - https://wpvulndb.com/vulnerabilities/10018 CVE-2019-20213 - https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f CVE-2019-20213 - https://medium.com/@s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f -CVE-2019-20213 - https://medium.com/@s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 CVE-2019-20215 - http://packetstormsecurity.com/files/156250/D-Link-ssdpcgi-Unauthenticated-Remote-Command-Execution.html CVE-2019-20215 - https://medium.com/@s1kr10s/d-link-dir-859-unauthenticated-rce-in-ssdpcgi-http-st-cve-2019-20215-en-2e799acb8a73 CVE-2019-20216 - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae CVE-2019-20216 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae -CVE-2019-20216 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35 CVE-2019-20217 - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae CVE-2019-20217 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae -CVE-2019-20217 - https://medium.com/@s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35 CVE-2019-20218 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2019-20219 - https://github.com/miniupnp/ngiflib/issues/15 CVE-2019-20224 - http://packetstormsecurity.com/files/155897/Pandora-7.0NG-Remote-Code-Execution.html @@ -60459,19 +59359,14 @@ CVE-2019-20358 - https://seclists.org/bugtraq/2020/Jan/55 CVE-2019-20360 - https://wpvulndb.com/vulnerabilities/9889 CVE-2019-20361 - http://packetstormsecurity.com/files/158568/WordPress-Email-Subscribers-And-Newsletters-4.2.2-SQL-Injection.html CVE-2019-20361 - https://wpvulndb.com/vulnerabilities/9947 -CVE-2019-20363 - https://cybersecurityworks.com/zerodays/cve-2019-20363-openfire.html CVE-2019-20363 - https://issues.igniterealtime.org/browse/OF-1955 -CVE-2019-20364 - https://cybersecurityworks.com/zerodays/cve-2019-20364-openfire.html CVE-2019-20364 - https://issues.igniterealtime.org/browse/OF-1955 -CVE-2019-20365 - https://cybersecurityworks.com/zerodays/cve-2019-20365-openfire.html CVE-2019-20365 - https://issues.igniterealtime.org/browse/OF-1955 -CVE-2019-20366 - https://cybersecurityworks.com/zerodays/cve-2019-20366-openfire.html CVE-2019-20366 - https://issues.igniterealtime.org/browse/OF-1955 CVE-2019-20372 - http://seclists.org/fulldisclosure/2021/Sep/36 CVE-2019-20374 - https://github.com/typora/typora-issues/issues/3124 CVE-2019-20375 - https://bitbucket.org/ritt/elog/commits/eefdabb714f26192f585083ef96c8413e459a1d1 CVE-2019-20376 - https://bitbucket.org/ritt/elog/commits/993bed4923c88593cc6b1186e0d1b9564994a25a -CVE-2019-20383 - https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log CVE-2019-20384 - https://bugs.gentoo.org/692492 CVE-2019-20388 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2019-20388 - https://www.oracle.com/security-alerts/cpujul2020.html @@ -60503,26 +59398,16 @@ CVE-2019-20431 - http://lustre.org/ CVE-2019-20431 - http://wiki.lustre.org/Lustre_2.12.3_Changelog CVE-2019-20432 - http://lustre.org/ CVE-2019-20432 - http://wiki.lustre.org/Lustre_2.12.3_Changelog -CVE-2019-20434 - https://cybersecurityworks.com/zerodays/cve-2019-20434-wso2.html CVE-2019-20434 - https://github.com/cybersecurityworks/Disclosed/issues/17 -CVE-2019-20435 - https://cybersecurityworks.com/zerodays/cve-2019-20435-wso2.html CVE-2019-20435 - https://github.com/cybersecurityworks/Disclosed/issues/18 -CVE-2019-20436 - https://cybersecurityworks.com/zerodays/cve-2019-20436-wso2.html CVE-2019-20436 - https://github.com/cybersecurityworks/Disclosed/issues/19 -CVE-2019-20437 - https://cybersecurityworks.com/zerodays/cve-2019-20437-wso2.html CVE-2019-20437 - https://github.com/cybersecurityworks/Disclosed/issues/20 -CVE-2019-20438 - https://cybersecurityworks.com/zerodays/cve-2019-20438-wso2.html CVE-2019-20438 - https://github.com/cybersecurityworks/Disclosed/issues/22 -CVE-2019-20439 - https://cybersecurityworks.com/zerodays/cve-2019-20439-wso2.html CVE-2019-20439 - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0644 CVE-2019-20439 - https://github.com/cybersecurityworks/Disclosed/issues/21 -CVE-2019-20440 - https://cybersecurityworks.com/zerodays/cve-2019-20440-wso2.html CVE-2019-20440 - https://github.com/cybersecurityworks/Disclosed/issues/24 -CVE-2019-20441 - https://cybersecurityworks.com/zerodays/cve-2019-20441-wso2.html CVE-2019-20441 - https://github.com/cybersecurityworks/Disclosed/issues/23 -CVE-2019-20442 - https://cybersecurityworks.com/zerodays/cve-2019-20442-wso2.html CVE-2019-20442 - https://github.com/cybersecurityworks/Disclosed/issues/25 -CVE-2019-20443 - https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html CVE-2019-20443 - https://github.com/cybersecurityworks/Disclosed/issues/26 CVE-2019-20444 - https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-20444/5.0.0.Alpha1/exploit CVE-2019-20447 - https://packetstormsecurity.com/files/152503/Jobberbase-CMS-2.0-SQL-Injection.html @@ -61010,7 +59895,6 @@ CVE-2019-25060 - https://wpscan.com/vulnerability/393be73a-f8dc-462f-8670-f20ab8 CVE-2019-25061 - https://stackoverflow.com/questions/42170239/security-of-rand-in-ruby-compared-to-other-methods/42170560 CVE-2019-25062 - https://www.exploit-db.com/exploits/47477 CVE-2019-25064 - https://vuldb.com/?id.146832 -CVE-2019-25065 - https://0day.today/exploit/33544 CVE-2019-25065 - https://vuldb.com/?id.146798 CVE-2019-25066 - https://vuldb.com/?id.143950 CVE-2019-25066 - https://www.exploit-db.com/exploits/47497 @@ -61631,7 +60515,6 @@ CVE-2019-3640 - https://kc.mcafee.com/corporate/index?page=content&id=SB10298 CVE-2019-3641 - https://kc.mcafee.com/corporate/index?page=content&id=SB10303 CVE-2019-3643 - https://kc.mcafee.com/corporate/index?page=content&id=SB10296 CVE-2019-3644 - https://kc.mcafee.com/corporate/index?page=content&id=SB10296 -CVE-2019-3648 - https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648 CVE-2019-3648 - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984 CVE-2019-3649 - https://kc.mcafee.com/corporate/index?page=content&id=SB10304 CVE-2019-3650 - https://kc.mcafee.com/corporate/index?page=content&id=SB10304 @@ -62342,8 +61225,6 @@ CVE-2019-6251 - http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit CVE-2019-6256 - https://github.com/rgaufman/live555/issues/19 CVE-2019-6260 - https://www.flamingspork.com/blog/2019/01/23/cve-2019-6260:-gaining-control-of-bmc-from-the-host-processor/ CVE-2019-6263 - https://www.exploit-db.com/exploits/46200/ -CVE-2019-6265 - https://www.detack.de/en/cve-2019-6265-6266 -CVE-2019-6266 - https://www.detack.de/en/cve-2019-6265-6266 CVE-2019-6267 - https://wpvulndb.com/vulnerabilities/9203 CVE-2019-6268 - https://packetstormsecurity.com/files/177440/RAD-SecFlow-2-Path-Traversal.html CVE-2019-6272 - http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html @@ -62371,7 +61252,6 @@ CVE-2019-6291 - https://bugzilla.nasm.us/show_bug.cgi?id=3392549 CVE-2019-6292 - https://github.com/jbeder/yaml-cpp/issues/657 CVE-2019-6293 - https://github.com/westes/flex/issues/414 CVE-2019-6294 - https://github.com/TeamEasy/EasyCMS/issues/8 -CVE-2019-6333 - https://safebreach.com/Post/HP-Touchpoint-Analytics-DLL-Search-Order-Hijacking-Potential-Abuses-CVE-2019-6333 CVE-2019-6338 - https://www.drupal.org/sa-core-2019-001 CVE-2019-6340 - https://www.exploit-db.com/exploits/46452/ CVE-2019-6340 - https://www.exploit-db.com/exploits/46459/ @@ -62542,7 +61422,6 @@ CVE-2019-7231 - http://seclists.org/fulldisclosure/2019/Jun/35 CVE-2019-7232 - http://packetstormsecurity.com/files/153403/ABB-IDAL-HTTP-Server-Stack-Based-Buffer-Overflow.html CVE-2019-7232 - http://seclists.org/fulldisclosure/2019/Jun/40 CVE-2019-7233 - https://github.com/uvoteam/libdoc/issues/6 -CVE-2019-7238 - https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019 CVE-2019-7249 - https://hackerone.com/reports/471739 CVE-2019-7252 - https://applied-risk.com/labs/advisories CVE-2019-7253 - https://applied-risk.com/labs/advisories @@ -62628,7 +61507,6 @@ CVE-2019-7391 - https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF CVE-2019-7393 - http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html CVE-2019-7394 - http://packetstormsecurity.com/files/153089/CA-Risk-Strong-Authentication-Privilege-Escalation.html CVE-2019-7400 - http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.html -CVE-2019-7400 - https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/ CVE-2019-7400 - https://www.exploit-db.com/exploits/46608/ CVE-2019-7402 - https://github.com/panghusec/exploit/issues/8 CVE-2019-7409 - https://metamorfosec.com/Files/Advisories/METS-2019-001-Multiple_XSS_Vulnerabilities_in_ProfileDesign_CMS_v6.0.2.5.txt @@ -62740,7 +61618,6 @@ CVE-2019-7638 - https://bugzilla.libsdl.org/show_bug.cgi?id=4500 CVE-2019-7646 - http://packetstormsecurity.com/files/151630/CentOS-Web-Panel-0.9.8.763-Cross-Site-Scripting.html CVE-2019-7646 - https://www.exploit-db.com/exploits/46349/ CVE-2019-7651 - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-01-09-emsisoft-Anti-Malware-bypass.md -CVE-2019-7651 - https://nafiez.github.io/security/bypass/2019/01/08/emsisoft-Anti-Malware-bypass.html CVE-2019-7652 - http://packetstormsecurity.com/files/152804/TheHive-Project-Cortex-2.1.3-Server-Side-Request-Forgery.html CVE-2019-7656 - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-7656-PrivEscal-Wowza CVE-2019-7659 - https://outpost24.com/blog/gsoap-vulnerability-identified @@ -62761,7 +61638,6 @@ CVE-2019-7674 - https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b CVE-2019-7675 - https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb CVE-2019-7684 - https://gitee.com/inxeduopen/inxedu/issues/IQJUH CVE-2019-7687 - http://packetstormsecurity.com/files/151654/Jiofi-4-JMR-1140-Cross-Site-Scripting.html -CVE-2019-7687 - https://www.exploit-db.com/exploits/46363/ CVE-2019-7693 - https://pastebin.com/raw/nQ648Dif CVE-2019-7697 - https://github.com/axiomatic-systems/Bento4/issues/351 CVE-2019-7698 - https://github.com/axiomatic-systems/Bento4/issues/354 @@ -62776,13 +61652,10 @@ CVE-2019-7730 - https://github.com/eddietcc/CVEnotes/blob/master/MyWebSQL/CSRF/r CVE-2019-7737 - https://github.com/Verytops/verydows/issues/10 CVE-2019-7738 - https://github.com/cooltey/C.P.Sub/issues/3 CVE-2019-7745 - http://packetstormsecurity.com/files/151655/Jiofi-4-JMR-1140-WiFi-Password-Cross-Site-Request-Forgery.html -CVE-2019-7745 - https://www.exploit-db.com/exploits/46364/ CVE-2019-7746 - http://packetstormsecurity.com/files/151656/Jiofi-4-JMR-1140-Admin-Token-Disclosure-Cross-Site-Request-Forgery.html -CVE-2019-7746 - https://www.exploit-db.com/exploits/46365/ CVE-2019-7751 - https://packetstormsecurity.com/files/151963/MarcomCentral-FusionPro-VDP-Creator-Directory-Traversal.html CVE-2019-7751 - https://www.exploit-db.com/exploits/46494 CVE-2019-7755 - https://www.exploit-database.net/?id=101060 -CVE-2019-7755 - https://www.exploit-db.com/exploits/46431/ CVE-2019-7758 - http://www.securityfocus.com/bid/108326 CVE-2019-7761 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0778 CVE-2019-7769 - http://www.securityfocus.com/bid/108326 @@ -62943,8 +61816,6 @@ CVE-2019-8928 - https://www.exploit-db.com/exploits/46425/ CVE-2019-8929 - http://packetstormsecurity.com/files/151757/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-Traversal-XSS.html CVE-2019-8929 - http://seclists.org/fulldisclosure/2019/Feb/45 CVE-2019-8929 - https://www.exploit-db.com/exploits/46425/ -CVE-2019-8931 - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ -CVE-2019-8932 - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ CVE-2019-8933 - https://blog.csdn.net/qq_36093477/article/details/86681178 CVE-2019-8936 - http://bugs.ntp.org/show_bug.cgi?id=3565 CVE-2019-8936 - http://packetstormsecurity.com/files/152915/FreeBSD-Security-Advisory-FreeBSD-SA-19-04.ntp.html @@ -62968,7 +61839,6 @@ CVE-2019-8982 - https://www.exploit-db.com/exploits/45158 CVE-2019-8997 - http://support.blackberry.com/kb/articleDetail?articleNumber=000047227 CVE-2019-9002 - https://github.com/mikelbring/tinyissue/issues/237 CVE-2019-9003 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.5 -CVE-2019-9005 - https://www.detack.de/en/cve-2019-9005 CVE-2019-9017 - http://packetstormsecurity.com/files/152721/SolarWinds-DameWare-Mini-Remote-Control-10.0-Denial-Of-Service.html CVE-2019-9017 - http://www.binaryworld.it/guidepoc.asp CVE-2019-9017 - https://www.exploit-db.com/exploits/46793/ @@ -62995,7 +61865,6 @@ CVE-2019-9053 - https://www.exploit-db.com/exploits/46635/ CVE-2019-9055 - http://packetstormsecurity.com/files/155322/CMS-Made-Simple-2.2.8-Remote-Code-Execution.html CVE-2019-9062 - https://hackingvila.wordpress.com/2019/02/19/php-scripts-mall-online-food-ordering-script-has-cross-site-request-forgery-csrf-php-script-mall/ CVE-2019-9081 - https://github.com/Laworigin/Laworigin.github.io/blob/master/2019/02/21/laravelv5-7%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96rce/index.html -CVE-2019-9081 - https://laworigin.github.io/2019/02/21/laravelv5-7%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96rce/ CVE-2019-9082 - http://packetstormsecurity.com/files/157218/ThinkPHP-5.0.23-Remote-Code-Execution.html CVE-2019-9082 - https://github.com/xiayulei/open_source_bms/issues/33 CVE-2019-9082 - https://www.exploit-db.com/exploits/46488/ @@ -63275,7 +62144,6 @@ CVE-2019-9740 - https://bugs.python.org/issue36276 CVE-2019-9740 - https://usn.ubuntu.com/4127-2/ CVE-2019-9740 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2019-9742 - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-03-13-gdata-total-security-acl-bypass.md -CVE-2019-9742 - https://nafiez.github.io/security/bypass/2019/03/12/gdata-total-security-acl-bypass.html CVE-2019-9745 - https://github.com/KPN-CISO/CVE-2019-9745/blob/master/README.md CVE-2019-9757 - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2019-9757 CVE-2019-9757 - https://rhinosecuritylabs.com/application-security/labkey-server-vulnerabilities-to-rce @@ -63564,8 +62432,6 @@ CVE-2020-10196 - https://wpvulndb.com/vulnerabilities/10127 CVE-2020-10199 - http://packetstormsecurity.com/files/157261/Nexus-Repository-Manager-3.21.1-01-Remote-Code-Execution.html CVE-2020-10199 - http://packetstormsecurity.com/files/160835/Sonatype-Nexus-3.21.1-Remote-Code-Execution.html CVE-2020-10199 - https://support.sonatype.com/hc/en-us/articles/360044882533 -CVE-2020-10203 - https://support.sonatype.com/hc/en-us/articles/360044361594 -CVE-2020-10204 - https://support.sonatype.com/hc/en-us/articles/360044356194 CVE-2020-1021 - http://packetstormsecurity.com/files/158028/Microsoft-Windows-Privilege-Escalation-Code-Execution.html CVE-2020-10218 - https://www.exploit-db.com/exploits/48179 CVE-2020-10220 - http://packetstormsecurity.com/files/156688/rConfig-3.9-SQL-Injection.html @@ -63575,9 +62441,7 @@ CVE-2020-10220 - https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfi CVE-2020-10220 - https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_sqli.py CVE-2020-10221 - http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html CVE-2020-10222 - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability.md -CVE-2020-10222 - https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerability.html CVE-2020-10223 - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability.md -CVE-2020-10223 - https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerability.html CVE-2020-10224 - https://www.exploit-db.com/exploits/47887 CVE-2020-10225 - https://www.exploit-db.com/exploits/47881 CVE-2020-10227 - https://www.exploit-db.com/exploits/48804 @@ -63618,136 +62482,17 @@ CVE-2020-10376 - https://medium.com/@felipeagromao/remote-control-cve-2020-10376 CVE-2020-10385 - https://packetstormsecurity.com/files/156910/WordPress-WP-Forms-1.5.8.2-Cross-Site-Scripting.html CVE-2020-10385 - https://wpvulndb.com/vulnerabilities/10114 CVE-2020-10386 - http://packetstormsecurity.com/files/156757/PHPKB-Multi-Language-9-image-upload.php-Code-Execution.html -CVE-2020-10386 - https://antoniocannito.it/phpkb1#remote-code-execution-cve-2020-10386 CVE-2020-10386 - https://www.exploit-db.com/exploits/48221 CVE-2020-10387 - http://packetstormsecurity.com/files/156754/PHPKB-Multi-Language-9-Authenticated-Directory-Traversal.html -CVE-2020-10387 - https://antoniocannito.it/phpkb1#authenticated-arbitrary-file-download-cve-2020-10387 CVE-2020-10387 - https://www.exploit-db.com/exploits/48220 -CVE-2020-10388 - https://antoniocannito.it/phpkb1#blind-cross-site-scripting-cve-2020-10388 CVE-2020-10389 - http://packetstormsecurity.com/files/156751/PHPKB-Multi-Language-9-Authenticated-Remote-Code-Execution.html -CVE-2020-10389 - https://antoniocannito.it/phpkb1#authenticated-remote-code-execution-cve-2020-10389 CVE-2020-10389 - https://www.exploit-db.com/exploits/48219 -CVE-2020-10390 - https://antoniocannito.it/phpkb1#out-of-band-blind-authenticated-remote-code-execution-cve-2020-10390 -CVE-2020-10391 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10392 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10393 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10394 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10395 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10396 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10397 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10398 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10399 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 CVE-2020-1040 - https://nvidia.custhelp.com/app/answers/detail/a_id/5044 -CVE-2020-10400 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10401 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10402 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10403 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10404 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10405 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10406 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10407 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10408 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10409 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 CVE-2020-1041 - https://nvidia.custhelp.com/app/answers/detail/a_id/5044 -CVE-2020-10410 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10411 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10412 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10413 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10414 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10415 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10416 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10417 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10418 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10419 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 CVE-2020-1042 - https://nvidia.custhelp.com/app/answers/detail/a_id/5044 -CVE-2020-10420 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10421 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10422 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10423 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10424 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10425 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10426 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10427 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10428 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10429 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 CVE-2020-1043 - https://nvidia.custhelp.com/app/answers/detail/a_id/5044 -CVE-2020-10430 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10431 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10432 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10433 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10434 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10435 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10436 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10437 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10438 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10439 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10440 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10441 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10442 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10443 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10444 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10445 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10446 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10447 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10448 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10449 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10450 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10451 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10452 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10453 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10454 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10455 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10456 - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456 -CVE-2020-10457 - https://antoniocannito.it/phpkb1#arbitrary-file-renaming-cve-2020-10457 -CVE-2020-10458 - https://antoniocannito.it/phpkb1#arbitrary-folder-deletion-cve-2020-10458 -CVE-2020-10459 - https://antoniocannito.it/phpkb1#arbitrary-file-listing-cve-2020-10459 -CVE-2020-10460 - https://antoniocannito.it/phpkb1#csv-injection-cve-2020-10460 -CVE-2020-10461 - https://antoniocannito.it/phpkb1#blind-cross-site-scripting-2-cve-2020-10461 -CVE-2020-10462 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-custom-field-cve-2020-10462 -CVE-2020-10463 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-template-cve-2020-10463 -CVE-2020-10464 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-an-article-cve-2020-10464 -CVE-2020-10465 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-category-cve-2020-10465 -CVE-2020-10466 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-glossary-term-cve-2020-10466 -CVE-2020-10467 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-comment-cve-2020-10467 -CVE-2020-10468 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-news-article-cve-2020-10468 -CVE-2020-10469 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-department-cve-2020-10469 -CVE-2020-10470 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-custom-fields-cve-2020-10470 -CVE-2020-10471 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-articles-cve-2020-10471 -CVE-2020-10472 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-templates-cve-2020-10472 -CVE-2020-10473 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-category-cve-2020-10473 -CVE-2020-10474 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-comment-cve-2020-10474 -CVE-2020-10475 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-ticket-cve-2020-10475 -CVE-2020-10476 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-glossary-term-2-cve-2020-10476 -CVE-2020-10477 - https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-news-article-cve-2020-10477 -CVE-2020-10478 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-changing-settings-cve-2020-10478 -CVE-2020-10479 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-news-article-cve-2020-10479 CVE-2020-1048 - http://packetstormsecurity.com/files/158222/Windows-Print-Spooler-Privilege-Escalation.html CVE-2020-1048 - http://packetstormsecurity.com/files/159217/Microsoft-Spooler-Local-Privilege-Elevation.html -CVE-2020-10480 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-category-cve-2020-10480 -CVE-2020-10481 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-new-glossary-term-cve-2020-10481 -CVE-2020-10482 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-new-article-template-cve-2020-10482 -CVE-2020-10483 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-posting-a-comment-cve-2020-10483 -CVE-2020-10484 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-new-custom-field-cve-2020-10484 -CVE-2020-10485 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-an-article-cve-2020-10485 -CVE-2020-10486 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-comment-cve-2020-10486 -CVE-2020-10487 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-glossary-term-cve-2020-10487 -CVE-2020-10488 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-news-article-cve-2020-10488 -CVE-2020-10489 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-ticket-cve-2020-10489 -CVE-2020-10490 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-department-cve-2020-10490 -CVE-2020-10491 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-department-cve-2020-10491 -CVE-2020-10492 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-an-article-template-cve-2020-10492 -CVE-2020-10493 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-glossary-term-cve-2020-10493 -CVE-2020-10494 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-news-article-cve-2020-10494 -CVE-2020-10495 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-an-article-template-cve-2020-10495 -CVE-2020-10496 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-an-article-cve-2020-10496 -CVE-2020-10497 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-category-cve-2020-10497 -CVE-2020-10498 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-category-cve-2020-10498 -CVE-2020-10499 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-closing-a-ticket-cve-2020-10499 -CVE-2020-10500 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-replying-to-a-ticket-cve-2020-10500 -CVE-2020-10501 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-department-cve-2020-10501 -CVE-2020-10502 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-approving-a-new-comment-cve-2020-10502 -CVE-2020-10503 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-disapproving-a-new-comment-cve-2020-10503 -CVE-2020-10504 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-comment-cve-2020-10504 CVE-2020-10515 - https://herolab.usd.de/security-advisories/ CVE-2020-10531 - https://unicode-org.atlassian.net/browse/ICU-20958 CVE-2020-10531 - https://www.oracle.com//security-alerts/cpujul2021.html @@ -63908,15 +62653,10 @@ CVE-2020-10915 - http://packetstormsecurity.com/files/157529/Veeam-ONE-Agent-.NE CVE-2020-10931 - https://github.com/memcached/memcached/issues/629 CVE-2020-10935 - https://www.coresecurity.com/advisories/zulip-account-takeover-stored-xss CVE-2020-10936 - https://sysdream.com/news/lab/ -CVE-2020-10936 - https://sysdream.com/news/lab/2020-05-25-cve-2020-10936-sympa-privileges-escalation-to-root/ CVE-2020-10939 - https://cert.vde.com/en-us/advisories/vde-2020-012 CVE-2020-10940 - https://cert.vde.com/en-us/advisories/vde-2020-013 CVE-2020-10942 - https://usn.ubuntu.com/4342-1/ -CVE-2020-10945 - https://sysdream.com/news/lab/2020-05-13-cve-2020-10945-centreon-session-id-exposure -CVE-2020-10946 - https://sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/ CVE-2020-10947 - https://community.sophos.com/b/security-blog/posts/advisory-cve-2020-10947---sophos-anti-virus-for-macos-privilege-escalation -CVE-2020-10951 - https://www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-portal-websites-clickjacking-vulnerability -CVE-2020-10951 - https://www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-websites-2-2-0 CVE-2020-10957 - http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html CVE-2020-10957 - https://hackerone.com/reports/827729 CVE-2020-10958 - http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html @@ -64219,7 +62959,6 @@ CVE-2020-11306 - https://www.qualcomm.com/company/product-security/bulletins/jun CVE-2020-11307 - https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin CVE-2020-11308 - https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin CVE-2020-11309 - https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin -CVE-2020-11415 - https://support.sonatype.com/hc/en-us/articles/360045360854 CVE-2020-11436 - https://know.bishopfox.com/advisories CVE-2020-11436 - https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0 CVE-2020-11437 - https://know.bishopfox.com/advisories @@ -64265,7 +63004,6 @@ CVE-2020-11490 - http://code610.blogspot.com/2020/03/pentesting-zen-load-balance CVE-2020-11490 - https://github.com/c610/tmp/blob/master/zenload4patreons.zip CVE-2020-11491 - http://code610.blogspot.com/2020/03/pentesting-zen-load-balancer-quick.html CVE-2020-11491 - https://github.com/c610/tmp/blob/master/zenload4patreons.zip -CVE-2020-11492 - https://docs.docker.com/docker-for-windows/release-notes/ CVE-2020-11492 - https://www.pentestpartners.com/security-blog/docker-desktop-for-windows-privesc-cve-2020-11492/ CVE-2020-11494 - http://packetstormsecurity.com/files/159565/Kernel-Live-Patch-Security-Notice-LSN-0072-1.html CVE-2020-11497 - http://packetstormsecurity.com/files/158931/WordPress-NAB-Transact-WooCommerce-2.1.0-Payment-Bypass.html @@ -64433,7 +63171,6 @@ CVE-2020-11803 - http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remo CVE-2020-11803 - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ CVE-2020-11804 - http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html CVE-2020-11804 - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ -CVE-2020-11811 - https://fatihhcelik.blogspot.com/2020/01/qdpm-web-based-project-management.html CVE-2020-11827 - https://www.gog.com/galaxy CVE-2020-11853 - http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html CVE-2020-11853 - http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manager-Remote-Code-Execution.html @@ -64605,7 +63342,6 @@ CVE-2020-12049 - https://gitlab.freedesktop.org/dbus/dbus/-/issues/294 CVE-2020-12049 - https://securitylab.github.com/advisories/GHSL-2020-057-DBus-DoS-file-descriptor-leak CVE-2020-12050 - https://bugzilla.redhat.com/show_bug.cgi?id=1825762 CVE-2020-12050 - https://sysdream.com/news/lab/ -CVE-2020-12050 - https://sysdream.com/news/lab/2020-05-25-cve-2020-12050-fedora-red-hat-centos-local-privilege-escalation-through-a-race-condition-in-the-sqliteodbc-installer-script/ CVE-2020-12052 - https://community.grafana.com/t/release-notes-v6-7-x/27119 CVE-2020-12054 - https://cxsecurity.com/issue/WLB-2020040144 CVE-2020-12054 - https://wpvulndb.com/vulnerabilities/10184 @@ -64680,7 +63416,6 @@ CVE-2020-12412 - https://bugzilla.mozilla.org/show_bug.cgi?id=1528587 CVE-2020-12418 - https://bugzilla.mozilla.org/show_bug.cgi?id=1641303 CVE-2020-12422 - https://bugzilla.mozilla.org/show_bug.cgi?id=1450353 CVE-2020-12425 - https://bugzilla.mozilla.org/show_bug.cgi?id=1634738 -CVE-2020-12427 - https://www.westerndigital.com/support/productsecurity/wdc-20004-wd-discovery-cross-site-request-forgery-csrf CVE-2020-12429 - https://www.exploit-db.com/exploits/48385 CVE-2020-12431 - https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-splashtop-streamer CVE-2020-12431 - https://support-splashtopbusiness.splashtop.com/hc/en-us/articles/360042648231-Splashtop-Streamer-version-3-3-8-0-for-Windows-released-includes-SOS-version-3-3-8-0 @@ -64755,7 +63490,6 @@ CVE-2020-12638 - https://lbsfilm.at/blog/wpa2-authenticationmode-downgrade-in-es CVE-2020-12640 - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12640-PHP%20Local%20File%20Inclusion-Roundcube CVE-2020-12641 - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12641-Command%20Injection-Roundcube CVE-2020-12643 - http://seclists.org/fulldisclosure/2020/Aug/14 -CVE-2020-12647 - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=55 CVE-2020-12648 - https://labs.bishopfox.com/advisories/tinymce-version-5.2.1 CVE-2020-12652 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.14 CVE-2020-12657 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5 @@ -64834,7 +63568,6 @@ CVE-2020-12826 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5 CVE-2020-12826 - https://lists.openwall.net/linux-kernel/2020/03/24/1803 CVE-2020-12826 - https://www.openwall.com/lists/kernel-hardening/2020/03/25/1 CVE-2020-12827 - http://packetstormsecurity.com/files/158111/MJML-4.6.2-Path-Traversal.html -CVE-2020-12830 - https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 CVE-2020-12835 - http://packetstormsecurity.com/files/157772/Protection-Licensing-Toolkit-ReadyAPI-3.2.5-Code-Execution-Deserialization.html CVE-2020-12835 - http://seclists.org/fulldisclosure/2020/May/38 CVE-2020-12835 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-039.txt @@ -64932,7 +63665,6 @@ CVE-2020-13109 - https://github.com/CTurt/shogihax CVE-2020-13110 - https://medium.com/%40kiddo_Ha3ker/dll-injection-attack-in-kerberos-npm-package-cb4b32031cd CVE-2020-13110 - https://medium.com/@kiddo_Ha3ker/dll-injection-attack-in-kerberos-npm-package-cb4b32031cd CVE-2020-13110 - https://www.op-c.net/2020/05/15/dll-injection-attack-in-kerberos-npm-package/ -CVE-2020-13111 - https://bitbucket.org/naviserver/naviserver/commits/a5c3079f1d8996d5f34c9384a440acf3519ca3bb CVE-2020-13117 - https://blog.0xlabs.com/2021/02/wavlink-rce-CVE-2020-13117.html CVE-2020-13117 - https://github.com/ice-wzl/Wavlink-WN530G3A-Cmd-Injection/blob/main/README.md CVE-2020-13118 - http://packetstormsecurity.com/files/157733/Mikrotik-Router-Monitoring-System-1.2.3-SQL-Injection.html @@ -64963,7 +63695,6 @@ CVE-2020-13160 - https://devel0pment.de/?p=1881 CVE-2020-13162 - http://packetstormsecurity.com/files/158117/Pulse-Secure-Client-For-Windows-Local-Privilege-Escalation.html CVE-2020-13162 - http://packetstormsecurity.com/files/159065/Pulse-Secure-Windows-Client-Privilege-Escalation.html CVE-2020-13162 - https://kb.pulsesecure.net/?atype=sa -CVE-2020-13162 - https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/ CVE-2020-13166 - http://packetstormsecurity.com/files/157808/Plesk-myLittleAdmin-ViewState-.NET-Deserialization.html CVE-2020-13168 - https://github.com/lodestone-security/CVEs/tree/master/CVE-2020-13168 CVE-2020-13224 - http://packetstormsecurity.com/files/158115/TP-LINK-Cloud-Cameras-NCXXX-Stack-Overflow.html @@ -65045,18 +63776,15 @@ CVE-2020-13397 - https://usn.ubuntu.com/4379-1/ CVE-2020-13398 - https://usn.ubuntu.com/4379-1/ CVE-2020-13404 - https://github.com/quadra-informatique/Atos-Magento/releases CVE-2020-13404 - https://sysdream.com/news/lab/ -CVE-2020-13404 - https://sysdream.com/news/lab/2020-06-09-cve-2020-13404-remote-system-command-injection-in-atos-magento-module/ CVE-2020-13412 - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#cross-site-request-forgery-csrf CVE-2020-13413 - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#observable-response-discrepancy-from-api CVE-2020-13414 - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#clean-up-old-code CVE-2020-13415 - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#xml-signature-wrapping-in-saml CVE-2020-13416 - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#csrf-on-password-reset CVE-2020-13417 - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-client-elevation-of-privilege -CVE-2020-13426 - https://0day.today/exploit/34496 CVE-2020-13426 - https://cxsecurity.com/issue/WLB-2020050235 CVE-2020-13426 - https://infayer.com/archivos/448 CVE-2020-13426 - https://packetstormsecurity.com/files/157867/WordPress-Multi-Scheduler-1.0.0-Cross-Site-Request-Forgery.html -CVE-2020-13426 - https://research-labs.net/search/exploits/wordpress-plugin-multi-scheduler-100-cross-site-request-forgery-delete-user CVE-2020-13426 - https://www.exploit-db.com/exploits/48532 CVE-2020-13427 - https://www.exploit-db.com/exploits/48511 CVE-2020-13431 - https://blog.blazeinfosec.com/security-advisory-i2p-for-windows-local-privilege-escalation/ @@ -65113,8 +63841,6 @@ CVE-2020-13499 - https://talosintelligence.com/vulnerability_reports/TALOS-2020- CVE-2020-1350 - http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html CVE-2020-13500 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106 CVE-2020-13501 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106 -CVE-2020-13504 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108 -CVE-2020-13505 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108 CVE-2020-13509 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1110 CVE-2020-13510 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1110 CVE-2020-13511 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1110 @@ -65199,14 +63925,10 @@ CVE-2020-13590 - https://talosintelligence.com/vulnerability_reports/TALOS-2020- CVE-2020-13591 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1200 CVE-2020-13592 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1201 CVE-2020-13596 - https://www.oracle.com/security-alerts/cpujan2021.html -CVE-2020-13619 - https://reallinkers.github.io/CVE-2020-13619/ -CVE-2020-13620 - https://lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4 CVE-2020-13620 - https://members.backbox.org/fastgate-gpon-cross-site-request-forgery/ CVE-2020-13623 - https://github.com/jerryscript-project/jerryscript/issues/3785 CVE-2020-13626 - https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5 CVE-2020-13626 - https://medium.com/@bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5 -CVE-2020-13627 - https://sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/ -CVE-2020-13628 - https://sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/ CVE-2020-13630 - http://seclists.org/fulldisclosure/2020/Nov/19 CVE-2020-13630 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2020-13630 - https://www.oracle.com/security-alerts/cpuoct2020.html @@ -65237,7 +63959,6 @@ CVE-2020-1378 - http://packetstormsecurity.com/files/158939/Microsoft-Windows-Cm CVE-2020-13788 - https://www.soluble.ai/blog/harbor-ssrf-cve-2020-13788 CVE-2020-13788 - https://www.youtube.com/watch?v=v8Isqy4yR3Q CVE-2020-13795 - http://packetstormsecurity.com/files/157940/Navigate-CMS-2.8.7-Directory-Traversal.html -CVE-2020-13799 - https://www.westerndigital.com/support/productsecurity/wdc-20008-replay-attack-vulnerabilities-rpmb-protocol-applications CVE-2020-1380 - http://packetstormsecurity.com/files/163056/Internet-Explorer-jscript9.dll-Memory-Corruption.html CVE-2020-13802 - http://packetstormsecurity.com/files/159027/Rebar3-3.13.2-Command-Injection.html CVE-2020-13802 - https://github.com/vulnbe/poc-rebar3.git @@ -65338,7 +64059,6 @@ CVE-2020-13965 - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-20 CVE-2020-13974 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b86dab054059b970111b5516ae548efaae5b3aae CVE-2020-13974 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2020-13976 - https://svn.dd-wrt.com/ticket/7039 -CVE-2020-13977 - https://anhtai.me/nagios-core-4-4-5-url-injection/ CVE-2020-13992 - https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise CVE-2020-13993 - https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/ CVE-2020-13994 - https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/ @@ -65430,10 +64150,8 @@ CVE-2020-14209 - http://packetstormsecurity.com/files/161955/Dolibarr-ERP-CRM-11 CVE-2020-14209 - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-012 CVE-2020-14293 - http://seclists.org/fulldisclosure/2020/Sep/51 CVE-2020-14293 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-025.txt -CVE-2020-14293 - https://www.syss.de/pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata CVE-2020-14294 - http://seclists.org/fulldisclosure/2020/Sep/50 CVE-2020-14294 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-024.txt -CVE-2020-14294 - https://www.syss.de/pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata CVE-2020-14295 - http://packetstormsecurity.com/files/162384/Cacti-1.2.12-SQL-Injection-Remote-Code-Execution.html CVE-2020-14295 - http://packetstormsecurity.com/files/162918/Cacti-1.2.12-SQL-Injection-Remote-Command-Execution.html CVE-2020-14303 - https://usn.ubuntu.com/4454-2/ @@ -65476,9 +64194,6 @@ CVE-2020-14428 - https://kb.netgear.com/000061936/Security-Advisory-for-Admin-Cr CVE-2020-14429 - https://kb.netgear.com/000061938/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0050 CVE-2020-14431 - https://kb.netgear.com/000061944/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0068 CVE-2020-14439 - https://kb.netgear.com/000061942/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0064 -CVE-2020-14444 - https://cybersecurityworks.com/zerodays/cve-2020-14444-wso2.html -CVE-2020-14445 - https://cybersecurityworks.com/zerodays/cve-2020-14445-wso2.html -CVE-2020-14446 - https://cybersecurityworks.com/zerodays/cve-2020-14446-wso2.html CVE-2020-14447 - https://mattermost.com/security-updates/ CVE-2020-14448 - https://mattermost.com/security-updates/ CVE-2020-14449 - https://mattermost.com/security-updates/ @@ -65704,7 +64419,6 @@ CVE-2020-1472 - https://www.oracle.com/security-alerts/cpuApr2021.html CVE-2020-14720 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2020-14721 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2020-14722 - https://www.oracle.com/security-alerts/cpujul2020.html -CVE-2020-14723 - https://cybersecurityworks.com/zerodays/cve-2020-14723-oracle.html CVE-2020-14723 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2020-14724 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2020-14725 - https://www.oracle.com/security-alerts/cpujul2020.html @@ -65883,7 +64597,6 @@ CVE-2020-14901 - https://www.oracle.com/security-alerts/cpuoct2020.html CVE-2020-14928 - https://bugzilla.suse.com/show_bug.cgi?id=1173910 CVE-2020-1493 - http://packetstormsecurity.com/files/169960/Microsoft-Outlook-2019-16.0.12624.20424-Out-Of-Bounds-Read.html CVE-2020-14930 - https://www.exploit-db.com/exploits/48196 -CVE-2020-14930 - https://www.pentest.com.tr/exploits/CTROMS-Terminal-OS-Port-Portal-Password-Reset-Authentication-Bypass.html CVE-2020-14931 - https://github.com/jaygreig86/dmitry/issues/4 CVE-2020-14938 - https://bugs.freedroid.org/b/issue951 CVE-2020-14939 - https://bugs.freedroid.org/b/issue953 @@ -65909,7 +64622,6 @@ CVE-2020-14973 - https://packetstormsecurity.com/files/157608/WebTareas-2.0p8-Cr CVE-2020-14979 - https://posts.specterops.io/cve-2020-14979-local-privilege-escalation-in-evga-precisionx1-cf63c6b95896 CVE-2020-14980 - http://packetstormsecurity.com/files/158322/Sophos-Secure-Email-Android-Application-3.9.4-Man-In-The-Middle.html CVE-2020-14981 - http://packetstormsecurity.com/files/158323/VIPRE-Password-Vault-1.100.1090-Man-In-The-Middle.html -CVE-2020-14982 - https://www.mindpointgroup.com/blog/webta-sqli-vulnerability/ CVE-2020-14983 - https://github.com/chocolate-doom/chocolate-doom/issues/1293 CVE-2020-14990 - https://daniels-it-blog.blogspot.com/2020/06/arbitrary-file-deletion-in-iobit.html CVE-2020-14990 - https://github.com/Daniel-itsec/AdvancedSystemCare @@ -65966,7 +64678,6 @@ CVE-2020-15302 - https://blog.openzeppelin.com/argent-vulnerability-report/ CVE-2020-15304 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md CVE-2020-15305 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md CVE-2020-15306 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md -CVE-2020-15307 - https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-stored-xss.html?nc=1 CVE-2020-15308 - https://code610.blogspot.com/2020/06/postauth-sqli-in-sitracker-v367-p2.html CVE-2020-15350 - https://github.com/RIOT-OS/RIOT/pull/14400 CVE-2020-15351 - https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-004.md @@ -65980,7 +64691,6 @@ CVE-2020-15358 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2020-15358 - https://www.oracle.com/security-alerts/cpujan2021.html CVE-2020-15358 - https://www.oracle.com/security-alerts/cpuoct2020.html CVE-2020-15358 - https://www.sqlite.org/src/tktview?name=8f157e8010 -CVE-2020-15360 - https://docs.docker.com/docker-for-windows/release-notes/ CVE-2020-15360 - https://whitehatck01.blogspot.com/2020/06/dockers-latest-version-of-privilege.html CVE-2020-15363 - http://packetstormsecurity.com/files/158510/WordPress-NexosReal-Estate-Theme-1.7-Cross-Site-Scripting-SQL-Injection.html CVE-2020-15364 - http://packetstormsecurity.com/files/158510/WordPress-NexosReal-Estate-Theme-1.7-Cross-Site-Scripting-SQL-Injection.html @@ -66007,14 +64717,12 @@ CVE-2020-15487 - https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issue CVE-2020-15488 - https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/ CVE-2020-15492 - http://packetstormsecurity.com/files/158556/INNEO-Startup-TOOLS-2018-M040-13.0.70.3804-Remote-Code-Execution.html CVE-2020-15492 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-028.txt -CVE-2020-15492 - https://www.syss.de/pentest-blog/2020/syss-2020-028-sicherheitsschwachstelle-in-inneo-startup-tools-2017-und-2018/ CVE-2020-15498 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=27440 CVE-2020-15499 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=27440 CVE-2020-15500 - http://packetstormsecurity.com/files/162193/Tileserver-gl-3.0.0-Cross-Site-Scripting.html CVE-2020-15504 - https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-via-sqli-cve-2020-15504 CVE-2020-15505 - http://packetstormsecurity.com/files/161097/MobileIron-MDM-Hessian-Based-Java-Deserialization-Remote-Code-Execution.html CVE-2020-15505 - https://perchsecurity.com/perch-news/cve-spotlight-mobileiron-rce-cve-2020-15505/ -CVE-2020-15518 - https://zwclose.github.io/veeamon CVE-2020-15521 - https://www.manageengine.com CVE-2020-15526 - https://www.red-gate.com/privacy-and-security/vulnerabilities/2020-07-08-sql-monitor CVE-2020-15528 - http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html @@ -66072,14 +64780,10 @@ CVE-2020-15682 - https://bugzilla.mozilla.org/show_bug.cgi?id=1636654 CVE-2020-15685 - https://bugzilla.mozilla.org/show_bug.cgi?id=1622640 CVE-2020-15688 - http://packetstormsecurity.com/files/159505/EmbedThis-GoAhead-Web-Server-5.1.1-Digest-Authentication-Capture-Replay-Nonce-Reuse.html CVE-2020-15690 - http://www.openwall.com/lists/oss-security/2021/02/04/3 -CVE-2020-15690 - https://consensys.net/diligence/vulnerabilities/nim-asyncftpd-crlf-injection/ CVE-2020-15690 - https://github.com/tintinweb/pub/tree/master/pocs/cve-2020-15690 CVE-2020-15692 - http://www.openwall.com/lists/oss-security/2021/02/04/1 -CVE-2020-15692 - https://consensys.net/diligence/vulnerabilities/nim-browsers-argument-injection/ CVE-2020-15693 - http://www.openwall.com/lists/oss-security/2021/02/04/2 -CVE-2020-15693 - https://consensys.net/diligence/vulnerabilities/nim-httpclient-header-crlf-injection/ CVE-2020-15694 - http://www.openwall.com/lists/oss-security/2021/02/04/2 -CVE-2020-15694 - https://consensys.net/diligence/vulnerabilities/nim-httpclient-header-crlf-injection/ CVE-2020-15712 - https://www.rconfig.com/downloads/v3-release-notes CVE-2020-15713 - https://www.rconfig.com/downloads/v3-release-notes CVE-2020-15714 - https://www.rconfig.com/downloads/v3-release-notes @@ -66103,7 +64807,6 @@ CVE-2020-15807 - https://github.com/LibreDWG/libredwg/issues/186 CVE-2020-15807 - https://github.com/LibreDWG/libredwg/issues/189 CVE-2020-15807 - https://github.com/LibreDWG/libredwg/issues/190 CVE-2020-15809 - https://support.spinetix.com/wiki/DSOS_release_notes -CVE-2020-15816 - https://www.westerndigital.com/support/productsecurity/wdc-20005-wd-discovery-remote-command-execution-vulnerability CVE-2020-15824 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2020-15824 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2020-15839 - https://issues.liferay.com/browse/LPE-17029 @@ -66123,14 +64826,12 @@ CVE-2020-15863 - https://git.qemu.org/?p=qemu.git;a=commitdiff;h=5519724a13664b4 CVE-2020-15864 - https://www.quali.com/products/cloudshell-pro/ CVE-2020-15866 - https://github.com/mruby/mruby/issues/5042 CVE-2020-15867 - http://packetstormsecurity.com/files/162123/Gogs-Git-Hooks-Remote-Code-Execution.html -CVE-2020-15868 - https://support.sonatype.com/hc/en-us/articles/360052192533 CVE-2020-15869 - https://support.sonatype.com CVE-2020-15869 - https://support.sonatype.com/hc/en-us/articles/360051424554 CVE-2020-15870 - https://support.sonatype.com CVE-2020-15870 - https://support.sonatype.com/hc/en-us/articles/360051424754 CVE-2020-15871 - https://hackerone.com/reports/917843 CVE-2020-15871 - https://support.sonatype.com -CVE-2020-15871 - https://support.sonatype.com/hc/en-us/articles/360052192693 CVE-2020-15873 - https://research.loginsoft.com/bugs/blind-sql-injection-in-librenms/ CVE-2020-15877 - https://shielder.it/blog CVE-2020-15881 - https://github.com/munkireport/munkireport-php/releases/tag/v5.6.3 @@ -66220,7 +64921,6 @@ CVE-2020-16135 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2020-16137 - https://packetstormsecurity.com/files/158818/Cisco-7937G-Privilege-Escalation.html CVE-2020-16138 - https://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html CVE-2020-16139 - http://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html -CVE-2020-16140 - https://cybersecurityworks.com/zerodays/cve-2020-16140-thembay.html CVE-2020-16142 - https://medium.com/@reliable_lait_mouse_975/mercedes-comand-infotainment-improper-format-strings-handling-4c67063d744e CVE-2020-16143 - https://github.com/haiwen/seafile-client/issues/1309 CVE-2020-16147 - https://podalirius.net/cves/2020-16147/ @@ -66269,9 +64969,7 @@ CVE-2020-16266 - https://mantisbt.org/bugs/view.php?id=27056 CVE-2020-16267 - https://www.manageengine.com CVE-2020-16269 - https://github.com/radareorg/radare2/issues/17383 CVE-2020-16270 - https://github.com/Security-AVS/CVE-2020-16270 -CVE-2020-16271 - https://danzinger.wien/exploiting-keepassrpc/ CVE-2020-16271 - https://forum.kee.pm/t/a-critical-security-update-for-keepassrpc-is-available/3040 -CVE-2020-16272 - https://danzinger.wien/exploiting-keepassrpc/ CVE-2020-16272 - https://forum.kee.pm/t/a-critical-security-update-for-keepassrpc-is-available/3040 CVE-2020-16287 - https://bugs.ghostscript.com/show_bug.cgi?id=701785 CVE-2020-16288 - https://bugs.ghostscript.com/show_bug.cgi?id=701791 @@ -66309,7 +65007,6 @@ CVE-2020-16593 - https://sourceware.org/bugzilla/show_bug.cgi?id=25827 CVE-2020-16599 - https://sourceware.org/bugzilla/show_bug.cgi?id=25842 CVE-2020-16600 - https://bugs.ghostscript.com/show_bug.cgi?id=702253 CVE-2020-16602 - http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.html -CVE-2020-16602 - https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.html CVE-2020-16602 - https://www.youtube.com/watch?v=fkESBVhIdIA CVE-2020-16608 - https://sghosh2402.medium.com/cve-2020-16608-8cdad9f4d9b4 CVE-2020-16630 - https://www.usenix.org/system/files/sec20-zhang-yue.pdf @@ -66373,8 +65070,6 @@ CVE-2020-17456 - http://packetstormsecurity.com/files/158933/Seowon-SlC-130-Rout CVE-2020-17456 - http://packetstormsecurity.com/files/166273/Seowon-SLR-120-Router-Remote-Code-Execution.html CVE-2020-17456 - https://github.com/TAPESH-TEAM/CVE-2020-17456-Seowon-SLR-120S42G-RCE-Exploit-Unauthenticated CVE-2020-17456 - https://www.exploit-db.com/exploits/50821 -CVE-2020-17457 - https://www.gruppotim.it/redteam -CVE-2020-17458 - https://www.gruppotim.it/redteam CVE-2020-17462 - https://www.exploit-db.com/exploits/48742 CVE-2020-17463 - http://packetstormsecurity.com/files/158840/Fuel-CMS-1.4.7-SQL-Injection.html CVE-2020-17466 - https://cxsecurity.com/issue/WLB-2020080046 @@ -67199,7 +65894,6 @@ CVE-2020-23257 - https://github.com/espruino/Espruino/issues/1820 CVE-2020-23258 - https://github.com/pcmacdon/jsish/issues/12 CVE-2020-23259 - https://github.com/pcmacdon/jsish/issues/13 CVE-2020-23260 - https://github.com/pcmacdon/jsish/issues/14 -CVE-2020-23260 - https://jsish.org/fossil/jsi2/tktview?name=3e211e44b1 CVE-2020-23266 - https://github.com/gpac/gpac/issues/1481 CVE-2020-23267 - https://github.com/gpac/gpac/issues/1479 CVE-2020-23269 - https://github.com/gpac/gpac/issues/1482 @@ -67340,7 +66034,6 @@ CVE-2020-24034 - http://seclists.org/fulldisclosure/2020/Sep/3 CVE-2020-24034 - https://seclists.org/fulldisclosure/2020/Sep/3 CVE-2020-24036 - http://seclists.org/fulldisclosure/2021/Mar/31 CVE-2020-24036 - https://tech.feedyourhead.at/content/ForkCMS-PHP-Object-Injection-CVE-2020-24036 -CVE-2020-24036 - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-04 CVE-2020-24038 - https://github.com/Dmitriy-area51/Exploit/tree/master/CVE-2020-24038 CVE-2020-24045 - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ CVE-2020-24046 - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ @@ -67433,28 +66126,19 @@ CVE-2020-24574 - https://github.com/jtesta/gog_galaxy_client_service_poc/issues/ CVE-2020-24574 - https://www.gog.com/galaxy CVE-2020-24574 - https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/ CVE-2020-24576 - https://www.netskope.com -CVE-2020-24577 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ CVE-2020-24577 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ CVE-2020-24577 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28241 -CVE-2020-24578 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ CVE-2020-24578 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ -CVE-2020-24579 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ CVE-2020-24579 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ -CVE-2020-24580 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ CVE-2020-24580 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ -CVE-2020-24581 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ CVE-2020-24581 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ CVE-2020-24583 - https://www.oracle.com/security-alerts/cpujan2021.html CVE-2020-24584 - https://www.oracle.com/security-alerts/cpujan2021.html CVE-2020-24586 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu CVE-2020-24587 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu CVE-2020-24588 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu -CVE-2020-24600 - https://cybersecurityworks.com/zerodays/cve-2020-24600-sql-injection-in-capexweb.html -CVE-2020-24601 - https://cybersecurityworks.com/zerodays/cve-2020-24601-ignite-realtime-openfire.html CVE-2020-24601 - https://issues.igniterealtime.org/browse/OF-1963 -CVE-2020-24602 - https://cybersecurityworks.com/zerodays/cve-2020-24602-ignite-realtime-openfire.html CVE-2020-24602 - https://issues.igniterealtime.org/browse/OF-1963 -CVE-2020-24604 - https://cybersecurityworks.com/zerodays/cve-2020-24604-ignite-realtime-openfire.html CVE-2020-24604 - https://issues.igniterealtime.org/browse/OF-1963 CVE-2020-24609 - https://www.exploit-db.com/exploits/48753 CVE-2020-24609 - https://www.exploit-db.com/exploits/48785 @@ -67532,7 +66216,6 @@ CVE-2020-24904 - https://github.com/davesteele/gnome-gmail/issues/84 CVE-2020-24908 - https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt CVE-2020-24912 - http://seclists.org/fulldisclosure/2021/Mar/30 CVE-2020-24912 - https://tech.feedyourhead.at/content/QCubed-Cross-Site-Scripting-CVE-2020-24912 -CVE-2020-24912 - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-03 CVE-2020-24913 - http://seclists.org/fulldisclosure/2021/Mar/30 CVE-2020-24916 - https://github.com/vulnbe/poc-yaws-cgi-shell-injection CVE-2020-24916 - https://packetstormsecurity.com/files/159106/Yaws-2.0.7-XML-Injection-Command-Injection.html @@ -67618,7 +66301,6 @@ CVE-2020-25212 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.3 CVE-2020-25212 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b4487b93545214a9db8cbf32e86411677b0cca21 CVE-2020-25213 - http://packetstormsecurity.com/files/160003/WordPress-File-Manager-6.8-Remote-Code-Execution.html CVE-2020-25213 - http://packetstormsecurity.com/files/171650/WordPress-File-Manager-6.9-Shell-Upload.html -CVE-2020-25213 - https://hotforsecurity.bitdefender.com/blog/wordpress-websites-attacked-via-file-manager-plugin-vulnerability-24048.html CVE-2020-25213 - https://seravo.com/blog/0-day-vulnerability-in-wp-file-manager/ CVE-2020-25213 - https://wordfence.com/blog/2020/09/700000-wordpress-users-affected-by-zero-day-vulnerability-in-file-manager-plugin/ CVE-2020-25217 - https://cwe.mitre.org/data/definitions/77.html @@ -67653,8 +66335,6 @@ CVE-2020-25285 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.8 CVE-2020-25285 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=17743798d81238ab13050e8e2833699b54e15467 CVE-2020-25287 - https://github.com/jenaye/pligg/blob/master/README.md CVE-2020-25288 - https://mantisbt.org/bugs/view.php?id=27275 -CVE-2020-25289 - http://zeifan.my/security/arbitrary%20file/eop/2020/07/21/avast-secureline-vpn-arb-file-eop.html -CVE-2020-25291 - http://zeifan.my/security/rce/heap/2020/09/03/wps-rce-heap.html CVE-2020-2530 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-2531 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-2533 - https://www.oracle.com/security-alerts/cpujan2020.html @@ -67733,7 +66413,6 @@ CVE-2020-25516 - https://github.com/piuppi/Proof-of-Concepts/blob/main/WSO2/CVE- CVE-2020-2552 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-2553 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-25538 - http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html -CVE-2020-25538 - https://fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution_30.html CVE-2020-25540 - http://packetstormsecurity.com/files/159177/ThinkAdmin-6-Arbitrary-File-Read.html CVE-2020-2555 - http://packetstormsecurity.com/files/157054/Oracle-Coherence-Fusion-Middleware-Remote-Code-Execution.html CVE-2020-2555 - http://packetstormsecurity.com/files/157207/Oracle-WebLogic-Server-12.2.1.4.0-Remote-Code-Execution.html @@ -67744,7 +66423,6 @@ CVE-2020-2555 - https://www.oracle.com/security-alerts/cpujul2020.html CVE-2020-2555 - https://www.oracle.com/security-alerts/cpujul2021.html CVE-2020-2555 - https://www.oracle.com/security-alerts/cpuoct2020.html CVE-2020-25557 - http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html -CVE-2020-25557 - https://fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution.html CVE-2020-2556 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-25560 - https://vuln.shellcoder.party/2020/09/19/cve-2020-25560-sapphireims-unauthenticated-remote-command-execution-on-server/ CVE-2020-25561 - https://vuln.shellcoder.party/2020/09/19/cve-2020-25561-sapphireims-hardcoded-credentials/ @@ -67844,8 +66522,6 @@ CVE-2020-25762 - https://packetstormsecurity.com/files/author/15149 CVE-2020-25763 - http://packetstormsecurity.com/files/159260/Seat-Reservation-System-1.0-Shell-Upload.html CVE-2020-25763 - http://seclists.org/fulldisclosure/2020/Sep/41 CVE-2020-25763 - https://packetstormsecurity.com/files/author/15149 -CVE-2020-25765 - https://www.westerndigital.com/support/productsecurity -CVE-2020-25765 - https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 CVE-2020-25767 - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ CVE-2020-25767 - https://www.kb.cert.org/vuls/id/608209 CVE-2020-2577 - https://www.oracle.com/security-alerts/cpujan2020.html @@ -67925,7 +66601,6 @@ CVE-2020-25988 - https://medium.com/%40niteshsurana/424f0db73129 CVE-2020-25988 - https://medium.com/@niteshsurana/424f0db73129 CVE-2020-25988 - https://www.exploit-db.com/exploits/49075 CVE-2020-25988 - https://youtu.be/GOMLavacqSI -CVE-2020-25989 - https://vkas-afk.github.io/vuln-disclosures/ CVE-2020-2599 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-25990 - https://www.exploit-db.com/exploits/48849 CVE-2020-2600 - https://www.oracle.com/security-alerts/cpujan2020.html @@ -67977,7 +66652,6 @@ CVE-2020-26164 - https://github.com/KDE/kdeconnect-kde/commit/8112729eb0f13e6947 CVE-2020-26165 - http://packetstormsecurity.com/files/160733/qdPM-9.1-PHP-Object-Injection.html CVE-2020-26165 - http://seclists.org/fulldisclosure/2021/Jan/10 CVE-2020-26167 - https://github.com/daylightstudio/FUEL-CMS/ -CVE-2020-26168 - https://hazelcast.zendesk.com/hc/en-us/articles/360050161951--IMDG-Enterprise-4-0-4-0-1-4-0-2-LDAP-Authentication-Bypass CVE-2020-2617 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-26171 - https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/ CVE-2020-26172 - https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/ @@ -68083,7 +66757,6 @@ CVE-2020-2654 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-26542 - https://www.percona.com/blog/2020/10/13/percona-distribution-for-mysql-pxc-variant-8-0-20-fixes-for-security-vulnerability-release-roundup-october-13-2020/ CVE-2020-2655 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-26554 - http://packetstormsecurity.com/files/160077/MailDepot-2033-2.3.3022-Cross-Site-Scripting.html -CVE-2020-26554 - https://www.syss.de/pentest-blog/syss-2020-037-persistent-cross-site-scripting-schwachstelle-in-reddoxx-maildepot CVE-2020-26555 - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ CVE-2020-26556 - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ CVE-2020-26557 - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ @@ -68276,13 +66949,7 @@ CVE-2020-27151 - https://bugs.launchpad.net/katacontainers.io/+bug/1878234 CVE-2020-27151 - https://github.com/kata-containers/kata-containers/releases/tag/2.0.0 CVE-2020-27152 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.2 CVE-2020-27152 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=77377064c3a94911339f13ce113b3abf265e06da -CVE-2020-27158 - https://www.westerndigital.com/support/productsecurity -CVE-2020-27158 - https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 -CVE-2020-27159 - https://www.westerndigital.com/support/productsecurity -CVE-2020-27159 - https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 CVE-2020-2716 - https://www.oracle.com/security-alerts/cpujan2020.html -CVE-2020-27160 - https://www.westerndigital.com/support/productsecurity -CVE-2020-27160 - https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 CVE-2020-2717 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-27170 - http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html CVE-2020-27170 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.8 @@ -68314,7 +66981,6 @@ CVE-2020-27194 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.15 CVE-2020-27196 - https://www.playframework.com/security/vulnerability CVE-2020-27197 - http://packetstormsecurity.com/files/159662/Libtaxii-1.1.117-OpenTaxi-0.2.0-Server-Side-Request-Forgery.html CVE-2020-27197 - https://github.com/eclecticiq/OpenTAXII/issues/176 -CVE-2020-27199 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/magic-home-pro-mobile-application-authentication-bypass-cve-2020-27199/ CVE-2020-2720 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-27207 - https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842 CVE-2020-27208 - https://eprint.iacr.org/2021/640 @@ -68323,7 +66989,6 @@ CVE-2020-27209 - https://eprint.iacr.org/2021/640 CVE-2020-27209 - https://www.aisec.fraunhofer.de/en/FirmwareProtection.html CVE-2020-2721 - https://www.oracle.com/security-alerts/cpujan2020.html CVE-2020-27211 - https://eprint.iacr.org/2021/640 -CVE-2020-27211 - https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/ CVE-2020-27211 - https://www.aisec.fraunhofer.de/en/FirmwareProtection.html CVE-2020-27212 - https://eprint.iacr.org/2021/640 CVE-2020-27212 - https://www.aisec.fraunhofer.de/en/FirmwareProtection.html @@ -68521,7 +67186,6 @@ CVE-2020-2773 - https://kc.mcafee.com/corporate/index?page=content&id=SB10332 CVE-2020-2773 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-27735 - https://wshenk.blogspot.com/2021/01/xss-in-wing-ftps-web-interface-cve-2020.html CVE-2020-2774 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-27744 - https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 CVE-2020-2775 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2776 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2777 - https://www.oracle.com/security-alerts/cpuapr2020.html @@ -68802,8 +67466,6 @@ CVE-2020-28384 - https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf CVE-2020-28386 - https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf CVE-2020-2839 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2840 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-28408 - https://mattschmidt.net/2020/11/10/dundas-persistent-xss/ -CVE-2020-28409 - https://mattschmidt.net/2020/11/10/dundas-persistent-xss/ CVE-2020-2841 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-28413 - http://packetstormsecurity.com/files/160750/Mantis-Bug-Tracker-2.24.3-SQL-Injection.html CVE-2020-28413 - https://ethicalhcop.medium.com/cve-2020-28413-blind-sql-injection-en-mantis-bug-tracker-2-24-3-api-soap-54238f8e046d @@ -68978,7 +67640,6 @@ CVE-2020-28634 - https://talosintelligence.com/vulnerability_reports/TALOS-2020- CVE-2020-28635 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 CVE-2020-28636 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 CVE-2020-2864 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-28641 - https://support.malwarebytes.com/hc/en-us/articles/1500000403501-Arbitrary-file-deletion-vulnerability-fixed-in-Malwarebytes-Endpoint-Protection CVE-2020-28641 - https://support.malwarebytes.com/hc/en-us/articles/360058885974-Arbitrary-file-deletion-vulnerability-fixed-in-Malwarebytes-for-Windows CVE-2020-28647 - https://labs.secforce.com/posts/progress-moveit-transfer-2020.1-stored-xss-cve-2020-28647/ CVE-2020-28648 - http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html @@ -69079,7 +67740,6 @@ CVE-2020-28915 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux. CVE-2020-28915 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6735b4632def0640dbdf4eb9f99816aca18c4f16 CVE-2020-2892 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-28923 - https://www.playframework.com/security/vulnerability -CVE-2020-28926 - https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/ CVE-2020-28928 - https://www.oracle.com//security-alerts/cpujul2021.html CVE-2020-28928 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2020-2893 - https://www.oracle.com/security-alerts/cpuapr2020.html @@ -69087,7 +67747,6 @@ CVE-2020-28937 - https://labs.bishopfox.com/advisories/openclinic-version-0.8.2 CVE-2020-28938 - https://labs.bishopfox.com/advisories/openclinic-version-0.8.2 CVE-2020-28939 - https://labs.bishopfox.com/advisories/openclinic-version-0.8.2 CVE-2020-2894 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-28940 - https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 CVE-2020-28941 - http://www.openwall.com/lists/oss-security/2020/11/19/5 CVE-2020-28941 - https://www.openwall.com/lists/oss-security/2020/11/19/3 CVE-2020-28942 - https://support.primekey.com/news/posts/40 @@ -69111,8 +67770,6 @@ CVE-2020-28964 - https://www.vulnerability-lab.com/get_content.php?id=2236 CVE-2020-28967 - https://www.vulnerability-lab.com/get_content.php?id=2248 CVE-2020-28968 - https://www.vulnerability-lab.com/get_content.php?id=2244 CVE-2020-2897 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-28970 - https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 -CVE-2020-28971 - https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 CVE-2020-28974 - http://www.openwall.com/lists/oss-security/2020/11/25/1 CVE-2020-28974 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7 CVE-2020-28974 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804 @@ -69228,10 +67885,6 @@ CVE-2020-29304 - http://seclists.org/fulldisclosure/2020/Dec/15 CVE-2020-2931 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-29315 - https://github.com/zoujingli/ThinkAdmin/issues/255 CVE-2020-2932 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-29321 - https://cybersecurityworks.com/zerodays/cve-2020-29321-telnet-hardcoded-credentials.html -CVE-2020-29322 - https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html -CVE-2020-29323 - https://cybersecurityworks.com/zerodays/cve-2020-29323-telnet-hardcoded-credentials.html -CVE-2020-29324 - https://cybersecurityworks.com/zerodays/cve-2020-29324-d-link-router-dir-895l-mfc-telnet-hardcoded-credentials.html CVE-2020-2933 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2934 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2934 - https://www.oracle.com/security-alerts/cpujan2022.html @@ -69246,7 +67899,6 @@ CVE-2020-29369 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux. CVE-2020-2937 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-29370 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd4d9c7d0c71866ec0c2825189ebd2ce35bd95b8 CVE-2020-29371 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4 -CVE-2020-29371 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592 CVE-2020-29371 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd CVE-2020-29372 - http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html CVE-2020-29372 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8 @@ -69267,14 +67919,12 @@ CVE-2020-2940 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2941 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2942 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2943 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-29436 - https://support.sonatype.com/hc/en-us/articles/1500000415082-CVE-2020-29436-Nexus-Repository-Manager-3-XML-External-Entities-injection-2020-12-15 CVE-2020-29437 - https://github.com/orangehrm/orangehrm/issues/695 CVE-2020-29437 - https://www.horizon3.ai/disclosures/orangehrm-sqli.html CVE-2020-2944 - http://packetstormsecurity.com/files/157280/Common-Desktop-Environment-1.6-Local-Privilege-Escalation.html CVE-2020-2944 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2945 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-29456 - https://github.com/ciur/papermerge/issues/228 -CVE-2020-29457 - https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-29457.pdf CVE-2020-29458 - https://www.exploit-db.com/exploits/48907 CVE-2020-2946 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-29469 - https://www.exploit-db.com/exploits/49164 @@ -69323,7 +67973,6 @@ CVE-2020-29552 - http://packetstormsecurity.com/files/160722/URVE-Software-Build CVE-2020-29552 - http://seclists.org/fulldisclosure/2020/Dec/47 CVE-2020-29552 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-040.txt CVE-2020-2956 - https://www.oracle.com/security-alerts/cpuapr2020.html -CVE-2020-29563 - https://www.westerndigital.com/support/productsecurity/wdc-20010-my-cloud-os5-firmware-5-07-118 CVE-2020-29574 - https://www.bleepingcomputer.com/news/security/sophos-fixes-sql-injection-vulnerability-in-their-cyberoam-os/ CVE-2020-2958 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-29582 - https://www.oracle.com//security-alerts/cpujul2021.html @@ -69343,7 +67992,6 @@ CVE-2020-2961 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2963 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-2964 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-29651 - https://www.oracle.com/security-alerts/cpujul2022.html -CVE-2020-29654 - https://www.westerndigital.com/support/productsecurity/wdc-20011-western-digital-dashboard-privilege-escalation CVE-2020-29655 - https://vuldb.com/?id.165678 CVE-2020-29656 - https://vuldb.com/?id.165677 CVE-2020-29659 - https://www.exploit-db.com/exploits/49217 @@ -69428,8 +68076,6 @@ CVE-2020-3452 - http://packetstormsecurity.com/files/159523/Cisco-ASA-FTD-9.6.4. CVE-2020-3452 - http://packetstormsecurity.com/files/160497/Cisco-ASA-9.14.1.10-FTD-6.6.0.1-Path-Traversal.html CVE-2020-35012 - https://wpscan.com/vulnerability/323140b1-66c4-4e7d-85a4-1c922e40866f CVE-2020-35037 - https://wpscan.com/vulnerability/937b9bdb-7e8e-4ea8-82ec-aa5f6bd70619 -CVE-2020-35121 - https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin -CVE-2020-35122 - https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin CVE-2020-35124 - https://www.horizon3.ai/disclosures/mautic-unauth-xss-to-rce CVE-2020-35125 - https://www.horizon3.ai/disclosures/mautic-unauth-xss-to-rce CVE-2020-35126 - https://www.exploit-db.com/exploits/48852 @@ -69478,7 +68124,6 @@ CVE-2020-35261 - https://www.exploit-db.com/exploits/49135 CVE-2020-35262 - https://github.com/the-girl-who-lived/CVE-2020-35262 CVE-2020-35262 - https://youtu.be/E5wEzf-gkOE CVE-2020-35263 - https://www.exploit-db.com/exploits/49058 -CVE-2020-35269 - https://gist.github.com/MoSalah20/d1d40b43eafba0bd22ee4cddecad3cbc CVE-2020-35270 - https://www.exploit-db.com/exploits/49152 CVE-2020-35271 - https://riteshgohil-25.medium.com/employee-performance-evaluation-system-1-0-first-and-last-name-persistent-cross-site-scripting-7f319775e96f CVE-2020-35272 - https://www.exploit-db.com/exploits/49215 @@ -69519,7 +68164,6 @@ CVE-2020-35398 - https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-andro CVE-2020-35416 - http://packetstormsecurity.com/files/160502/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.html CVE-2020-35416 - http://packetstormsecurity.com/files/160600/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.html CVE-2020-35416 - https://www.exploit-db.com/exploits/49281 -CVE-2020-35418 - https://fatihhcelik.blogspot.com/2020/12/group-office-crm-stored-xss-via-svg-file.html CVE-2020-35419 - https://fatihhcelik.github.io/posts/Group-Office-CRM-Stored-XSS-via-SVG-File/ CVE-2020-35427 - https://phpgurukul.com/ CVE-2020-35427 - https://www.exploit-db.com/exploits/49165 @@ -69740,11 +68384,7 @@ CVE-2020-36115 - https://www.exploit-db.com/exploits/49484 CVE-2020-36120 - https://github.com/saitoha/libsixel/issues/143 CVE-2020-36123 - https://github.com/saitoha/libsixel/issues/144 CVE-2020-3613 - https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin -CVE-2020-36139 - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html CVE-2020-3614 - https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin -CVE-2020-36140 - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html -CVE-2020-36141 - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html -CVE-2020-36142 - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html CVE-2020-3615 - https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin CVE-2020-36154 - https://www.exploit-db.com/exploits/49143 CVE-2020-36155 - https://wpscan.com/vulnerability/cf13b0f8-5815-4d27-a276-5eff8985fc0b @@ -70258,7 +68898,6 @@ CVE-2020-5421 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2020-5421 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2020-5497 - http://packetstormsecurity.com/files/156574/MITREid-1.3.3-Cross-Site-Scripting.html CVE-2020-5499 - https://github.com/wssgcsc58/CVEs/tree/master/baidurustsgxsdk_enclaveid_race -CVE-2020-5504 - https://cybersecurityworks.com/zerodays/cve-2020-5504-phpmyadmin.html CVE-2020-5505 - http://packetstormsecurity.com/files/155922/Freelancy-1.0.0-Remote-Code-Execution.html CVE-2020-5509 - http://packetstormsecurity.com/files/155925/Car-Rental-Project-1.0-Remote-Code-Execution.html CVE-2020-5510 - https://www.exploit-db.com/exploits/47854 @@ -70366,7 +69005,6 @@ CVE-2020-5810 - https://www.tenable.com/security/research/tra-2020-59 CVE-2020-5811 - http://packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html CVE-2020-5811 - https://www.tenable.com/security/research/tra-2020-59 CVE-2020-5812 - https://www.tenable.com/security/tns-2021-01 -CVE-2020-5841 - https://medium.com/@ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1 CVE-2020-5842 - https://www.exploit-db.com/exploits/47876 CVE-2020-5844 - http://packetstormsecurity.com/files/167503/Pandora-FMS-7.0NG.742-Remote-Code-Execution.html CVE-2020-5844 - https://github.com/TheCyberGeek/CVE-2020-5844 @@ -70403,8 +69041,6 @@ CVE-2020-6007 - https://research.checkpoint.com/2020/dont-be-silly-its-only-a-li CVE-2020-6010 - http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html CVE-2020-6019 - https://github.com/ValveSoftware/GameNetworkingSockets/commit/d944a10808891d202bb1d5e1998de6e0423af678 CVE-2020-6058 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0975 -CVE-2020-6059 - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0976 -CVE-2020-6060 - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0977 CVE-2020-6061 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0984 CVE-2020-6062 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0985 CVE-2020-6063 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0986 @@ -70506,28 +69142,12 @@ CVE-2020-6168 - https://www.wordfence.com/blog/2020/01/multiple-vulnerabilities- CVE-2020-6170 - http://packetstormsecurity.com/files/156075/Genexis-Platinum-4410-2.1-Authentication-Bypass.html CVE-2020-6171 - https://www.deepcode.ca/index.php/2020/04/07/cve-2020-xss-in-clink-office-v2/ CVE-2020-6173 - https://github.com/theupdateframework/tuf/commits/develop -CVE-2020-6178 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 CVE-2020-6184 - https://launchpad.support.sap.com/#/notes/2863397 -CVE-2020-6196 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6197 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6198 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6199 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6200 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6201 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6202 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6203 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6204 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 CVE-2020-6205 - https://launchpad.support.sap.com/#/notes/2884910 -CVE-2020-6205 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6206 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 CVE-2020-6207 - http://packetstormsecurity.com/files/161993/SAP-Solution-Manager-7.2-Remote-Command-Execution.html CVE-2020-6207 - http://packetstormsecurity.com/files/162083/SAP-SMD-Agent-Unauthenticated-Remote-Code-Execution.html CVE-2020-6207 - http://packetstormsecurity.com/files/163168/SAP-Solution-Manager-7.20-Missing-Authorization.html CVE-2020-6207 - http://seclists.org/fulldisclosure/2021/Apr/4 -CVE-2020-6207 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6208 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6209 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 -CVE-2020-6210 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305 CVE-2020-6215 - http://packetstormsecurity.com/files/174985/SAP-Application-Server-ABAP-Open-Redirection.html CVE-2020-6215 - http://seclists.org/fulldisclosure/2023/Oct/13 CVE-2020-6234 - http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-Escalation.html @@ -70628,9 +69248,7 @@ CVE-2020-6840 - https://github.com/mruby/mruby/issues/4927 CVE-2020-6843 - http://packetstormsecurity.com/files/156050/ZOHO-ManageEngine-ServiceDeskPlus-11.0-Build-11007-Cross-Site-Scripting.html CVE-2020-6843 - http://seclists.org/fulldisclosure/2020/Jan/32 CVE-2020-6843 - https://seclists.org/bugtraq/2020/Jan/34 -CVE-2020-6844 - https://websec.nl/news.php CVE-2020-6844 - https://www.exploit-db.com/exploits/47960 -CVE-2020-6845 - https://websec.nl/news.php CVE-2020-6845 - https://www.exploit-db.com/exploits/47960 CVE-2020-6847 - https://gist.github.com/Marshall-Hallenbeck/bf6a4a4f408bb7a5e0a47cb39dc1dbbe CVE-2020-6849 - https://wpvulndb.com/vulnerabilities/10031 @@ -70655,7 +69273,6 @@ CVE-2020-6950 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2020-6950 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2020-6954 - https://nileshsapariya.blogspot.com/2020/01/cayin-smp-pro4-signage-media-player.html CVE-2020-6955 - https://nileshsapariya.blogspot.com/2020/01/cayin-smp-pro4-signage-media-player.html -CVE-2020-6956 - https://www.kpmg.de/noindex/advisories/KPMG-2019-001.txt CVE-2020-6958 - https://github.com/NationalSecurityAgency/ghidra/issues/943 CVE-2020-6958 - https://github.com/purpleracc00n/Exploits-and-PoC/blob/master/XXE%20in%20YAJSW%E2%80%99s%20JnlpSupport%20affects%20Ghidra%20Server.md CVE-2020-6958 - https://sourceforge.net/p/yajsw/bugs/166/ @@ -70837,15 +69454,10 @@ CVE-2020-7355 - https://avalz.it/research/metasploit-pro-xss-to-rce/ CVE-2020-7356 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5571.php CVE-2020-7357 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5570.php CVE-2020-7361 - https://github.com/rapid7/metasploit-framework/pull/13828 -CVE-2020-7363 - https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ CVE-2020-7363 - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html -CVE-2020-7364 - https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ CVE-2020-7364 - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html -CVE-2020-7369 - https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ CVE-2020-7369 - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html -CVE-2020-7370 - https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ CVE-2020-7370 - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html -CVE-2020-7371 - https://blog.rapid7.com/2020/10/20/vulntober-multiple-mobile-browser-address-bar-spoofing-vulnerabilities/ CVE-2020-7371 - https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html CVE-2020-7373 - https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/ CVE-2020-7377 - https://github.com/rapid7/metasploit-framework/issues/14015 @@ -71032,7 +69644,6 @@ CVE-2020-7744 - https://snyk.io/blog/remote-code-execution-rce-sourmint/ CVE-2020-7744 - https://snyk.io/research/sour-mint-malicious-sdk/ CVE-2020-7744 - https://snyk.io/vuln/SNYK-JAVA-COMMINTEGRALMSDK-1018714 CVE-2020-7745 - https://snyk.io/blog/remote-code-execution-rce-sourmint/ -CVE-2020-7745 - https://snyk.io/research/sour-mint-malicious-sdk/%23rce CVE-2020-7745 - https://snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-1019377 CVE-2020-7745 - https://www.youtube.com/watch?v=n-mEMkeoUqs CVE-2020-7746 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1019375 @@ -71111,8 +69722,6 @@ CVE-2020-7934 - https://semanticbits.com/liferay-portal-authenticated-xss-disclo CVE-2020-7942 - https://puppet.com/security/cve/CVE-2020-7942/ CVE-2020-7943 - https://puppet.com/security/cve/CVE-2020-7943/ CVE-2020-7944 - https://puppet.com/security/cve/CVE-2020-7944 -CVE-2020-7953 - https://medium.com/@ph0rensic/three-cves-on-opmon-3ca775a262f5 -CVE-2020-7954 - https://medium.com/@ph0rensic/three-cves-on-opmon-3ca775a262f5 CVE-2020-7959 - https://www.exploit-db.com/exploits/48090 CVE-2020-7961 - http://packetstormsecurity.com/files/157254/Liferay-Portal-Java-Unmarshalling-Remote-Code-Execution.html CVE-2020-7961 - http://packetstormsecurity.com/files/158392/Liferay-Portal-Remote-Code-Execution.html @@ -71395,7 +70004,6 @@ CVE-2020-8615 - https://wpvulndb.com/vulnerabilities/10058 CVE-2020-8617 - http://packetstormsecurity.com/files/157836/BIND-TSIG-Denial-Of-Service.html CVE-2020-8622 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2020-8631 - https://github.com/canonical/cloud-init/pull/204 -CVE-2020-8636 - https://medium.com/@ph0rensic/three-cves-on-opmon-3ca775a262f5 CVE-2020-8639 - http://packetstormsecurity.com/files/161401/TestLink-1.9.20-Shell-Upload.html CVE-2020-8641 - https://www.exploit-db.com/exploits/47985 CVE-2020-8644 - http://packetstormsecurity.com/files/157106/PlaySMS-index.php-Unauthenticated-Template-Injection-Code-Execution.html @@ -71466,12 +70074,10 @@ CVE-2020-8835 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.g CVE-2020-8838 - http://packetstormsecurity.com/files/157612/ManageEngine-Asset-Explorer-Windows-Agent-Remote-Code-Execution.html CVE-2020-8838 - http://seclists.org/fulldisclosure/2020/May/29 CVE-2020-8839 - http://packetstormsecurity.com/files/156289/CHIYU-BF430-TCP-IP-Converter-Cross-Site-Scripting.html -CVE-2020-8839 - https://drive.google.com/open?id=1eDN0rsGPs4-yxeMxl7MGh__yjdbl-wON CVE-2020-8840 - https://www.oracle.com/security-alerts/cpuapr2020.html CVE-2020-8840 - https://www.oracle.com/security-alerts/cpuoct2020.html CVE-2020-8843 - https://github.com/istio/istio/commits/master CVE-2020-8860 - https://security.samsungmobile.com/securityUpdate.smsb -CVE-2020-8867 - https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-8867.pdf CVE-2020-8887 - https://github.com/google/security-research/security/advisories/GHSA-g69r-8jwh-2462 CVE-2020-8893 - https://zigrin.com/advisories/misp-bruteforce-protection-not-working-in-very-specific-environments/ CVE-2020-8893 - https://zigrin.com/advisories/misp-reflected-xss-in-galaxy-view/ @@ -71493,19 +70099,14 @@ CVE-2020-8916 - https://github.com/openthread/wpantund/pull/468/commits/0e5d1601 CVE-2020-8933 - https://gitlab.com/gitlab-com/gl-security/gl-redteam/red-team-tech-notes/-/tree/master/oslogin-privesc-june-2020 CVE-2020-8946 - https://sku11army.blogspot.com/2020/02/netis-authenticated-rce-on-wf2471.html CVE-2020-8947 - http://packetstormsecurity.com/files/156326/Pandora-FMS-7.0-Authenticated-Remote-Code-Execution.html -CVE-2020-8948 - https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2020-002-cve-2020-8948/#sthash.ByZB8ifG.dpbs CVE-2020-8950 - https://heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.html CVE-2020-8950 - https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html CVE-2020-8956 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 CVE-2020-8958 - https://github.com/qurbat/gpon CVE-2020-8958 - https://www.karansaini.com/os-command-injection-v-sol/ -CVE-2020-8959 - https://www.westerndigital.com/support/productsecurity/wdc-20001-ssd-dashboard-setup-privilege-escalation -CVE-2020-8960 - https://www.westerndigital.com/support/productsecurity/wdc-20003-mycloud-site-version-2-2-0-134 -CVE-2020-8960 - https://www.westerndigital.com/support/productsecurity/wdc-20003-mycloud-xss-vulnerability CVE-2020-8961 - https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows CVE-2020-8963 - https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html CVE-2020-8964 - https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html -CVE-2020-8990 - https://www.westerndigital.com/support/productsecurity/wdc-19013-my-cloud-home-and-ibi-session-invalidation-vulnerability CVE-2020-8992 - https://usn.ubuntu.com/4342-1/ CVE-2020-8992 - https://usn.ubuntu.com/4419-1/ CVE-2020-8994 - https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2020-8994.md @@ -71537,7 +70138,6 @@ CVE-2020-9030 - https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.ht CVE-2020-9031 - https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html CVE-2020-9032 - https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html CVE-2020-9033 - https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html -CVE-2020-9036 - https://sysdream.com/news/lab/2020-08-05-cve-2020-9036-jeedom-xss-leading-to-remote-code-execution/ CVE-2020-9038 - http://packetstormsecurity.com/files/156582/Joplin-Desktop-1.0.184-Cross-Site-Scripting.html CVE-2020-9038 - https://github.com/laurent22/joplin/commit/3db47b575b9cb0a765da3d283baa2c065df0d0bc CVE-2020-9038 - https://github.com/laurent22/joplin/compare/clipper-1.0.19...clipper-1.0.20 @@ -71602,31 +70202,21 @@ CVE-2020-9362 - https://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive CVE-2020-9363 - https://blog.zoller.lu/p/release-mode-coordinated-disclosure-ref.html CVE-2020-9363 - https://community.sophos.com/b/security-blog/posts/sophos-comments-to-cve-2020-9363 CVE-2020-9364 - http://packetstormsecurity.com/files/156655/Creative-Contact-Form-4.6.2-Directory-Traversal.html -CVE-2020-9368 - https://www.intrinsec.com/publications/ CVE-2020-9370 - https://medium.com/%40rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a CVE-2020-9370 - https://medium.com/@rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a CVE-2020-9371 - http://packetstormsecurity.com/files/156694/WordPress-Appointment-Booking-Calendar-1.3.34-CSV-Injection.html -CVE-2020-9371 - https://drive.google.com/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9 CVE-2020-9371 - https://wpvulndb.com/vulnerabilities/10110 CVE-2020-9372 - http://packetstormsecurity.com/files/156694/WordPress-Appointment-Booking-Calendar-1.3.34-CSV-Injection.html -CVE-2020-9372 - https://drive.google.com/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9 CVE-2020-9374 - http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html CVE-2020-9374 - https://fireshellsecurity.team/hack-n-routers/ CVE-2020-9374 - https://github.com/ElberTavares/routers-exploit/tree/master/tp-link CVE-2020-9375 - http://packetstormsecurity.com/files/156928/TP-Link-Archer-C50-V3-Denial-of-Service.html -CVE-2020-9375 - https://thewhiteh4t.github.io/2020/02/27/CVE-2020-9375-TP-Link-Archer-C50-v3-Denial-of-Service.html CVE-2020-9376 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182 CVE-2020-9377 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182 CVE-2020-9380 - https://github.com/migueltarga/CVE-2020-9380 CVE-2020-9383 - https://usn.ubuntu.com/4342-1/ CVE-2020-9384 - http://packetstormsecurity.com/files/157197/Subex-ROC-Partner-Settlement-10.5-Insecure-Direct-Object-Reference.html CVE-2020-9385 - https://sourceforge.net/p/zint/tickets/181/ -CVE-2020-9388 - https://support.squaredup.com/hc/en-us/articles/360017568238 -CVE-2020-9388 - https://support.squaredup.com/hc/en-us/articles/360019427218-CVE-2020-9388-API-Endpoints-are-not-protected-against-CSRF -CVE-2020-9389 - https://support.squaredup.com/hc/en-us/articles/360017255858 -CVE-2020-9389 - https://support.squaredup.com/hc/en-us/articles/360019427238-CVE-2020-9389-Username-enumeration-possible-via-a-timing-attack -CVE-2020-9390 - https://support.squaredup.com/hc/en-us/articles/360017568258 -CVE-2020-9390 - https://support.squaredup.com/hc/en-us/articles/360019427258-CVE-2020-9390-Stored-cross-site-scripting CVE-2020-9391 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde237319e626d1ec3c9d8b7613032f0fd4663a CVE-2020-9392 - https://www.wordfence.com/blog/2020/02/multiple-vulnerabilities-patched-in-pricing-table-by-supsystic-plugin/ CVE-2020-9399 - https://blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html @@ -72078,7 +70668,6 @@ CVE-2021-2063 - https://www.oracle.com/security-alerts/cpujan2021.html CVE-2021-2064 - https://www.oracle.com/security-alerts/cpujan2021.html CVE-2021-2065 - https://www.oracle.com/security-alerts/cpujan2021.html CVE-2021-20654 - https://jvn.jp/en/jp/JVN80785288/ -CVE-2021-20654 - https://wekan.github.io/hall-of-fame/fieldbleed/ CVE-2021-20656 - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf CVE-2021-20657 - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf CVE-2021-20658 - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf @@ -72263,9 +70852,6 @@ CVE-2021-21354 - https://bugzilla.mozilla.org/show_bug.cgi?id=1694684 CVE-2021-21354 - https://github.com/mozilla/PollBot/pull/333 CVE-2021-2136 - https://www.oracle.com/security-alerts/cpuapr2021.html CVE-2021-2137 - https://www.oracle.com/security-alerts/cpuoct2021.html -CVE-2021-21372 - https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ -CVE-2021-21373 - https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ -CVE-2021-21374 - https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ CVE-2021-21382 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0732 CVE-2021-21391 - https://www.npmjs.com/package/@ckeditor/ckeditor5-engine CVE-2021-21391 - https://www.npmjs.com/package/@ckeditor/ckeditor5-font @@ -73589,8 +72175,6 @@ CVE-2021-24336 - https://codevigilant.com/disclosure/2021/wp-plugin-flightlog-sq CVE-2021-24336 - https://wpscan.com/vulnerability/dda0593e-cd97-454e-a8c8-15d7f690311c CVE-2021-24337 - https://codevigilant.com/disclosure/2021/wp-plugin-video-embed-box/ CVE-2021-24337 - https://wpscan.com/vulnerability/a8fd8dd4-5b5e-462e-8dae-065d5e2d003a -CVE-2021-24338 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24338 -CVE-2021-24339 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24339 CVE-2021-2434 - https://www.oracle.com/security-alerts/cpujul2021.html CVE-2021-24340 - https://wpscan.com/vulnerability/d2970cfb-0aa9-4516-9a4b-32971f41a19c CVE-2021-24341 - https://wpscan.com/vulnerability/1eba1c73-a19b-4226-afec-d27c48388a04 @@ -73626,7 +72210,6 @@ CVE-2021-24363 - https://wpscan.com/vulnerability/1628935f-1d7d-4609-b7a9-e55264 CVE-2021-24364 - https://wpscan.com/vulnerability/1d53fbe5-a879-42ca-a9d3-768a80018382 CVE-2021-24365 - https://wpscan.com/vulnerability/fdbeb137-b404-46c7-85fb-394a3bdac388 CVE-2021-24365 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-032.txt -CVE-2021-24366 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24366 CVE-2021-24367 - https://wpscan.com/vulnerability/f35b7c8f-cfb6-42b6-8a3a-8c07cd1e9da0 CVE-2021-24368 - https://wpscan.com/vulnerability/7f2fda5b-45a5-4fc6-968f-90bc9674c999 CVE-2021-24369 - https://wpscan.com/vulnerability/1d1a731b-78f7-4d97-b40d-80f66700edae @@ -74501,9 +73084,6 @@ CVE-2021-25264 - https://community.sophos.com/b/security-blog/posts/resolved-lpe CVE-2021-25265 - https://community.sophos.com/b/security-blog CVE-2021-25265 - https://community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265 CVE-2021-25273 - http://seclists.org/fulldisclosure/2021/Dec/3 -CVE-2021-25274 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/ -CVE-2021-25275 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/ -CVE-2021-25276 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/ CVE-2021-25277 - https://github.com/rauschecker/CVEs/tree/main/CVE-2021-25277 CVE-2021-25281 - http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html CVE-2021-25281 - https://github.com/saltstack/salt/releases @@ -74699,9 +73279,7 @@ CVE-2021-25863 - https://github.com/open5gs/open5gs/issues/764 CVE-2021-25864 - https://github.com/Foddy/node-red-contrib-huemagic/issues/217 CVE-2021-25893 - https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/ CVE-2021-25894 - https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/ -CVE-2021-25898 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/ CVE-2021-25898 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765 -CVE-2021-25899 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/ CVE-2021-25899 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765 CVE-2021-25912 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25912 CVE-2021-25913 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25913 @@ -74714,11 +73292,7 @@ CVE-2021-25919 - https://www.whitesourcesoftware.com/vulnerability-database/CVE- CVE-2021-25921 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25921 CVE-2021-25922 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25922 CVE-2021-25923 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25923 -CVE-2021-25924 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25924%2C -CVE-2021-25924 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25924, CVE-2021-25925 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925 -CVE-2021-25926 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926%2C -CVE-2021-25926 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926, CVE-2021-25927 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25927 CVE-2021-25928 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25928 CVE-2021-25929 - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25929 @@ -74923,13 +73497,10 @@ CVE-2021-26414 - http://packetstormsecurity.com/files/163206/Windows-Kerberos-Ap CVE-2021-26419 - http://packetstormsecurity.com/files/162570/Internet-Explorer-jscript9.dll-Memory-Corruption.html CVE-2021-26504 - https://github.com/Foddy/node-red-contrib-huemagic/issues/217 CVE-2021-26549 - http://packetstormsecurity.com/files/161335/SmartFoxServer-2X-2.17.0-God-Mode-Console-WebSocket-Cross-Site-Scripting.html -CVE-2021-26549 - https://www.zeroscience.mk/en/vulnerabilities/ CVE-2021-26549 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5626.php CVE-2021-26550 - http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html -CVE-2021-26550 - https://www.zeroscience.mk/en/vulnerabilities/ CVE-2021-26550 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php CVE-2021-26551 - http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html -CVE-2021-26551 - https://www.zeroscience.mk/en/vulnerabilities/ CVE-2021-26563 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1158 CVE-2021-26570 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us CVE-2021-26571 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us @@ -74939,8 +73510,6 @@ CVE-2021-26574 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US CVE-2021-26575 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us CVE-2021-26576 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us CVE-2021-26577 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us -CVE-2021-26596 - https://www.gruppotim.it/redteam -CVE-2021-26597 - https://www.gruppotim.it/redteam CVE-2021-26598 - https://packetstormsecurity.com/files/166403/ImpressCMS-1.4.2-Incorrect-Access-Control.html CVE-2021-26599 - http://packetstormsecurity.com/files/166404/ImpressCMS-1.4.2-SQL-Injection.html CVE-2021-26600 - http://packetstormsecurity.com/files/166393/ImpressCMS-1.4.2-Authentication-Bypass.html @@ -74973,14 +73542,11 @@ CVE-2021-26758 - https://docs.unsafe-inline.com/0day/openlitespeed-web-server-1. CVE-2021-26758 - https://github.com/litespeedtech/openlitespeed/issues/217 CVE-2021-26758 - https://www.exploit-db.com/exploits/49556 CVE-2021-26762 - https://phpgurukul.com/ -CVE-2021-26762 - https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip CVE-2021-26762 - https://www.exploit-db.com/exploits/49513 CVE-2021-26764 - https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html CVE-2021-26764 - https://phpgurukul.com/ -CVE-2021-26764 - https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip CVE-2021-26765 - https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html CVE-2021-26765 - https://phpgurukul.com/ -CVE-2021-26765 - https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip CVE-2021-26776 - https://github.com/cskaza/cszcms/issues/29 CVE-2021-26787 - http://genesys.com CVE-2021-26787 - https://medium.com/@reliable_lait_mouse_975/cross-site-scripting-vulnerability-within-genesys-workforce-management-version-8-5-214-20-a68500cf5e18 @@ -75079,8 +73645,6 @@ CVE-2021-27198 - http://seclists.org/fulldisclosure/2021/Feb/81 CVE-2021-27198 - https://www.securifera.com/advisories/cve-2021-27198/ CVE-2021-27200 - https://www.exploit-db.com/exploits/49989 CVE-2021-27201 - https://github.com/MucahitSaratar/endian_firewall_authenticated_rce -CVE-2021-27201 - https://www.endian.com/company/news/endian-community-releases-new-version-332-148/ -CVE-2021-27203 - https://www.rootshellsecurity.net/rootshell-discover-denial-of-service-flaw-dekart-private-disk-encryption-software/ CVE-2021-27204 - https://www.inputzero.io/2020/12/telegram-privacy-fails-again.html CVE-2021-27204 - https://www.youtube.com/watch?v=zEt-_5b4OaA CVE-2021-27205 - https://www.inputzero.io/2020/12/telegram-privacy-fails-again.html @@ -75132,7 +73696,6 @@ CVE-2021-27340 - https://github.com/OS4ED/openSIS-Classic/issues/158 CVE-2021-27341 - https://github.com/OS4ED/openSIS-Classic/issues/158 CVE-2021-27345 - https://github.com/ckolivas/lrzip/issues/164 CVE-2021-27347 - https://github.com/ckolivas/lrzip/issues/165 -CVE-2021-27351 - https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html CVE-2021-27352 - https://drive.google.com/file/d/1kSDlPASBCgJEINxTSIsjMWrU4u4T5XCc/view?usp=sharing CVE-2021-27352 - https://github.com/xoffense/POC/blob/main/Ilch%202.1.42%20Open%20redirect CVE-2021-27357 - https://github.com/RIOT-OS/RIOT/issues/16018 @@ -75162,8 +73725,6 @@ CVE-2021-27371 - https://github.com/monicahq/monica/issues/4888 CVE-2021-27371 - https://github.com/monicahq/monica/pull/4543 CVE-2021-27405 - https://github.com/progfay/scrapbox-parser/pull/519 CVE-2021-27405 - https://github.com/progfay/scrapbox-parser/pull/539 -CVE-2021-27414 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2021-27416 - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action=Launch CVE-2021-27427 - https://github.com/RIOT-OS/RIOT CVE-2021-27433 - https://github.com/ARMmbed/mbed-os/pull/14408 CVE-2021-27435 - https://github.com/ARMmbed/mbed-os/pull/14408 @@ -75214,9 +73775,7 @@ CVE-2021-27634 - http://packetstormsecurity.com/files/164596/SAP-NetWeaver-ABAP- CVE-2021-27634 - https://launchpad.support.sap.com/#/notes/3020209 CVE-2021-27635 - http://packetstormsecurity.com/files/164592/SAP-JAVA-NetWeaver-System-Connections-XML-Injection.html CVE-2021-27673 - http://packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html -CVE-2021-27691 - https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/rkhTCGzMd CVE-2021-27691 - https://hackmd.io/@aZYpdinUS2SD-yhAeHwOkw/rkhTCGzMd -CVE-2021-27692 - https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/ry-t4QfMu CVE-2021-27692 - https://hackmd.io/@aZYpdinUS2SD-yhAeHwOkw/ry-t4QfMu CVE-2021-27695 - https://www.exploit-db.com/exploits/49649 CVE-2021-27697 - https://github.com/RIOT-OS/RIOT/issues/16062 @@ -75313,7 +73872,6 @@ CVE-2021-28133 - http://packetstormsecurity.com/files/161897/Zoom-5.4.3-54779.11 CVE-2021-28133 - http://seclists.org/fulldisclosure/2021/Mar/48 CVE-2021-28133 - https://thehackernews.com/2021/03/new-zoom-screen-sharing-bug-lets-other.html CVE-2021-28133 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-044.txt -CVE-2021-28133 - https://www.syss.de/pentest-blog/syss-2020-044-sicherheitsproblem-in-screen-sharing-funktionalitaet-von-zoom-cve-2021-28133 CVE-2021-28133 - https://www.youtube.com/watch?v=SonmmgQlLzg CVE-2021-28135 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf CVE-2021-28136 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf @@ -75363,10 +73921,8 @@ CVE-2021-28248 - https://n4nj0.github.io/advisories/ca-ehealth-performance-manag CVE-2021-28249 - https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/ CVE-2021-28250 - https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/ CVE-2021-28269 - https://www.exploit-db.com/exploits/49679 -CVE-2021-28269 - https://www.zeroscience.mk/en/vulnerabilities CVE-2021-28269 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5634.php CVE-2021-28271 - https://www.exploit-db.com/exploits/49678 -CVE-2021-28271 - https://www.zeroscience.mk/en/vulnerabilities CVE-2021-28271 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php CVE-2021-28275 - https://github.com/Matthias-Wandel/jhead/issues/17 CVE-2021-28277 - https://github.com/Matthias-Wandel/jhead/issues/16 @@ -75414,7 +73970,6 @@ CVE-2021-28485 - https://www.gruppotim.it/it/footer/red-team.html CVE-2021-28488 - https://www.ericsson.com CVE-2021-28488 - https://www.ericsson.com/en/about-us/enterprise-security/psirt CVE-2021-28488 - https://www.gruppotim.it/it/footer/red-team.html -CVE-2021-28653 - https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability CVE-2021-28657 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-28657 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2021-28660 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=74b6b20df8cfe90ada777d621b54c32e69e27cd7 @@ -75428,8 +73983,6 @@ CVE-2021-28807 - https://www.shielder.it/advisories/qnap-qcenter-virtual-stored- CVE-2021-28838 - https://www.dlink.com/en/security-bulletin/ CVE-2021-28839 - https://www.dlink.com/en/security-bulletin/ CVE-2021-28840 - https://www.dlink.com/en/security-bulletin/ -CVE-2021-28855 - https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark/ -CVE-2021-28856 - https://fatihhcelik.github.io/posts/Division-By-Zero-Deark/ CVE-2021-28857 - https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-credentials-in-cookie-7516a2649394 CVE-2021-28858 - https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-transmission-of-sensitive-information-40357c778b84 CVE-2021-28861 - https://bugs.python.org/issue43223 @@ -75457,7 +74010,6 @@ CVE-2021-28970 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisorie CVE-2021-28971 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d88d05a9e0b6d9356e97129d4ff9942d765f46ea CVE-2021-28972 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678 CVE-2021-28975 - https://www.compass-security.com/fileadmin/Research/Advisories/2021-18_CSNC-2021-018-WPMailster_XSS_CSRF.txt -CVE-2021-28979 - https://www.gruppotim.it/redteam CVE-2021-28998 - https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/file_upload_RCE/File_upload_to_RCE.md CVE-2021-28998 - https://seclists.org/fulldisclosure/2021/Mar/50 CVE-2021-28999 - https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/sqli_order_by/CMS-MS-SQLi-report.md @@ -75480,8 +74032,6 @@ CVE-2021-29011 - http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius- CVE-2021-29011 - https://github.com/1d8/publications/tree/main/cve-2021-29011 CVE-2021-29012 - http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html CVE-2021-29012 - https://github.com/1d8/publications/tree/main/cve-2021-29012 -CVE-2021-29022 - https://notnnor.github.io/research/2021/03/17/full-path-discloure-in-invoiceplane.html -CVE-2021-29023 - https://notnnor.github.io/research/2021/03/16/weak-password-recovery-mechanism-in-invoiceplane.html CVE-2021-29025 - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md CVE-2021-29026 - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md CVE-2021-29027 - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md @@ -75603,8 +74153,6 @@ CVE-2021-29650 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux. CVE-2021-29657 - http://packetstormsecurity.com/files/163324/KVM-nested_svm_vmrun-Double-Fetch.html CVE-2021-29657 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.12 CVE-2021-29657 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a58d9166a756a0f4a6618e4f593232593d6df134 -CVE-2021-29660 - https://www.gruppotim.it/redteam -CVE-2021-29661 - https://www.gruppotim.it/redteam CVE-2021-29662 - https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-018.md CVE-2021-29662 - https://sick.codes/sick-2021-018/ CVE-2021-29663 - http://sourceforge.net/projects/coursems @@ -75667,7 +74215,6 @@ CVE-2021-30112 - https://github.com/0xrayan/CVEs/issues/3 CVE-2021-30113 - https://github.com/0xrayan/CVEs/issues/1 CVE-2021-30114 - https://github.com/0xrayan/CVEs/issues/2 CVE-2021-30116 - https://helpdesk.kaseya.com/hc/en-gb/articles/4403440684689-Important-Notice-July-2nd-2021 -CVE-2021-30117 - https://helpdesk.kaseya.com/hc/en-gb/articles/360019966738-9-5-6-Feature-Release-8-May-2021 CVE-2021-30118 - https://helpdesk.kaseya.com/hc/en-gb/articles/360019054377-9-5-5-Feature-Release-10-April-2021 CVE-2021-30123 - https://trac.ffmpeg.org/ticket/8863 CVE-2021-30129 - https://www.oracle.com/security-alerts/cpuapr2022.html @@ -75687,7 +74234,6 @@ CVE-2021-30178 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux. CVE-2021-3018 - http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html CVE-2021-3018 - https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md CVE-2021-3018 - https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html -CVE-2021-30201 - https://helpdesk.kaseya.com/hc/en-gb/articles/360019966738-9-5-6-Feature-Release-8-May-2021 CVE-2021-30203 - https://github.com/zyx0814/dzzoffice/issues/183 CVE-2021-30211 - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/Stored-XSS-KnowageSuite7-3-surname.md CVE-2021-30212 - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/Stored-XSS-KnowageSuite7-3-notes.md @@ -75908,7 +74454,6 @@ CVE-2021-31324 - https://www.shielder.it/advisories/centos-web-panel-idsession-r CVE-2021-31326 - https://github.com/GD008/vuln/blob/main/DIR-816_reset.md CVE-2021-31326 - https://www.dlink.com/en/security-bulletin/ CVE-2021-31329 - https://github.com/remoteclinic/RemoteClinic/issues/16 -CVE-2021-31330 - https://mattschmidt.net/2021/04/14/review-board-xss-discovered/ CVE-2021-3137 - https://www.exploit-db.com/exploits/49437 CVE-2021-3138 - http://packetstormsecurity.com/files/162256/Discourse-2.7.0-2FA-Bypass.html CVE-2021-3138 - https://github.com/Mesh3l911/Disource @@ -75930,15 +74475,12 @@ CVE-2021-3151 - http://packetstormsecurity.com/files/162815/i-doit-1.15.2-Cross- CVE-2021-3151 - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-056 CVE-2021-31530 - https://www.manageengine.com/products/service-desk-msp/readme.html#10522 CVE-2021-31531 - https://www.manageengine.com/products/service-desk-msp/readme.html#10521 -CVE-2021-31532 - https://oxide.computer/blog/lpc55/ CVE-2021-31535 - http://packetstormsecurity.com/files/162737/libX11-Insufficient-Length-Check-Injection.html CVE-2021-31535 - http://seclists.org/fulldisclosure/2021/May/52 CVE-2021-31535 - https://unparalleled.eu/blog/2021/20210518-using-xterm-to-navigate-the-huge-color-space/ CVE-2021-31535 - https://unparalleled.eu/publications/2021/advisory-unpar-2021-1.txt CVE-2021-31537 - http://seclists.org/fulldisclosure/2021/May/20 CVE-2021-31538 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-010.txt -CVE-2021-31539 - https://www.gruppotim.it/redteam -CVE-2021-31540 - https://www.gruppotim.it/redteam CVE-2021-31552 - https://phabricator.wikimedia.org/T152394 CVE-2021-3156 - http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html CVE-2021-3156 - http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html @@ -75953,10 +74495,8 @@ CVE-2021-3156 - https://www.oracle.com//security-alerts/cpujul2021.html CVE-2021-3156 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-3156 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2021-31583 - http://packetstormsecurity.com/files/162316/Sipwise-C5-NGCP-CSC-Cross-Site-Scripting.html -CVE-2021-31583 - https://www.zeroscience.mk/en/vulnerabilities CVE-2021-31583 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5648.php CVE-2021-31584 - http://packetstormsecurity.com/files/162318/Sipwise-C5-NGCP-CSC-Cross-Site-Request-Forgery.html -CVE-2021-31584 - https://www.zeroscience.mk/en/vulnerabilities CVE-2021-31584 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5649.php CVE-2021-31589 - http://packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.html CVE-2021-31589 - https://cxsecurity.com/issue/WLB-2022010013 @@ -76120,7 +74660,6 @@ CVE-2021-31853 - https://kc.mcafee.com/corporate/index?page=content&id=SB10374 CVE-2021-31854 - https://kc.mcafee.com/corporate/index?page=content&id=SB10378 CVE-2021-31857 - https://www.manageengine.com CVE-2021-31859 - https://www.ysoft.com/en -CVE-2021-31859 - https://www.ysoft.com/en/legal/ysoft-safeq-flexispooler CVE-2021-3186 - http://packetstormsecurity.com/files/161119/Tenda-AC5-AC1200-Wireless-Cross-Site-Scripting.html CVE-2021-31862 - https://github.com/RobertDra/CVE-2021-31862/blob/main/README.md CVE-2021-31867 - https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/ @@ -76129,7 +74668,6 @@ CVE-2021-31874 - https://blog.stmcyber.com/vulns/cve-2021-31874/ CVE-2021-31878 - http://packetstormsecurity.com/files/163638/Asterisk-Project-Security-Advisory-AST-2021-007.html CVE-2021-3188 - https://wehackmx.com/security-research/WeHackMX-2021-001/ CVE-2021-31916 - https://seclists.org/oss-sec/2021/q1/268 -CVE-2021-31923 - https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html CVE-2021-31932 - http://packetstormsecurity.com/files/165964/Nokia-Transport-Module-Authentication-Bypass.html CVE-2021-31933 - http://packetstormsecurity.com/files/162572/Chamilo-LMS-1.11.14-Remote-Code-Execution.html CVE-2021-31934 - https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html @@ -76170,10 +74708,7 @@ CVE-2021-32051 - https://gist.githubusercontent.com/mke1985/a21a71098f48829916df CVE-2021-32066 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-32089 - https://www.securifera.com/advisories/cve-2021-32089/ CVE-2021-32089 - https://www.zebra.com/us/en/support-downloads/rfid/rfid-readers/fx9500.html -CVE-2021-32098 - https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack -CVE-2021-32099 - https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack CVE-2021-3210 - https://github.com/BloodHoundAD/BloodHound/issues/338 -CVE-2021-32100 - https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack CVE-2021-32132 - https://github.com/gpac/gpac/issues/1753 CVE-2021-32134 - https://github.com/gpac/gpac/issues/1756 CVE-2021-32135 - https://github.com/gpac/gpac/issues/1757 @@ -76190,9 +74725,7 @@ CVE-2021-32160 - https://github.com/Mesh3l911/CVE-2021-32160 CVE-2021-32161 - https://github.com/Mesh3l911/CVE-2021-32161 CVE-2021-32162 - https://github.com/Mesh3l911/CVE-2021-32162 CVE-2021-32172 - http://packetstormsecurity.com/files/164445/Maian-Cart-3.8-Remote-Code-Execution.html -CVE-2021-32172 - https://dreyand.github.io/maian-cart-rce/ CVE-2021-32172 - https://github.com/DreyAnd/maian-cart-rce -CVE-2021-32238 - https://www.zeroscience.mk/en/vulnerabilities/ CVE-2021-32238 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5651.php CVE-2021-3224 - https://github.com/cskaza/cszcms/issues/28 CVE-2021-32256 - https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1927070 @@ -76392,17 +74925,13 @@ CVE-2021-33045 - http://seclists.org/fulldisclosure/2021/Oct/13 CVE-2021-3305 - https://github.com/liong007/Feishu/issues/1 CVE-2021-33055 - https://blog.stmcyber.com/vulns/cve-2021-33055/ CVE-2021-33057 - https://arxiv.org/pdf/2205.15202.pdf -CVE-2021-3310 - https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122 CVE-2021-3313 - https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt CVE-2021-3314 - https://n4nj0.github.io/advisories/oracle-glassfish-reflected-xss/ -CVE-2021-3314 - https://www.gruppotim.it/redteam CVE-2021-3317 - http://packetstormsecurity.com/files/161208/Klog-Server-2.4.1-Command-Injection.html CVE-2021-3318 - http://packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.html CVE-2021-33183 - https://www.synology.com/security/advisory/Synology_SA_21_08 -CVE-2021-33193 - https://portswigger.net/research/http2 CVE-2021-33193 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-33193 - https://www.oracle.com/security-alerts/cpujan2022.html -CVE-2021-33205 - https://www.westerndigital.com/support/productsecurity/wdc-21007-edgerover-windows-app-ver-0-25 CVE-2021-33207 - https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33207 CVE-2021-33208 - https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33208 CVE-2021-3321 - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99 @@ -76622,21 +75151,9 @@ CVE-2021-33539 - https://cert.vde.com/en-us/advisories/vde-2021-026 CVE-2021-33540 - https://cert.vde.com/en-us/advisories/vde-2021-021 CVE-2021-33541 - https://cert.vde.com/en-us/advisories/vde-2021-019 CVE-2021-33542 - https://cert.vde.com/en-us/advisories/vde-2021-020 -CVE-2021-33543 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33544 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33545 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33546 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33547 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33548 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ CVE-2021-33549 - http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html -CVE-2021-33549 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ CVE-2021-3355 - http://packetstormsecurity.com/files/161562/LightCMS-1.3.4-Cross-Site-Scripting.html CVE-2021-3355 - https://www.exploit-db.com/exploits/49598 -CVE-2021-33550 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33551 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33552 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33553 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ -CVE-2021-33554 - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ CVE-2021-33555 - https://cert.vde.com/en-us/advisories/vde-2021-027 CVE-2021-33558 - https://github.com/mdanzaruddin/CVE-2021-33558. CVE-2021-33558 - https://github.com/mdanzaruddin/CVE-2021-33558./issues/1 @@ -76646,7 +75163,6 @@ CVE-2021-33560 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-33560 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2021-33561 - https://www.exploit-db.com/exploits/49901 CVE-2021-33562 - https://www.exploit-db.com/exploits/49901 -CVE-2021-33563 - https://huntr.dev/bounties/1-other-koel/koel/ CVE-2021-33564 - https://github.com/mlr0p/CVE-2021-33564 CVE-2021-33564 - https://zxsecurity.co.nz/research/argunment-injection-ruby-dragonfly/ CVE-2021-33570 - http://packetstormsecurity.com/files/162831/Postbird-0.8.4-Cross-Site-Scripting-Local-File-Inclusion.html @@ -76711,12 +75227,6 @@ CVE-2021-33829 - https://www.drupal.org/sa-core-2021-003 CVE-2021-33833 - http://www.openwall.com/lists/oss-security/2021/06/09/1 CVE-2021-33839 - https://youtu.be/jWyDfEB0m08 CVE-2021-33840 - https://gitlab.com/lucaapp/web/-/issues/1#note_560963608 -CVE-2021-33849 - https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html -CVE-2021-33849 - https://cybersecurityworks.com/zerodays/cve-2021-33849-stored-cross-site-scripting-xss-in-wordpress-plugin-zoho-crm-lead-magnet-version-1-7-2-4.html -CVE-2021-33850 - https://cybersecurityworks.com/zerodays/cve-2021-33850-stored-cross-site-scripting-xss-in-wordpress-microsoft-clarity-plugin.html -CVE-2021-33851 - https://cybersecurityworks.com/zerodays/cve-2021-33851-stored-cross-site-scripting-in-wordpress-customize-login-image.html -CVE-2021-33852 - https://cybersecurityworks.com/zerodays/cve-2021-33852-stored-cross-site-scripting-in-wordpress-post-duplicator-plugin-2-23.html -CVE-2021-33853 - https://cybersecurityworks.com/zerodays/cve-2021-33853-stored-cross-site-scripting-in-x2crm.html CVE-2021-33880 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-33880 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2021-33887 - https://youtu.be/RLjXfvb0ADw @@ -76731,9 +75241,7 @@ CVE-2021-33909 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2021-33910 - http://packetstormsecurity.com/files/163621/Sequoia-A-Deep-Root-In-Linuxs-Filesystem-Layer.html CVE-2021-33910 - https://www.openwall.com/lists/oss-security/2021/07/20/2 CVE-2021-33923 - https://confluent.io -CVE-2021-33923 - https://www.detack.de/en/cve-2021-33923 CVE-2021-33924 - https://confluent.io -CVE-2021-33924 - https://www.detack.de/en/cve-2021-33924 CVE-2021-33925 - https://github.com/nitinp1232/cms-corephp/issues/1 CVE-2021-33928 - https://github.com/openSUSE/libsolv/issues/417 CVE-2021-33929 - https://github.com/openSUSE/libsolv/issues/417 @@ -76893,9 +75401,7 @@ CVE-2021-3450 - https://www.tenable.com/security/tns-2021-05 CVE-2021-3450 - https://www.tenable.com/security/tns-2021-09 CVE-2021-34523 - http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html CVE-2021-34527 - http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html -CVE-2021-34543 - https://drive.google.com/file/d/1z1TaANlDyX4SOP2vjNzkPQI3nETL9kZM/view?usp=sharing CVE-2021-34543 - https://www.exploit-db.com/exploits/49986 -CVE-2021-34544 - https://drive.google.com/file/d/1N8Ch1UGNcoocUaPhOe_1mAECOe5kr4pt/view?usp=sharing CVE-2021-34544 - https://www.exploit-db.com/exploits/49987 CVE-2021-34546 - http://packetstormsecurity.com/files/163097/NetSetManPro-4.7.2-Privilege-Escalation.html CVE-2021-34548 - http://packetstormsecurity.com/files/163510/Tor-Half-Closed-Connection-Stream-Confusion.html @@ -77111,9 +75617,7 @@ CVE-2021-3537 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-3537 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-3537 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2021-35380 - https://www.exploit-db.com/exploits/50638 -CVE-2021-35380 - https://www.swascan.com/solari-di-udine/ CVE-2021-3539 - https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/ -CVE-2021-35391 - https://sayaanalam.github.io/CVE-2021-35391.html CVE-2021-35392 - https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain CVE-2021-35393 - https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain CVE-2021-35394 - https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain @@ -77123,7 +75627,6 @@ CVE-2021-3541 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2021-35438 - https://github.com/phpipam/phpipam/issues/3351 CVE-2021-35448 - https://www.exploit-db.com/exploits/50047 CVE-2021-35449 - http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html -CVE-2021-35450 - https://www.swascan.com/entando/ CVE-2021-35452 - https://github.com/strukturag/libde265/issues/298 CVE-2021-35456 - https://packetstormsecurity.com/files/163282/Online-Pet-Shop-We-App-1.0-SQL-Injection-Shell-Upload.html CVE-2021-35458 - http://packetstormsecurity.com/files/163282/Online-Pet-Shop-We-App-1.0-SQL-Injection-Shell-Upload.html @@ -77137,13 +75640,8 @@ CVE-2021-35478 - https://research.nccgroup.com/?research=Technical%20advisories CVE-2021-35479 - https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-log-server-cve-2021-35478cve-2021-35479/ CVE-2021-35479 - https://research.nccgroup.com/?research=Technical%20advisories CVE-2021-35487 - https://www.gruppotim.it/it/footer/red-team.html -CVE-2021-35488 - https://www.gruppotim.it/redteam -CVE-2021-35489 - https://www.gruppotim.it/redteam -CVE-2021-35490 - https://www.gruppotim.it/redteam CVE-2021-35491 - https://n4nj0.github.io/advisories/wowza-streaming-engine-i/ -CVE-2021-35491 - https://www.gruppotim.it/redteam CVE-2021-35492 - https://n4nj0.github.io/advisories/wowza-streaming-engine-i/ -CVE-2021-35492 - https://www.gruppotim.it/redteam CVE-2021-35501 - http://packetstormsecurity.com/files/163466/Pandora-FMS-7.54-Cross-Site-Scripting.html CVE-2021-35503 - https://syntegris-sec.github.io/filerun-advisory CVE-2021-35504 - https://syntegris-sec.github.io/filerun-advisory @@ -77164,7 +75662,6 @@ CVE-2021-35517 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2021-35517 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-35517 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2021-35523 - http://packetstormsecurity.com/files/163320/Securepoint-SSL-VPN-Client-2.0.30-Local-Privilege-Escalation.html -CVE-2021-35528 - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000068&LanguageCode=en&DocumentPartId=&Action=Launch CVE-2021-35536 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2021-35537 - https://www.oracle.com/security-alerts/cpuoct2021.html CVE-2021-35538 - https://www.oracle.com/security-alerts/cpuoct2021.html @@ -77305,7 +75802,6 @@ CVE-2021-3574 - https://github.com/ImageMagick/ImageMagick/issues/3540 CVE-2021-3575 - https://github.com/uclouvain/openjpeg/issues/1347 CVE-2021-3578 - https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ CVE-2021-35940 - https://www.oracle.com/security-alerts/cpujul2022.html -CVE-2021-35941 - https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo CVE-2021-35956 - http://packetstormsecurity.com/files/163343/AKCP-sensorProbe-SPX476-Cross-Site-Scripting.html CVE-2021-35956 - https://tbutler.org/2021/06/28/cve-2021-35956 CVE-2021-35957 - https://advisories.stormshield.eu @@ -77314,7 +75810,6 @@ CVE-2021-35973 - https://gynvael.coldwind.pl/?lang=en&id=736 CVE-2021-35975 - https://github.com/fbkcs/CVE-2021-35975 CVE-2021-35976 - https://support.plesk.com/hc/en-us/articles/4402990507026 CVE-2021-35978 - https://digi.com -CVE-2021-3603 - https://www.huntr.dev/bounties/1-PHPMailer/PHPMailer/ CVE-2021-36088 - https://github.com/fluent/fluent-bit/pull/3453 CVE-2021-3609 - https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md CVE-2021-36090 - https://www.oracle.com/security-alerts/cpuapr2022.html @@ -77388,8 +75883,6 @@ CVE-2021-36450 - https://medium.com/@1nf0sk/cve-2021-36450-cross-site-scripting- CVE-2021-36450 - https://sushantvkamble.blogspot.com/2021/11/cross-site-scripting-xss.html CVE-2021-3646 - https://huntr.dev/bounties/32e30ecf-31fa-45f6-8552-47250ef0e613 CVE-2021-36460 - https://github.com/martinfrancois/CVE-2021-36460 -CVE-2021-3647 - https://huntr.dev/bounties/1625558772840-medialize/URI.js -CVE-2021-3649 - https://huntr.dev/bounties/1625088985607-chatwoot/chatwoot CVE-2021-36493 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42160 CVE-2021-36520 - http://packetstormsecurity.com/files/171731/itech-TrainSmart-r1044-SQL-Injection.html CVE-2021-3653 - http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html @@ -77425,10 +75918,8 @@ CVE-2021-36622 - https://www.exploit-db.com/exploits/50114 CVE-2021-36623 - https://www.exploit-db.com/exploits/50106 CVE-2021-36624 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624 CVE-2021-36624 - https://www.exploit-db.com/exploits/50105 -CVE-2021-3664 - https://huntr.dev/bounties/1625557993985-unshiftio/url-parse CVE-2021-36646 - https://github.com/kalcaddle/KodExplorer/issues/482 CVE-2021-36654 - http://packetstormsecurity.com/files/163737/CMSuno-1.7-Cross-Site-Scripting.html -CVE-2021-3666 - https://huntr.dev/bounties/1-other-fiznool/body-parser-xml CVE-2021-36665 - https://imhotepisinvisible.com/druva-lpe/ CVE-2021-36666 - https://imhotepisinvisible.com/druva-lpe/ CVE-2021-36667 - https://imhotepisinvisible.com/druva-lpe/ @@ -77456,8 +75947,6 @@ CVE-2021-3674 - https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061 CVE-2021-3674 - https://github.com/rizinorg/rizin/pull/1313 CVE-2021-36748 - https://blog.sorcery.ie CVE-2021-36748 - https://blog.sorcery.ie/posts/ph_simpleblog_sqli/ -CVE-2021-36750 - https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software -CVE-2021-36751 - https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software CVE-2021-36761 - https://www.cyberiskvision.com/advisory/ CVE-2021-36762 - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ CVE-2021-36762 - https://www.kb.cert.org/vuls/id/608209 @@ -77534,9 +76023,6 @@ CVE-2021-37253 - http://seclists.org/fulldisclosure/2021/Dec/1 CVE-2021-37253 - https://www.tenable.com/cve/CVE-2021-37253 CVE-2021-3728 - https://huntr.dev/bounties/dd54c5a1-0d4a-4f02-a111-7ce4ddc67a4d CVE-2021-3729 - https://huntr.dev/bounties/d32f3d5a-0738-41ba-89de-34f2a772de76 -CVE-2021-37291 - https://www.zeroscience.mk/en/vulnerabilities/ -CVE-2021-37292 - https://www.zeroscience.mk/en/vulnerabilities/ -CVE-2021-37293 - https://www.zeroscience.mk/en/vulnerabilities/ CVE-2021-3730 - https://huntr.dev/bounties/ea181323-51f8-46a2-a60f-6a401907feb7 CVE-2021-37315 - https://robertchen.cc/blog/2021/03/31/asus-rce CVE-2021-37316 - https://robertchen.cc/blog/2021/03/31/asus-rce @@ -77694,7 +76180,6 @@ CVE-2021-3772 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-3773 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-37741 - https://www.manageengine.com CVE-2021-37748 - https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/ -CVE-2021-37749 - https://www.silentgrid.com/blog/cve-2021-37749-hexagon-geomedia-webmap-2020-blind-sql-injection/ CVE-2021-3775 - https://huntr.dev/bounties/6a59d203-4ca7-4aed-bdb9-1e39b66c77b3 CVE-2021-37750 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-3776 - https://huntr.dev/bounties/e0edf27d-437e-44fe-907a-df020f385304 @@ -77720,7 +76205,6 @@ CVE-2021-37808 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-37 CVE-2021-37808 - https://packetstormsecurity.com/files/163575/News-Portal-Project-3.1-SQL-Injection.html CVE-2021-37819 - https://gitlab.com/pdftk-java/pdftk/-/merge_requests/21/diffs?commit_id=9b0cbb76c8434a8505f02ada02a94263dcae9247#diff-content-b3cfd29983c793bcae2375502abd5baa8f5d1081 CVE-2021-37840 - https://github.com/aaPanel/aaPanel/issues/74 -CVE-2021-37841 - https://docs.docker.com/docker-for-windows/release-notes/ CVE-2021-3785 - https://huntr.dev/bounties/b4085d13-54fa-4419-a2ce-1d780cc31638 CVE-2021-37859 - https://mattermost.com/security-updates/ CVE-2021-37860 - https://mattermost.com/security-updates/ @@ -77787,11 +76271,8 @@ CVE-2021-3813 - https://huntr.dev/bounties/36f02c4f-cf1c-479e-a1ad-091a1ac7cb56 CVE-2021-38136 - https://www.shielder.it/advisories/corero_secure_watch_managed_services-get_snapshot-path-traversal/ CVE-2021-38137 - https://www.shielder.it/advisories/corero_secure_watch_managed_services-multiple-broken-access-control/ CVE-2021-38138 - http://packetstormsecurity.com/files/163753/OneNav-Beta-0.9.12-Cross-Site-Scripting.html -CVE-2021-38143 - https://bernardofsr.github.io/blog/2021/form-tools/ CVE-2021-38143 - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md -CVE-2021-38144 - https://bernardofsr.github.io/blog/2021/form-tools/ CVE-2021-38144 - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md -CVE-2021-38145 - https://bernardofsr.github.io/blog/2021/form-tools/ CVE-2021-38145 - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md CVE-2021-38146 - http://packetstormsecurity.com/files/164970/Wipro-Holmes-Orchestrator-20.4.1-Arbitrary-File-Download.html CVE-2021-38147 - http://packetstormsecurity.com/files/165039/Wipro-Holmes-Orchestrator-20.4.1-Report-Disclosure.html @@ -77812,12 +76293,7 @@ CVE-2021-38162 - http://packetstormsecurity.com/files/166964/SAP-Web-Dispatcher- CVE-2021-3817 - http://packetstormsecurity.com/files/165377/WBCE-CMS-1.5.1-Admin-Password-Reset.html CVE-2021-3817 - https://huntr.dev/bounties/c330dc0d-220a-4b15-b785-5face4cf6ef7 CVE-2021-38177 - http://packetstormsecurity.com/files/165749/SAP-CommonCryptoLib-Null-Pointer-Dereference.html -CVE-2021-38178 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 -CVE-2021-38179 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 CVE-2021-3818 - https://huntr.dev/bounties/c2bc65af-7b93-4020-886e-8cdaeb0a58ea -CVE-2021-38180 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 -CVE-2021-38181 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 -CVE-2021-38183 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 CVE-2021-38185 - https://github.com/fangqyi/cpiopwn CVE-2021-38198 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.11 CVE-2021-38199 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4 @@ -78248,8 +76724,6 @@ CVE-2021-40180 - https://arxiv.org/pdf/2205.15202.pdf CVE-2021-40186 - https://appcheck-ng.com/dnn-cms-server-side-request-forgery-cve-2021-40186 CVE-2021-4019 - https://huntr.dev/bounties/d8798584-a6c9-4619-b18f-001b9a6fca92 CVE-2021-4020 - https://huntr.dev/bounties/9814baa8-7bdd-4e31-a132-d9d15653409e -CVE-2021-40212 - https://a-man-in-the-cookie.blogspot.com -CVE-2021-40212 - https://a-man-in-the-cookie.blogspot.com/2021/08/PotPlayer-Critical-Memory-Access-Violation-Vulnerability.html CVE-2021-40219 - https://github.com/iiSiLvEr/CVEs/tree/main/CVE-2021-40219 CVE-2021-40222 - https://github.com/asang17/CVE-2021-RCE CVE-2021-4026 - https://huntr.dev/bounties/c6dfa80d-43e6-4b49-95af-cc031bb66b1d @@ -78269,13 +76743,9 @@ CVE-2021-40310 - https://www.youtube.com/watch?v=aPKPUDmmYpc CVE-2021-4032 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f7d8a19f9a056a05c5c509fa65af472a322abfee CVE-2021-40326 - https://www.foxit.com/support/security-bulletins.html CVE-2021-4033 - https://huntr.dev/bounties/e05be1f7-d00c-4cfd-9390-ccd9d1c737b7 -CVE-2021-40337 - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2021-40338 - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch -CVE-2021-40339 - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch CVE-2021-4034 - http://packetstormsecurity.com/files/166196/Polkit-pkexec-Local-Privilege-Escalation.html CVE-2021-4034 - http://packetstormsecurity.com/files/166200/Polkit-pkexec-Privilege-Escalation.html CVE-2021-4034 - https://www.oracle.com/security-alerts/cpuapr2022.html -CVE-2021-40340 - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch CVE-2021-40352 - http://packetstormsecurity.com/files/164011/OpenEMR-6.0.0-Insecure-Direct-Object-Reference.html CVE-2021-4037 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=01ea173e103e CVE-2021-4037 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848 @@ -78322,7 +76792,6 @@ CVE-2021-40418 - https://talosintelligence.com/vulnerability_reports/TALOS-2021- CVE-2021-40419 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1428 CVE-2021-40420 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1429 CVE-2021-40422 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1431 -CVE-2021-40423 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1432 CVE-2021-40424 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1433 CVE-2021-40425 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1433 CVE-2021-40426 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1434 @@ -78336,13 +76805,7 @@ CVE-2021-40449 - http://packetstormsecurity.com/files/164926/Win32k-NtGdiResetDC CVE-2021-4045 - http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.html CVE-2021-40476 - http://packetstormsecurity.com/files/164942/Microsoft-Windows-WSAQuerySocketSecurity-AppContainer-Privilege-Escalation.html CVE-2021-4049 - https://huntr.dev/bounties/62408fa4-2c16-4fcd-8b34-41fcdccb779e -CVE-2021-40495 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 -CVE-2021-40496 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 -CVE-2021-40497 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 -CVE-2021-40498 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 -CVE-2021-40499 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 CVE-2021-4050 - https://huntr.dev/bounties/27eb39d7-7636-4c4b-922c-a2f8fbe1ba05 -CVE-2021-40500 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 CVE-2021-40509 - http://packetstormsecurity.com/files/164045/jforum-2.7.0-Cross-Site-Scripting.html CVE-2021-40509 - http://seclists.org/fulldisclosure/2021/Sep/13 CVE-2021-40509 - https://lists.openwall.net/full-disclosure/2021/09/03/7 @@ -78502,7 +76965,6 @@ CVE-2021-41097 - https://github.com/aurelia/path/issues/44 CVE-2021-41099 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-4110 - https://huntr.dev/bounties/4ce5dc47-2512-4c87-8609-453adc8cad20 CVE-2021-4111 - https://huntr.dev/bounties/8afc8981-baff-4082-b640-be535b29eb9a -CVE-2021-41110 - https://www.fatalerrors.org/a/analysis-of-the-snakeyaml-deserialization-in-java-security.html CVE-2021-41116 - https://www.sonarsource.com/blog/securing-developer-tools-package-managers/ CVE-2021-41131 - https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-wjw6-2cqr-j4qr CVE-2021-41146 - https://github.com/qutebrowser/qutebrowser/commit/8f46ba3f6dc7b18375f7aa63c48a1fe461190430 @@ -78630,9 +77092,6 @@ CVE-2021-41550 - https://leostream.com/wp-content/uploads/2018/11/Leostream_rele CVE-2021-41550 - https://www.leostream.com/resource/leostream-connection-broker-9-0/ CVE-2021-41551 - https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf CVE-2021-41551 - https://www.leostream.com/resource/leostream-connection-broker-9-0/ -CVE-2021-41553 - https://www.gruppotim.it/redteam -CVE-2021-41554 - https://www.gruppotim.it/redteam -CVE-2021-41555 - https://www.gruppotim.it/redteam CVE-2021-41556 - https://blog.sonarsource.com/squirrel-vm-sandbox-escape/ CVE-2021-41557 - http://packetstormsecurity.com/files/165278/Sofico-Miles-RIA-2020.2-Build-127964T-Cross-Site-Scripting.html CVE-2021-41559 - https://github.com/silverstripe/silverstripe-framework/releases @@ -78651,12 +77110,6 @@ CVE-2021-41617 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-41617 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-41617 - https://www.tenable.com/plugins/nessus/154174 CVE-2021-4162 - https://huntr.dev/bounties/e204a768-2129-4b6f-abad-e436309c7c32 -CVE-2021-41634 - https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ -CVE-2021-41635 - https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ -CVE-2021-41636 - https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ -CVE-2021-41637 - https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ -CVE-2021-41638 - https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ -CVE-2021-41639 - https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ CVE-2021-4164 - https://huntr.dev/bounties/2debace1-a0f3-45c1-95fa-9d0512680758 CVE-2021-41641 - https://github.com/denoland/deno/issues/12152 CVE-2021-41643 - https://www.exploit-db.com/exploits/50306 @@ -78724,7 +77177,6 @@ CVE-2021-4179 - https://huntr.dev/bounties/8df06513-c57d-4a55-9798-0a1f6c153535 CVE-2021-41794 - https://research.nccgroup.com/2021/10/06/technical-advisory-open5gs-stack-buffer-overflow-during-pfcp-session-establishment-on-upf-cve-2021-41794 CVE-2021-4181 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2021-4182 - https://www.oracle.com/security-alerts/cpuapr2022.html -CVE-2021-41821 - https://documentation.wazuh.com/current/release-notes/release_4_2_0.html CVE-2021-41823 - https://pastebin.com/kpx9Nvbf CVE-2021-41825 - https://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af CVE-2021-41826 - http://packetstormsecurity.com/files/164345/PlaceOS-1.2109.1-Open-Redirection.html @@ -78832,7 +77284,6 @@ CVE-2021-42216 - https://huntr.dev/bounties/419f4e8a-ee15-4f80-bcbf-5c83513515dd CVE-2021-4222 - https://packetstormsecurity.com/files/160800/ CVE-2021-4222 - https://wpscan.com/vulnerability/6df5f5b1-f10b-488e-80b3-2c024bbb8c78 CVE-2021-42220 - https://packetstormsecurity.com/files/164544/Dolibarr-ERP-CRM-14.0.2-Cross-Site-Scripting-Privilege-Escalation.html -CVE-2021-42220 - https://truedigitalsecurity.com/advisory-summary-2021 CVE-2021-42223 - https://www.exploit-db.com/exploits/50386 CVE-2021-42224 - http://packetstormsecurity.com/files/164514/IFSC-Code-Finder-Project-1.0-SQL-Injection.html CVE-2021-42224 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42224 @@ -78893,10 +77344,8 @@ CVE-2021-42385 - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities- CVE-2021-42386 - https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog CVE-2021-42386 - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ CVE-2021-42392 - https://www.oracle.com/security-alerts/cpuapr2022.html -CVE-2021-4240 - https://huntr.dev/bounties/2-phpservermon/phpservermon/ CVE-2021-4240 - https://vuldb.com/?id.213717 CVE-2021-4241 - https://github.com/phpservermon/phpservermon/commit/bb10a5f3c68527c58073258cb12446782d223bc3 -CVE-2021-4241 - https://huntr.dev/bounties/1-phpservermon/phpservermon/ CVE-2021-4241 - https://vuldb.com/?id.213744 CVE-2021-4242 - https://blog.csdn.net/qq_44159028/article/details/114590267 CVE-2021-4242 - https://vuldb.com/?id.214592 @@ -78918,7 +77367,6 @@ CVE-2021-42564 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisorie CVE-2021-42565 - https://www.redteam-pentesting.de/advisories/rt-sa-2021-001 CVE-2021-42566 - https://www.redteam-pentesting.de/advisories/rt-sa-2021-001 CVE-2021-42568 - https://support.sonatype.com -CVE-2021-42568 - https://support.sonatype.com/hc/en-us/articles/4408801690515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021 CVE-2021-42575 - https://www.oracle.com/security-alerts/cpujan2022.html CVE-2021-42575 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-42580 - http://packetstormsecurity.com/files/164985/Online-Learning-System-2.0-Remote-Code-Execution.html @@ -79040,7 +77488,6 @@ CVE-2021-42913 - https://medium.com/@windsormoreira/samsung-printer-scx-6x55x-im CVE-2021-42913 - https://security.samsungmobile.com/securityUpdate.smsb CVE-2021-42917 - https://github.com/xbmc/xbmc/issues/20305 CVE-2021-42917 - https://github.com/xbmc/xbmc/pull/20306 -CVE-2021-42940 - https://truedigitalsecurity.com/services/penetration-testing-services/advisory-summary-2.2022-cve-2021-42940 CVE-2021-42943 - https://devbrain.com.br/index.php/2022/05/16/cve-2021-42943/ CVE-2021-42950 - http://zepl.com CVE-2021-42951 - http://algorithmia.com @@ -79132,7 +77579,6 @@ CVE-2021-43130 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43 CVE-2021-43130 - https://www.exploit-db.com/exploits/50158 CVE-2021-43136 - http://packetstormsecurity.com/files/164930/FormaLMS-2.4.4-Authentication-Bypass.html CVE-2021-43136 - https://blog.hacktivesecurity.com -CVE-2021-43136 - https://blog.hacktivesecurity.com/index.php/2021/10/05/cve-2021-43136-formalms-the-evil-default-value-that-leads-to-authentication-bypass/ CVE-2021-43137 - https://www.exploit-db.com/exploits/50461 CVE-2021-43140 - http://packetstormsecurity.com/files/164968/Simple-Subscription-Website-1.0-SQL-Injection.html CVE-2021-43140 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43140 @@ -79161,7 +77607,6 @@ CVE-2021-43286 - https://blog.sonarsource.com/gocd-vulnerability-chain CVE-2021-43288 - https://blog.sonarsource.com/gocd-vulnerability-chain CVE-2021-43289 - https://blog.sonarsource.com/gocd-vulnerability-chain CVE-2021-43290 - https://blog.sonarsource.com/gocd-vulnerability-chain -CVE-2021-43293 - https://support.sonatype.com/hc/en-us/articles/4409326330003 CVE-2021-43306 - https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/ CVE-2021-43307 - https://research.jfrog.com/vulnerabilities/semver-regex-redos-xray-211349/ CVE-2021-43308 - https://research.jfrog.com/vulnerabilities/markdown-link-extractor-redos-xray-211350/ @@ -79180,7 +77625,6 @@ CVE-2021-43329 - https://cxsecurity.com/issue/WLB-2021110057 CVE-2021-43329 - https://packetstormsecurity.com/files/164947/Mumara-Classic-2.93-SQL-Injection.html CVE-2021-43329 - https://packetstormsecurity.com/files/164947/mumaraclassic293-sql.txt CVE-2021-43329 - https://vulners.com/zdt/1337DAY-ID-37036 -CVE-2021-43329 - https://www.cyberdetails.org/2021/11/mumara-classic-293-sql-injection.html CVE-2021-43329 - https://www.exploit-db.com/exploits/50518 CVE-2021-43329 - https://www.gen.net.uk/about-us/news/50-exploit-db/18335-webapps-mumara-classic-293-license-sql-injection-unauthenticated CVE-2021-43334 - https://www.cygenta.co.uk/post/buddyboss @@ -79319,7 +77763,6 @@ CVE-2021-43863 - https://github.com/nextcloud/android/security/advisories/GHSA-v CVE-2021-43890 - https://www.bleepingcomputer.com/news/microsoft/microsoft-disables-msix-protocol-handler-abused-in-malware-attacks/ CVE-2021-43893 - http://packetstormsecurity.com/files/165560/Microsoft-Windows-EFSRPC-Arbitrary-File-Upload-Privilege-Escalation.html CVE-2021-43936 - http://packetstormsecurity.com/files/165252/WebHMI-4.0-Remote-Code-Execution.html -CVE-2021-43960 - https://www.surecloud.com/resources/blog/lorensbergs-connect2-cross-site-scripting CVE-2021-43961 - https://support.sonatype.com/hc/en-us/articles/4412183372307 CVE-2021-43969 - https://www.assurainc.com/assura-announces-discovery-of-two-vulnerabilities-in-quicklert-for-digium-switchvox/amp-on/ CVE-2021-43970 - https://www.assurainc.com/assura-announces-discovery-of-two-vulnerabilities-in-quicklert-for-digium-switchvox/amp-on/ @@ -79335,12 +77778,6 @@ CVE-2021-44033 - http://packetstormsecurity.com/files/165027/Ionic-Identity-Vaul CVE-2021-44035 - https://www.wolterskluwer.com/en/solutions/teammate CVE-2021-44036 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-059.txt CVE-2021-44037 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-060.txt -CVE-2021-44041 - https://docs.uipath.com/robot/docs/release-notes-2021-10-4 -CVE-2021-44041 - https://docs.uipath.com/robot/docs/uipath-assistant -CVE-2021-44042 - https://docs.uipath.com/robot/docs/release-notes-2021-10-4 -CVE-2021-44042 - https://docs.uipath.com/robot/docs/uipath-assistant -CVE-2021-44043 - https://docs.uipath.com/apps/v2021.10/docs/2021-10-1 -CVE-2021-44043 - https://docs.uipath.com/robot/docs/uipath-assistant CVE-2021-44049 - https://hencohen10.medium.com/cyberark-endpoint-manager-local-privilege-escalation-cve-2021-44049-67cd5e62c3d2 CVE-2021-44076 - https://labs.nettitude.com/blog/cve-2021-44076-cross-site-scripting-xss-in-crushftp/ CVE-2021-44077 - http://packetstormsecurity.com/files/165400/ManageEngine-ServiceDesk-Plus-Remote-Code-Execution.html @@ -79414,11 +77851,9 @@ CVE-2021-44259 - https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLI CVE-2021-44260 - https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_first.md CVE-2021-44261 - https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md CVE-2021-44262 - https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_second.md -CVE-2021-44263 - https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248 CVE-2021-44280 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44280 CVE-2021-44315 - https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/blob/master/Directory%20listing/Report_Directory%20listing.pdf CVE-2021-44315 - https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/tree/master/Directory%20listing -CVE-2021-4432 - https://0day.today/exploit/description/36412 CVE-2021-4432 - https://packetstormsecurity.com/files/163104/PCMan-FTP-Server-2.0.7-Denial-Of-Service.html CVE-2021-4432 - https://vuldb.com/?id.250719 CVE-2021-4433 - https://packetstormsecurity.com/files/163138/Sami-HTTP-Server-2.0-Denial-Of-Service.html @@ -79509,7 +77944,6 @@ CVE-2021-4445 - https://wpscan.com/vulnerability/2e5b3608-1dfc-468f-b3ae-12ce7c2 CVE-2021-44460 - https://github.com/odoo/odoo/issues/107685 CVE-2021-44479 - https://github.com/Xen1thLabs-AE/CVE-2021-40154 CVE-2021-4449 - https://wpscan.com/vulnerability/07259a61-8ba9-4dd0-8d52-cc1df389c0ad -CVE-2021-44521 - https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-functions-for-remote-code-execution/ CVE-2021-44529 - http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html CVE-2021-44529 - http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html CVE-2021-44531 - https://www.oracle.com/security-alerts/cpuapr2022.html @@ -79731,8 +78165,6 @@ CVE-2021-45417 - https://www.ipi.fi/pipermail/aide/2022-January/001713.html CVE-2021-45417 - https://www.openwall.com/lists/oss-security/2022/01/20/3 CVE-2021-45418 - https://github.com/shortmore/trsh/blob/main/starcharge/CVE-2021-45418.md CVE-2021-45419 - https://github.com/shortmore/trsh/blob/main/starcharge/CVE-2021-45419.md -CVE-2021-45420 - https://www.swascan.com/emerson -CVE-2021-45421 - https://www.swascan.com/emerson CVE-2021-45422 - https://seclists.org/fulldisclosure/2022/Jan/31 CVE-2021-45422 - https://www.getinfosec.news/13202933/reprise-license-manager-142-reflected-cross-site-scripting#/ CVE-2021-45423 - https://github.com/merces/libpe/issues/35 @@ -79872,7 +78304,6 @@ CVE-2021-45894 - https://syss.de CVE-2021-45894 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-066.txt CVE-2021-45897 - https://github.com/manuelz120/CVE-2021-45897 CVE-2021-45901 - http://packetstormsecurity.com/files/165989/ServiceNow-Orlando-Username-Enumeration.html -CVE-2021-45901 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/servicenow-username-enumeration-vulnerability-cve-2021-45901/ CVE-2021-45901 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ CVE-2021-45904 - https://bugs.openwrt.org/index.php?do=details&task_id=4199 CVE-2021-45905 - https://bugs.openwrt.org/index.php?do=details&task_id=4199 @@ -79882,7 +78313,6 @@ CVE-2021-45908 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002669 CVE-2021-45909 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002668 CVE-2021-45910 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002667 CVE-2021-45911 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002687 -CVE-2021-45919 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/from-stored-xss-to-rce-using-beef-and-elfinder-cve-2021-45919/ CVE-2021-45935 - https://github.com/osamu620/OpenHTJ2K CVE-2021-45943 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2021-45966 - https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html @@ -79921,7 +78351,6 @@ CVE-2021-46109 - https://drive.google.com/drive/folders/1GAOuZwPB-upkpjPgjB8qLIK CVE-2021-46113 - https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#cve-2021-46113 CVE-2021-46113 - https://www.youtube.com/watch?v=gnSMrvV5e9w CVE-2021-46122 - https://k4m1ll0.com/cve-tplink-tlwr840n-euV620-password-reset.html -CVE-2021-46167 - http://wizplat.com/PRODUCT1_3/?idx=217 CVE-2021-46168 - https://github.com/nimble-code/Spin/issues/56 CVE-2021-46169 - https://github.com/nimble-code/Modex/issues/10 CVE-2021-46170 - https://github.com/jerryscript-project/jerryscript/issues/4917 @@ -80023,7 +78452,6 @@ CVE-2021-46381 - https://www.dlink.com/en/security-bulletin/ CVE-2021-46382 - https://drive.google.com/drive/folders/1NOIoT8yE_HDoLVYhchml5E2Za3Oo6V9Y?usp=sharing CVE-2021-46387 - http://packetstormsecurity.com/files/166189/Zyxel-ZyWALL-2-Plus-Cross-Site-Scripting.html CVE-2021-46387 - https://drive.google.com/drive/folders/1_XfWBLqxT2Mqt7uB663Sjlc62pE8-rcN?usp=sharing -CVE-2021-46388 - https://drive.google.com/drive/folders/1FDtxZayLeSITcqP72c7FsTOpAFGFePVE CVE-2021-46393 - https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX3/3 CVE-2021-46394 - https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX3/4 CVE-2021-46398 - http://packetstormsecurity.com/files/165885/FileBrowser-2.17.2-Code-Execution-Cross-Site-Request-Forgery.html @@ -80187,7 +78615,6 @@ CVE-2021-46656 - https://www.bentley.com/en/common-vulnerability-exposure/BE-202 CVE-2021-46700 - https://github.com/saitoha/libsixel/issues/158 CVE-2021-46702 - https://www.sciencedirect.com/science/article/pii/S0167404821001358 CVE-2021-46708 - https://security.snyk.io/vuln/SNYK-JS-SWAGGERUIDIST-2314884 -CVE-2021-46709 - https://bitbucket.org/phpliteadmin/public/issues/399/xss-vulnerability CVE-2021-46743 - https://github.com/firebase/php-jwt/issues/351 CVE-2021-46744 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1033 CVE-2021-46748 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 @@ -81041,7 +79468,6 @@ CVE-2022-1250 - https://wpscan.com/vulnerability/1f8cb0b9-7447-44db-8d13-292db5b CVE-2022-1251 - https://wpscan.com/vulnerability/34b3fc35-381a-4bd7-87e3-f1ef0a15a349 CVE-2022-1252 - https://0g.vc/posts/insecure-cipher-gnuboard5/ CVE-2022-1252 - https://huntr.dev/bounties/c8c2c3e1-67d0-4a11-a4d4-11af567a9ebb -CVE-2022-1253 - https://huntr.dev/bounties/1-other-strukturag/libde265 CVE-2022-1254 - https://kc.mcafee.com/corporate/index?page=content&id=SB10381 CVE-2022-1255 - https://wpscan.com/vulnerability/22fe68c4-8f47-491e-be87-5e8e40535a82 CVE-2022-1256 - https://kc.mcafee.com/corporate/index?page=content&id=SB10382 @@ -81691,7 +80117,6 @@ CVE-2022-2112 - https://huntr.dev/bounties/e57c36e7-fa39-435f-944a-3a52ee066f73 CVE-2022-21122 - https://snyk.io/vuln/SNYK-JS-METACALC-2826197 CVE-2022-21129 - https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747 CVE-2022-2113 - https://huntr.dev/bounties/4cae8442-c042-43c2-ad89-6f666eaf3d57 -CVE-2022-21134 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1447 CVE-2022-2114 - https://wpscan.com/vulnerability/59911ba4-fa06-498a-9e7c-0c337cce691c CVE-2022-21144 - https://snyk.io/vuln/SNYK-JS-LIBXMLJS-2348756 CVE-2022-21145 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442 @@ -81722,7 +80147,6 @@ CVE-2022-21191 - https://security.snyk.io/vuln/SNYK-JS-GLOBALMODULESPATH-3167973 CVE-2022-21192 - https://gist.github.com/lirantal/9ccdfda0edcb95e36d07a04b0b6c2db0 CVE-2022-21192 - https://security.snyk.io/vuln/SNYK-JS-SERVELITE-3149916 CVE-2022-21195 - https://snyk.io/vuln/SNYK-PYTHON-URLREGEX-2347643 -CVE-2022-21199 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1448 CVE-2022-21201 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1456 CVE-2022-21208 - https://security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988723 CVE-2022-21210 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1444 @@ -81730,7 +80154,6 @@ CVE-2022-21211 - https://snyk.io/vuln/SNYK-JS-POSIX-2400719 CVE-2022-21213 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2870623 CVE-2022-21213 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2870622 CVE-2022-21213 - https://snyk.io/vuln/SNYK-JS-MOUT-2342654 -CVE-2022-21217 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1445 CVE-2022-2122 - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225 CVE-2022-21222 - https://security.snyk.io/vuln/SNYK-JS-CSSWHAT-3035488 CVE-2022-21223 - https://snyk.io/vuln/SNYK-RUBY-COCOAPODSDOWNLOADER-2414280 @@ -82182,10 +80605,8 @@ CVE-2022-21723 - http://packetstormsecurity.com/files/166227/Asterisk-Project-Se CVE-2022-2173 - https://wpscan.com/vulnerability/86bfe0cc-a579-43d6-a26b-6e06000251f6 CVE-2022-2174 - https://huntr.dev/bounties/ac68e3fc-8cf1-4a62-90ee-95c4b2bad607 CVE-2022-2175 - https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55 -CVE-2022-21796 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1451 CVE-2022-21797 - https://security.snyk.io/vuln/SNYK-PYTHON-JOBLIB-3027033 CVE-2022-2180 - https://wpscan.com/vulnerability/c330f92b-1e21-414f-b316-d5e97cb62bd1 -CVE-2022-21801 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1450 CVE-2022-21802 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2936781 CVE-2022-21802 - https://security.snyk.io/vuln/SNYK-JS-GRAPESJS-2935960 CVE-2022-21803 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2632450 @@ -82517,10 +80938,8 @@ CVE-2022-23102 - http://packetstormsecurity.com/files/165966/SIEMENS-SINEMA-Remo CVE-2022-23102 - http://seclists.org/fulldisclosure/2022/Feb/20 CVE-2022-23103 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1462 CVE-2022-2311 - https://wpscan.com/vulnerability/287a14dc-d1fc-481d-84af-7eb172dc68c9 -CVE-2022-23119 - https://success.trendmicro.com/solution/000290104 CVE-2022-23119 - https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt CVE-2022-2312 - https://wpscan.com/vulnerability/7548c1fb-77b5-4290-a297-35820edfe0f8 -CVE-2022-23120 - https://success.trendmicro.com/solution/000290104 CVE-2022-23120 - https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt CVE-2022-2313 - https://kcm.trellix.com/corporate/index?page=content&id=SB10385&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_US CVE-2022-2314 - https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82 @@ -82541,7 +80960,6 @@ CVE-2022-23221 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2022-23221 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2022-23227 - https://github.com/pedrib/PoC/blob/master/advisories/NUUO/nuuo_nvrmini_round2.mkd CVE-2022-23227 - https://github.com/rapid7/metasploit-framework/pull/16044 -CVE-2022-23227 - https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-device CVE-2022-2325 - https://wpscan.com/vulnerability/c8dcd7a7-5ad4-452c-a6a5-2362986656e4 CVE-2022-2326 - https://gitlab.com/gitlab-org/gitlab/-/issues/356665 CVE-2022-23277 - http://packetstormsecurity.com/files/168131/Microsoft-Exchange-Server-ChainedSerializationBinder-Remote-Code-Execution.html @@ -82655,7 +81073,6 @@ CVE-2022-2376 - https://wpscan.com/vulnerability/437c4330-376a-4392-86c6-c4c7ed9 CVE-2022-2377 - https://wpscan.com/vulnerability/f4e606e9-0664-42fb-a59b-21de306eb530 CVE-2022-23772 - https://www.oracle.com/security-alerts/cpujul2022.html CVE-2022-23773 - https://www.oracle.com/security-alerts/cpujul2022.html -CVE-2022-23774 - https://docs.docker.com/docker-for-windows/release-notes/ CVE-2022-2378 - https://wpscan.com/vulnerability/3f4e8fe5-1c92-49ad-b709-a40749c80596 CVE-2022-2379 - https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6 CVE-2022-23793 - http://packetstormsecurity.com/files/166546/Joomla-4.1.0-Zip-Slip-File-Overwrite-Path-Traversal.html @@ -82711,7 +81128,6 @@ CVE-2022-23919 - https://talosintelligence.com/vulnerability_reports/TALOS-2022- CVE-2022-2392 - https://wpscan.com/vulnerability/5001ed18-858e-4c9d-9d7b-a1305fcdf61b CVE-2022-23923 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2441254 CVE-2022-23923 - https://snyk.io/vuln/SNYK-JS-JAILED-2391490 -CVE-2022-23935 - https://gist.github.com/ert-plus/1414276e4cb5d56dd431c2f0429e4429 CVE-2022-23940 - https://github.com/manuelz120 CVE-2022-23943 - https://www.oracle.com/security-alerts/cpuapr2022.html CVE-2022-23946 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EMCGSSP3FIWCSL2KXVXLF35JYZKZE5Q/ @@ -83143,7 +81559,6 @@ CVE-2022-2535 - https://wpscan.com/vulnerability/0e13c375-044c-4c2e-ab8e-48cb89d CVE-2022-25350 - https://security.snyk.io/vuln/SNYK-JS-PUPPETFACTER-3175616 CVE-2022-25352 - https://snyk.io/vuln/SNYK-JS-LIBNESTED-2342117 CVE-2022-25354 - https://snyk.io/vuln/SNYK-JS-SETIN-2388571 -CVE-2022-25356 - https://www.swascan.com/security-advisory-alt-n-security-gateway/ CVE-2022-25359 - https://packetstormsecurity.com/files/166103/ICL-ScadaFlex-II-SCADA-Controllers-SC-1-SC-2-1.03.07-Remote-File-Modification.html CVE-2022-2536 - https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2022-2536.txt CVE-2022-2536 - https://packetstormsecurity.com/files/168120/wptransposh1081-authz.txt @@ -83531,10 +81946,6 @@ CVE-2022-26180 - https://www.exploit-db.com/exploits/50854 CVE-2022-26181 - https://github.com/dropbox/lepton/issues/154 CVE-2022-26183 - https://www.sonarsource.com/blog/securing-developer-tools-package-managers/ CVE-2022-26184 - https://www.sonarsource.com/blog/securing-developer-tools-package-managers/ -CVE-2022-26186 - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ -CVE-2022-26187 - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ -CVE-2022-26188 - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ -CVE-2022-26189 - https://doudoudedi.github.io/2022/02/21/TOTOLINK-N600R-Command-Injection/ CVE-2022-26197 - https://gist.github.com/CrimsonHamster/1aeec6db0d740de6ed4690f6a975f377 CVE-2022-26211 - https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_25/25.md CVE-2022-26233 - http://packetstormsecurity.com/files/166577/Barco-Control-Room-Management-Suite-Directory-Traversal.html @@ -83648,7 +82059,6 @@ CVE-2022-26642 - https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/ CVE-2022-2665 - https://vuldb.com/?id.205615 CVE-2022-26651 - http://packetstormsecurity.com/files/166746/Asterisk-Project-Security-Advisory-AST-2022-003.html CVE-2022-26653 - https://raxis.com/blog/cve-2022-26653-and-cve-2022-26777 -CVE-2022-26659 - https://docs.docker.com/docker-for-windows/release-notes/ CVE-2022-2667 - https://vuldb.com/?id.205619 CVE-2022-2669 - https://wpscan.com/vulnerability/792d9f22-abf6-47b2-a247-d0cdb705cd81 CVE-2022-26702 - http://seclists.org/fulldisclosure/2023/Mar/21 @@ -84045,8 +82455,6 @@ CVE-2022-28282 - https://bugzilla.mozilla.org/show_bug.cgi?id=1751609 CVE-2022-28286 - https://bugzilla.mozilla.org/show_bug.cgi?id=1735265 CVE-2022-28287 - https://bugzilla.mozilla.org/show_bug.cgi?id=1741515 CVE-2022-2829 - https://huntr.dev/bounties/d6eaa453-9758-41b7-8c38-fd878d6aeab4 -CVE-2022-28290 - https://cybersecurityworks.com/zerodays/cve-2022-28290-reflected-cross-site-scripting-in-welaunch.html -CVE-2022-28291 - https://cybersecurityworks.com/blog/zero-days/csw-expert-discovers-a-zero-day-vulnerability-in-tenables-nessus-scanner.html CVE-2022-2831 - https://developer.blender.org/T99705 CVE-2022-2832 - https://developer.blender.org/D15463 CVE-2022-2832 - https://developer.blender.org/T99706 @@ -84377,7 +82785,6 @@ CVE-2022-29303 - http://packetstormsecurity.com/files/167183/SolarView-Compact-6 CVE-2022-29303 - https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing CVE-2022-29305 - https://github.com/helloxz/imgurl/issues/75 CVE-2022-29315 - https://the-it-wonders.blogspot.com/2022/04/csv-injection-in-acunetix-version.html -CVE-2022-2932 - https://huntr.dev/bounties/2-other-bustle/mobiledoc-kit CVE-2022-29320 - https://www.exploit-db.com/exploits/50859 CVE-2022-29321 - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/4 CVE-2022-29321 - https://www.dlink.com/en/security-bulletin/ @@ -84476,7 +82883,6 @@ CVE-2022-29587 - https://sec-consult.com/vulnerability-lab/advisory/sandbox-esca CVE-2022-29588 - http://packetstormsecurity.com/files/167166/Konica-Minolta-bizhub-MFP-Printer-Terminal-Sandbox-Escape.html CVE-2022-2959 - https://github.com/torvalds/linux/commit/189b0ddc245139af81198d1a3637cac74f96e13a CVE-2022-29593 - http://packetstormsecurity.com/files/167868/Dingtian-DT-R002-3.1.276A-Authentication-Bypass.html -CVE-2022-29593 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-29593-authentication-bypass-by-capture-replay-dingtian-dt-r002/ CVE-2022-29593 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ CVE-2022-29596 - https://github.com/haxpunk1337/Microstrategy-Poc/blob/main/poc CVE-2022-29597 - https://github.com/TheGetch/CVE-2022-29597 @@ -84495,7 +82901,6 @@ CVE-2022-29618 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c CVE-2022-29619 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html CVE-2022-29620 - https://whichbuffer.medium.com/filezilla-client-cleartext-storage-of-sensitive-information-in-memory-vulnerability-83958c1e1643 CVE-2022-29620 - https://youtu.be/ErZl1i7McHk -CVE-2022-29622 - https://medium.com/@zsolt.imre/is-cybersecurity-the-next-supply-chain-vulnerability-9a00de745022 CVE-2022-29622 - https://www.youtube.com/watch?v=C6QPKooxhAo CVE-2022-29631 - https://github.com/oblac/jodd-http/issues/9 CVE-2022-29631 - https://github.com/oblac/jodd/issues/787 @@ -84507,8 +82912,6 @@ CVE-2022-29642 - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R CVE-2022-29643 - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/6.md CVE-2022-29646 - https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/9.md CVE-2022-2965 - https://huntr.dev/bounties/61e3bdf7-3548-45ea-b105-967abc0977f4 -CVE-2022-29650 - https://hackmd.io/@d4rkp0w4r/Online_Food_Ordering_System_Unauthenticated_Sql_Injection -CVE-2022-29651 - https://hackmd.io/@d4rkp0w4r/Online_Food_Ordering_System_Remote_Code_Execution CVE-2022-29652 - https://packetstormsecurity.com/files/166641/Online-Sports-Complex-Booking-System-1.0-Cross-Site-Scripting.html CVE-2022-29654 - https://gist.github.com/naihsin/b96e2c5c2c81621b46557fd7aacd165f CVE-2022-29659 - https://packetstormsecurity.com/files/158391/responsiveonlineblog10poc-sql.txt @@ -84648,8 +83051,6 @@ CVE-2022-30003 - https://packetstormsecurity.com/files/168250/omps10-xss.txt CVE-2022-30004 - https://packetstormsecurity.com/files/168249/Online-Market-Place-Site-1.0-SQL-Injection.html CVE-2022-30014 - https://github.com/offsecin/bugsdisclose/blob/main/csrf CVE-2022-3002 - https://huntr.dev/bounties/d213d7ea-fe92-40b2-a1f9-2ba32dec50f5 -CVE-2022-30036 - https://parzival.sh/posts/Pwning-a-Lighting-Console-in-a-Few-Minutes/ -CVE-2022-30037 - https://weltolk.github.io/p/xunruicms-v4.3.3-to-v4.5.1-backstage-code-injection-vulnerabilityfile-write-and-file-inclusion/ CVE-2022-3004 - https://huntr.dev/bounties/461e5f8f-17cf-4be4-9149-111d0bd92d14 CVE-2022-30040 - https://github.com/Le1a/CVE-2022-30040 CVE-2022-30040 - https://github.com/Le1a/Tenda-AX1803-Denial-of-service @@ -84711,7 +83112,6 @@ CVE-2022-30274 - https://www.forescout.com/blog/ CVE-2022-30275 - https://www.forescout.com/blog/ CVE-2022-30276 - https://www.forescout.com/blog/ CVE-2022-30280 - https://www.gruppotim.it/it/footer/red-team.html -CVE-2022-30284 - https://www.swascan.com/security-advisory-libnmap-2/ CVE-2022-30286 - http://packetstormsecurity.com/files/167069/PyScript-2022-05-04-Alpha-Source-Code-Disclosure.html CVE-2022-30286 - https://cyber-guy.gitbook.io/cyber-guy/pocs/pyscript-file-read CVE-2022-30286 - https://www.exploit-db.com/exploits/50918 @@ -84747,7 +83147,6 @@ CVE-2022-30352 - https://www.exploit-db.com/exploits/50071 CVE-2022-3036 - https://wpscan.com/vulnerability/0dbc85dd-736c-492e-9db8-acb7195771aa CVE-2022-3037 - https://huntr.dev/bounties/af4c2f2d-d754-4607-b565-9e92f3f717b5 CVE-2022-3038 - http://packetstormsecurity.com/files/168596/Google-Chrome-103.0.5060.53-network-URLLoader-NotifyCompleted-Heap-Use-After-Free.html -CVE-2022-30422 - https://www.swascan.com/it/security-advisory-proietti-planet-time-enterprise-cve-2022-30422/ CVE-2022-30425 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5706.php CVE-2022-30426 - https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md CVE-2022-30427 - https://github.com/gphper/ginadmin/issues/8 @@ -84892,7 +83291,6 @@ CVE-2022-30926 - https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/18 CVE-2022-30927 - https://github.com/ykosan1/Simple-Task-Scheduling-System-id-SQL-Injection-Unauthenticated CVE-2022-30927 - https://www.sourcecodester.com/sites/default/files/download/oretnom23/tss.zip CVE-2022-30929 - https://github.com/AgainstTheLight/CVE-2022-30929 -CVE-2022-30930 - https://medium.com/@pmmali/my-second-cve-2022-30930-4f9aab047518 CVE-2022-30931 - https://medium.com/%40niteshbiwal2011/my-first-cve-2022-30931-e70b9cbecbba CVE-2022-30931 - https://medium.com/@niteshbiwal2011/my-first-cve-2022-30931-e70b9cbecbba CVE-2022-3096 - https://wpscan.com/vulnerability/46996537-a874-4b2e-9cd7-7d0832f9704d @@ -85000,7 +83398,6 @@ CVE-2022-31325 - https://www.nu11secur1ty.com/2022/06/cve-2022-31325.htm CVE-2022-3133 - https://huntr.dev/bounties/2d93052f-efc6-4647-9a6d-8b08dc251223 CVE-2022-3134 - https://huntr.dev/bounties/6ec79e49-c7ab-4cd6-a517-e7934c2eb9dc CVE-2022-3135 - https://wpscan.com/vulnerability/3505481d-141a-4516-bdbb-d4dad4e1eb01 -CVE-2022-31358 - https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/ CVE-2022-3136 - https://wpscan.com/vulnerability/913d7e78-23f6-4b0d-aca3-17051a2dc649 CVE-2022-31361 - https://www.swascan.com/security-advisory-docebo-community-edition/ CVE-2022-31362 - https://www.swascan.com/security-advisory-docebo-community-edition/ @@ -85286,7 +83683,6 @@ CVE-2022-3213 - https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb3640 CVE-2022-32159 - https://www.mend.io/vulnerability-database/CVE-2022-32159 CVE-2022-3216 - https://vuldb.com/?id.208606 CVE-2022-32167 - https://www.mend.io/vulnerability-database/CVE-2022-32167 -CVE-2022-32168 - https://www.mend.io/vulnerability-database/CVE-2022-32168 CVE-2022-32169 - https://www.mend.io/vulnerability-database/CVE-2022-32169 CVE-2022-3217 - https://www.tenable.com/security/research/tra-2022-31 CVE-2022-32170 - https://www.mend.io/vulnerability-database/CVE-2022-32170 @@ -85351,7 +83747,6 @@ CVE-2022-32274 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisorie CVE-2022-32275 - https://github.com/BrotherOfJhonny/grafana CVE-2022-32275 - https://github.com/BrotherOfJhonny/grafana/blob/main/README.md CVE-2022-32276 - https://github.com/BrotherOfJhonny/grafana/blob/main/README.md -CVE-2022-32277 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/squiz-matrix-cms-authenticated-privilege-escalation-through-idor/ CVE-2022-32282 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1545 CVE-2022-3229 - https://github.com/rapid7/metasploit-framework/pull/16989 CVE-2022-32294 - https://medium.com/@soheil.samanabadi/zimbra-8-8-15-zmprove-ca-command-incorrect-access-control-8088032638e @@ -85641,8 +84036,6 @@ CVE-2022-33996 - https://devolutions.net/security/advisories/DEVO-2022-0006 CVE-2022-34000 - https://github.com/libjxl/libjxl/issues/1477 CVE-2022-34001 - https://prisminfosec.com/cve-2022-34001/ CVE-2022-34002 - https://assura.atlassian.net/wiki/spaces/VULNS/pages/1843134469/CVE-2022-34002+Personnel+Data+Systems+PDS+Vista+7+-+Local+File+Inclusion -CVE-2022-34005 - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf -CVE-2022-34006 - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf CVE-2022-34007 - https://packetstormsecurity.com/files/167706/EQS-Integrity-Line-Cross-Site-Scripting-Information-Disclosure.html CVE-2022-34008 - https://r0h1rr1m.medium.com/comodo-antivirus-local-privilege-escalation-through-insecure-file-move-476a4601d9b8 CVE-2022-34020 - https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html @@ -85814,7 +84207,6 @@ CVE-2022-34757 - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-20 CVE-2022-34758 - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-04_Easergy_P5_Security_Notification.pdf CVE-2022-3477 - https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef CVE-2022-3481 - https://wpscan.com/vulnerability/c5e395f8-257e-49eb-afbd-9c1e26045373 -CVE-2022-34831 - https://support.keyfactor.com/s/detail/a6x1Q000000CwC5QAK CVE-2022-3484 - https://wpscan.com/vulnerability/3afaed61-6187-4915-acf0-16e79d5c2464 CVE-2022-34845 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1580 CVE-2022-34850 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1578 @@ -85827,9 +84219,7 @@ CVE-2022-3490 - https://wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca788 CVE-2022-34903 - http://www.openwall.com/lists/oss-security/2022/07/02/1 CVE-2022-34903 - https://www.openwall.com/lists/oss-security/2022/06/30/1 CVE-2022-34906 - https://claroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm/ -CVE-2022-34906 - https://kb.filewave.com/pages/viewpage.action?pageId=55544244 CVE-2022-34907 - https://claroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm/ -CVE-2022-34907 - https://kb.filewave.com/pages/viewpage.action?pageId=55544244 CVE-2022-3491 - https://huntr.dev/bounties/6e6e05c2-2cf7-4aa5-a817-a62007bf92cb CVE-2022-34914 - https://www.webswing.org/blog/header-injection-vulnerability-cve-2022-34914 CVE-2022-34918 - http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html @@ -85837,7 +84227,6 @@ CVE-2022-34918 - http://packetstormsecurity.com/files/168543/Netfilter-nft_set_e CVE-2022-34918 - http://www.openwall.com/lists/oss-security/2022/07/05/1 CVE-2022-34918 - https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452@randorisec.fr/T/#u CVE-2022-34918 - https://www.openwall.com/lists/oss-security/2022/07/02/3 -CVE-2022-34918 - https://www.randorisec.fr/crack-linux-firewall/ CVE-2022-34937 - https://github.com/u5cms/u5cms/issues/51 CVE-2022-3494 - https://wpscan.com/vulnerability/71db75c0-5907-4237-884f-8db88b1a9b34 CVE-2022-3495 - https://github.com/Hakcoder/Simple-Online-Public-Access-Catalog-OPAC---SQL-injection/blob/main/POC @@ -85962,11 +84351,8 @@ CVE-2022-3548 - https://vuldb.com/?id.211048 CVE-2022-3549 - https://github.com/Ramansh123454/POCs/blob/main/CSMS_RCE CVE-2022-35493 - https://github.com/Keyvanhardani/Exploit-eShop-Multipurpose-Ecommerce-Store-Website-3.0.4-Cross-Site-Scripting-XSS/blob/main/README.md CVE-2022-35503 - https://osm.etsi.org/ -CVE-2022-35503 - https://osm.etsi.org/news-events/blog/83-cve-2022-35503-disclosure CVE-2022-35505 - https://github.com/h3xduck/TripleCross/issues/40 CVE-2022-35506 - https://github.com/h3xduck/TripleCross/issues/40 -CVE-2022-35507 - https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/ -CVE-2022-35508 - https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/ CVE-2022-35513 - http://packetstormsecurity.com/files/168428/Blink1Control2-2.2.7-Weak-Password-Encryption.html CVE-2022-35513 - https://github.com/p1ckzi/CVE-2022-35513 CVE-2022-35516 - https://github.com/whitehatl/Vulnerability/blob/main/web/dedecms/5.7.93/Login.poc.md @@ -86140,16 +84526,10 @@ CVE-2022-36227 - https://github.com/libarchive/libarchive/issues/1754 CVE-2022-36231 - https://github.com/affix/CVE-2022-36231 CVE-2022-36234 - https://github.com/kashimAstro/SimpleNetwork/issues/22 CVE-2022-36251 - https://github.com/ZhenKaiHe/bug_report/blob/main/vendors/onetnom23/clinics-patient-management-system/XSS-1.md -CVE-2022-36254 - https://gist.github.com/ziyishen97/c464b459df73c4cef241e7ec774b7cf6 -CVE-2022-36255 - https://gist.github.com/ziyishen97/268678bca3034c64861b135946ee9fc3 CVE-2022-36255 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 -CVE-2022-36256 - https://gist.github.com/ziyishen97/0fd90a5939ffb401e8a74f4a415e1610 CVE-2022-36256 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 -CVE-2022-36257 - https://gist.github.com/ziyishen97/ff3816032a76796f45368ed243ab3343 CVE-2022-36257 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 -CVE-2022-36258 - https://gist.github.com/ziyishen97/3553468b534c250f7b0d47e8a4c5fa52 CVE-2022-36258 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 -CVE-2022-36259 - https://gist.github.com/ziyishen97/47666f584cd4cdad1d0f6af5f33a56db CVE-2022-36259 - https://github.com/sazanrjb/InventoryManagementSystem/issues/14 CVE-2022-3626 - https://gitlab.com/libtiff/libtiff/-/issues/426 CVE-2022-36262 - https://github.com/taogogo/taocms/issues/34 @@ -86335,7 +84715,6 @@ CVE-2022-3671 - https://vuldb.com/?id.212014 CVE-2022-36736 - https://github.com/UditChavda/Udit-Chavda-CVE/blob/main/CVE-2022-36736 CVE-2022-36755 - https://www.dlink.com/en/security-bulletin/ CVE-2022-36756 - https://www.dlink.com/en/security-bulletin/ -CVE-2022-36759 - https://hackmd.io/%40hieuleuxuan/OFOS_Sql_Injection CVE-2022-36759 - https://hackmd.io/@hieuleuxuan/OFOS_Sql_Injection CVE-2022-3677 - https://wpscan.com/vulnerability/5a7c6367-a3e6-4411-8865-2a9dbc9f1450 CVE-2022-36788 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1593 @@ -86493,9 +84872,6 @@ CVE-2022-37401 - https://www.openoffice.org/security/cves/CVE-2022-37401.html CVE-2022-3741 - https://huntr.dev/bounties/46f6e07e-f438-4540-938a-510047f987d0 CVE-2022-37415 - https://gist.github.com/alfarom256/220cb75816ca2b5556e7fc8d8d2803a0 CVE-2022-37416 - https://issuetracker.google.com/issues/231026247 -CVE-2022-37424 - https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/ -CVE-2022-37425 - https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/ -CVE-2022-37426 - https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/ CVE-2022-37434 - http://seclists.org/fulldisclosure/2022/Oct/37 CVE-2022-37434 - http://seclists.org/fulldisclosure/2022/Oct/38 CVE-2022-37434 - http://seclists.org/fulldisclosure/2022/Oct/41 @@ -86626,7 +85002,6 @@ CVE-2022-38124 - https://www.secomea.com/support/cybersecurity-advisory/ CVE-2022-3813 - https://github.com/axiomatic-systems/Bento4/files/9726974/POC_mp4edit_728838793.zip CVE-2022-3813 - https://github.com/axiomatic-systems/Bento4/issues/792 CVE-2022-3813 - https://vuldb.com/?id.212679 -CVE-2022-38131 - https://support.posit.co/hc/en-us/articles/10983374992023 CVE-2022-3814 - https://github.com/axiomatic-systems/Bento4/files/9727002/POC_mp4decrypt_477546304.zip CVE-2022-3814 - https://github.com/axiomatic-systems/Bento4/issues/792 CVE-2022-3814 - https://vuldb.com/?id.212680 @@ -86643,7 +85018,6 @@ CVE-2022-3816 - https://github.com/axiomatic-systems/Bento4/issues/792 CVE-2022-3817 - https://github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_1729452038.zip CVE-2022-3817 - https://github.com/axiomatic-systems/Bento4/issues/792 CVE-2022-38171 - https://github.com/jeffssh/CVE-2021-30860 -CVE-2022-38176 - https://www.ysoft.com/en/legal/ysoft-safeq-client-v3-local-privilege-escalation CVE-2022-38181 - http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html CVE-2022-38181 - https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/ CVE-2022-38183 - https://herolab.usd.de/security-advisories/usd-2022-0015/ @@ -86685,7 +85059,6 @@ CVE-2022-38314 - https://github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/ CVE-2022-3832 - https://wpscan.com/vulnerability/458ec2fd-4175-4cb4-b334-b63f6e643b92 CVE-2022-38325 - https://github.com/1160300418/Vuls/blob/main/Tenda/AC/Vul_expandDlnaFile.md CVE-2022-38326 - https://github.com/1160300418/Vuls/blob/main/Tenda/AC/Vul_NatStaticSetting.md -CVE-2022-38329 - https://albert5888.github.io/posts/CVE-2022-38329/ CVE-2022-38329 - https://github.com/albert5888/CVE-Issues/blob/main/CVE-2022-38329/file.md CVE-2022-38329 - https://github.com/zhangqiquan/shopxian_cms/issues/4 CVE-2022-3833 - https://wpscan.com/vulnerability/41096d40-83d4-40b4-9632-afef51e8b00e @@ -86959,7 +85332,6 @@ CVE-2022-3983 - https://wpscan.com/vulnerability/0b48bbd6-7c77-44b8-a5d6-34e4a07 CVE-2022-39831 - https://savannah.gnu.org/bugs/?62977 CVE-2022-39832 - https://savannah.gnu.org/bugs/index.php?63000 CVE-2022-39833 - https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c -CVE-2022-39834 - https://support.keyfactor.com/s/detail/a6x1Q000000CwCoQAK CVE-2022-39836 - https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/ CVE-2022-39836 - https://seclists.org/fulldisclosure/2022/Sep/24 CVE-2022-39837 - https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/ @@ -86974,11 +85346,9 @@ CVE-2022-3987 - https://wpscan.com/vulnerability/d9309a09-34ba-4e56-b683-e677ad2 CVE-2022-3989 - https://wpscan.com/vulnerability/1bd20329-f3a5-466d-81b0-e4ff0ca32091 CVE-2022-3993 - https://huntr.dev/bounties/bebd0cd6-18ec-469c-b6ca-19ffa9db0699 CVE-2022-3994 - https://wpscan.com/vulnerability/802a2139-ab48-4281-888f-225e6e3134aa -CVE-2022-39960 - https://gist.github.com/CveCt0r/ca8c6e46f536e9ae69fc6061f132463e CVE-2022-3997 - https://vuldb.com/?id.213698 CVE-2022-39974 - https://github.com/wasm3/wasm3/issues/379 CVE-2022-3998 - https://github.com/MonikaBrzica/scm/issues/1 -CVE-2022-39983 - https://www.swascan.com/it/vulnerability-report-instant-developer/ CVE-2022-39983 - https://www.tinextacyber.com/security-advisory-instant-developer-rd3-cve-2022-39983/ CVE-2022-39986 - http://packetstormsecurity.com/files/174190/RaspAP-2.8.7-Unauthenticated-Command-Injection.html CVE-2022-39986 - https://medium.com/%40ismael0x00/multiple-vulnerabilities-in-raspap-3c35e78809f2 @@ -87004,7 +85374,6 @@ CVE-2022-4004 - https://wpscan.com/vulnerability/6a3bcfb3-3ede-459d-969f-b7b30da CVE-2022-40043 - https://www.hakaioffensivesecurity.com/centreon-sqli-and-xss-vulnerability/ CVE-2022-40044 - https://www.hakaioffensivesecurity.com/centreon-sqli-and-xss-vulnerability/ CVE-2022-4005 - https://wpscan.com/vulnerability/61d5c9b8-5c21-4ab5-b31c-e13ca19ea25c -CVE-2022-40055 - https://blog.alphathreat.in/index.php?post/2022/10/01/Achieving-CVE-2022-40055 CVE-2022-40067 - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/9 CVE-2022-40068 - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/10 CVE-2022-40069 - https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/6 @@ -87140,7 +85509,6 @@ CVE-2022-40691 - https://talosintelligence.com/vulnerability_reports/TALOS-2022- CVE-2022-40693 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1616 CVE-2022-4070 - https://huntr.dev/bounties/72d426bb-b56e-4534-88ba-0d11381b0775 CVE-2022-40701 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1606 -CVE-2022-40711 - https://verneet.com/cve-2022-40711/ CVE-2022-40712 - https://www.gruppotim.it/it/footer/red-team.html CVE-2022-40713 - https://www.gruppotim.it/it/footer/red-team.html CVE-2022-40714 - https://www.gruppotim.it/it/footer/red-team.html @@ -87511,9 +85879,7 @@ CVE-2022-41847 - https://github.com/axiomatic-systems/Bento4/issues/750 CVE-2022-41847 - https://github.com/axiomatic-systems/Bento4/issues/775 CVE-2022-41884 - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jq6x-99hj-q636 CVE-2022-41912 - http://packetstormsecurity.com/files/170356/crewjam-saml-Signature-Bypass.html -CVE-2022-41924 - https://emily.id.au/tailscale CVE-2022-41924 - https://tailscale.com/security-bulletins/#ts-2022-004 -CVE-2022-41925 - https://emily.id.au/tailscale CVE-2022-41925 - https://tailscale.com/security-bulletins/#ts-2022-005 CVE-2022-41945 - https://github.com/4ra1n/super-xray/releases/tag/0.2-beta CVE-2022-41950 - https://github.com/4ra1n/super-xray/releases/tag/0.3-beta @@ -87604,7 +85970,6 @@ CVE-2022-42140 - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-delta CVE-2022-42141 - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-delta-electronics-dx-2100-l1-cn/ CVE-2022-4215 - https://gist.github.com/Xib3rR4dAr/417a11bcb9b8da28cfe5ba1c17c44d0e CVE-2022-42150 - https://github.com/eBPF-Research/eBPF-Attack/blob/main/PoC.md#attack-requirements -CVE-2022-42150 - https://hackmd.io/%40UR9gnr32QymtmtZHnZceOw/ry428EZGo CVE-2022-42150 - https://hackmd.io/@UR9gnr32QymtmtZHnZceOw/ry428EZGo CVE-2022-42156 - https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf CVE-2022-42156 - https://www.dlink.com/en/security-bulletin/ @@ -87860,7 +86225,6 @@ CVE-2022-42948 - https://www.cobaltstrike.com/blog/ CVE-2022-4295 - https://wpscan.com/vulnerability/4ced1a4d-0c1f-42ad-8473-241c68b92b56 CVE-2022-42953 - https://seclists.org/fulldisclosure/2022/Oct/23 CVE-2022-42953 - https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses -CVE-2022-42954 - https://support.keyfactor.com/s/detail/a6x1Q000000CwCjQAK CVE-2022-42964 - https://research.jfrog.com/vulnerabilities/pymatgen-redos-xray-257184/ CVE-2022-42965 - https://research.jfrog.com/vulnerabilities/snowflake-connector-python-redos-xray-257185/ CVE-2022-42966 - https://research.jfrog.com/vulnerabilities/cleo-redos-xray-257186/ @@ -88065,7 +86429,6 @@ CVE-2022-4366 - https://huntr.dev/bounties/f225d69a-d971-410d-a8f9-b0026143aed8 CVE-2022-43663 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1674 CVE-2022-43664 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1673 CVE-2022-43665 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1682 -CVE-2022-43675 - https://www.gruppotim.it/redteam CVE-2022-4368 - https://wpscan.com/vulnerability/fa7e2b64-ca48-4b76-a2c2-f5e31e42eab7 CVE-2022-43684 - http://packetstormsecurity.com/files/173354/ServiceNow-Insecure-Access-Control-Full-Admin-Compromise.html CVE-2022-43684 - https://x64.sh/posts/ServiceNow-Insecure-access-control-to-admin/ @@ -88075,7 +86438,6 @@ CVE-2022-4370 - https://wpscan.com/vulnerability/cf336783-9959-413d-a5d7-73c7087 CVE-2022-43701 - https://developer.arm.com/documentation/ka005596/latest CVE-2022-43702 - https://developer.arm.com/documentation/ka005596/latest CVE-2022-43703 - https://developer.arm.com/documentation/ka005596/latest -CVE-2022-43704 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-43704-capture-replay-vulnerability-in-sinilink-xy-wft1-thermostat/ CVE-2022-4371 - https://bulletin.iese.de/post/web-invoice_2-1-3_1 CVE-2022-4371 - https://wpscan.com/vulnerability/45f43359-98c2-4447-b51b-2d466bad8261 CVE-2022-43710 - https://service.gxsoftware.com @@ -88200,9 +86562,7 @@ CVE-2022-44215 - https://github.com/JBalanza/CVE-2022-44215 CVE-2022-44235 - https://github.com/liong007/Zed-3/issues/1 CVE-2022-4426 - https://wpscan.com/vulnerability/7d3d6b9c-d1c1-4e23-b891-7c72e4e89c38 CVE-2022-44262 - https://github.com/ff4j/ff4j/issues/624 -CVE-2022-44267 - https://www.metabaseq.com/imagemagick-zero-days/ CVE-2022-44268 - http://packetstormsecurity.com/files/171727/ImageMagick-7.1.0-48-Arbitrary-File-Read.html -CVE-2022-44268 - https://www.metabaseq.com/imagemagick-zero-days/ CVE-2022-44276 - https://github.com/HerrLeStrate/CVE-2022-44276-PoC CVE-2022-44279 - https://github.com/Onetpaer/bug_report/blob/main/vendors/mayuri_k/garage-management-system/xss1.md CVE-2022-44283 - https://packetstormsecurity.com/files/169427/AVS-Audio-Converter-10.3-Stack-Overflow.html @@ -88256,7 +86616,6 @@ CVE-2022-44724 - https://stiltsoft.atlassian.net/browse/VD-3 CVE-2022-44724 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-049.txt CVE-2022-44725 - https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/ CVE-2022-44726 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-050.txt -CVE-2022-44727 - https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf CVE-2022-4473 - https://wpscan.com/vulnerability/5117b2e9-75b5-459a-b22a-b0e1b0744bd3 CVE-2022-4474 - https://wpscan.com/vulnerability/3acc6940-13ec-40fb-8471-6b2f0445c543 CVE-2022-4475 - https://wpscan.com/vulnerability/3b5c377c-3148-4373-996c-89851d5e39e5 @@ -88400,7 +86759,6 @@ CVE-2022-45297 - https://github.com/tlfyyds/EQ CVE-2022-45299 - https://github.com/offalltn/CVE-2022-45299 CVE-2022-45313 - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2022-45313/README.md CVE-2022-45315 - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2022-45315/README.md -CVE-2022-45326 - https://www.navsec.net/2022/11/12/kwoksys-xxe.html CVE-2022-45332 - https://github.com/LibreDWG/libredwg/issues/524 CVE-2022-45337 - https://github.com/no1rr/Vulnerability/tree/master/Tenda/TX9Pro/1 CVE-2022-45343 - https://github.com/gpac/gpac/issues/2315 @@ -88415,14 +86773,7 @@ CVE-2022-4545 - https://wpscan.com/vulnerability/19f482cb-fcfd-43e6-9a04-143e063 CVE-2022-4546 - https://wpscan.com/vulnerability/009578b9-016d-49c2-9577-49756c35e1e8 CVE-2022-45460 - https://github.com/tothi/pwn-hisilicon-dvr/blob/master/pwn_hisilicon_dvr.py CVE-2022-4547 - https://wpscan.com/vulnerability/fe1514b4-74e1-4c19-8741-c0d4db9bab99 -CVE-2022-45477 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ -CVE-2022-45478 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ -CVE-2022-45479 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ CVE-2022-4548 - https://wpscan.com/vulnerability/0ff435bc-ea20-4993-98ae-1f61b1732b59 -CVE-2022-45480 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ -CVE-2022-45481 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ -CVE-2022-45482 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ -CVE-2022-45483 - https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps/ CVE-2022-4549 - https://wpscan.com/vulnerability/06e1be38-fc1a-4799-a006-556b678ae701 CVE-2022-45497 - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/exeCommand/readme.md CVE-2022-45498 - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/SysToolReboot/readme.md @@ -88457,8 +86808,6 @@ CVE-2022-45525 - https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/CertListI CVE-2022-45526 - https://github.com/Future-Depth/IMS/issues/1 CVE-2022-45527 - https://github.com/Future-Depth/IMS/issues/2 CVE-2022-4553 - https://wpscan.com/vulnerability/483ed482-a1d1-44f6-8b99-56e653d3e45f -CVE-2022-45535 - https://rdyx0.github.io/2018/09/06/AeroCMS-v0.0.1-SQLi%20update_categories_sql_injection/ -CVE-2022-45536 - https://rdyx0.github.io/2018/09/07/AeroCMS-v0.0.1-SQLi%20post_comments_sql_injection/ CVE-2022-45537 - https://github.com/weng-xianhu/eyoucms/issues/34 CVE-2022-45538 - https://github.com/weng-xianhu/eyoucms/issues/35 CVE-2022-45539 - https://github.com/weng-xianhu/eyoucms/issues/38 @@ -88538,42 +86887,27 @@ CVE-2022-45699 - https://www.youtube.com/watch?v=YNeeaDPJOBY CVE-2022-4570 - https://wpscan.com/vulnerability/a2483ecf-42a6-470a-b965-4e05069d1cef CVE-2022-45701 - https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.htmlhttps://github.com/yerodin/CVE-2022-45701 CVE-2022-45703 - https://sourceware.org/bugzilla/show_bug.cgi?id=29799 -CVE-2022-45706 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SJZx0L0Sj CVE-2022-45706 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/SJZx0L0Sj -CVE-2022-45707 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HyEfIEpBj CVE-2022-45707 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/HyEfIEpBj -CVE-2022-45708 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1rR3UArj CVE-2022-45708 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/B1rR3UArj -CVE-2022-45709 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BkFpXcsSs CVE-2022-45709 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/BkFpXcsSs CVE-2022-4571 - https://wpscan.com/vulnerability/128b150b-3950-4cc5-b46a-5707f7a0df00 -CVE-2022-45710 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1XG-5iSo CVE-2022-45710 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/B1XG-5iSo CVE-2022-45711 - https://hackmd.io/dLM8vDnwQOup8mmDbHJRHQ?both -CVE-2022-45712 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/r1pG4cori CVE-2022-45712 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/r1pG4cori -CVE-2022-45714 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/S1QhLw0Ss CVE-2022-45714 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/S1QhLw0Ss -CVE-2022-45715 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HkJ_o8Arj CVE-2022-45715 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/HkJ_o8Arj -CVE-2022-45716 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/rywHivCBo CVE-2022-45716 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/rywHivCBo -CVE-2022-45717 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/By3Y6DRrj CVE-2022-45717 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/By3Y6DRrj -CVE-2022-45718 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/Hkb38vELj CVE-2022-45718 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/Hkb38vELj -CVE-2022-45719 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJ8I_DCBi CVE-2022-45719 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/BJ8I_DCBi -CVE-2022-45720 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SkCD5PEUo CVE-2022-45720 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/SkCD5PEUo -CVE-2022-45721 - https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJUfyuABo CVE-2022-45721 - https://hackmd.io/@AAN506JzR6urM5U8fNh1ng/BJUfyuABo CVE-2022-45748 - https://github.com/assimp/assimp/issues/4286 CVE-2022-4576 - https://wpscan.com/vulnerability/0d679e0e-891b-44f1-ac7f-a766e12956e0 CVE-2022-45768 - https://github.com/Erebua/CVE/blob/main/Edimax.md CVE-2022-45768 - https://www.lovesandy.cc/2022/11/20/EDIMAX%E6%BC%8F%E6%B4%9E/ CVE-2022-4577 - https://wpscan.com/vulnerability/85d9fad7-ba3d-4140-ae05-46262d2643e6 -CVE-2022-45770 - https://hackmag.com/security/aguard-cve/ CVE-2022-45770 - https://xakep.ru/2023/01/27/aguard-cve/ CVE-2022-45771 - https://github.com/pwndoc/pwndoc/issues/401 CVE-2022-4578 - https://wpscan.com/vulnerability/fad16c68-9f14-4866-b241-40468fb71494 @@ -88590,7 +86924,6 @@ CVE-2022-45892 - https://sec-consult.com/vulnerability-lab/advisory/multiple-cri CVE-2022-45893 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/ CVE-2022-45894 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/ CVE-2022-45895 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/ -CVE-2022-45896 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/- CVE-2022-45914 - http://packetstormsecurity.com/files/170177/Zhuhai-Suny-Technology-ESL-Tag-Forgery-Replay-Attacks.html CVE-2022-45914 - http://seclists.org/fulldisclosure/2022/Dec/6 CVE-2022-45915 - http://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html @@ -88700,15 +87033,10 @@ CVE-2022-46395 - http://packetstormsecurity.com/files/172855/Android-Arm-Mali-GP CVE-2022-4640 - https://gitee.com/mingSoft/MCMS/issues/I65KI5 CVE-2022-46407 - https://www.gruppotim.it/it/footer/red-team.html CVE-2022-46408 - https://www.gruppotim.it/it/footer/red-team.html -CVE-2022-46428 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj CVE-2022-46428 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/S1hP34Hvj -CVE-2022-46430 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJxlw2Pwi CVE-2022-46430 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/BJxlw2Pwi -CVE-2022-46432 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1Vgv1uwo CVE-2022-46432 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/B1Vgv1uwo -CVE-2022-46434 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/rJl69Icws CVE-2022-46434 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/rJl69Icws -CVE-2022-46435 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SyvnlO9Pi CVE-2022-46435 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/SyvnlO9Pi CVE-2022-4644 - https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0 CVE-2022-46440 - https://github.com/matthiaskramm/swftools/issues/194 @@ -88760,52 +87088,32 @@ CVE-2022-46552 - https://francoataffarel.medium.com/cve-2022-46552-d-link-dir-84 CVE-2022-46552 - https://github.com/c2dc/cve-reported/blob/main/CVE-2022-46552/CVE-2022-46552.md CVE-2022-46552 - https://www.dlink.com/en/security-bulletin/ CVE-2022-4656 - https://wpscan.com/vulnerability/05976ed8-5a26-4eae-adb2-0ea3b2722391 -CVE-2022-46560 - https://hackmd.io/%400dayResearch/SetWan2Settings_l2tp -CVE-2022-46560 - https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe -CVE-2022-46560 - https://hackmd.io/%400dayResearch/SetWan2Settings_pptp -CVE-2022-46560 - https://hackmd.io/%400dayResearch/rkXr4BQPi CVE-2022-46560 - https://hackmd.io/@0dayResearch/SetWan2Settings_l2tp CVE-2022-46560 - https://hackmd.io/@0dayResearch/SetWan2Settings_pppoe CVE-2022-46560 - https://hackmd.io/@0dayResearch/SetWan2Settings_pptp CVE-2022-46560 - https://hackmd.io/@0dayResearch/rkXr4BQPi CVE-2022-46560 - https://www.dlink.com/en/security-bulletin/ -CVE-2022-46561 - https://hackmd.io/%400dayResearch/SetWanSettings_L2TP -CVE-2022-46561 - https://hackmd.io/%400dayResearch/SetWanSettings_PPPoE -CVE-2022-46561 - https://hackmd.io/%400dayResearch/SetWanSettings_PPTP -CVE-2022-46561 - https://hackmd.io/%400dayResearch/ry55QVQvj CVE-2022-46561 - https://hackmd.io/@0dayResearch/SetWanSettings_L2TP CVE-2022-46561 - https://hackmd.io/@0dayResearch/SetWanSettings_PPPoE CVE-2022-46561 - https://hackmd.io/@0dayResearch/SetWanSettings_PPTP CVE-2022-46561 - https://hackmd.io/@0dayResearch/ry55QVQvj CVE-2022-46561 - https://www.dlink.com/en/security-bulletin/ -CVE-2022-46562 - https://hackmd.io/%400dayResearch/B1C9jeXDi -CVE-2022-46562 - https://hackmd.io/%400dayResearch/SetQuickVPNSettings_PSK CVE-2022-46562 - https://hackmd.io/@0dayResearch/B1C9jeXDi CVE-2022-46562 - https://hackmd.io/@0dayResearch/SetQuickVPNSettings_PSK CVE-2022-46562 - https://www.dlink.com/en/security-bulletin/ -CVE-2022-46563 - https://hackmd.io/%400dayResearch/HkDzZLCUo -CVE-2022-46563 - https://hackmd.io/%400dayResearch/SetDynamicDNSSettings CVE-2022-46563 - https://hackmd.io/@0dayResearch/HkDzZLCUo CVE-2022-46563 - https://hackmd.io/@0dayResearch/SetDynamicDNSSettings CVE-2022-46563 - https://www.dlink.com/en/security-bulletin/ -CVE-2022-46566 - https://hackmd.io/%400dayResearch/SetQuickVPNSettings_Password -CVE-2022-46566 - https://hackmd.io/%400dayResearch/SyhDme7wo CVE-2022-46566 - https://hackmd.io/@0dayResearch/SetQuickVPNSettings_Password CVE-2022-46566 - https://hackmd.io/@0dayResearch/SyhDme7wo CVE-2022-46566 - https://www.dlink.com/en/security-bulletin/ -CVE-2022-46568 - https://hackmd.io/%400dayResearch/B1SZP0aIo -CVE-2022-46568 - https://hackmd.io/%400dayResearch/SetSysEmailSettings CVE-2022-46568 - https://hackmd.io/@0dayResearch/B1SZP0aIo CVE-2022-46568 - https://hackmd.io/@0dayResearch/SetSysEmailSettings CVE-2022-46568 - https://www.dlink.com/en/security-bulletin/ -CVE-2022-46569 - https://hackmd.io/%400dayResearch/SetWLanRadioSecurity -CVE-2022-46569 - https://hackmd.io/%400dayResearch/r1R6sWRUs CVE-2022-46569 - https://hackmd.io/@0dayResearch/SetWLanRadioSecurity CVE-2022-46569 - https://hackmd.io/@0dayResearch/r1R6sWRUs CVE-2022-46569 - https://www.dlink.com/en/security-bulletin/ CVE-2022-4657 - https://wpscan.com/vulnerability/a90a413d-0e00-4da8-a339-d6cdfba70bb3 -CVE-2022-46570 - https://hackmd.io/%400dayResearch/SetWan3Settings_pppoe -CVE-2022-46570 - https://hackmd.io/%400dayResearch/r1zsTSmDs CVE-2022-46570 - https://hackmd.io/@0dayResearch/SetWan3Settings_l2tp CVE-2022-46570 - https://hackmd.io/@0dayResearch/SetWan3Settings_pppoe CVE-2022-46570 - https://hackmd.io/@0dayResearch/SetWan3Settings_pptp @@ -88821,7 +87129,6 @@ CVE-2022-4661 - https://wpscan.com/vulnerability/b95956c9-40e5-47aa-86f6-e2da61b CVE-2022-46631 - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/6 CVE-2022-46634 - https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/7 CVE-2022-46637 - https://packetstormsecurity.com/files/170342/ProLink-PRS1841-Backdoor-Account.html -CVE-2022-46637 - https://prolink2u.com/product/prs1841/ CVE-2022-46639 - https://ia-informatica.com/it/CVE-2022-46639 CVE-2022-4664 - https://wpscan.com/vulnerability/d6a9cfaa-d3fa-442e-a9a1-b06588723e39 CVE-2022-46640 - https://pwning.tech/cve-2022-46640/ @@ -88918,18 +87225,11 @@ CVE-2022-4686 - https://huntr.dev/bounties/caa0b22c-501f-44eb-af65-65c315cd1637 CVE-2022-4687 - https://huntr.dev/bounties/b908377f-a61b-432c-8e6a-c7498da69788 CVE-2022-46874 - https://bugzilla.mozilla.org/show_bug.cgi?id=1746139 CVE-2022-46875 - https://bugzilla.mozilla.org/show_bug.cgi?id=1786188 -CVE-2022-46887 - https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities -CVE-2022-46888 - https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities -CVE-2022-46889 - https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities CVE-2022-4689 - https://huntr.dev/bounties/a78c4326-6e7b-47fe-aa82-461e5c12a4e3 -CVE-2022-46890 - https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities CVE-2022-4690 - https://huntr.dev/bounties/7e1be91d-3b13-4300-8af2-9bd9665ec335 CVE-2022-4691 - https://huntr.dev/bounties/459b55c1-22f5-4556-9cda-9b86aa91582f -CVE-2022-46910 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkwzORiDo CVE-2022-46910 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/BkwzORiDo -CVE-2022-46912 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/Sk6sfbTPi CVE-2022-46912 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/Sk6sfbTPi -CVE-2022-46914 - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJ4czlpwi CVE-2022-46914 - https://hackmd.io/@slASVrz_SrW7NQCsunofeA/BJ4czlpwi CVE-2022-4692 - https://huntr.dev/bounties/9d1ed6ea-f7a0-4561-9325-a2babef99c74 CVE-2022-4693 - https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea @@ -88973,13 +87273,6 @@ CVE-2022-47093 - https://github.com/gpac/gpac/issues/2344 CVE-2022-47094 - https://github.com/gpac/gpac/issues/2345 CVE-2022-47095 - https://github.com/gpac/gpac/issues/2346 CVE-2022-47102 - https://github.com/sudoninja-noob/CVE-2022-47102/blob/main/CVE-2022-47102 -CVE-2022-47130 - https://portswigger.net/web-security/csrf -CVE-2022-47130 - https://xpsec.co/blog/academy-lms-5-10-coupon-csrf -CVE-2022-47131 - https://portswigger.net/web-security/csrf -CVE-2022-47131 - https://portswigger.net/web-security/csrf/xss-vs-csrf -CVE-2022-47131 - https://xpsec.co/blog/academy-lms-5-10-add-page-csrf-xss -CVE-2022-47132 - https://portswigger.net/web-security/csrf -CVE-2022-47132 - https://xpsec.co/blog/academy-lms-5-10-add-admin-csrf CVE-2022-4714 - https://wpscan.com/vulnerability/61b475f1-bbfb-4450-a3b2-b8caf5df2340 CVE-2022-4715 - https://wpscan.com/vulnerability/4394fe86-4240-4454-b724-81464b04123a CVE-2022-4716 - https://wpscan.com/vulnerability/24176ad3-2317-4853-b4db-8394384d52cd @@ -89070,10 +87363,7 @@ CVE-2022-47758 - https://pwning.tech/cve-2022-47758 CVE-2022-47758 - https://pwning.tech/cve-2022-47758/ CVE-2022-4776 - https://wpscan.com/vulnerability/d5ea8f7f-7d5a-4b2e-a070-a9aef7cac58a CVE-2022-47767 - https://www.swascan.com/security-advisory-solar-log/ -CVE-2022-47768 - https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ -CVE-2022-47769 - https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ CVE-2022-4777 - https://wpscan.com/vulnerability/b4c53bef-e868-46f1-965d-720b5b9a931e -CVE-2022-47770 - https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/ CVE-2022-4781 - https://wpscan.com/vulnerability/a2803027-b822-4bf9-8d1d-6f538681af9d CVE-2022-4782 - https://wpscan.com/vulnerability/d3a0468a-8405-4b6c-800f-abd5ce5387b5 CVE-2022-4783 - https://wpscan.com/vulnerability/38e4c7fe-94d5-48b9-8659-e114cbbb4252 @@ -89085,7 +87375,6 @@ CVE-2022-47854 - https://github.com/mkucej/i-librarian/issues/155#issue-15019066 CVE-2022-4786 - https://wpscan.com/vulnerability/fdad356f-cae4-4390-9a62-605201cee0c0 CVE-2022-4787 - https://wpscan.com/vulnerability/2ab59972-ccfd-48f6-b879-58fb38823ca5 CVE-2022-47870 - https://packetstormsecurity.com/files/171647/SQL-Monitor-12.1.31.893-Cross-Site-Scripting.html -CVE-2022-47873 - https://fordefence.com/cve-2022-47873-keos-software-xx/ CVE-2022-47874 - http://packetstormsecurity.com/files/172156/Jedox-2020.2.5-Database-Credential-Disclosure.html CVE-2022-47875 - http://packetstormsecurity.com/files/172152/Jedox-2022.4.2-Directory-Traversal-Remote-Code-Execution.html CVE-2022-47876 - http://packetstormsecurity.com/files/172155/Jedox-2020.2.5-Groovy-Scripts-Remote-Code-Execution.html @@ -90685,7 +88974,6 @@ CVE-2023-22621 - https://www.ghostccamm.com/blog/multi_strapi_vulns/ CVE-2023-22622 - https://www.tenable.com/plugins/was/113449 CVE-2023-22629 - http://packetstormsecurity.com/files/171737/Titan-FTP-Path-Traversal.html CVE-2023-22629 - https://f20.be/cves/titan-ftp-vulnerabilities -CVE-2023-22629 - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf CVE-2023-22630 - https://github.com/orangecertcc/security-research/security/advisories/GHSA-j94f-5cg6-6j9j CVE-2023-22653 - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1714 CVE-2023-22659 - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1699 @@ -90965,25 +89253,6 @@ CVE-2023-24097 - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP CVE-2023-24098 - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/04/README.md CVE-2023-24099 - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/07/README.md CVE-2023-24114 - https://github.com/typecho/typecho/issues/1523 -CVE-2023-24117 - https://oxnan.com/posts/WifiBasic_wepauth_5g_DoS -CVE-2023-24118 - https://oxnan.com/posts/WifiBasic_security_DoS -CVE-2023-24119 - https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS -CVE-2023-24120 - https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS -CVE-2023-24121 - https://oxnan.com/posts/WifiBasic_security_5g_DoS -CVE-2023-24122 - https://oxnan.com/posts/WifiBasic_ssid_5g_DoS -CVE-2023-24123 - https://oxnan.com/posts/WifiBasic_wepauth_DoS -CVE-2023-24124 - https://oxnan.com/posts/WifiBasic_wrlEn_DoS -CVE-2023-24125 - https://oxnan.com/posts/WifiBasic_wepkey2_5g_DoS -CVE-2023-24126 - https://oxnan.com/posts/WifiBasic_wepkey4_5g_DoS -CVE-2023-24127 - https://oxnan.com/posts/WifiBasic_wepkey1_DoS -CVE-2023-24128 - https://oxnan.com/posts/WifiBasic_wepkey2_DoS -CVE-2023-24129 - https://oxnan.com/posts/WifiBasic_wepkey4_DoS -CVE-2023-24130 - https://oxnan.com/posts/WifiBasic_wepkey_DoS -CVE-2023-24131 - https://oxnan.com/posts/WifiBasic_wepkey1_5g_DoS -CVE-2023-24132 - https://oxnan.com/posts/WifiBasic_wepkey3_5g_DoS -CVE-2023-24133 - https://oxnan.com/posts/WifiBasic_wepkey_5g_DoS -CVE-2023-24134 - https://oxnan.com/posts/WifiBasic_wepkey3_DoS -CVE-2023-24135 - https://oxnan.com/posts/WriteFacMac-Command-Injection CVE-2023-24138 - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/NTPSyncWithHost/NTPSyncWithHost.md CVE-2023-2414 - https://blog.jonh.eu/blog/security-vulnerabilities-in-wordpress-plugins-by-vcita CVE-2023-2415 - https://blog.jonh.eu/blog/security-vulnerabilities-in-wordpress-plugins-by-vcita @@ -91268,7 +89537,6 @@ CVE-2023-25231 - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/104 CVE-2023-25233 - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113 CVE-2023-25234 - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_1 CVE-2023-25235 - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_2 -CVE-2023-25240 - https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions CVE-2023-25260 - https://cves.at/posts/cve-2023-25260/writeup/ CVE-2023-25261 - https://cves.at/posts/cve-2023-25261/writeup/ CVE-2023-25262 - https://cves.at/posts/cve-2023-25262/writeup/ @@ -91689,9 +89957,6 @@ CVE-2023-26987 - https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJX CVE-2023-26987 - https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw/edit CVE-2023-2699 - https://vuldb.com/?id.228980 CVE-2023-26991 - https://github.com/matthiaskramm/swftools/issues/196 -CVE-2023-26998 - https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/ -CVE-2023-26999 - https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/ -CVE-2023-27000 - https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/ CVE-2023-27008 - https://plantplants213607121.wordpress.com/2023/02/16/atutor-2-2-1-cross-site-scripting-via-the-token-body-parameter/ CVE-2023-2701 - https://wpscan.com/vulnerability/298fbe34-62c2-4e56-9bdb-90da570c5bbe CVE-2023-27010 - https://packetstormsecurity.com/files/171301/Wondershare-Dr-Fone-12.9.6-Weak-Permissions-Privilege-Escalation.html @@ -91899,12 +90164,9 @@ CVE-2023-27729 - https://github.com/nginx/njs/issues/619 CVE-2023-27730 - https://github.com/nginx/njs/issues/615 CVE-2023-27739 - https://threeshield.ca/easyxdm-2.5.20.html CVE-2023-27742 - https://github.com/G37SYS73M/CVE-2023-27742 -CVE-2023-27744 - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf -CVE-2023-27745 - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf CVE-2023-27754 - https://github.com/10cksYiqiyinHangzhouTechnology/vox2mesh_poc CVE-2023-27772 - https://github.com/mz-automation/libiec61850/issues/442 CVE-2023-27775 - https://github.com/marcovntr/CVE/blob/main/2023/CVE-2023-27775/CVE-2023-27775.md -CVE-2023-27779 - https://docs.google.com/document/d/1kGzmc6AOCfRzJf9mDz4emkhQj84Y1XemmAMZjYK32-o/edit?usp=sharing CVE-2023-27781 - https://github.com/tjko/jpegoptim/issues/132 CVE-2023-27783 - https://github.com/appneta/tcpreplay/issues/780 CVE-2023-27784 - https://github.com/appneta/tcpreplay/issues/787 @@ -92046,7 +90308,6 @@ CVE-2023-2845 - https://huntr.dev/bounties/ac10e81c-998e-4425-9d74-b985d9b0254c CVE-2023-28450 - https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob;f=CHANGELOG CVE-2023-28466 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962 CVE-2023-28485 - http://packetstormsecurity.com/files/172649/Wekan-6.74-Cross-Site-Scripting.html -CVE-2023-28485 - https://wekan.github.io/hall-of-fame/filebleed/ CVE-2023-28488 - https://github.com/moehw/poc_exploits/tree/master/CVE-2023-28488 CVE-2023-28489 - http://packetstormsecurity.com/files/173370/Siemens-A8000-CP-8050-CP-8031-Code-Execution-Command-Injection.html CVE-2023-28489 - http://seclists.org/fulldisclosure/2023/Jul/14 @@ -92198,7 +90459,6 @@ CVE-2023-2934 - http://packetstormsecurity.com/files/173259/Chrome-Mojo-Message- CVE-2023-2935 - http://packetstormsecurity.com/files/173196/Chrome-v8-internal-Object-SetPropertyWithAccessor-Type-Confusion.html CVE-2023-2936 - http://packetstormsecurity.com/files/173197/Chrome-V8-Type-Confusion.html CVE-2023-29374 - https://github.com/hwchase17/langchain/issues/1026 -CVE-2023-29383 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/ CVE-2023-29383 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797 CVE-2023-29401 - https://github.com/gin-gonic/gin/issues/3555 CVE-2023-2942 - https://huntr.dev/bounties/dd56e7a0-9dff-48fc-bc59-9a22d91869eb @@ -92271,7 +90531,6 @@ CVE-2023-29584 - https://github.com/enzo1982/mp4v2/issues/30 CVE-2023-29584 - https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/MP4GetVideoProfileLevel/readme.md CVE-2023-29586 - https://packetstormsecurity.com/files/143984/TeraCopyService-3.1-Unquoted-Service-Path-Privilege-Escalation.html CVE-2023-29586 - https://www.youtube.com/watch?v=mrOHtWWFhJI -CVE-2023-29623 - https://portswigger.net/web-security/cross-site-scripting/reflected CVE-2023-29631 - https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsslider.html CVE-2023-2964 - https://wpscan.com/vulnerability/97aac334-5323-41bb-90f0-d180bcc9162f CVE-2023-29656 - https://ramihub.github.io/ @@ -92391,7 +90650,6 @@ CVE-2023-29975 - https://www.esecforte.com/cve-2023-29975-unverified-password-ch CVE-2023-2998 - https://huntr.dev/bounties/8282d78e-f399-4bf4-8403-f39103a31e78 CVE-2023-29983 - https://packetstormsecurity.com/files/172075/CompanyMaps-8.0-Cross-Site-Scripting.html CVE-2023-29983 - https://www.exploit-db.com/exploits/51417 -CVE-2023-29985 - https://liaorj.github.io/2023/03/17/admin-reports-date-from-has-sql-injection-vulnerability/#more CVE-2023-29998 - https://labs.yarix.com/2023/07/gis3w-persistent-xss-in-g3wsuite-3-5-cve-2023-29998/ CVE-2023-30013 - http://packetstormsecurity.com/files/174799/TOTOLINK-Wireless-Routers-Remote-Command-Execution.html CVE-2023-30013 - https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/2 @@ -92465,7 +90723,6 @@ CVE-2023-30268 - https://github.com/HuBenLab/HuBenVulList/blob/main/CLTPHP6.0%20 CVE-2023-30285 - http://deviniti.com CVE-2023-30285 - https://github.com/D23K4N/CVE/blob/main/CVE-2023-30285.md CVE-2023-30328 - https://github.com/rand0mIdas/randomideas/blob/main/ShimoVPN.md -CVE-2023-30328 - https://raw.githubusercontent.com/rand0mIdas/randomideas/main/ShimoVPN.md?token=GHSAT0AAAAAACA3WX4SPH2YYOCWGV6LLVSGZBIEKEQ CVE-2023-30330 - https://github.com/Filiplain/LFI-to-RCE-SE-Suite-2.0 CVE-2023-30330 - https://www.exploit-db.com/exploits/51404 CVE-2023-30331 - https://gitee.com/xiandafu/beetl/issues/I6RUIP @@ -92729,7 +90986,6 @@ CVE-2023-31557 - https://forum.xpdfreader.com/viewtopic.php?t=42422&sid=acb8ed31 CVE-2023-31566 - https://github.com/podofo/podofo/issues/70 CVE-2023-31567 - https://github.com/podofo/podofo/issues/71 CVE-2023-31568 - https://github.com/podofo/podofo/issues/72 -CVE-2023-31582 - https://bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-then CVE-2023-31587 - https://github.com/yanbushuang/CVE/blob/main/TendaAC5.md CVE-2023-31594 - https://github.com/Yozarseef95/CVE-2023-31594 CVE-2023-31595 - https://github.com/Yozarseef95/CVE-2023-31595 @@ -92819,7 +91075,6 @@ CVE-2023-31873 - http://packetstormsecurity.com/files/172530/Gin-Markdown-Editor CVE-2023-31874 - http://packetstormsecurity.com/files/172535/Yank-Note-3.52.1-Arbitrary-Code-Execution.html CVE-2023-3188 - https://huntr.dev/bounties/0d0d526a-1c39-4e6a-b081-d3914468e495 CVE-2023-3189 - https://vuldb.com/?id.231501 -CVE-2023-31893 - https://medium.com/@shooterRX/dns-recursion-leads-to-dos-attack-vivo-play-iptv-cve-2023-31893-b5ac45f38f CVE-2023-3190 - https://huntr.dev/bounties/5562c4c4-0475-448f-a451-7c4666bc7180 CVE-2023-31902 - https://www.exploit-db.com/exploits/51010 CVE-2023-31902 - https://www.redpacketsecurity.com/mobile-mouse-code-execution/ @@ -92974,15 +91229,12 @@ CVE-2023-3304 - https://huntr.dev/bounties/721fae61-3c8c-4e4b-8407-64321bc0ed17 CVE-2023-3305 - https://github.com/sleepyvv/vul_report/blob/main/C-data/BrokenAccessControl.md CVE-2023-3307 - https://github.com/ctflearner/Vulnerability/blob/main/MINICAL/minical.md CVE-2023-3308 - https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal%3Aicefrog/icefrog_1.1.8_RCE.md -CVE-2023-3309 - https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309 -CVE-2023-3311 - https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3311 CVE-2023-3313 - https://kcm.trellix.com/corporate/index?page=content&id=SB10403 CVE-2023-33131 - http://packetstormsecurity.com/files/173361/Microsoft-365-MSO-2306-Build-16.0.16529.20100-Remote-Code-Execution.html CVE-2023-3314 - https://kcm.trellix.com/corporate/index?page=content&id=SB10403 CVE-2023-33140 - http://packetstormsecurity.com/files/173064/Microsoft-OneNote-2305-Build-16.0.16501.20074-Spoofing.html CVE-2023-33148 - http://packetstormsecurity.com/files/173591/Microsoft-Office-365-18.2305.1222.0-Remote-Code-Execution.html CVE-2023-3316 - https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/ -CVE-2023-3318 - https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3318 CVE-2023-33185 - https://github.com/django-ses/django-ses/blob/3d627067935876487f9938310d5e1fbb249a7778/CVE/001-cert-url-signature-verification.md CVE-2023-33190 - https://github.com/labring/sealos/security/advisories/GHSA-74j8-w7f9-pp62 CVE-2023-33194 - https://github.com/craftcms/cms/security/advisories/GHSA-3wxg-w96j-8hq9 @@ -93050,7 +91302,6 @@ CVE-2023-33485 - https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/5 CVE-2023-33486 - https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/3 CVE-2023-33487 - https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/4 CVE-2023-33496 - https://github.com/edirc-wong/record/blob/main/deserialization_vulnerability_report.md -CVE-2023-33510 - https://carl1l.github.io/2023/05/08/jeecg-p3-biz-chat-1-0-5-jar-has-arbitrary-file-read-vulnerability/ CVE-2023-33518 - https://github.com/emoncms/emoncms/issues/1856 CVE-2023-33534 - https://rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696 CVE-2023-33537 - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/1/TL-WR940N_TL-WR841N_TL-WR740N_userRpm_FixMapCfgRpm.md @@ -93077,16 +91328,12 @@ CVE-2023-33625 - https://github.com/naihsin/IoT/tree/main/D-Link/DIR-600/cmd%20i CVE-2023-33626 - https://github.com/naihsin/IoT/blob/main/D-Link/DIR-600/overflow/README.md CVE-2023-33626 - https://github.com/naihsin/IoT/tree/main/D-Link/DIR-600/overflow CVE-2023-33627 - https://hackmd.io/@0dayResearch/UpdateSnat -CVE-2023-33628 - https://hackmd.io/%400dayResearch/DelvsList_R300 CVE-2023-33628 - https://hackmd.io/@0dayResearch/DelvsList_R300 CVE-2023-33629 - https://hackmd.io/@0dayResearch/r1UjggZfh -CVE-2023-33630 - https://hackmd.io/%400dayResearch/HkUA31-Mh CVE-2023-33630 - https://hackmd.io/@0dayResearch/HkUA31-Mh CVE-2023-33631 - https://hackmd.io/@0dayResearch/DelSTList -CVE-2023-33632 - https://hackmd.io/%400dayResearch/r1N7fg-fn CVE-2023-33632 - https://hackmd.io/@0dayResearch/r1N7fg-fn CVE-2023-33633 - https://hackmd.io/@0dayResearch/UpdateWanParams -CVE-2023-33634 - https://hackmd.io/%400dayResearch/r1g5bl-Mn CVE-2023-33634 - https://hackmd.io/@0dayResearch/r1g5bl-Mn CVE-2023-33635 - https://hackmd.io/@0dayResearch/UpdateMacClone CVE-2023-33636 - https://hackmd.io/@0dayResearch/HyX6mgWz2 @@ -93272,7 +91519,6 @@ CVE-2023-34365 - https://talosintelligence.com/vulnerability_reports/TALOS-2023- CVE-2023-34366 - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1758 CVE-2023-34366 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1758 CVE-2023-34367 - http://blog.pi3.com.pl/?p=850 -CVE-2023-34367 - https://portswigger.net/daily-swig/blind-tcp-ip-hijacking-is-resurrected-for-windows-7 CVE-2023-3438 - https://kcm.trellix.com/corporate/index?page=content&id=SB10404 CVE-2023-3439 - http://www.openwall.com/lists/oss-security/2023/07/02/1 CVE-2023-3439 - https://github.com/torvalds/linux/commit/b561275d633bcd8e0e8055ab86f1a13df75a0269 @@ -93326,7 +91572,6 @@ CVE-2023-34610 - https://github.com/jdereg/json-io/issues/169 CVE-2023-34611 - https://github.com/bolerio/mjson/issues/40 CVE-2023-34612 - https://github.com/phax/ph-commons/issues/35 CVE-2023-34613 - https://github.com/maddingo/sojo/issues/15 -CVE-2023-34614 - https://bitbucket.org/jmarsden/jsonij/issues/7/stack-overflow-error-caused-by-jsonij CVE-2023-34615 - https://github.com/billdavidson/JSONUtil/issues/10 CVE-2023-34616 - https://github.com/InductiveComputerScience/pbJson/issues/2 CVE-2023-34617 - https://github.com/owlike/genson/issues/191 @@ -93514,7 +91759,6 @@ CVE-2023-35872 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c CVE-2023-35873 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html CVE-2023-35874 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html CVE-2023-35885 - https://github.com/datackmy/FallingSkies-CVE-2023-35885 -CVE-2023-35885 - https://www.datack.my/fallingskies-cloudpanel-0-day/ CVE-2023-35925 - https://github.com/IntellectualSites/FastAsyncWorldEdit/security/advisories/GHSA-whj9-m24x-qhhp CVE-2023-35932 - https://github.com/tanghaibao/jcvi/security/advisories/GHSA-x49m-3cw7-gq5q CVE-2023-35937 - https://github.com/metersphere/metersphere/security/advisories/GHSA-7xj3-qrx5-524r @@ -93554,7 +91798,6 @@ CVE-2023-36159 - https://cyberredteam.tech/posts/cve-2023-36159/ CVE-2023-36162 - https://github.com/779789571/zzcms/blob/main/README.md CVE-2023-36163 - http://packetstormsecurity.com/files/173366/BuildaGate5-Cross-Site-Scripting.html CVE-2023-3617 - https://github.com/movonow/demo/blob/main/kruxton.md -CVE-2023-36177 - https://oxnan.com/posts/Snapcast_jsonrpc_rce CVE-2023-36183 - https://github.com/OpenImageIO/oiio/issues/3871 CVE-2023-36184 - https://medium.com/@Beosin_com/critical-vulnerability-in-move-vm-can-cause-total-network-shutdown-and-potential-hard-fork-in-sui-49d0d942801c CVE-2023-3620 - https://huntr.dev/bounties/a0fd0671-f051-4d41-8928-9b19819084c9 @@ -93571,11 +91814,9 @@ CVE-2023-36239 - https://github.com/libming/libming/issues/273 CVE-2023-36243 - https://github.com/noirotm/flvmeta/issues/19 CVE-2023-3625 - https://github.com/MoeMion233/cve/blob/main/1.md CVE-2023-36250 - https://github.com/BrunoTeixeira1996/CVE-2023-36250/blob/main/README.md -CVE-2023-36252 - https://www.zeroscience.mk/en/vulnerabilities/ CVE-2023-36255 - https://trovent.github.io/security-advisories/TRSA-2303-01/TRSA-2303-01.txt CVE-2023-36255 - https://trovent.io/security-advisory-2303-01/ CVE-2023-36256 - https://www.exploit-db.com/exploits/51511 -CVE-2023-36256 - https://www.hackersnotes.com/blog/pentest/online-examination-system-project-1-0-cross-site-request-forgery-csrf/ CVE-2023-3626 - https://github.com/MoeMion233/cve/blob/main/2.md CVE-2023-36266 - http://packetstormsecurity.com/files/173809/Keeper-Security-Desktop-16.10.2-Browser-Extension-16.5.4-Password-Dumper.html CVE-2023-3627 - https://huntr.dev/bounties/558b3dce-db03-47ba-b60b-c6eb578e04f1 @@ -93596,7 +91837,6 @@ CVE-2023-36347 - https://yuyudhn.github.io/pos-codekop-vulnerability/ CVE-2023-36348 - http://packetstormsecurity.com/files/173278/POS-Codekop-2.0-Shell-Upload.html CVE-2023-36348 - https://www.youtube.com/watch?v=Ge0zqY0sGiQ CVE-2023-36348 - https://yuyudhn.github.io/pos-codekop-vulnerability/ -CVE-2023-3635 - https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/ CVE-2023-36354 - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/7/TL-WR940N_TL-WR841N_TL-WR740N_TL-WR941ND_userRpm_AccessCtrlTimeSchedRpm.md CVE-2023-36355 - http://packetstormsecurity.com/files/173294/TP-Link-TL-WR940N-4-Buffer-Overflow.html CVE-2023-36357 - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/5/TL-WR941ND_TL-WR940N_TL-WR841N_userRpm_LocalManageControlRpm.md @@ -93627,7 +91867,6 @@ CVE-2023-36623 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisorie CVE-2023-36623 - https://www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013 CVE-2023-36624 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-004.txt CVE-2023-36624 - https://www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013 -CVE-2023-36629 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-android-privilege-escalation-with-a-32-line-fuzzer/ CVE-2023-36629 - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-007_Xiaomi_Redmi_10sNote-1.txt CVE-2023-36630 - https://github.com/yunaranyancat/poc-dump/blob/main/cloudpanel/README.md CVE-2023-36631 - https://www.bencteux.fr/posts/malwarebytes_wfc/ @@ -93869,7 +92108,6 @@ CVE-2023-37734 - https://medium.com/@jraiv02/cve-2023-37734-buffer-overflow-in-m CVE-2023-37734 - https://www.exploit-db.com/exploits/10374 CVE-2023-37748 - https://github.com/miniupnp/ngiflib/issues/25 CVE-2023-37754 - https://novysodope.github.io/2023/07/02/100/ -CVE-2023-37758 - https://hackmd.io/%40pSgS7xsnS5a4K7Y0yiB43g/rJr8oNn_n CVE-2023-37758 - https://hackmd.io/@pSgS7xsnS5a4K7Y0yiB43g/rJr8oNn_n CVE-2023-37759 - https://packetstormsecurity.com/files/174240/Crypto-Currency-Tracker-CCT-9.5-Add-Administrator.html CVE-2023-37759 - https://tregix.com/ @@ -94320,7 +92558,6 @@ CVE-2023-4004 - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Se CVE-2023-40044 - http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html CVE-2023-40044 - https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044 CVE-2023-40044 - https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044 -CVE-2023-40044 - https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/ CVE-2023-40044 - https://www.theregister.com/2023/10/02/ws_ftp_update/ CVE-2023-4005 - https://huntr.dev/bounties/f0aacce1-79bc-4765-95f1-7e824433b9e4 CVE-2023-4007 - https://huntr.dev/bounties/e891dcbc-2092-49d3-9518-23e37187a5ea @@ -94471,9 +92708,7 @@ CVE-2023-40852 - https://www.exploit-db.com/exploits/51695 CVE-2023-40857 - https://github.com/VirusTotal/yara/issues/1945 CVE-2023-40868 - https://github.com/MinoTauro2020/CVE-2023-40868 CVE-2023-40869 - https://github.com/MinoTauro2020/CVE-2023-40869 -CVE-2023-40889 - https://hackmd.io/%40cspl/B1ZkFZv23 CVE-2023-40889 - https://hackmd.io/@cspl/B1ZkFZv23 -CVE-2023-40890 - https://hackmd.io/%40cspl/H1PxPAUnn CVE-2023-40890 - https://hackmd.io/@cspl/H1PxPAUnn CVE-2023-40942 - https://github.com/GleamingEyes/vul/blob/main/tenda_ac9/SetFirewallCfg.md CVE-2023-40953 - https://gist.github.com/ChubbyZ/e1e5c1858c389334dcf581a19c741308 @@ -94569,7 +92804,6 @@ CVE-2023-41575 - https://github.com/soundarkutty/Stored-xss/blob/main/poc CVE-2023-4158 - https://huntr.dev/bounties/e0e462ae-d7cb-4a84-b6fe-5f5de20e3d15 CVE-2023-41580 - https://github.com/ehtec/phpipam-exploit CVE-2023-4159 - https://huntr.dev/bounties/e2e2365e-6a5f-4ca4-9ef1-297e3ed41f9c -CVE-2023-41593 - https://portswigger.net/web-security/cross-site-scripting CVE-2023-41599 - http://www.so1lupus.ltd/2023/08/28/Directory-traversal-in-JFinalCMS/ CVE-2023-41601 - https://github.com/al3zx/csz_cms_1_3_0_xss_in_install_page/blob/main/README.md CVE-2023-41613 - https://packetstormsecurity.com/files/175684/EzViz-Studio-2.2.0-DLL-Hijacking.html @@ -94577,8 +92811,6 @@ CVE-2023-41615 - https://medium.com/%40guravtushar231/sql-injection-in-login-fie CVE-2023-41615 - https://medium.com/@guravtushar231/sql-injection-in-login-field-a9073780f7e8 CVE-2023-41616 - https://medium.com/%40guravtushar231/reflected-xss-in-admin-panel-7a459dcb9476 CVE-2023-41616 - https://medium.com/@guravtushar231/reflected-xss-in-admin-panel-7a459dcb9476 -CVE-2023-41627 - https://jira.o-ran-sc.org/browse/RIC-1001 -CVE-2023-41628 - https://jira.o-ran-sc.org/browse/RIC-1002 CVE-2023-41635 - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41635%20%7C%20RealGimm%20-%20XML%20External%20Entity%20Injection.md CVE-2023-41635 - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20-%20XML%20External%20Entity%20Injection.md CVE-2023-41636 - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41636%20%7C%20RealGimm%20-%20SQL%20Injection%281%29.md @@ -94683,10 +92915,8 @@ CVE-2023-42298 - https://github.com/gpac/gpac/issues/2567 CVE-2023-42299 - https://github.com/OpenImageIO/oiio/issues/3840 CVE-2023-42320 - https://github.com/aixiao0621/Tenda/blob/main/AC10/0.md CVE-2023-42323 - https://github.com/mnbvcxz131421/douhaocms/blob/main/README.md -CVE-2023-42358 - https://jira.o-ran-sc.org/browse/RIC-1009 CVE-2023-42361 - https://gccybermonks.com/posts/pdfjira/ CVE-2023-42362 - https://github.com/Mr-n0b3dy/CVE-2023-42362 -CVE-2023-42374 - https://beosin.com/resources/%22memory-bomb%22-vulnerability-causes-sui-node-to-crash?lang=en-US CVE-2023-4238 - https://wpscan.com/vulnerability/53816136-4b1a-4b7d-b73b-08a90c2a638f CVE-2023-42405 - https://github.com/fit2cloud/rackshift/issues/79 CVE-2023-42406 - https://github.com/1dreamGN/CVE/blob/main/CVE-2023-42406.md @@ -94941,10 +93171,8 @@ CVE-2023-4395 - https://huntr.dev/bounties/60e38563-7ac8-4a13-ac04-2980cc48b0da CVE-2023-43955 - https://github.com/actuator/com.phlox.tvwebbrowser CVE-2023-43955 - https://github.com/actuator/com.phlox.tvwebbrowser/blob/main/CWE-94.md CVE-2023-43955 - https://github.com/actuator/com.phlox.tvwebbrowser/blob/main/poc.apk -CVE-2023-43959 - https://hackmd.io/%40tahaafarooq/auth_rce_voip CVE-2023-43959 - https://hackmd.io/@tahaafarooq/auth_rce_voip CVE-2023-43959 - https://www.exploit-db.com/exploits/50509 -CVE-2023-43960 - https://hackmd.io/%40tahaafarooq/dlink-dph-400se-cwe-200 CVE-2023-43960 - https://hackmd.io/@tahaafarooq/dlink-dph-400se-cwe-200 CVE-2023-43960 - https://www.exploit-db.com/exploits/51709 CVE-2023-44008 - https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44008 @@ -95125,8 +93353,6 @@ CVE-2023-45232 - http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of- CVE-2023-45233 - http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html CVE-2023-45234 - http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html CVE-2023-45235 - http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html -CVE-2023-45252 - https://www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253/ -CVE-2023-45253 - https://www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253/ CVE-2023-45277 - https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies CVE-2023-45278 - https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies CVE-2023-45279 - https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies @@ -95189,7 +93415,6 @@ CVE-2023-4558 - https://vuldb.com/?id.238159 CVE-2023-4560 - https://huntr.dev/bounties/86f06e28-ed8d-4f96-b4ad-e47f2fe94ba6 CVE-2023-4561 - https://huntr.dev/bounties/d4302a0d-db62-4d76-93dd-e6e6473e057a CVE-2023-45659 - https://github.com/engelsystem/engelsystem/security/advisories/GHSA-f6mm-3v2h-jm6x -CVE-2023-45670 - https://about.gitlab.com/blog/2021/09/07/why-are-developers-vulnerable-to-driveby-attacks/ CVE-2023-45670 - https://github.com/blakeblackshear/frigate/security/advisories/GHSA-xq49-hv88-jr6h CVE-2023-45670 - https://securitylab.github.com/advisories/GHSL-2023-190_Frigate/ CVE-2023-45671 - https://securitylab.github.com/advisories/GHSL-2023-190_Frigate/ @@ -95266,7 +93491,6 @@ CVE-2023-46026 - https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allo CVE-2023-46047 - https://gitlab.com/sane-project/backends/-/issues/708 CVE-2023-46048 - https://tug.org/pipermail/tex-live/2023-August/049400.html CVE-2023-46052 - https://gitlab.com/sane-project/backends/-/issues/709 -CVE-2023-46055 - https://gist.github.com/GroundCTL2MajorTom/eef0d55f5df77cc911d84392acdbf625 CVE-2023-46058 - https://github.com/CrownZTX/vulnerabilities/blob/main/geeklog/Stored_XSS_in_group.php.md CVE-2023-46059 - https://github.com/CrownZTX/vulnerabilities/blob/main/geeklog/reflected_XSS_in_editservice.md CVE-2023-46060 - https://github.com/peris-navince/founded-0-days/blob/main/Tenda/ac500/fromSetVlanInfo/1.md @@ -95338,8 +93562,6 @@ CVE-2023-46468 - https://www.sumor.top/index.php/archives/875/ CVE-2023-46475 - https://github.com/elementalSec/CVE-Disclosures/blob/main/ZentaoPMS/CVE-2023-46475/CVE-2023-46475%20-%20Cross-Site%20Scripting%20(Stored).md CVE-2023-46478 - https://github.com/mr-xmen786/CVE-2023-46478/tree/main CVE-2023-46480 - https://github.com/shahzaibak96/CVE-2023-46480 -CVE-2023-46484 - https://815yang.github.io/2023/10/29/x6000r/setLedCfg/TOTOlink%20X6000R%20setLedCfg%20e/ -CVE-2023-46485 - https://815yang.github.io/2023/10/29/x6000r/TOTOlink%20X6000R%20V9.1.0cu.2350_B20230313-rsetTracerouteCfg/ CVE-2023-4649 - https://huntr.dev/bounties/069bb1f3-0805-480d-a6e1-b3345cdc60f3 CVE-2023-46490 - https://gist.github.com/ISHGARD-2/a95632111138fcd7ccf7432ccb145b53 CVE-2023-4650 - https://huntr.dev/bounties/d92e8985-9d9d-4a62-92e8-ada014ee3b17 @@ -95507,11 +93729,9 @@ CVE-2023-4738 - https://github.com/vim/vim/commit/ced2c7394aafdc90fb7845e09b3a3f CVE-2023-4738 - https://huntr.dev/bounties/9fc7dced-a7bb-4479-9718-f956df20f612 CVE-2023-47384 - https://github.com/gpac/gpac/issues/2672 CVE-2023-4739 - https://github.com/Meizhi-hua/cve/blob/main/upload_file.md -CVE-2023-47397 - https://liotree.github.io/2023/webid.html CVE-2023-4740 - https://vuldb.com/?id.238629 CVE-2023-4741 - https://vuldb.com/?id.238630 CVE-2023-4744 - https://github.com/GleamingEyes/vul/blob/main/tenda_ac8/ac8_1.md -CVE-2023-47444 - https://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444/ CVE-2023-47445 - https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47445%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20SQL%20Injection.md CVE-2023-47446 - https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47446%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20Stored%20XSS%20Vulnerability.md CVE-2023-4745 - https://github.com/Jacky-Y/vuls/blob/main/vul6.md @@ -95529,10 +93749,6 @@ CVE-2023-47470 - https://patchwork.ffmpeg.org/project/ffmpeg/patch/2023091513114 CVE-2023-47470 - https://patchwork.ffmpeg.org/project/ffmpeg/patch/20230915131147.5945-2-michael@niedermayer.cc/ CVE-2023-47471 - https://github.com/strukturag/libde265/issues/426 CVE-2023-47473 - https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf -CVE-2023-47488 - https://bugplorer.github.io/cve-xss-itop/ -CVE-2023-47488 - https://nitipoom-jar.github.io/CVE-2023-47488/ -CVE-2023-47489 - https://bugplorer.github.io/cve-csv-itop/ -CVE-2023-47489 - https://nitipoom-jar.github.io/CVE-2023-47489/ CVE-2023-4749 - https://skypoc.wordpress.com/2023/09/03/%e3%80%90code-audit%e3%80%91open-source-ample-inventory-management-system-v1-0-by-mayuri_k-has-a-file-inclusion-vulnerability/ CVE-2023-4750 - https://github.com/vim/vim/commit/fc68299d436cf87453e432daa77b6d545df4d7ed CVE-2023-4750 - https://huntr.dev/bounties/1ab3ebdf-fe7d-4436-b483-9a586e03b0ea @@ -95593,9 +93809,6 @@ CVE-2023-48013 - https://github.com/gpac/gpac/issues/2612 CVE-2023-48014 - https://github.com/gpac/gpac/issues/2613 CVE-2023-48016 - https://github.com/Serhatcck/cves/blob/main/CVE-2023-48016-restaurant-table-booking-system-SQLInjection.md CVE-2023-48022 - https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit -CVE-2023-48028 - https://nitipoom-jar.github.io/CVE-2023-48028/ -CVE-2023-48029 - https://nitipoom-jar.github.io/CVE-2023-48029/ -CVE-2023-48031 - https://nitipoom-jar.github.io/CVE-2023-48031/ CVE-2023-48039 - https://github.com/gpac/gpac/issues/2679 CVE-2023-48049 - https://github.com/luvsn/OdZoo/tree/main/exploits/website_search_blog CVE-2023-4805 - https://wpscan.com/vulnerability/1049e940-49b1-4236-bea2-c636f35c5647 @@ -95607,7 +93820,6 @@ CVE-2023-48068 - https://github.com/CP1379767017/cms/blob/dreamcms_vul/dedevCMS/ CVE-2023-48078 - https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC CVE-2023-4808 - https://wpscan.com/vulnerability/bb8e9f06-477b-4da3-b5a6-4f06084ecd57 CVE-2023-48090 - https://github.com/gpac/gpac/issues/2680 -CVE-2023-4810 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2023-4810 - https://wpscan.com/vulnerability/dfde5436-dd5c-4c70-a9c2-3cb85cc99c0a CVE-2023-48104 - https://habr.com/ru/articles/804863/ CVE-2023-48105 - https://github.com/bytecodealliance/wasm-micro-runtime/issues/2726 @@ -95619,7 +93831,6 @@ CVE-2023-48121 - https://joerngermany.github.io/ezviz_vulnerability/ CVE-2023-48122 - https://github.com/microweber/microweber/issues/1042 CVE-2023-4814 - https://kcm.trellix.com/corporate/index?page=content&id=SB10407 CVE-2023-4815 - https://huntr.dev/bounties/4cd3eeb4-57c9-4af2-ad19-2166c9e0fd2c -CVE-2023-4816 - https://images.go.hitachienergy.com/Web/ABBEnterpriseSoftware/%7B70b3d323-4866-42e1-8a75-58996729c1d4%7D_8DBD000172-VU-2023-23_Asset_Suite_Tagout_vulnerability_Rev1.pdf CVE-2023-48161 - https://github.com/tacetool/TACE#cve-2023-48161 CVE-2023-48161 - https://sourceforge.net/p/giflib/bugs/167/ CVE-2023-48171 - https://gccybermonks.com/posts/defectdojo/ @@ -95627,11 +93838,7 @@ CVE-2023-48172 - http://packetstormsecurity.com/files/175800 CVE-2023-4818 - https://blog.stmcyber.com/pax-pos-cves-2023/ CVE-2023-4819 - https://wpscan.com/vulnerability/4423b023-cf4a-46cb-b314-7a09ac08b29a CVE-2023-48192 - https://github.com/zxsssd/TotoLink- -CVE-2023-48197 - https://nitipoom-jar.github.io/CVE-2023-48197/ -CVE-2023-48198 - https://nitipoom-jar.github.io/CVE-2023-48198 -CVE-2023-48199 - https://nitipoom-jar.github.io/CVE-2023-48199/ CVE-2023-4820 - https://wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432 -CVE-2023-48200 - https://nitipoom-jar.github.io/CVE-2023-48200/ CVE-2023-48201 - https://mechaneus.github.io/CVE-2023-48201.html CVE-2023-48202 - https://mechaneus.github.io/CVE-2023-48202.html CVE-2023-48205 - http://packetstormsecurity.com/files/175802 @@ -95728,7 +93935,6 @@ CVE-2023-48860 - https://github.com/xieqiang11/security_research/blob/main/TOTOL CVE-2023-48861 - https://github.com/xieqiang11/POC4/blob/main/README.md CVE-2023-48863 - https://gitee.com/NoBlake/cve-2023-48863/ CVE-2023-48864 - https://gitee.com/NoBlake/cve-2023-48864 -CVE-2023-48866 - https://nitipoom-jar.github.io/CVE-2023-48866/ CVE-2023-48886 - https://github.com/luxiaoxun/NettyRpc/issues/53 CVE-2023-48887 - https://github.com/fengjiachun/Jupiter/issues/115 CVE-2023-48893 - https://github.com/slims/slims9_bulian/issues/209 @@ -95887,7 +94093,6 @@ CVE-2023-49438 - https://github.com/brandon-t-elliott/CVE-2023-49438 CVE-2023-49446 - https://github.com/ysuzhangbin/cms/blob/main/There%20is%20a%20CSRF%20in%20the%20newly%20added%20navigation%20management%20area.md CVE-2023-49447 - https://github.com/ysuzhangbin/cms/blob/main/CSRF%20exists%20at%20the%20navigation%20management%20modification%20location.md CVE-2023-49448 - https://github.com/ysuzhangbin/cms/blob/main/CSRF%20exists%20at%20the%20deletion%20point%20of%20navigation%20management.md -CVE-2023-49453 - https://nitipoom-jar.github.io/CVE-2023-49453/ CVE-2023-49460 - https://github.com/strukturag/libheif/issues/1046 CVE-2023-49462 - https://github.com/strukturag/libheif/issues/1043 CVE-2023-49463 - https://github.com/strukturag/libheif/issues/1042 @@ -96056,7 +94261,6 @@ CVE-2023-50424 - https://blogs.sap.com/2023/12/12/unveiling-critical-security-up CVE-2023-50429 - https://github.com/orangecertcc/security-research/security/advisories/GHSA-mc3w-rv8p-f9xf CVE-2023-50445 - http://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html CVE-2023-50446 - https://github.com/mullvad/mullvadvpn-app/pull/5398 -CVE-2023-50447 - https://duartecsantos.github.io/2023-01-02-CVE-2023-50447/ CVE-2023-50447 - https://duartecsantos.github.io/2024-01-02-CVE-2023-50447/ CVE-2023-50449 - https://gitee.com/heyewei/JFinalcms/issues/I7WGC6 CVE-2023-50465 - https://github.com/Crypt0Cr33py/monicahqvuln @@ -96113,27 +94317,6 @@ CVE-2023-50980 - https://github.com/weidai11/cryptopp/issues/1248 CVE-2023-50982 - https://rehmeinfosec.de/labor/cve-2023-50982 CVE-2023-51006 - https://github.com/firmianay/security-issues/tree/main/app/cn.etouch.ecalendar CVE-2023-51010 - https://github.com/firmianay/security-issues/tree/main/app/com.sdjictec.qdmetro -CVE-2023-51011 - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanPriDns/ -CVE-2023-51012 - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanGateway/ -CVE-2023-51013 - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanNetmask/ -CVE-2023-51014 - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig_lanSecDns/ -CVE-2023-51015 - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setDmzCfg/ -CVE-2023-51016 - https://815yang.github.io/2023/12/10/EX1800T/TOTOlink%20EX1800T_V9.1.0cu.2112_B20220316(setRebootScheCfg)/ -CVE-2023-51017 - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanIp/ -CVE-2023-51018 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setWiFiApConfig-opmode/ -CVE-2023-51019 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-key5g/ -CVE-2023-51020 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setLanguageCfg-langType/ -CVE-2023-51021 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setRptWizardCfg-merge/ -CVE-2023-51022 - https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setLanguageCfg-langFlag/ -CVE-2023-51023 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031NTPSyncWithHost-host_time/ -CVE-2023-51024 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setNtpCfg-tz/ -CVE-2023-51025 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setPasswordCfg-admuser/ -CVE-2023-51026 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setRebootScheCfg-hour/ -CVE-2023-51027 - https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-apcliAuthMode/ -CVE-2023-51028 - https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-apcliChannel/ -CVE-2023-51033 - https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_setOpModeCfg/ -CVE-2023-51034 - https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_UploadFirmwareFile/ -CVE-2023-51035 - https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_NTPSyncWithHost/ CVE-2023-5104 - https://huntr.dev/bounties/1b5c6d9f-941e-4dd7-a964-42b53d6826b0 CVE-2023-51042 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12 CVE-2023-5105 - https://wpscan.com/vulnerability/d40c7108-bad6-4ed3-8539-35c0f57e62cc @@ -96233,7 +94416,6 @@ CVE-2023-51766 - https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-m CVE-2023-5177 - https://wpscan.com/vulnerability/a67b9c21-a35a-4cdb-9627-a5932334e5f0 CVE-2023-51771 - https://github.com/starnight/MicroHttpServer/issues/8 CVE-2023-51772 - https://sec-consult.com/vulnerability-lab/advisory/kiosk-escape-privilege-escalation-one-identity-password-manager-secure-password-extension/ -CVE-2023-51775 - https://bitbucket.org/b_c/jose4j/issues/212 CVE-2023-51776 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf CVE-2023-51777 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf CVE-2023-51778 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf @@ -96272,12 +94454,7 @@ CVE-2023-5197 - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Se CVE-2023-5198 - https://gitlab.com/gitlab-org/gitlab/-/issues/416957 CVE-2023-51987 - https://github.com/funny-mud-peee/IoT-vuls/tree/main/dir822%2B/2 CVE-2023-51989 - https://github.com/funny-mud-peee/IoT-vuls/blob/main/dir822+/2/readme.md -CVE-2023-52026 - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setTelnetCfg/ -CVE-2023-52027 - https://815yang.github.io/2023/12/23/a3700r/TOTOLINKA3700R_NTPSyncWithHost/ -CVE-2023-52028 - https://815yang.github.io/2023/12/04/a3700r/TOTOlink%20A3700R_setTracerouteCfg/ CVE-2023-5203 - https://wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932 -CVE-2023-52031 - https://815yang.github.io/2023/12/04/a3700r/TOTOlink%20A3700R_UploadFirmwareFile/ -CVE-2023-52032 - https://815yang.github.io/2023/12/24/cve6/EX1200T_V4.1.2cu.5232_B20210713_downloadFlile/ CVE-2023-52038 - https://github.com/Beckaf/vunl/blob/main/TOTOLINK/X6000R/1/1.md CVE-2023-52039 - https://github.com/Beckaf/vunl/blob/main/TOTOLINK/X6000R/2/2.md CVE-2023-5204 - http://packetstormsecurity.com/files/175371/WordPress-AI-ChatBot-4.8.9-SQL-Injection-Traversal-File-Deletion.html @@ -96843,7 +95020,6 @@ CVE-2023-6753 - https://github.com/mlflow/mlflow/commit/1c6309f884798fbf56017a3c CVE-2023-6753 - https://huntr.com/bounties/b397b83a-527a-47e7-b912-a12a17a6cfb4 CVE-2023-6766 - https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/csrf_delete_course.md CVE-2023-6771 - https://vuldb.com/?id.247907 -CVE-2023-6773 - https://drive.google.com/drive/folders/1yuc1n6tr57wD8qsT0HAFDVAuii7iibDM?usp=sharing CVE-2023-6778 - https://huntr.com/bounties/5f3fffac-0358-48e6-a500-81bac13e0e2b CVE-2023-6779 - http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html CVE-2023-6779 - http://seclists.org/fulldisclosure/2024/Feb/3 @@ -97068,7 +95244,6 @@ CVE-2024-0250 - https://wpscan.com/vulnerability/321b07d1-692f-48e9-a8e5-a15b38e CVE-2024-0261 - https://packetstormsecurity.com/files/176342/FTPDMIN-0.96-Denial-Of-Service.html CVE-2024-0261 - https://vuldb.com/?id.249817 CVE-2024-0261 - https://www.youtube.com/watch?v=q-CVJfYdd-g -CVE-2024-0263 - https://0day.today/exploit/description/39212 CVE-2024-0263 - https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html CVE-2024-0264 - https://github.com/jmrcsnchz/ClinicQueueingSystem_RCE/ CVE-2024-0264 - https://github.com/jmrcsnchz/ClinicQueueingSystem_RCE/blob/main/clinicx.py @@ -97144,7 +95319,6 @@ CVE-2024-0672 - https://wpscan.com/vulnerability/eceb6585-5969-4aa6-9908-b6bfb57 CVE-2024-0673 - https://wpscan.com/vulnerability/d80e725d-356a-4997-a352-33565e291fc8/ CVE-2024-0677 - https://wpscan.com/vulnerability/0f7757c9-69fa-49db-90b0-40f0ff29bee7/ CVE-2024-0684 - https://www.openwall.com/lists/oss-security/2024/01/18/2 -CVE-2024-0693 - https://0day.today/exploit/description/39218 CVE-2024-0693 - https://packetstormsecurity.com/files/176377/Easy-File-Sharing-FTP-Server-2.0-Denial-Of-Service.html CVE-2024-0693 - https://www.youtube.com/watch?v=Rcl6VWg_bPY CVE-2024-0695 - https://packetstormsecurity.com/files/176381/Easy-Chat-Server-3.1-Denial-Of-Service.html @@ -97163,7 +95337,6 @@ CVE-2024-0723 - https://packetstormsecurity.com/files/176545/freeSSHd-1.0.9-Deni CVE-2024-0725 - https://packetstormsecurity.com/files/176544/ProSSHD-1.2-20090726-Denial-Of-Service.html CVE-2024-0731 - https://fitoxs.com/vuldb/01-PCMan%20v2.0.7-exploit.txt CVE-2024-0732 - https://fitoxs.com/vuldb/02-PCMan%20v2.0.7-exploit.txt -CVE-2024-0736 - https://0day.today/exploit/39249 CVE-2024-0737 - https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html CVE-2024-0741 - https://bugzilla.mozilla.org/show_bug.cgi?id=1864587 CVE-2024-0745 - https://bugzilla.mozilla.org/show_bug.cgi?id=1871838 @@ -97308,9 +95481,7 @@ CVE-2024-10196 - https://gist.github.com/higordiego/be616d2853a9f1820d8558fc00e9 CVE-2024-10197 - https://gist.github.com/higordiego/bc051be4a8c6b6641578cad533742aab CVE-2024-10198 - https://gist.github.com/higordiego/93343006341d3799de0cb8912cc328ec CVE-2024-10199 - https://gist.github.com/higordiego/0dae6dd4a36acd12bcc408caf1c787d9 -CVE-2024-1020 - https://www.yuque.com/mailemonyeyongjuan/tha8tr/gdd3hiwz8uo6ylab CVE-2024-1021 - https://vuldb.com/?id.252290 -CVE-2024-1021 - https://www.yuque.com/mailemonyeyongjuan/tha8tr/yemvnt5uo53gfem5 CVE-2024-1022 - https://drive.google.com/file/d/1lPZ1yL9UlU-uB03xz17q4OR9338X_1am/view?usp=sharing CVE-2024-10229 - https://issues.chromium.org/issues/371011220 CVE-2024-10230 - https://issues.chromium.org/issues/371565065 @@ -97322,7 +95493,6 @@ CVE-2024-1030 - https://vuldb.com/?id.252303 CVE-2024-10309 - https://wpscan.com/vulnerability/9eb21250-34bd-4600-a0a5-7c5117f69f04/ CVE-2024-10314 - https://portal.perforce.com/s/detail/a91PA000001SZNFYA4 CVE-2024-10315 - https://portal.perforce.com/s/detail/a91PA000001SZVJYA4 -CVE-2024-10327 - https://help.okta.com/en-us/content/topics/releasenotes/okta-verify-release-notes.htm#panel2 CVE-2024-10344 - https://portal.perforce.com/s/detail/a91PA000001SZOrYAO CVE-2024-10345 - https://portal.perforce.com/s/detail/a91PA000001SZQTYA4 CVE-2024-10348 - https://github.com/will121351/wenqin.webray.com.cn/blob/main/CVE-project/house-rental-management-system.md @@ -97470,11 +95640,9 @@ CVE-2024-10968 - https://github.com/NG0324/CVE/issues/1 CVE-2024-10969 - https://github.com/ppp-src/CVE/issues/31 CVE-2024-10971 - https://devolutions.net/security/advisories/DEVO-2024-0015/ CVE-2024-1098 - https://vuldb.com/?id.252455 -CVE-2024-1098 - https://www.yuque.com/mailemonyeyongjuan/tha8tr/ouiw375l0m8mw5ls CVE-2024-10980 - https://wpscan.com/vulnerability/915daad8-d14c-4457-a3a0-aa21744f4ae0/ CVE-2024-10987 - https://github.com/qqqbalabala/cve/blob/main/sql20.md CVE-2024-10989 - https://github.com/miaoyum/cve/blob/main/sql21.md -CVE-2024-1099 - https://www.yuque.com/mailemonyeyongjuan/tha8tr/dcilugg0htp973nx CVE-2024-10991 - https://github.com/ppp-src/CVE/issues/30 CVE-2024-10993 - https://github.com/NG0324/CVE/issues/2 CVE-2024-10994 - https://github.com/Hacker0xone/CVE/issues/1 @@ -97822,7 +95990,6 @@ CVE-2024-13726 - https://wpscan.com/vulnerability/ec226d22-0c09-4e7c-86ec-b64819 CVE-2024-13727 - https://wpscan.com/vulnerability/598d20f2-0f42-48f2-a941-0d6c5da5303e/ CVE-2024-13729 - https://wpscan.com/vulnerability/2feed26b-ef02-4954-ab9d-8b0f958b0ef1/ CVE-2024-13730 - https://wpscan.com/vulnerability/4541a285-a095-4178-a64b-6a859eb5034e/ -CVE-2024-13759 - https://www.gendigital.com/us/en/contact-us/security-advisories/) CVE-2024-13804 - https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804 CVE-2024-13822 - https://wpscan.com/vulnerability/1f0f1553-1987-428c-9fe3-ffb3f6b0aecc/ CVE-2024-13823 - https://wpscan.com/vulnerability/dcfd8a03-0a04-4fd1-986d-1e816b1fad19/ @@ -97867,8 +96034,6 @@ CVE-2024-13981 - https://www.vulncheck.com/advisories/livebos-uploadfile-arbitra CVE-2024-13984 - https://blog.csdn.net/maxiluo/article/details/135865584 CVE-2024-13985 - https://blog.csdn.net/weixin_43567873/article/details/136636198 CVE-2024-13985 - https://cn-sec.com/archives/2554372.html -CVE-2024-13985 - https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-remote-command-execution_23961 -CVE-2024-13985 - https://s4e.io/tools/dahua-eims-remote-code-execution CVE-2024-13985 - https://www.vulncheck.com/advisories/dahua-eims-rce CVE-2024-13986 - https://theyhack.me/Nagios-XI-Authenticated-RCE CVE-2024-1401 - https://wpscan.com/vulnerability/91064ba5-cf65-46e6-88df-0e4d96a3ef9f/ @@ -97980,7 +96145,6 @@ CVE-2024-1962 - https://wpscan.com/vulnerability/469486d4-7677-4d66-83c0-a6b9ac7 CVE-2024-1963 - https://gitlab.com/gitlab-org/gitlab/-/issues/443577 CVE-2024-1970 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/OnlineLearningSystemV2-XSS.md CVE-2024-1971 - https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/Surya2Developer%20Online_shopping_-system/SQL%20Injection%20Auth.md -CVE-2024-1977 - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2022-004 CVE-2024-1981 - https://research.hisolutions.com/2024/01/multiple-vulnerabilities-in-wordpress-plugin-wpvivid-backup-and-migration/ CVE-2024-1982 - https://research.hisolutions.com/2024/01/multiple-vulnerabilities-in-wordpress-plugin-wpvivid-backup-and-migration/ CVE-2024-1983 - https://wpscan.com/vulnerability/bf3a31de-a227-4db1-bd18-ce6a78dc96fb/ @@ -98452,7 +96616,6 @@ CVE-2024-22855 - https://www.exploit-db.com/exploits/52025 CVE-2024-22856 - https://www.4rth4s.xyz/2024/04/cve-2024-22856-authenticated-blind-sql.html CVE-2024-22857 - https://www.ebryx.com/blogs/arbitrary-code-execution-in-zlog-cve-2024-22857 CVE-2024-22859 - https://github.com/github/advisory-database/pull/3490 -CVE-2024-22871 - https://hackmd.io/%40fe1w0/rymmJGida CVE-2024-22871 - https://hackmd.io/@fe1w0/rymmJGida CVE-2024-22889 - https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9 CVE-2024-22891 - https://github.com/EQSTLab/PoC/tree/main/2024/RCE/CVE-2024-22891 @@ -98599,7 +96762,6 @@ CVE-2024-2394 - https://github.com/LiAoRJ/CVE_Hunter/blob/main/RCE-1.md CVE-2024-23940 - https://medium.com/@s1kr10s/av-when-a-friend-becomes-an-enemy-55f41aba42b1 CVE-2024-2398 - http://seclists.org/fulldisclosure/2024/Jul/18 CVE-2024-2398 - http://seclists.org/fulldisclosure/2024/Jul/19 -CVE-2024-23983 - https://docs.pingidentity.com/pingaccess/latest/release_notes/pa_811_rn.html CVE-2024-23985 - https://packetstormsecurity.com/files/176663/EzServer-6.4.017-Denial-Of-Service.html CVE-2024-23995 - https://github.com/EQSTLab/PoC/blob/main/2024/RCE/CVE-2024-23995/README.md CVE-2024-23997 - https://github.com/EQSTLab/PoC/tree/main/2024/LCE/CVE-2024-23997 @@ -98614,7 +96776,6 @@ CVE-2024-24034 - https://github.com/ELIZEUOPAIN/CVE-2024-24034/tree/main CVE-2024-24035 - https://github.com/ELIZEUOPAIN/CVE-2024-24035/tree/main CVE-2024-2404 - https://wpscan.com/vulnerability/a2cb7167-9edc-4640-87eb-4c511639e5b7/ CVE-2024-24041 - https://github.com/tubakvgc/CVE/blob/main/Travel_Journal_App.md -CVE-2024-24041 - https://portswigger.net/web-security/cross-site-scripting CVE-2024-2405 - https://wpscan.com/vulnerability/c42ffa15-6ebe-4c70-9e51-b95bd05ea04d/ CVE-2024-24050 - https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050 CVE-2024-24051 - https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md @@ -98624,7 +96785,6 @@ CVE-2024-24061 - https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/ CVE-2024-24062 - https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#12-stored-cross-site-scripting-sysrole CVE-2024-2408 - https://github.com/php/php-src/security/advisories/GHSA-hh26-4ppw-5864 CVE-2024-24115 - https://mechaneus.github.io/CVE-2024-24115.html -CVE-2024-24115 - https://mechaneus.github.io/CVE-PENDING-COTONTI.html CVE-2024-24130 - https://github.com/Hebing123/cve/issues/13 CVE-2024-24131 - https://github.com/Hebing123/cve/issues/14 CVE-2024-24133 - https://github.com/Hebing123/cve/issues/16 @@ -98655,7 +96815,6 @@ CVE-2024-24293 - https://gist.github.com/tariqhawis/986fb1c9da6be526fb2656ba8d19 CVE-2024-24294 - https://gist.github.com/mestrtee/d1eb6e1f7c6dd60d8838c3e56cab634d CVE-2024-2430 - https://wpscan.com/vulnerability/990b7d7a-3d7a-46d5-9aeb-740de817e2d9/ CVE-2024-2432 - https://security.paloaltonetworks.com/CVE-2024-2432 -CVE-2024-24320 - https://datack.my/cloudpanel-v2-0-0-v2-4-0-authenticated-user-session-hijacking-cve-2024-24320/ CVE-2024-24321 - https://github.com/dkjiayu/Vul/blob/main/DIR816A2-dir_setWanWifi.md CVE-2024-24321 - https://www.dlink.com/en/security-bulletin/ CVE-2024-24325 - https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/11/TOTOlink%20A3300R%20setParentalRules.md @@ -98667,8 +96826,6 @@ CVE-2024-24330 - https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%2 CVE-2024-24331 - https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/13/TOTOlink%20A3300R%20setWiFiScheduleCfg.md CVE-2024-24332 - https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/9/TOTOlink%20A3300R%20setUrlFilterRules.md CVE-2024-24333 - https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/15/TOTOlink%20A3300R%20setWiFiAclRules.md -CVE-2024-24336 - https://nitipoom-jar.github.io/CVE-2024-24336/ -CVE-2024-24337 - https://nitipoom-jar.github.io/CVE-2024-24337/ CVE-2024-2439 - https://wpscan.com/vulnerability/7a375077-fc70-4389-b109-28fce3db2aef/ CVE-2024-24396 - https://cves.at/posts/cve-2024-24396/writeup/ CVE-2024-24397 - https://cves.at/posts/cve-2024-24397/writeup/ @@ -98785,7 +96942,6 @@ CVE-2024-2485 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC CVE-2024-2489 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/formSetQosBand.md CVE-2024-2490 - https://github.com/Emilytutu/IoT-vulnerable/blob/main/Tenda/AC18/setSchedWifi_end.md CVE-2024-24945 - https://github.com/tubakvgc/CVE/blob/main/Travel_Journal_App.md -CVE-2024-24945 - https://portswigger.net/web-security/cross-site-scripting CVE-2024-25003 - http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html CVE-2024-25003 - http://packetstormsecurity.com/files/177032/KiTTY-0.76.1.13-Buffer-Overflows.html CVE-2024-25003 - http://seclists.org/fulldisclosure/2024/Feb/14 @@ -99032,7 +97188,6 @@ CVE-2024-25808 - https://github.com/Hebing123/cve/issues/17 CVE-2024-2581 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10/V16.03.10.13/fromSetRouteStatic.md CVE-2024-25811 - https://github.com/Fei123-design/vuln/blob/master/Dreamer%20CMS%20Unauthorized%20access%20vulnerability.md CVE-2024-25817 - https://github.com/advisories/GHSA-3qx3-6hxr-j2ch -CVE-2024-25817 - https://www.cubeyond.net/blog/my-cves/eza-cve-report CVE-2024-2583 - https://wpscan.com/vulnerability/98d8c713-e8cd-4fad-a8fb-7a40db2742a2/ CVE-2024-25830 - https://neroteam.com/blog/f-logic-datacube3-vulnerability-report CVE-2024-25831 - https://neroteam.com/blog/f-logic-datacube3-vulnerability-report @@ -99128,7 +97283,6 @@ CVE-2024-26540 - https://github.com/GreycLab/CImg/issues/403 CVE-2024-26542 - https://github.com/c0d3x27/CVEs/blob/main/CVE-2024-26542/README.md CVE-2024-26548 - https://github.com/cwh031600/vivotek/blob/main/vivotek-FD8166A-uploadfile-dos/vivotek-FD8166A-uploadfile-analysis.md CVE-2024-26557 - https://github.com/Hebing123/cve/issues/18 -CVE-2024-26559 - https://syst1m.cn/2024/01/22/U%E9%AA%8C%E8%AF%81%E7%BD%91%E7%BB%9C%E7%94%A8%E6%88%B7%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E/ CVE-2024-26577 - https://github.com/guusec/VSeeDoS CVE-2024-26633 - https://git.kernel.org/stable/c/da23bd709b46168f7dfc36055801011222b076cd CVE-2024-26798 - https://git.kernel.org/stable/c/00d6a284fcf3fad1b7e1b5bc3cd87cbfb60ce03f @@ -99463,7 +97617,6 @@ CVE-2024-2849 - https://github.com/CveSecLook/cve/issues/1 CVE-2024-2850 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V15.03.05.18/saveParentControlInfo_urls.md CVE-2024-2851 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V15.03.05.18/formSetSambaConf.md CVE-2024-28515 - https://github.com/heshi906/CVE-2024-28515 -CVE-2024-28519 - https://www.escanav.com/en/index.asp CVE-2024-2852 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V1.0%20V15.03.20_multi/saveParentControlInfo_urls.md CVE-2024-28520 - https://github.com/aknbg1thub/cve/blob/main/upload.md CVE-2024-2853 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10U/v1.V15.03.06.48/more/formSetSambaConf.md @@ -99629,7 +97782,6 @@ CVE-2024-29271 - https://github.com/givanz/VvvebJs/issues/342 CVE-2024-29272 - https://github.com/givanz/VvvebJs/issues/343 CVE-2024-29273 - https://github.com/zyx0814/dzzoffice/issues/244 CVE-2024-29275 - https://github.com/seacms-net/CMS/issues/15 -CVE-2024-29276 - https://www.cnblogs.com/Rainy-Day/p/18061399 CVE-2024-29291 - https://gist.github.com/whiteman007/43bd7fa1fa0e47554b33f0cf93066784 CVE-2024-29292 - https://gist.github.com/QuartzDust/debfd7ddf934a9f5609d7f1a8cd71154 CVE-2024-29296 - https://github.com/ThaySolis/CVE-2024-29296 @@ -99873,10 +98025,6 @@ CVE-2024-31008 - https://github.com/majic-banana/vulnerability/blob/main/POC/WUZ CVE-2024-31009 - https://github.com/ss122-0ss/semcms/blob/main/README.md CVE-2024-31010 - https://github.com/ss122-0ss/semcms/blob/main/README.md CVE-2024-31047 - https://github.com/AcademySoftwareFoundation/openexr/issues/1680 -CVE-2024-31061 - https://portswigger.net/web-security/cross-site-scripting/stored -CVE-2024-31062 - https://portswigger.net/web-security/cross-site-scripting/stored -CVE-2024-31063 - https://portswigger.net/web-security/cross-site-scripting/stored -CVE-2024-31065 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-3111 - https://wpscan.com/vulnerability/7c39f3b5-d407-4eb0-aa34-b498fe196c55/ CVE-2024-3112 - https://wpscan.com/vulnerability/fa6f01d6-aa3b-4452-9c5f-49bb227fea9d/ CVE-2024-3113 - https://wpscan.com/vulnerability/ad85c5c7-f4d1-4374-b3b7-8ee022d27d34/ @@ -100057,7 +98205,6 @@ CVE-2024-32394 - https://gist.github.com/Swind1er/7aad5c28e5bdc91d73fa7489b7250c CVE-2024-32399 - https://github.com/NN0b0dy/CVE-2024-32399/blob/main/README.md CVE-2024-32404 - https://packetstormsecurity.com/2404-exploits/rlts-sstexec.txt CVE-2024-32405 - https://packetstormsecurity.com/files/178101/Relate-Cross-Site-Scripting.html -CVE-2024-32405 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-32406 - https://packetstormsecurity.com/files/178251/Relate-Learning-And-Teaching-System-SSTI-Remote-Code-Execution.html CVE-2024-3241 - https://wpscan.com/vulnerability/a645daee-42ea-43f8-9480-ef3be69606e0/ CVE-2024-32461 - https://github.com/librenms/librenms/security/advisories/GHSA-cwx6-cx7x-4q34 @@ -100083,7 +98230,6 @@ CVE-2024-32648 - https://github.com/vyperlang/vyper/security/advisories/GHSA-m2v CVE-2024-32649 - https://github.com/vyperlang/vyper/security/advisories/GHSA-5jrj-52x8-m64h CVE-2024-3265 - https://wpscan.com/vulnerability/ecb74622-eeed-48b6-a944-4e3494d6594d/ CVE-2024-32650 - https://github.com/rustls/rustls/security/advisories/GHSA-6g7w-8wpp-frhj -CVE-2024-32651 - https://blog.hacktivesecurity.com/index.php/2024/05/08/cve-2024-32651-server-side-template-injection-changedetection-io/ CVE-2024-32651 - https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4r7v-whpg-8rx3 CVE-2024-32652 - https://github.com/honojs/node-server/issues/159 CVE-2024-32653 - https://github.com/skylot/jadx/security/advisories/GHSA-3pp3-hg2q-9gpm @@ -100133,7 +98279,6 @@ CVE-2024-33266 - https://security.friendsofpresta.org/modules/2024/04/25/deliver CVE-2024-33272 - https://security.friendsofpresta.org/modules/2024/04/25/autosuggest.html CVE-2024-33294 - https://github.com/CveSecLook/cve/issues/16 CVE-2024-33302 - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33302.md -CVE-2024-33302 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-33303 - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33303.md CVE-2024-33304 - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33304.md CVE-2024-33305 - https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33305.md @@ -100145,16 +98290,10 @@ CVE-2024-33338 - https://github.com/7akahash1/POC/blob/main/1.md CVE-2024-33345 - https://github.com/n0wstr/IOTVuln/tree/main/DIR-823g/UploadFirmware CVE-2024-33350 - https://github.com/majic-banana/vulnerability/blob/main/POC/taocms-3.0.2%20Arbitrary%20File%20Writing%20Vulnerability.md CVE-2024-33365 - https://github.com/johnathanhuutri/CVE_report/blob/master/CVE-2024-33365/README.md -CVE-2024-33365 - https://hackmd.io/%40JohnathanHuuTri/rJNbEItJC -CVE-2024-33365 - https://hackmd.io/@JohnathanHuuTri/rJNbEItJC CVE-2024-33371 - https://gitee.com/zchuanwen/cve/issues/I9HQRY CVE-2024-33373 - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Password-Policy-Bypass--%7C--Inconsistent-Password-Policy-(CVE%E2%80%902024%E2%80%9033373) -CVE-2024-33373 - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ CVE-2024-33374 - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Incorrect-Access-Control-(CVE%E2%80%902024%E2%80%9033374) -CVE-2024-33374 - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ -CVE-2024-33375 - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ CVE-2024-33377 - https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Clickjacking-(CVE%E2%80%902024%E2%80%9033377) -CVE-2024-33377 - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ CVE-2024-33383 - https://juvl1ne.github.io/2024/04/18/novel-plus-vulnerability/ CVE-2024-33398 - https://github.com/HouqiyuA/k8s-rbac-poc CVE-2024-33401 - https://gitee.com/zchuanwen/cve123/issues/I9I18D @@ -100213,7 +98352,6 @@ CVE-2024-33663 - https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-p CVE-2024-33664 - https://github.com/mpdavis/python-jose/issues/344 CVE-2024-33664 - https://www.vicarius.io/vsociety/posts/jwt-bomb-in-python-jose-cve-2024-33664 CVE-2024-33669 - https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html -CVE-2024-33669 - https://help.passbolt.com/incidents/pwned-password-service-information-leak CVE-2024-3368 - https://wpscan.com/vulnerability/ab78b1a5-e28c-406b-baaf-6d53017f9328/ CVE-2024-33699 - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1984 CVE-2024-33700 - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1998 @@ -100354,7 +98492,6 @@ CVE-2024-34467 - https://github.com/top-think/framework/issues/2996 CVE-2024-34470 - https://github.com/osvaldotenorio/CVE-2024-34470 CVE-2024-34471 - https://github.com/osvaldotenorio/CVE-2024-34471 CVE-2024-34472 - https://github.com/osvaldotenorio/CVE-2024-34472 -CVE-2024-34473 - https://jira.o-ran-sc.org/browse/RIC-1055 CVE-2024-34478 - https://delvingbitcoin.org/t/disclosure-btcd-consensus-bugs-due-to-usage-of-signed-transaction-version/455 CVE-2024-34483 - https://github.com/faucetsdn/ryu/issues/193 CVE-2024-34484 - https://github.com/faucetsdn/ryu/issues/194 @@ -100363,7 +98500,6 @@ CVE-2024-34487 - https://github.com/faucetsdn/ryu/issues/192 CVE-2024-34488 - https://github.com/faucetsdn/ryu/issues/191 CVE-2024-34489 - https://github.com/faucetsdn/ryu/issues/195 CVE-2024-34515 - https://github.com/spatie/image-optimizer/issues/210 -CVE-2024-34519 - https://support.avantra.com/support/solutions/articles/44002516766-xan-5367-security-vulnerability-fix-for-dashboards CVE-2024-34523 - https://github.com/piuppi/Proof-of-Concepts/blob/main/AChecker/CVE-2024-34523.md CVE-2024-34532 - https://github.com/luvsn/OdZoo/tree/main/exploits/query_deluxe CVE-2024-34533 - https://github.com/luvsn/OdZoo/tree/main/exploits/izi_data @@ -100395,7 +98531,6 @@ CVE-2024-34854 - https://github.com/Yang-Nankai/Vulnerabilities/blob/main/DataCu CVE-2024-34899 - https://hackerdna.com/courses/cve/cve-2024-34899 CVE-2024-34905 - https://github.com/CloudWise-OpenSource/FlyFish/issues/191 CVE-2024-34906 - https://github.com/kuaifan/dootask/issues/210 -CVE-2024-34914 - https://chmod744.super.site/redacted-vulnerability CVE-2024-34919 - https://github.com/CveSecLook/cve/issues/20 CVE-2024-34921 - https://github.com/cainiao159357/x5000r_poc/blob/main/README.md CVE-2024-34952 - https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.assets/debug-coredump.png @@ -100505,7 +98640,6 @@ CVE-2024-35527 - https://bastionsecurity.co.nz/advisories/farcry-core-multiple.h CVE-2024-35538 - https://cyberaz0r.info/2024/08/typecho-multiple-vulnerabilities/ CVE-2024-35539 - https://cyberaz0r.info/2024/08/typecho-multiple-vulnerabilities/ CVE-2024-35540 - https://cyberaz0r.info/2024/08/typecho-multiple-vulnerabilities/ -CVE-2024-35545 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-35550 - https://github.com/bearman113/1.md/blob/main/17/csrf.md CVE-2024-35551 - https://github.com/bearman113/1.md/blob/main/16/csrf.md CVE-2024-35552 - https://github.com/bearman113/1.md/blob/main/20/csrf.md @@ -100519,11 +98653,8 @@ CVE-2024-35559 - https://github.com/bearman113/1.md/blob/main/22/csrf.md CVE-2024-35560 - https://github.com/bearman113/1.md/blob/main/25/csrf.md CVE-2024-35561 - https://github.com/bearman113/1.md/blob/main/23/csrf.md CVE-2024-35581 - https://github.com/r04i7/CVE/blob/main/CVE-2024-35581.md -CVE-2024-35581 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-35582 - https://github.com/r04i7/CVE/blob/main/CVE-2024-35582.md -CVE-2024-35582 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-35583 - https://github.com/r04i7/CVE/blob/main/CVE-2024-35583.md -CVE-2024-35583 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-35584 - https://github.com/whwhwh96/CVE-2024-35584 CVE-2024-35591 - https://github.com/o2oa/o2oa/issues/156 CVE-2024-3567 - https://gitlab.com/qemu-project/qemu/-/issues/2273 @@ -100715,11 +98846,8 @@ CVE-2024-37363 - https://support.pentaho.com/hc/en-us/articles/34296230504589--R CVE-2024-37382 - https://www.abinitio.com/en/security-advisories/ab-2024-003/ CVE-2024-37386 - https://advisories.stormshield.eu/2024-017 CVE-2024-37393 - https://www.optistream.io/blogs/tech/securenvoy-cve-2024-37393 -CVE-2024-37394 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396/ CVE-2024-37394 - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt -CVE-2024-37395 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396/ CVE-2024-37395 - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt -CVE-2024-37396 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396/ CVE-2024-37396 - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt CVE-2024-37407 - https://github.com/libarchive/libarchive/pull/2145 CVE-2024-3745 - https://fluidattacks.com/advisories/gershwin/ @@ -101109,7 +99237,6 @@ CVE-2024-40460 - https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2 CVE-2024-40461 - https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.md CVE-2024-40462 - https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.md CVE-2024-40492 - https://github.com/minendie/POC_CVE-2024-40492 -CVE-2024-40500 - https://nitipoom-jar.github.io/CVE-2024-40500/ CVE-2024-40502 - https://packetstormsecurity.com/files/179583/Hospital-Management-System-Project-In-ASP.Net-MVC-1-SQL-Injection.html CVE-2024-4057 - https://wpscan.com/vulnerability/da4d4d87-07b3-4f7d-bcbd-d29968a30b4f/ CVE-2024-40576 - https://github.com/jubilianite/CVEs/blob/main/CVE-2024-40576.md @@ -101689,7 +99816,6 @@ CVE-2024-45062 - https://talosintelligence.com/vulnerability_reports/TALOS-2024- CVE-2024-4511 - https://vuldb.com/?id.263115 CVE-2024-4512 - https://vuldb.com/?id.263116 CVE-2024-45163 - https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1 -CVE-2024-45163 - https://pastebin.com/6tqHnCva CVE-2024-45163 - https://youtu.be/aJkvSr85ML8 CVE-2024-45165 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-048.txt CVE-2024-45166 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-050.txt @@ -101732,7 +99858,6 @@ CVE-2024-45431 - https://pcacybersecurity.com/resources/advisory/perfekt-blue CVE-2024-45432 - https://pcacybersecurity.com/resources/advisory/perfekt-blue CVE-2024-45433 - https://pcacybersecurity.com/resources/advisory/perfekt-blue CVE-2024-45434 - https://pcacybersecurity.com/resources/advisory/perfekt-blue -CVE-2024-45438 - https://www.seralys.com/research/CVE-2024-45438.txt CVE-2024-4547 - https://www.tenable.com/security/research/tra-2024-13 CVE-2024-4548 - https://www.tenable.com/security/research/tra-2024-13 CVE-2024-45489 - https://kibty.town/blog/arc/ @@ -101791,7 +99916,6 @@ CVE-2024-46226 - https://www.exploit-db.com/exploits/52068 CVE-2024-4627 - https://wpscan.com/vulnerability/c0058fcc-36f6-40bf-9848-fbe2d751d754/ CVE-2024-46280 - https://0xmupa.github.io/pixlink-weak-telnet CVE-2024-46292 - https://modsecurity.org/20241011/about-cve-2024-46292-2024-october/ -CVE-2024-46300 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-46326 - https://drive.google.com/file/d/1AVVw1aibDPBHakU8eTpCA6hna5Ecg2UJ/view CVE-2024-46429 - https://reddassolutions.com/blog/tenda_w18e_security_research CVE-2024-46430 - https://reddassolutions.com/blog/tenda_w18e_security_research @@ -101850,11 +99974,6 @@ CVE-2024-47182 - https://github.com/amir20/dozzle/security/advisories/GHSA-w7qr- CVE-2024-47184 - https://github.com/ampache/ampache/security/advisories/GHSA-f99r-gv34-v46f CVE-2024-47186 - https://github.com/filamentphp/filament/security/advisories/GHSA-9h9q-qhxg-89xr CVE-2024-47187 - https://redmine.openinfosecfoundation.org/issues/7209 -CVE-2024-47212 - https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users -CVE-2024-47213 - https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users -CVE-2024-47214 - https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users -CVE-2024-47215 - https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users -CVE-2024-47217 - https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users CVE-2024-47226 - https://github.com/tu3n4nh/netbox/issues/1 CVE-2024-4730 - https://vuldb.com/?id.263808 CVE-2024-4749 - https://wpscan.com/vulnerability/6cc05a33-6592-4d35-8e66-9b6a9884df7e/ @@ -102333,7 +100452,6 @@ CVE-2024-5516 - https://github.com/ppp-src/ha/issues/3 CVE-2024-5517 - https://github.com/ppp-src/ha/issues/4 CVE-2024-5518 - https://github.com/L1OudFd8cl09/CVE/issues/1 CVE-2024-5519 - https://github.com/L1OudFd8cl09/CVE/issues/2 -CVE-2024-55199 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2024-55218 - https://resources.s4e.io/blog/icewarp-server-10-2-1-reflected-xss-vulnerability-cve-2024-55218/ CVE-2024-5522 - https://wpscan.com/vulnerability/bc76ef95-a2a9-4185-8ed9-1059097a506a/ CVE-2024-5529 - https://wpscan.com/vulnerability/66d0b4b7-cd4b-4ec4-95c0-d50773cb0b8f/ @@ -102382,7 +100500,6 @@ CVE-2024-5635 - https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_a.md CVE-2024-5636 - https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_b.md CVE-2024-56431 - https://www.openwall.com/lists/oss-security/2025/04/25/6 CVE-2024-5644 - https://wpscan.com/vulnerability/afe14c7a-95b2-4d3f-901a-e53ecef70d49/ -CVE-2024-56528 - https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users CVE-2024-5656 - https://wpscan.com/vulnerability/adc6ea6d-29d8-4ad0-b0db-2540e8b3f9a9/ CVE-2024-5657 - http://www.openwall.com/lists/oss-security/2024/06/06/1 CVE-2024-5657 - https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240202-01_CraftCMS_Plugin_Two-Factor_Authentication_Password_Hash_Disclosure @@ -102445,9 +100562,6 @@ CVE-2024-5775 - https://github.com/CveSecLook/cve/issues/44 CVE-2024-57757 - https://gitee.com/erzhongxmu/JEEWMS/issues/IBFKBM CVE-2024-57764 - https://gitee.com/wanglingxiao/mysiteforme/issues/IBFVCZ CVE-2024-57766 - https://gitee.com/wanglingxiao/mysiteforme/issues/IBFVHR -CVE-2024-57770 - https://gitee.com/r1bbit/JFinalOA/issues/IBHUP1 -CVE-2024-57773 - https://gitee.com/r1bbit/JFinalOA/issues/IBHUQ9 -CVE-2024-57774 - https://gitee.com/r1bbit/JFinalOA/issues/IBHUQQ CVE-2024-57822 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896 CVE-2024-57823 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896 CVE-2024-5792 - https://favethemes.zendesk.com/hc/en-us/articles/360041639432-Changelog @@ -102808,7 +100922,6 @@ CVE-2024-7055 - https://ffmpeg.org/download.html CVE-2024-7055 - https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc3 CVE-2024-7056 - https://wpscan.com/vulnerability/467af13e-25bd-425c-929d-5dd06e28d595/ CVE-2024-7059 - https://resources.genetec.com/security-advisories/high-severity-vulnerability-affecting-security-center-web-sdk-role -CVE-2024-7061 - https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 CVE-2024-7065 - https://github.com/topsky979/Security-Collections/blob/main/1700810/README.md CVE-2024-7066 - https://vuldb.com/?id.272347 CVE-2024-7066 - https://wiki.shikangsi.com/post/share/17dfab05-2c50-4437-afa7-ef1f5a1f43f8 @@ -102943,7 +101056,6 @@ CVE-2024-7338 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK CVE-2024-7340 - https://research.jfrog.com/vulnerabilities/wandb-weave-server-remote-arbitrary-file-leak-jfsa-2024-001039248/ CVE-2024-7342 - https://github.com/Hebing123/cve/issues/62 CVE-2024-7343 - https://github.com/Hebing123/cve/issues/63 -CVE-2024-7353 - https://portswigger.net/research/xss-in-hidden-input-fields CVE-2024-7354 - https://wpscan.com/vulnerability/3c871dcd-51d7-4d3b-b036-efa9e066ff41/ CVE-2024-7357 - https://github.com/BeaCox/IoT_vuln/tree/main/D-Link/DIR-600/soapcgi_main_injection CVE-2024-7358 - https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen @@ -103305,7 +101417,6 @@ CVE-2024-8854 - https://wpscan.com/vulnerability/bffe0f75-33a2-4270-af13-835b8eb CVE-2024-8855 - https://wpscan.com/vulnerability/04084f2a-45b8-4249-a472-f156fad0c90a/ CVE-2024-8856 - https://hacked.be/posts/CVE-2024-8856 CVE-2024-8857 - https://wpscan.com/vulnerability/08ca6daa-09f4-4604-ac9e-15a1b33d599d/ -CVE-2024-8867 - https://bytium.com/stored-cross-site-scripting-xss-vulnerability-in-perfex-crm/ CVE-2024-8876 - https://wiki.shikangsi.com/post/share/12da81ed-2dad-4a75-9b1a-db9afe1e7b7b CVE-2024-8877 - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html CVE-2024-8878 - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html @@ -103315,7 +101426,6 @@ CVE-2024-8905 - https://issues.chromium.org/issues/359949835 CVE-2024-8907 - https://issues.chromium.org/issues/360642942 CVE-2024-8908 - https://issues.chromium.org/issues/337222641 CVE-2024-8909 - https://issues.chromium.org/issues/341353783 -CVE-2024-8945 - https://bytium.com/sql-injection-vulnerability-identified-in-rise-crm/ CVE-2024-8968 - https://wpscan.com/vulnerability/cab4d23e-e857-4b2f-b1ca-fbafd37524e0/ CVE-2024-8983 - https://wpscan.com/vulnerability/29194dde-8d11-4096-a5ae-1d69c2c5dc33/ CVE-2024-9001 - https://github.com/C9Y57/TOTOLINK_setTracerouteCfg/blob/main/setTracerouteCfg.md @@ -103358,7 +101468,6 @@ CVE-2024-9162 - https://github.com/d0n601/CVE-2024-9162 CVE-2024-9166 - https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-03 CVE-2024-9182 - https://wpscan.com/vulnerability/40007323-d684-430d-a882-8b4dfb76172b/ CVE-2024-9186 - https://wpscan.com/vulnerability/fab29b59-7e87-4289-88dd-ed5520260c26/ -CVE-2024-9191 - https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 CVE-2024-9227 - https://wpscan.com/vulnerability/bb6515b9-a316-4146-8b7d-9b70a47aa366/ CVE-2024-9230 - https://wpscan.com/vulnerability/ab5eaf57-fb61-4a08-b439-42dea40b7914/ CVE-2024-9233 - https://wpscan.com/vulnerability/a466cea4-0ae5-44a1-9e12-bd5dbecde2f2/ @@ -103453,7 +101562,6 @@ CVE-2024-9836 - https://wpscan.com/vulnerability/f87af54e-3e58-4c29-8a30-e7d5223 CVE-2024-9838 - https://wpscan.com/vulnerability/3cc0ff78-b310-40a4-899c-15fecbb345c5/ CVE-2024-9855 - https://github.com/DeepMountains/zzz/blob/main/CVE6-1.md CVE-2024-9856 - https://github.com/DeepMountains/zzz/blob/main/CVE6-2.md -CVE-2024-9875 - https://help.okta.com/asa/en-us/content/topics/releasenotes/advanced-server-access-release-notes.htm CVE-2024-9879 - https://wpscan.com/vulnerability/cda54097-4aec-472e-a73f-31ecb76ebb23/ CVE-2024-9881 - https://wpscan.com/vulnerability/ec76f73a-7ad4-432d-8216-7cdb5603cef9/ CVE-2024-9882 - https://wpscan.com/vulnerability/7f7667fd-6ac6-4c90-aaf0-c7862bd8e9bd/ @@ -103602,7 +101710,6 @@ CVE-2025-10012 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-202 CVE-2025-10012 - https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20ref_cod_aluno%20Parameter%20on%20educar_historico_escolar_lst.php%20Endpoint.md CVE-2025-10013 - https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60exportacao-para-o-seb%60%20Endpoint.md CVE-2025-10013 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10013.md -CVE-2025-10014 - https://www.cnblogs.com/aibot/p/19063332 CVE-2025-10015 - https://github.com/sparkle-project/Sparkle/discussions/2764 CVE-2025-10016 - https://github.com/sparkle-project/Sparkle/discussions/2764 CVE-2025-10025 - https://github.com/zzx-yyds/mycve/issues/3 @@ -103625,9 +101732,7 @@ CVE-2025-10077 - https://github.com/ganzhi-qcy/cve/issues/20 CVE-2025-10079 - https://github.com/f000x0/cve/issues/2 CVE-2025-10081 - https://github.com/drew-byte/Pet-Grooming-Management-RCE CVE-2025-10083 - https://github.com/chen2496088236/CVE/issues/8 -CVE-2025-10084 - https://www.cnblogs.com/aibot/p/19063331 CVE-2025-10085 - https://github.com/chen2496088236/CVE/issues/9 -CVE-2025-10086 - https://www.cnblogs.com/aibot/p/19063427 CVE-2025-10088 - https://github.com/drew-byte/Personal-Time-Tracker-V1-POC CVE-2025-1009 - https://bugzilla.mozilla.org/show_bug.cgi?id=1936613 CVE-2025-10090 - https://github.com/Cstarplus/CVE/issues/1 @@ -103690,7 +101795,6 @@ CVE-2025-10271 - https://github.com/1276486/CVE/issues/5 CVE-2025-10272 - https://github.com/1276486/CVE/issues/6 CVE-2025-10273 - https://github.com/1276486/CVE/issues/8 CVE-2025-10274 - https://github.com/1276486/CVE/issues/9 -CVE-2025-10278 - https://www.cnblogs.com/aibot/p/19063565 CVE-2025-10318 - https://www.cnblogs.com/aibot/p/19063341 CVE-2025-10320 - https://www.cnblogs.com/aibot/p/19063320 CVE-2025-10323 - https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/adm.cgi/wizard_rep.shtml @@ -103835,7 +101939,6 @@ CVE-2025-10675 - https://www.cnblogs.com/aibot/p/19063430 CVE-2025-10676 - https://www.cnblogs.com/aibot/p/19063431 CVE-2025-10687 - https://github.com/kele28886/cve/issues/1 CVE-2025-10688 - https://github.com/K1nakoo/cve/blob/main/21/report.md -CVE-2025-10707 - https://www.cnblogs.com/aibot/p/19063346 CVE-2025-10708 - https://github.com/Cstarplus/CVE/issues/4 CVE-2025-10709 - https://github.com/Cstarplus/CVE/issues/5 CVE-2025-10710 - https://github.com/1276486/CVE/issues/11 @@ -103898,8 +102001,6 @@ CVE-2025-10812 - https://github.com/yihaofuweng/cve/issues/28 CVE-2025-10813 - https://github.com/yihaofuweng/cve/issues/29 CVE-2025-10816 - https://github.com/1296299554/CVE/issues/1 CVE-2025-10817 - https://github.com/244556089/cve/issues/1 -CVE-2025-10819 - https://www.cnblogs.com/aibot/p/19063466 -CVE-2025-10820 - https://www.cnblogs.com/aibot/p/19063465 CVE-2025-10821 - https://www.cnblogs.com/aibot/p/19063464 CVE-2025-10822 - https://www.cnblogs.com/aibot/p/19063462 CVE-2025-10823 - https://github.com/axboe/fio/issues/1982 @@ -103958,16 +102059,6 @@ CVE-2025-10974 - https://github.com/giantspatula/SewKinect/issues/3 CVE-2025-10974 - https://github.com/giantspatula/SewKinect/issues/3#issue-3408883003 CVE-2025-10975 - https://github.com/GuanxingLu/vlarl/issues/18 CVE-2025-10975 - https://github.com/GuanxingLu/vlarl/issues/18#issue-3408978610 -CVE-2025-10976 - https://www.cnblogs.com/aibot/p/19063349 -CVE-2025-10977 - https://www.cnblogs.com/aibot/p/19063351 -CVE-2025-10978 - https://www.cnblogs.com/aibot/p/19063352 -CVE-2025-10979 - https://www.cnblogs.com/aibot/p/19063353 -CVE-2025-10980 - https://www.cnblogs.com/aibot/p/19063355 -CVE-2025-10981 - https://www.cnblogs.com/aibot/p/19063356 -CVE-2025-10987 - https://www.cnblogs.com/aibot/p/19063573 -CVE-2025-10988 - https://www.cnblogs.com/aibot/p/19063563 -CVE-2025-10989 - https://www.cnblogs.com/aibot/p/19063507 -CVE-2025-10992 - https://www.cnblogs.com/aibot/p/19063472 CVE-2025-10994 - https://github.com/openbabel/openbabel/issues/2834 CVE-2025-10994 - https://github.com/user-attachments/files/22318611/poc.zip CVE-2025-10995 - https://github.com/openbabel/openbabel/issues/2832 @@ -104286,16 +102377,12 @@ CVE-2025-23049 - https://www.materialise.com/en/healthcare/orthoview/security-vu CVE-2025-2308 - https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc2.md CVE-2025-2310 - https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc4.md CVE-2025-23199 - https://github.com/librenms/librenms/security/advisories/GHSA-27vf-3g4f-6jp7 -CVE-2025-2320 - https://www.cnblogs.com/aibot/p/18732226 CVE-2025-23200 - https://github.com/librenms/librenms/security/advisories/GHSA-c66p-64fj-jmc2 CVE-2025-23204 - https://github.com/api-platform/core/security/advisories/GHSA-7mxx-3cgm-xxv3 -CVE-2025-2321 - https://www.cnblogs.com/aibot/p/18732250 CVE-2025-23215 - https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84 CVE-2025-23218 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xhv4-88gx-hvgh -CVE-2025-2322 - https://www.cnblogs.com/aibot/p/18732299 CVE-2025-23221 - https://github.com/dahlia/fedify/security/advisories/GHSA-c59p-wq67-24wx CVE-2025-2323 - https://www.cnblogs.com/aibot/p/18732309 -CVE-2025-2334 - https://www.cnblogs.com/aibot/p/18732182 CVE-2025-2336 - https://www.herodevs.com/vulnerability-directory/cve-2025-2336 CVE-2025-2337 - https://github.com/tbeu/matio/issues/267#issue-2883856488 CVE-2025-23386 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23386 @@ -104658,7 +102745,6 @@ CVE-2025-28102 - https://github.com/DogukanUrker/flaskBlog/issues/130 CVE-2025-28103 - https://github.com/DogukanUrker/flaskBlog/issues/130 CVE-2025-28104 - https://github.com/DogukanUrker/flaskBlog/issues/130 CVE-2025-2812 - https://github.com/sahici/CVE-2025-2812/ -CVE-2025-28128 - https://gist.github.com/str4ng3r-0x7/3d9d310cb6cc5af39088ef44289ba588#file-cve-2025-28128 CVE-2025-28137 - https://github.com/Zerone0x00/CVE/blob/main/TOTOLINK/CVE-2025-28137.md CVE-2025-28138 - https://github.com/Zerone0x00/CVE/blob/main/TOTOLINK/CVE-2025-28138.md CVE-2025-28142 - https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/4 @@ -104666,7 +102752,6 @@ CVE-2025-28144 - https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_ CVE-2025-28145 - https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/2 CVE-2025-28146 - https://gist.github.com/regainer27/469a6f2b694a76c3b58249b27fdd0881 CVE-2025-28146 - https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/3 -CVE-2025-28169 - https://gist.github.com/rainymode/bfd976ecbe0d0b776fd930375156c19c CVE-2025-2817 - https://bugzilla.mozilla.org/show_bug.cgi?id=1917536 CVE-2025-2819 - https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0001.pdf CVE-2025-2820 - https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0002.pdf @@ -104692,7 +102777,6 @@ CVE-2025-28407 - https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE CVE-2025-28408 - https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28408.md CVE-2025-28409 - https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28408.md CVE-2025-28411 - https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28411.md -CVE-2025-2852 - https://hackmd.io/@gnol719/rJqOPiInye CVE-2025-2854 - https://github.com/hak0neP/cve/blob/main/sql-fizz.md CVE-2025-2903 - https://portal.perforce.com/s/detail/a91PA000001Sed3YAC CVE-2025-29030 - https://github.com/WhereisDoujo/CVE/issues/3 @@ -104779,7 +102863,6 @@ CVE-2025-29689 - https://gitee.com/hailey888/oa_system/issues/IBRQZ9 CVE-2025-29690 - https://gitee.com/hailey888/oa_system/issues/IBRRX3 CVE-2025-29691 - https://gitee.com/hailey888/oa_system/issues/IBRQYI CVE-2025-2973 - https://github.com/hak0neP/cve/blob/main/cve-RCE.md -CVE-2025-2974 - https://bytium.com/stored-xss-in-perfex-crm-3-2-1-contracts-module/ CVE-2025-29772 - https://github.com/openemr/openemr/security/advisories/GHSA-89gp-g4c9-hv8h CVE-2025-29778 - https://github.com/kyverno/kyverno/security/advisories/GHSA-46mp-8w32-6g94 CVE-2025-29787 - https://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 @@ -105376,8 +103459,6 @@ CVE-2025-4109 - https://github.com/Iandweb/CVE/issues/3 CVE-2025-4110 - https://github.com/Iandweb/CVE/issues/4 CVE-2025-4111 - https://github.com/Iandweb/CVE/issues/5 CVE-2025-4112 - https://github.com/bleakTS/myCVE/issues/3 -CVE-2025-4118 - https://www.cnblogs.com/aibot/p/18830907 -CVE-2025-4119 - https://www.cnblogs.com/aibot/p/18830908 CVE-2025-41234 - https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N&version=3.1 CVE-2025-41255 - https://github.com/iterate-ch/cyberduck/security/advisories/GHSA-vjjc-grpp-m655 CVE-2025-41255 - https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250325-01_Cyberduck_Mountain_Duck_Certificate_Handling @@ -105385,7 +103466,6 @@ CVE-2025-41256 - https://github.com/iterate-ch/cyberduck/security/advisories/GHS CVE-2025-41256 - https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250325-02_Cyberduck_Mountain_Duck_Weak_Hash CVE-2025-4133 - https://wpscan.com/vulnerability/ebd7e5f5-af8d-42ca-b6ff-af92e03d4a3e/ CVE-2025-4134 - https://www.gendigital.com/us/en/contact-us/security-advisories/ -CVE-2025-4136 - https://www.cnblogs.com/aibot/p/18830909 CVE-2025-41426 - https://www.vertiv.com/en-us/support/security-support-center/ CVE-2025-4151 - https://github.com/faithhard/cve/issues/1 CVE-2025-4152 - https://github.com/faithhard/cve/issues/2 @@ -105526,7 +103606,6 @@ CVE-2025-45542 - https://medium.com/@sanjay70023/cve-2025-45542-time-based-blind CVE-2025-45582 - https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md CVE-2025-45620 - https://github.com/weedl/CVE-2025-45620 CVE-2025-4567 - https://wpscan.com/vulnerability/b8a50ae9-40c4-42f8-9342-2440d3bc12bb/ -CVE-2025-45729 - https://www.kdev.site/2025/04/02/d-link-823_pro-unauthorized-telnet-access/ CVE-2025-45746 - https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2025-45746.md CVE-2025-45752 - https://www.simonjuguna.com/cve-2025-45752-authenticated-remote-code-execution-vulnerability-in-seeddms-v6-0-32/ CVE-2025-45753 - https://www.simonjuguna.com/cve-2025-45753-authenticated-remote-code-execution-vulnerability-in-vtiger-open-source-edition-v8-3-0/ @@ -105678,7 +103757,6 @@ CVE-2025-47268 - https://github.com/iputils/iputils/issues/584 CVE-2025-47272 - https://github.com/CE-PhoenixCart/PhoenixCart/security/advisories/GHSA-62qj-pvwm-h8cv CVE-2025-47273 - https://github.com/pypa/setuptools/issues/4946 CVE-2025-47273 - https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf -CVE-2025-47277 - https://docs.vllm.ai/en/latest/deployment/security.html CVE-2025-4728 - https://github.com/Lena-lyy/SQL/issues/4 CVE-2025-47281 - https://github.com/kyverno/kyverno/security/advisories/GHSA-r5p3-955p-5ggq CVE-2025-47285 - https://github.com/vyperlang/vyper/pull/4644 @@ -106016,7 +104094,6 @@ CVE-2025-50817 - https://medium.com/@abcd_68700/cve-2025-50817-python-future-mod CVE-2025-50819 - https://github.com/amooryx/arxiv-daily/security/advisories/GHSA-xqg6-5wfv-4855 CVE-2025-50847 - https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50847.md CVE-2025-50850 - https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50850.md -CVE-2025-50869 - https://portswigger.net/web-security/cross-site-scripting/stored CVE-2025-50891 - https://www.adformhelp.com/hc/en-us/categories/9738364537233-Adform-Site-Tracking CVE-2025-50897 - https://github.com/LuLuji04/POC-Boomv1.2 CVE-2025-5093 - https://wpscan.com/vulnerability/1862b4a6-5570-48a4-9b09-f9659eb0e9e3/ @@ -106345,7 +104422,6 @@ CVE-2025-57434 - https://github.com/shiky8/my--cve-vulnerability-research/tree/m CVE-2025-57437 - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57437 CVE-2025-57438 - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57438 CVE-2025-57440 - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57440 -CVE-2025-57520 - https://onurcangenc.com.tr/posts/cve-2025-57520--stored-xss-in-decap-cms-3-8-3/ CVE-2025-57538 - https://github.com/khankishiyev-j/bug-bounty/blob/main/proxmox-xss CVE-2025-57539 - https://github.com/khankishiyev-j/bug-bounty/blob/main/proxmox-xss CVE-2025-57540 - https://github.com/khankishiyev-j/bug-bounty/blob/main/proxmox-xss @@ -107678,8 +105754,6 @@ CVE-2025-9933 - https://github.com/xiaoxinkaishi/cve/issues/4 CVE-2025-9934 - https://github.com/Axelioc/CVE/blob/main/TOTOLINK/X5000R/sub_410C34/sub_410C34.md CVE-2025-9934 - https://github.com/Axelioc/CVE/blob/main/TOTOLINK/X5000R/sub_410C34/sub_410C34.md#poc CVE-2025-9935 - https://github.com/mono7s/TOTOLINK/blob/main/N600R/TOTOLINK%20N600R%20Unauthorized_Command_Injection.md -CVE-2025-9936 - https://www.cnblogs.com/aibot/p/19063425 -CVE-2025-9937 - https://www.cnblogs.com/aibot/p/19063329 CVE-2025-9938 - https://github.com/ZZ2266/.github.io/tree/main/Dlink/DI-8400/yyxz.asp CVE-2025-9938 - https://github.com/ZZ2266/.github.io/tree/main/Dlink/DI-8400/yyxz.asp#proof-of-concept-poc CVE-2025-9939 - https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/admin_propertyview.php_xss.md @@ -109058,7 +107132,6 @@ http://nvidia.custhelp.com/app/answers/detail/a_id/4247 http://obtruse.syfrtext.com/2018/07/oracle-privilege-escalation-via.html http://ocert.org/advisories/ocert-2009-013.html http://ocert.org/advisories/ocert-2014-005.html -http://openid.net/2011/05/05/attribute-exchange-security-alert/ http://openwall.com/lists/oss-security/2010/12/02/5 http://openwall.com/lists/oss-security/2010/12/02/8 http://openwall.com/lists/oss-security/2010/12/21/4 @@ -109123,8 +107196,6 @@ http://realpentesting.blogspot.com.es/p/blog-page_3.html http://research.g0blin.co.uk/cve-2014-6445/ http://research.g0blin.co.uk/cve-2014-6446/ http://research.g0blin.co.uk/cve-2014-7152/ -http://retrogod.altervista.org/9sg_CA_poc.html -http://retrogod.altervista.org/9sg_oovoo_url_poc.html http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html http://rhn.redhat.com/errata/RHSA-2013-0595.html http://rhn.redhat.com/errata/RHSA-2013-0671.html @@ -109828,7 +107899,6 @@ http://terasolunaorg.github.io/vulnerability/cve-2022-43484.html http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html http://thekelleys.org.uk/dnsmasq/CHANGELOG -http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/ http://thesauceofutterpwnage.blogspot.com/2011/01/waking-up-sleeping-dragon.html http://tjr181.com/2024/11/08/H3C%20GR-1800AX/ http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html @@ -109878,15 +107948,10 @@ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-014/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-002/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-003/ -http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ http://uploadboy.me/cn40ne6p89t6/POC.mp4.html http://v0ids3curity.blogspot.in/2014/12/return-to-vdso-using-elf-auxiliary.html http://vapid.dhs.org/advisories/show_in_browser.html http://vapid.dhs.org/advisories/sounder-ruby-gem-cmd-inj.html -http://verneet.com/cve-2019-16685/ -http://verneet.com/cve-2019-16686 -http://verneet.com/cve-2019-16687 -http://verneet.com/cve-2019-16688 http://vexillium.org/?sec-sdlgif http://vigilance.fr/vulnerability/Dotclear-file-upload-via-swfupload-swf-11396 http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586 @@ -109992,7 +108057,6 @@ http://www.ampliasecurity.com/advisories/AMPLIA-ARA050913.txt http://www.ampliasecurity.com/advisories/nisuta-nswir150ne-nswir300n-wireless-router-remote-management-web-interface-authentication-bypass-vulnerability.html http://www.andmp.com/2018/02/advisory-assigned-CVE-2018-7251-in-anchorcms.html http://www.andmp.com/2018/02/advisory-assigned-cve-2018-7308-csrf.html -http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt http://www.antoniobarresi.com/files/cain_advisory.txt http://www.attrition.org/pipermail/vim/2006-August/001000.html http://www.attrition.org/pipermail/vim/2006-October/001076.html @@ -110062,17 +108126,6 @@ http://www.computerterrorism.com/research/ct12-09-2006-2.htm http://www.computerterrorism.com/research/ct12-09-2006.htm http://www.cynops.de/advisories/AKLINK-SA-2008-007.txt http://www.daemonology.net/hyperthreading-considered-harmful/ -http://www.darksecurity.de/advisories/2012/SSCHADV2012-002.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-006.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-010.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-014.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt -http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt -http://www.darksecurity.de/advisories/2013/SSCHADV2013-004.txt -http://www.darksecurity.de/advisories/SSCHADV2011-042.txt http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html http://www.digit-labs.org/files/exploits/extremail-v3.pl @@ -111452,7 +109505,6 @@ http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8 -http://www.longtailvideo.com/support/forums/jw-player/bug-reports/26699/xss-exists-in-debug-functionality http://www.madirish.net/538 http://www.madirish.net/541 http://www.madirish.net/550 @@ -111474,9 +109526,6 @@ http://www.mail-archive.com/ganglia-developers%40lists.sourceforge.net/msg04929. http://www.mathyvanhoef.com/2013/11/unmasking-spoofed-mac-address.html http://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-symphony-cms/ http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:02.txt -http://www.mindedsecurity.com/MSA01150108.html -http://www.mindedsecurity.com/MSA01240108.html -http://www.mindedsecurity.com/labs/advisories/MSA01110707 http://www.modzero.ch/advisories/MZ-13-04-Blackberry_Z10-File-Exchange-Authentication-By-Pass.txt http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt http://www.mozilla.org/security/announce/2006/mfsa2006-37.html @@ -112001,7 +110050,6 @@ http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt http://www.piotrbania.com/all/adv/nullsoft-winamp-libsndfile-adv.txt http://www.piotrbania.com/all/adv/quicktime-heap-adv-7.1.txt http://www.planitcomputing.ie/upc-wifi-attack.pdf -http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982 http://www.pritect.net/blog/ninja-forms-2-9-42-critical-security-vulnerabilities http://www.quantenblog.net/security/virus-scanner-bypass http://www.rafayhackingarticles.net/2013/05/kali-linux-dom-based-xss-writeup.html @@ -112151,7 +110199,6 @@ http://www.talosintelligence.com/reports/TALOS-2017-0279/ http://www.tenable.com/plugins/index.php?view=single&id=65738 http://www.tenable.com/security/tns-2014-08 http://www.thekelleys.org.uk/dnsmasq/CHANGELOG -http://www.theora.org/news/#libtheora-1.1.0 http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/ http://www.theregister.co.uk/2009/07/10/wyse_remote_exploit_bugs/ http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/ @@ -112169,7 +110216,6 @@ http://www.trapkit.de/advisories/TKADV2005-11-002.txt http://www.trapkit.de/advisories/TKADV2005-11-004.txt http://www.trapkit.de/advisories/TKADV2005-12-001.txt http://www.trapkit.de/advisories/TKADV2007-001.txt -http://www.turbotax.com/atr/update/ http://www.ubuntu.com/usn/usn-740-1 http://www.ush.it/2007/03/09/php-nuke-wild-post-xss/ http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt @@ -112415,25 +110461,8 @@ https://0dd.zone/2018/05/31/TripleA-XXE/ https://0dd.zone/2018/06/02/Netbeans-MMD-Plugin-XXE/ https://0dd.zone/2018/09/03/lh-ehr-RCE-via-picture-upload/ https://0dr3f.github.io/cve/ -https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html https://0g.vc/posts/insecure-cipher-gnuboard5/ https://0nightsedge0.github.io/2025/05/14/CVE-2025-4540-C-Lodop/ -https://0patch.blogspot.com/2016/06/writing-0patch-for-acrobat-readers-use.html -https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html -https://0patch.blogspot.com/2017/01/micropatching-remote-code-execution-in.html -https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html -https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html -https://0patch.blogspot.com/2017/07/0patching-quick-brown-fox-of-cve-2017.html -https://0patch.blogspot.com/2017/08/0patching-foxit-readers-saveas-0day-cve.html -https://0patch.blogspot.com/2017/09/0patching-rsrc-arbitrary-null-write.html -https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html -https://0patch.blogspot.com/2017/10/micropatching-hypervisor-with-running.html -https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html -https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html -https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html -https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html -https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html -https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access https://0x.mk/?p=239 https://0x09.dev/posts/toto_decouvre_une_interface_de_debug/ @@ -112443,7 +110472,6 @@ https://0x62626262.wordpress.com/2016/04/21/persian-woocommerce-sms-xss-vulnerab https://0x62626262.wordpress.com/2016/04/21/tweet-wheel-xss-vulnerability/ https://0x62626262.wordpress.com/2018/10/08/sitepress-multilingual-cms-plugin-unauthenticated-stored-xss/ https://0x62626262.wordpress.com/2019/12/24/dlink-dir-601-router-authentication-bypass-and-csrf/ -https://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444/ https://0xd0ff9.wordpress.com/2018/06/21/cve-2018-7475/ https://0xd0ff9.wordpress.com/2018/10/18/cve-2018-18398/ https://0xd0ff9.wordpress.com/2019/07/19/from-code-evaluation-to-pre-auth-remote-code-execution-cve-2018-16763-bypass/ @@ -112464,7 +110492,6 @@ https://Full-Disclosure.eu https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html https://a1batr0ss.top/2025/08/06/CVE-2025-44779-Ollama-arbitrary-file-deletion/ https://aadityapurani.com/2016/06/03/mobile-detector-poc/ -https://about.gitlab.com/blog/2021/09/07/why-are-developers-vulnerable-to-driveby-attacks/ https://abrahack.com/posts/gamipress-sqli/ https://abrahack.com/posts/quiz-maker-sqli/ https://access.redhat.com/articles/2548661 @@ -112524,7 +110551,6 @@ https://advisory.dw1.io/59 https://advisory.dw1.io/60 https://advisory.zerodaysec.org/advisory/kubernetes-headlamp-code-signing https://afine.com/threat-of-tcc-bypasses-on-macos/#cooking-cursor-app -https://ajdg.solutions/2019/07/11/adrotate-pro-5-3-important-update-for-security-and-ads-txt/ https://alephsecurity.com/2017/03/08/nexus9-fiq-debugger/ https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/ https://alephsecurity.com/vulns/aleph-2017008 @@ -112665,7 +110691,6 @@ https://belong2yourself.github.io/vulnerabilities/docs/AIDA/Elevation-of-Privile https://belong2yourself.github.io/vulnerabilities/docs/SANDRA/Elevation-of-Privileges/readme/ https://benrogozinski.github.io/CVE-2024-45589/ https://bentl.ee/posts/cve-givewp/ -https://beosin.com/resources/%22memory-bomb%22-vulnerability-causes-sui-node-to-crash?lang=en-US https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20aprocess.php%20SQL%20Injection/ https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20eprocess.php%20SQL%20Injection/ https://beyondbinary.io/articles/seagate-nas-rce/ @@ -112701,7 +110726,6 @@ https://blog.0xlabs.com/2021/02/wavlink-rce-CVE-2020-13117.html https://blog.0xzon.dev/2023-10-15-Mejiro-Reflected-XSS-Via-Remote-File-Inclusion-CVE-2023-46448/ https://blog.0xzon.dev/2024-07-27-CVE-2024-41637/ https://blog.1inch.io/a-vulnerability-disclosed-in-profanity-an-ethereum-vanity-address-tool-68ed7455fc8c -https://blog.alphathreat.in/index.php?post/2022/10/01/Achieving-CVE-2022-40055 https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/ https://blog.amberwolf.com/blog/2024/november/palo-alto-globalprotect---code-execution-and-privilege-escalation-via-malicious-vpn-server-cve-2024-5921/ https://blog.appicaptor.com/2019/10/04/vulnerable-library-warning-twitterkit-for-ios/ @@ -112757,7 +110781,6 @@ https://blog.flanker017.me/cve-2017-2416-gif-remote-exec/ https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell https://blog.fortinet.com/2016/06/06/analysis-of-use-after-free-vulnerability-cve-2016-4119-in-adobe-acrobat-and-reader https://blog.fortinet.com/2016/08/17/root-cause-analysis-of-windows-kernel-uaf-vulnerability-lead-to-cve-2016-3310 -https://blog.francescoservida.ch/2018/09/16/cve-2018-16225-public-disclosure-qbee-camera-vulnerability/ https://blog.freax13.de/cve/cve-2023-35861 https://blog.fuzzing-project.org/30-Stack-overflows-and-out-of-bounds-read-in-dpkg-Debian.html https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_mod_exp-CVE-2015-3193.html @@ -114567,9 +112590,6 @@ https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23386 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46811 https://bugzilla.zimbra.com/show_bug.cgi?id=101435 https://burninatorsec.blogspot.com/2021/07/onyaktech-comments-pro-broken.html -https://bytium.com/sql-injection-vulnerability-identified-in-rise-crm/ -https://bytium.com/stored-cross-site-scripting-xss-vulnerability-in-perfex-crm/ -https://bytium.com/stored-xss-in-perfex-crm-3-2-1-contracts-module/ https://c-ares.haxx.se/adv_20160929.html https://cardaci.xyz/advisories/2019/04/15/vesta-control-panel-0.9.8-23-reflected-xss-in-file-manager-api/ https://cardaci.xyz/advisories/2021/01/10/proxy.py-2.3.0-broken-basic-authentication/ @@ -114778,7 +112798,6 @@ https://code.videolan.org/videolan/x264/-/issues/75 https://code42.com/r/support/CVE-2019-11551 https://code42.com/r/support/CVE-2019-11552 https://code42.com/r/support/CVE-2019-11553 -https://code42.com/r/support/CVE-2019-15131 https://code42.com/r/support/CVE-2019-16861 https://code42.com/r/support/CVE-2020-12736 https://code610.blogspot.com/2017/10/zbx-11023-quick-autopsy.html @@ -114865,10 +112884,6 @@ https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005 https://compass-security.com/fileadmin/Research/Advisories/2020-12_CSNC-2019-013_AdRem_NetCrunch_Cross-Site_Scripting_XSS.txt https://compass-security.com/fileadmin/Research/Advisories/2020-15_CSNC-2019-016_AdRem_NetCrunch_Cross-Site_Request_Forgery_CSRF.txt https://comsec.ethz.ch/research/microarch/inception/ -https://consensys.net/diligence/vulnerabilities/nim-asyncftpd-crlf-injection/ -https://consensys.net/diligence/vulnerabilities/nim-browsers-argument-injection/ -https://consensys.net/diligence/vulnerabilities/nim-httpclient-header-crlf-injection/ -https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/ https://cool-y.github.io/2021/03/02/DIR-802-OS-Command-Injection https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/ https://coreruleset.org/20200914/cve-2020-15598/ @@ -115013,7 +113028,6 @@ https://cybermaya.in/posts/Post-40/ https://cybermaya.in/posts/Post-42/ https://cybermaya.in/posts/Post-43/ https://cybermaya.in/posts/Post-44/ -https://cybersecurityworks.com/zerodays/cve-2020-14445-wso2.html https://cyberthoth.medium.com/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6 https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/ https://cybir.com/2022/cve/connectwise-control-dns-spoofing-poc/ @@ -115144,7 +113158,6 @@ https://dheatattack.gitlab.io/faq/ https://diesec.home.blog/2021/08/24/philips-tasy-emr-3-06-sql-injection-cve-2021-39375cve-2021-39376/ https://dirtypipe.cm4all.com/ https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726 -https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248 https://discussions.eramba.org/t/question-stored-xss-vulnerability/2326 https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-lfi.txt https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-xsrf.txt @@ -115593,12 +113606,10 @@ https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-05 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-006 https://docs.offsecguy.com/cve/infor/vulnerability/reflected-xss https://docs.opennms.com/meridian/2024/releasenotes/changelog.html#releasenotes-changelog-Meridian-2024.2.6 -https://docs.pingidentity.com/pingaccess/latest/release_notes/pa_811_rn.html https://docs.servicestack.net/releases/v8_06#reported-vulnerabilities https://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003 https://docs.unsafe-inline.com/0day/manageengine-adselfservice-plus-6.1-csv-injection https://docs.unsafe-inline.com/0day/openlitespeed-web-server-1.7.8-command-injection-to-privilege-escalation-cve-2021-26758 -https://docs.vllm.ai/en/latest/deployment/security.html https://docs.yugabyte.com/preview/secure/vulnerability-disclosure-policy/ https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html#centreon-web-19-10-2 @@ -115738,7 +113749,6 @@ https://edricteo.com/cve-2015-1583-atutor-lcms-csrf-vulnerability/ https://elbae.github.io/jekyll/update/2020/07/14/vulns-01.html https://eldstal.se/advisories/230327-magnusbilling.html https://elifulkerson.com/CVE-2022-32429/ -https://emily.id.au/tailscale https://en.wikipedia.org/wiki/Slowloris_(computer_security) https://ensy.zip/posts/dompurify-323-bypass/ https://ephort.dk/blog/laravel-timing-attack-vulnerability/ @@ -115805,10 +113815,8 @@ https://f-revocrm.jp/2023/08/9394/ https://f20.be/cves/provide-server-v-14-4 https://f20.be/cves/socomec https://f20.be/cves/titan-ftp-vulnerabilities -https://fatihhcelik.github.io/posts/Division-By-Zero-Deark/ https://fatihhcelik.github.io/posts/Group-Office-CRM-SSRF/ https://fatihhcelik.github.io/posts/Group-Office-CRM-Stored-XSS-via-SVG-File/ -https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark/ https://faudhzanrahman.blogspot.com/2019/05/sql-injection-on-login-form.html https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#802 https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#803 @@ -116241,9 +114249,6 @@ https://gitee.com/mtons/mblog/issues/ICPMMQ https://gitee.com/mtons/mblog/issues/ICPMMW https://gitee.com/mtons/mblog/issues/ICPMNE https://gitee.com/pear-admin/Pear-Admin-Think/issues/I3DIEC -https://gitee.com/r1bbit/JFinalOA/issues/IBHUP1 -https://gitee.com/r1bbit/JFinalOA/issues/IBHUQ9 -https://gitee.com/r1bbit/JFinalOA/issues/IBHUQQ https://gitee.com/sanluan/PublicCMS/issues/IADVDM https://gitee.com/shavchen214/pwn/issues/I94VFH https://gitee.com/shavchen214/pwn/issues/I94VI3 @@ -121492,70 +119497,11 @@ https://hackings8n.blogspot.com/2018/07/cve-2018-13065-modsecurity-300-has-xss.h https://hackingvila.wordpress.com/2019/02/19/php-scripts-mall-online-food-ordering-script-has-cross-site-request-forgery-csrf-php-script-mall/ https://hackingvila.wordpress.com/2019/03/06/php-scripts-mall-online-lottery-php-readymade-script-1-7-0-has-cross-site-request-forgery-csrf-for-edit-profile-actionscve-2019-9604/ https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-eng/ -https://hackmd.io/%400dayResearch/B1C9jeXDi -https://hackmd.io/%400dayResearch/B1SZP0aIo -https://hackmd.io/%400dayResearch/DelvsList_R300 -https://hackmd.io/%400dayResearch/HkDzZLCUo -https://hackmd.io/%400dayResearch/HkUA31-Mh -https://hackmd.io/%400dayResearch/SetDynamicDNSSettings -https://hackmd.io/%400dayResearch/SetQuickVPNSettings_PSK -https://hackmd.io/%400dayResearch/SetQuickVPNSettings_Password -https://hackmd.io/%400dayResearch/SetSysEmailSettings -https://hackmd.io/%400dayResearch/SetWLanRadioSecurity -https://hackmd.io/%400dayResearch/SetWan2Settings_l2tp -https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe -https://hackmd.io/%400dayResearch/SetWan2Settings_pptp -https://hackmd.io/%400dayResearch/SetWan3Settings_pppoe -https://hackmd.io/%400dayResearch/SetWanSettings_L2TP -https://hackmd.io/%400dayResearch/SetWanSettings_PPPoE -https://hackmd.io/%400dayResearch/SetWanSettings_PPTP -https://hackmd.io/%400dayResearch/SyhDme7wo -https://hackmd.io/%400dayResearch/r1N7fg-fn -https://hackmd.io/%400dayResearch/r1R6sWRUs -https://hackmd.io/%400dayResearch/r1g5bl-Mn -https://hackmd.io/%400dayResearch/r1zsTSmDs -https://hackmd.io/%400dayResearch/rkXr4BQPi -https://hackmd.io/%400dayResearch/ry55QVQvj -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1XG-5iSo -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1rR3UArj -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJ8I_DCBi -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJUfyuABo -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BkFpXcsSs -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/By3Y6DRrj -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HkJ_o8Arj -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/Hkb38vELj -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HyEfIEpBj -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/S1QhLw0Ss -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SJZx0L0Sj -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SkCD5PEUo -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/r1pG4cori -https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/rywHivCBo -https://hackmd.io/%40JohnathanHuuTri/rJNbEItJC -https://hackmd.io/%40UR9gnr32QymtmtZHnZceOw/ry428EZGo -https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/rkhTCGzMd -https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/ry-t4QfMu -https://hackmd.io/%40cspl/B1ZkFZv23 -https://hackmd.io/%40cspl/H1PxPAUnn -https://hackmd.io/%40fe1w0/HyefvRQKp -https://hackmd.io/%40fe1w0/rymmJGida -https://hackmd.io/%40hieuleuxuan/OFOS_Sql_Injection -https://hackmd.io/%40pSgS7xsnS5a4K7Y0yiB43g/rJr8oNn_n -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1Vgv1uwo -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJ4czlpwi -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BJxlw2Pwi -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkwzORiDo -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1hP34Hvj -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/Sk6sfbTPi -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SyvnlO9Pi -https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/rJl69Icws -https://hackmd.io/%40tahaafarooq/auth_rce_voip -https://hackmd.io/%40tahaafarooq/dlink-dph-400se-cwe-200 https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg https://hackmd.io/03UGerewRcy3db44JQoWvw https://hackmd.io/7FtB06f-SJ-SCfkMYcXYxA https://hackmd.io/@7QWW9EKUSNGgPWZNOHkL2w/Sk4xbvejyx https://hackmd.io/@MrqrFIlhQFi7vUwkqbrXDw/deepseek -https://hackmd.io/@gnol719/rJqOPiInye https://hackmd.io/@noka/B1qwCyR9ll https://hackmd.io/@noka/B1qwCyR9ll#%E2%9E%A4-Payload https://hackmd.io/BhzJ4H20TjqKUiBrDOIKaw @@ -121582,10 +119528,7 @@ https://heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for https://heitorgouvea.me/2019/09/17/CVE-2019-15033 https://help.liferay.com/hc/en-us/articles/360050785632 https://help.mirametrix.com/hc/en-us/articles/4424676598157 -https://help.okta.com/asa/en-us/content/topics/releasenotes/advanced-server-access-release-notes.htm https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm -https://help.okta.com/en-us/content/topics/releasenotes/okta-verify-release-notes.htm#panel2 -https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 https://help.okta.com/oie/en-us/content/topics/settings/version_histories/ver_history_opp_agent.htm https://help.realvnc.com/hc/en-us/articles/360002253138-Release-Notes#vnc-server-6-11-0-released-0-2 https://help.realvnc.com/hc/en-us/articles/360002478311-Are-there-any-known-security-vulnerabilities-#cve-2008-4770-moderate-%E2%80%94-only-affects-vnc-viewer--0-1 @@ -121593,10 +119536,8 @@ https://help.rview.com/hc/ja/articles/38287019277843-%E7%B7%8A%E6%80%A5%E3%83%91 https://help.shipstation.com/hc/en-us/articles/360025855352-CS-Cart https://help.untis.at/hc/de/articles/360008456699-WebUntis-Release-Notes https://help.untis.at/hc/en-150/articles/360008456699 -https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-Advisory https://helpdesk.kaseya.com/hc/en-gb/articles/360000333152 https://helpdesk.kaseya.com/hc/en-gb/articles/360019054377-9-5-5-Feature-Release-10-April-2021 -https://helpdesk.kaseya.com/hc/en-gb/articles/360019966738-9-5-6-Feature-Release-8-May-2021 https://helpdesk.kaseya.com/hc/en-gb/articles/4403440684689-Important-Notice-July-2nd-2021 https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961 https://herolab.usd.de/en/security-advisories/usd-2019-0053/ @@ -121776,7 +119717,6 @@ https://illikainen.dev/advisories/014-yz1-izarc https://illuminati.services/2021/04/29/cve-2021-26807-gog-galaxy-v2-0-35-dll-load-order-hijacking/ https://iltosec.com/blog/post/cve-2024-11404-medium-severity-file-upload-vulnerabilities-in-django-filer-323/ https://iltosec.com/blog/post/django-cms-413-stored-xss-vulnerability-exploiting-the-page-title-field/ -https://images.go.hitachienergy.com/Web/ABBEnterpriseSoftware/%7B70b3d323-4866-42e1-8a75-58996729c1d4%7D_8DBD000172-VU-2023-23_Asset_Suite_Tagout_vulnerability_Rev1.pdf https://imagetragick.com/ https://imhotepisinvisible.com/druva-lpe/ https://immersivelabs.com/2019/12/04/aviatrix-vpn-client-vulnerability/ @@ -121981,7 +119921,6 @@ https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-curre https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/ https://jetpack.com/blog/vulnerabilities-found-in-the-3dprint-premium-plugin/ https://jeyaseelans.medium.com/cve-2020-35338-9e841f48defa -https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-functions-for-remote-code-execution/ https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/ https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ https://jgardner100.wordpress.com/2022/01/20/security-heads-up/ @@ -122511,7 +120450,6 @@ https://launchpad.net/bugs/1939733 https://launchpad.net/bugs/2048114 https://launchpad.net/bugs/500625 https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt -https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/ https://lbsfilm.at/blog/wpa2-authenticationmode-downgrade-in-espressif-microprocessors https://le0nc.blogspot.com/2021/04/cve-2021-26797-access-control.html https://lean0x2f.github.io/liquidfiles_advisory @@ -122536,7 +120474,6 @@ https://limbenjamin.com/articles/cve-2017-14126-participants-database-xss.html https://limbenjamin.com/articles/simple-student-result-auth-bypass.html https://limbenjamin.com/articles/smart-google-code-inserter-auth-bypass.html https://limbenjamin.com/articles/wp-like-button-auth-bypass.html -https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/ https://link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdf https://lists.archlinux.org/pipermail/pacman-dev/2016-June/021148.html https://lists.debian.org/debian-lts-announce/2021/10/msg00011.html @@ -122593,7 +120530,6 @@ https://lua-users.org/lists/lua-l/2022-04/msg00009.html https://lua-users.org/lists/lua-l/2022-05/msg00035.html https://lucabarile.github.io/Blog/CVE-2022-38604/index.html https://lucabarile.github.io/Blog/CVE-2022-43293/index.html -https://lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4 https://lunbun.dev/blog/cve-2025-55188/ https://lutrasecurity.com/en/articles/cve-2022-36532/ https://lwn.net/Articles/464824/ @@ -122610,14 +120546,9 @@ https://marcograss.github.io/security/android/cve/2016/01/15/cve-2015-7292-amazo https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview https://markgruffer.github.io/2019/07/19/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.html https://markus-krell.de/itop-template-injection-inside-customer-portal/ -https://mars-cheng.github.io/blog/2018/CVE-2018-11491/ -https://mars-cheng.github.io/blog/2018/CVE-2018-11492/ -https://mars-cheng.github.io/blog/2019/CVE-2018-16656 https://matthias.sdfeu.org/misp-poc.py https://mattpalmer.io/posts/statement-on-CVE-2025-48757/ https://maxime-morel.github.io/advisories/2025/CVE-2025-51586.md -https://mayaseven.com/cve-2019-12562-stored-cross-site-scripting-in-dotnetnuke-dnn-version-v9-3-2/ -https://mayaseven.com/nimble-directory-traversal-in-nimble-streamer-version-3-0-2-2-to-3-5-4-9/ https://mayfly277.github.io/posts/GLPI-htmlawed-CVE-2022-35914/ https://mcyoloswagham.github.io/linux/ https://mdsattacks.com/ @@ -122837,7 +120768,6 @@ https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee https://medium.com/tenable-techblog/rooting-routeros-with-a-usb-drive-16d7b8665f90 https://medium.com/tsscyber/noc-noc-whos-there-your-nms-is-pwned-1826174e0dee -https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e https://medium.com/zero2flag/cve-2019-18203-bfa65918e591 https://meltdownattack.com/ https://members.backbox.org/boolebox-secure-sharing-multiple-vulnerabilities/ @@ -122846,8 +120776,6 @@ https://members.backbox.org/osticket-sql-injection-bypass/ https://members.backbox.org/osticket-sql-injection/ https://members.backbox.org/saet-tebe-small-supervisor-multiple-vulnerabilities/ https://memorycorruption.net/posts/rce-lua-factorio/ -https://metalamin.github.io/MachForm-not-0-day-EN/ -https://metalamin.github.io/Quick-Chat-SQLi-EN/ https://metamorfosec.com/Files/Advisories/METS-2018-001-A_XSS_Vulnerability_in_OJS_3.0.0_to_3.1.1-1.txt https://metamorfosec.com/Files/Advisories/METS-2018-002-A_XSS_Vulnerability_in_OMP_1.2.0_to_3.1.1-2.txt https://metamorfosec.com/Files/Advisories/METS-2018-003-A_XSS_Vulnerability_in_German_Spelling_Dictionary_1.3.txt @@ -122966,8 +120894,6 @@ https://noskill1337.github.io/homematic-with-cux-daemon-local-file-inclusion https://noskill1337.github.io/homematic-with-cux-daemon-remote-code-execution https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html https://notes.netbytesec.com/2023/11/post-auth-rce-in-crater-invoice.html -https://notnnor.github.io/research/2021/03/16/weak-password-recovery-mechanism-in-invoiceplane.html -https://notnnor.github.io/research/2021/03/17/full-path-discloure-in-invoiceplane.html https://novag.github.io/posts/homematic-unauthenticated-remote-code-execution/ https://novysodope.github.io/2021/10/29/64/ https://novysodope.github.io/2023/04/01/95/ @@ -122998,14 +120924,12 @@ https://okankurtulus.com.tr/2024/09/12/x2crm-v8-5-stored-cross-site-scripting-xs https://oligo.security/blog/more-models-more-probllms https://omespino.com/write-up-google-bug-bounty-xss-to-cloud-shell-instance-takeover-rce-as-root-5000-usd/ https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/ -https://onurcangenc.com.tr/posts/cve-2025-57520--stored-xss-in-decap-cms-3-8-3/ https://openid.net/notice-of-a-security-vulnerability/ https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf https://opnsec.com/2017/10/cve-2016-9263-unpatched-xsf-vulnerability-in-wordpress/ https://opswat.com https://osm.etsi.org/ -https://osm.etsi.org/news-events/blog/83-cve-2022-35503-disclosure https://oss-security.openwall.narkive.com/1UH3NYx8/cve-request-elgg-1-7-10-multiple-vulnerabilities https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/ https://outpost24.com/blog/crushftp-auth-bypass-vulnerability/ @@ -123052,7 +120976,6 @@ https://pastebin.com/23N5wcC7 https://pastebin.com/31v5JMcG https://pastebin.com/3K4kt713 https://pastebin.com/5ZDDCqgL -https://pastebin.com/6tqHnCva https://pastebin.com/6uT9jhDR https://pastebin.com/8dj59053 https://pastebin.com/8dvs5RcJ @@ -123123,7 +121046,6 @@ https://pcacybersecurity.com/resources/advisory/perfekt-blue https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-infotainment-2 https://pdf-insecurity.org/signature/evaluation_2018.html https://pdfium.googlesource.com/pdfium/+/4ff7a4246c81a71b4f878e959b3ca304cd76ec8a -https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-remote-command-execution_23961 https://pentest.ait.ac.at/security-advisory/decidim-awesome-sql-injection-in-adminaccountability https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/ https://pentest.blog/advisory-glpi-service-management-software-sql-injection-remote-code-execution-and-local-file-inclusion/ @@ -123221,18 +121143,6 @@ https://portal.perforce.com/s/detail/a91PA000001SeWbYAK https://portal.perforce.com/s/detail/a91PA000001Sed3YAC https://portal.perforce.com/s/detail/a91PA000001SeefYAC https://portal.perforce.com/s/detail/a91PA000001SiDdYAK -https://portswigger.net/daily-swig/blind-tcp-ip-hijacking-is-resurrected-for-windows-7 -https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack -https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-device -https://portswigger.net/research/bypassing-csp-using-polyglot-jpegs -https://portswigger.net/research/http2 -https://portswigger.net/research/xss-in-hidden-input-fields -https://portswigger.net/web-security/cross-site-scripting -https://portswigger.net/web-security/cross-site-scripting/reflected -https://portswigger.net/web-security/cross-site-scripting/stored -https://portswigger.net/web-security/csrf -https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions -https://portswigger.net/web-security/csrf/xss-vs-csrf https://positive.security/blog/url-open-rce https://positive.security/blog/url-open-rce#open-libreoffice https://posts.specterops.io/cve-2019-13382-local-privilege-escalation-in-snagit-abe5f31c349 @@ -123251,7 +121161,6 @@ https://profundis-labs.com/advisories/CVE-2015-7680.txt https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/ https://projectblack.io/blog/zendto-nday-vulnerabilities/ https://projectdiscovery.io/blog/hacking-apple-with-sql-injection?ref=projectdiscovery-io-blog-newsletter -https://prolink2u.com/product/prs1841/ https://prolink2u.com/products/dl-7203e-b https://prolink2u.com/products/pgn6401v https://proofnet.de/publikationen/konsole_rce.html @@ -123260,7 +121169,6 @@ https://prosody.im/security/advisory_20220113/ https://prosody.im/security/advisory_20220113/1.patch https://prosupport.logi.com/hc/en-us/articles/360040085114-Download-Logitech-Sync https://public-exposure.inform.social/post/integrity-checking/ -https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=55 https://pulsesecurity.co.nz/advisories/atftpd-multiple-vulnerabilities https://pulsesecurity.co.nz/advisories/linux-kernel-4.9-inetcsklistenstop-gpf https://pulsesecurity.co.nz/advisories/linux-kernel-4.9-tcpsocketsuaf @@ -123426,7 +121334,6 @@ https://rconfig.com https://rconfig.com/download https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804 https://reddassolutions.com/blog/tenda_w18e_security_research -https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/ https://redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords/ https://redmine.openinfosecfoundation.org/issues/7209 @@ -123591,7 +121498,6 @@ https://s3curityb3ast.github.io/KSA-Dev-009.txt https://s3curityb3ast.github.io/KSA-Dev-011.md https://s3curityb3ast.github.io/KSA-Dev-012.md https://s3curityb3ast.github.io/KSA-Dev-013.md -https://s4e.io/tools/dahua-eims-remote-code-execution https://s4e.io/tools/wifisky-7-layer-flow-control-router-remote-code-execution https://sahildhar.github.io/blogpost/Django-CMS-Reflected-XSS-Vulnerability/ https://sahildhar.github.io/blogpost/GdkPixbuf-Heap-Buffer-Overflow-in-lzw_decoder_new/ @@ -123664,7 +121570,6 @@ https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabili https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs/ https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-lime-survey/ https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/ -https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/- https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/ https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/ https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/ @@ -124447,7 +122352,6 @@ https://semaja2.net/2025/08/02/siklu-eh-unauthenticated-rce/ https://sensepost.com/blog/2019/being-stubborn-pays-off-pt.-1-cve-2018-19204/ https://sensepost.com/blog/2020/clash-of-the-spamtitan/ https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/ -https://sensepost.com/cms/resources/conferences/2013/bh_zwave/Security%20Evaluation%20of%20Z-Wave_WP.pdf https://seralys.com/research/CVE-2025-32975.txt https://seralys.com/research/CVE-2025-32976.txt https://seralys.com/research/CVE-2025-32977.txt @@ -124549,7 +122453,6 @@ https://snyk.io/blog/remote-code-execution-rce-sourmint/ https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction https://snyk.io/blog/url-confusion-vulnerabilities/ https://snyk.io/research/sour-mint-malicious-sdk/ -https://snyk.io/research/sour-mint-malicious-sdk/%23rce https://snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-1019377 https://snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-598852 https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971 @@ -125250,7 +123153,6 @@ https://starlabs.sg/advisories/23/23-4226 https://starlabs.sg/advisories/24/24-6781/ https://starlabs.sg/advisories/24/24-6782/ https://starlabs.sg/advisories/24/24-7008/ -https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/ https://startrekdude.github.io/arqbackup.html https://startrekdude.github.io/mailbird.html https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip @@ -125273,14 +123175,11 @@ https://support-splashtopbusiness.splashtop.com/hc/en-us/articles/20716875636763 https://support-splashtopbusiness.splashtop.com/hc/en-us/articles/25584410412571--Splashtop-Streamer-version-v3-7-0-0-for-Windows-released https://support-splashtopbusiness.splashtop.com/hc/en-us/articles/360042648231-Splashtop-Streamer-version-3-3-8-0-for-Windows-released-includes-SOS-version-3-3-8-0 https://support.1password.com/kb/202010/ -https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features https://support.acrolinx.com/hc/en-us/articles/213987685-Acrolinx-Server-Version-5-1-including-subsequent-service-releases- https://support.alertlogic.com/hc/en-us/articles/115004703183-BuilderEngine-Content-Management-System-CMS-elFinder-2-0-Arbitrary-File-Upload https://support.alertlogic.com/hc/en-us/articles/360028203692-WordPress-Theme-DesignFolio-Plus-1-2-upload-file-php-Arbitrary-File-Upload -https://support.applaudsolutions.com/hc/en-us/articles/203794318-Download-latest-Applaud-HCM-patch https://support.automox.com/help/release-notes -https://support.avantra.com/support/solutions/articles/44002516766-xan-5367-security-vulnerability-fix-for-dashboards https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater https://support.bluestacks.com/hc/en-us/articles/360018274091 @@ -125323,9 +123222,6 @@ https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued https://support.keyfactor.com/hc/en-us/articles/15618125602715-Security-Advisory-SignServer-Cross-site-scripting-issue-in-Admin-Web https://support.keyfactor.com/hc/en-us/articles/16671824556827-EJBCA-Security-Advisory-Partial-denial-of-service-attack-on-certificate-distribution-servlet-ejbca-ra-cert https://support.keyfactor.com/hc/en-us/articles/26965687021595-EJBCA-Security-Advisory-EJBCA-standalone-CMP-CLI-client -https://support.keyfactor.com/s/detail/a6x1Q000000CwC5QAK -https://support.keyfactor.com/s/detail/a6x1Q000000CwCjQAK -https://support.keyfactor.com/s/detail/a6x1Q000000CwCoQAK https://support.knowbe4.com/hc/en-us/articles/28959755127955-CVE-2024-29209 https://support.knowbe4.com/hc/en-us/articles/28959854203923-CVE-2024-29210 https://support.logi.com/hc/en-us/articles/360025297893 @@ -125335,7 +123231,6 @@ https://support.logsign.net/hc/en-us/articles/21062889743762-30-08-2024-Version- https://support.logsign.net/hc/en-us/articles/22076844908946-18-10-2024-Version-6-4-32-Release-Notes https://support.lumasoft.co/hc/en-us/articles/360046797573-Event-Privacy-and-Link-Sharing https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes -https://support.malwarebytes.com/hc/en-us/articles/1500000403501-Arbitrary-file-deletion-vulnerability-fixed-in-Malwarebytes-Endpoint-Protection https://support.malwarebytes.com/hc/en-us/articles/360058885974-Arbitrary-file-deletion-vulnerability-fixed-in-Malwarebytes-for-Windows https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003 https://support.mygeeni.com/hc/en-us @@ -125351,7 +123246,6 @@ https://support.optimizely.com/hc/en-us/articles/33182255281293-Content-Manageme https://support.optimizely.com/hc/en-us/articles/33182404079629-Content-Management-System-CMS-Security-Advisory-CMS-2025-03 https://support.parsec.app/hc/en-us/articles/18311425588237-CVE-2023-37250 https://support.pdfescape.com/hc/en-us/articles/360039586551 -https://support.pentaho.com/entries/78884125-Security-Vulnerability-Announcement-Feb-2015 https://support.pentaho.com/hc/en-us/articles/14452244712589--Resolved-Pentaho-BA-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4769- https://support.pentaho.com/hc/en-us/articles/14453135249165--Resolved-Pentaho-BA-Server-Incorrect-Permission-Assignment-for-Critical-Resource-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43773- https://support.pentaho.com/hc/en-us/articles/14454594588045--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Insertion-of-Sensitive-Information-into-Log-File-Versions-before-9-4-0-0-and-9-3-0-1-including-8-3-x-Impacted-CVE-2022-43772- @@ -125399,7 +123293,6 @@ https://support.plesk.com/hc/en-us/articles/10254625170322-Vulnerability-CVE-202 https://support.plesk.com/hc/en-us/articles/17426121182103 https://support.plesk.com/hc/en-us/articles/33785727869847-Vulnerability-CVE-2025-54336 https://support.plesk.com/hc/en-us/articles/4402990507026 -https://support.posit.co/hc/en-us/articles/10983374992023 https://support.primekey.com/news/posts/40 https://support.primekey.com/news/posts/51 https://support.primekey.com/news/posts/52 @@ -125411,12 +123304,7 @@ https://support.primekey.com/news/posts/ejbca-security-advisory-revocation-check https://support.primekey.com/news/primekey-announcements https://support.redlion.net/hc/en-us/articles/19339209248269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution https://support.severalnines.com/hc/en-us/articles/212425943-ChangeLog -https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users https://support.sonatype.com -https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability -https://support.sonatype.com/entries/42374566-CVE-2014-2034-Nexus-Security-Advisory-REST-API -https://support.sonatype.com/entries/84705937-CVE-2014-9389-Nexus-Security-Advisory-Directory-Traversal -https://support.sonatype.com/hc/en-us/articles/1500000415082-CVE-2020-29436-Nexus-Repository-Manager-3-XML-External-Entities-injection-2020-12-15 https://support.sonatype.com/hc/en-us/articles/1500005031082 https://support.sonatype.com/hc/en-us/articles/1500006126462 https://support.sonatype.com/hc/en-us/articles/1500006879561 @@ -125430,41 +123318,27 @@ https://support.sonatype.com/hc/en-us/articles/360000134968 https://support.sonatype.com/hc/en-us/articles/360010789153-CVE-2018-16621-Nexus-Repository-Manager-Java-Injection-October-17-2018 https://support.sonatype.com/hc/en-us/articles/360010789453-CVE-2018-16620-Nexus-Repository-Manager-Missing-Access-Controls-October-17-2018 https://support.sonatype.com/hc/en-us/articles/360010789893-CVE-2018-16619-Nexus-Repository-Manager-XSS-October-17-2018 -https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019 https://support.sonatype.com/hc/en-us/articles/360018565994-CVE-2018-12100-Nexus-Repository-Manager-3-Cross-Site-Scripting-XSS-June-4th-2018 https://support.sonatype.com/hc/en-us/articles/360022528733-CVE-2019-11629-Nexus-Repository-Manager-2-Cross-Site-Scripting-XSS-2019-05-02 https://support.sonatype.com/hc/en-us/articles/360033490774-CVE-2019-5475-Nexus-Repository-Manager-2-OS-Command-Injection-2019-08-09 https://support.sonatype.com/hc/en-us/articles/360033999733-CVE-2019-14469-Nexus-Repository-Manager-3-Cross-Site-Scripting-XSS-2019-07-26 https://support.sonatype.com/hc/en-us/articles/360035055794 https://support.sonatype.com/hc/en-us/articles/360036132453 -https://support.sonatype.com/hc/en-us/articles/360044356194 -https://support.sonatype.com/hc/en-us/articles/360044361594 https://support.sonatype.com/hc/en-us/articles/360044882533 -https://support.sonatype.com/hc/en-us/articles/360045360854 https://support.sonatype.com/hc/en-us/articles/360046133553 https://support.sonatype.com/hc/en-us/articles/360046233714 https://support.sonatype.com/hc/en-us/articles/360051068253 https://support.sonatype.com/hc/en-us/articles/360051424554 https://support.sonatype.com/hc/en-us/articles/360051424754 -https://support.sonatype.com/hc/en-us/articles/360052192533 -https://support.sonatype.com/hc/en-us/articles/360052192693 https://support.sonatype.com/hc/en-us/articles/360053516793 https://support.sonatype.com/hc/en-us/articles/4402433828371 https://support.sonatype.com/hc/en-us/articles/4404115639827 https://support.sonatype.com/hc/en-us/articles/4405941762579 -https://support.sonatype.com/hc/en-us/articles/4408801690515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021 -https://support.sonatype.com/hc/en-us/articles/4409326330003 https://support.sonatype.com/hc/en-us/articles/4412183372307 https://support.sonatype.com/hc/en-us/articles/5011047953555 https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base https://support.spinetix.com/wiki/DSOS_release_notes https://support.squaredup.com -https://support.squaredup.com/hc/en-us/articles/360017255858 -https://support.squaredup.com/hc/en-us/articles/360017568238 -https://support.squaredup.com/hc/en-us/articles/360017568258 -https://support.squaredup.com/hc/en-us/articles/360019427218-CVE-2020-9388-API-Endpoints-are-not-protected-against-CSRF -https://support.squaredup.com/hc/en-us/articles/360019427238-CVE-2020-9389-Username-enumeration-possible-via-a-timing-attack -https://support.squaredup.com/hc/en-us/articles/360019427258-CVE-2020-9390-Stored-cross-site-scripting https://support.squaredup.com/hc/en-us/articles/4410635417233-CVE-2021-40092-Stored-cross-site-scripting-Image-tile- https://support.squaredup.com/hc/en-us/articles/4410635418257-CVE-2021-40093-Stored-cross-site-scripting-Action-Buttons- https://support.squaredup.com/hc/en-us/articles/4410635419153-CVE-2021-40095-Reading-arbitrary-files @@ -125473,7 +123347,6 @@ https://support.squaredup.com/hc/en-us/articles/4410656395537-CVE-2021-40094-DOM https://support.squaredup.com/hc/en-us/articles/4410656396817-CVE-2021-40096-Stored-cross-site-scripting-provider-configuration- https://support.studionetworksolutions.com/hc/en-us/articles/22494658980244-ShareBrowser-v-7-0-Released https://support.techsmith.com/hc/en-us/articles/115006435067-Snagit-Windows-Version-History -https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/ https://support.umbrella.com/hc/en-us/articles/115004154423 https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-Vulnerability-due-to-always-on-SSH-Tunnel-RESOLVED-2017-09-15 https://support.undsgn.com/hc/en-us/articles/213454129-Change-Log @@ -125515,17 +123388,6 @@ https://syhack.wordpress.com/2020/04/18/pnotes-insecure-file-upload-vulnerabilit https://syhack.wordpress.com/2020/04/21/rapid-scada-local-privilege-escalation-vulnerability/ https://syntegris-sec.github.io/filerun-advisory https://sysdig.com/blog/cve-2019-8339-falco-vulnerability/ -https://sysdream.com/news/lab/2016-10-19-spip-3-1-1-3-1-2-file-enumeration-path-traversal-cve-2016-7982/ -https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-template-compiler-composer-php-code-execution-cve-2016-7998/ -https://sysdream.com/news/lab/2017-03-23-cve-2017-5869-nuxeo-platform-remote-code-execution/ -https://sysdream.com/news/lab/2017-09-29-cve-2017-11322-ucopia-wireless-appliance-5-1-8-privileges-escalation/ -https://sysdream.com/news/lab/2017-09-29-cve-2017-6089-phpcollab-2-5-1-multiple-sql-injections-unauthenticated/ -https://sysdream.com/news/lab/2017-09-29-cve-2017-6090-phpcollab-2-5-1-arbitrary-file-upload-unauthenticated/ -https://sysdream.com/news/lab/2017-11-20-cve-2017-5871-odoo-url-redirection-to-distrusted-site-open-redirect/ -https://sysdream.com/news/lab/2018-03-15-cve-2018-5233-grav-cms-admin-plugin-reflected-cross-site-scripting-xss-vulnerability/ -https://sysdream.com/news/lab/2018-05-21-cve-2018-10094-dolibarr-sql-injection-vulnerability/ -https://sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerability/ -https://sysdream.com/news/lab/2020-08-05-cve-2020-9036-jeedom-xss-leading-to-remote-code-execution/ https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.html https://systemweakness.com/critical-csrf-to-rce-in-filebrowser-865a3c34b8e7 https://t.me/joinchat/bJ9cnUosVh03ZTI0 @@ -126116,7 +123978,6 @@ https://user-images.githubusercontent.com/75008428/163742517-ecc1c787-1ef6-4df9- https://usn.ubuntu.com/4559-1/ https://vavkamil.cz/2021/11/25/wordpress-plugin-confusion-update-can-get-you-pwned/ https://vercel.com/changelog/cve-2025-32421 -https://verneet.com/cve-2022-40711/ https://versprite.com/blog/security-research/windows-registry/ https://vigilance.fr/vulnerability/Linux-kernel-information-disclosure-about-keyboard-11131 https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805 @@ -126392,7 +124253,6 @@ https://websec.nl/blog/ https://websec.nl/blog/6127847280e759c7d31286d0/cve%20report%20august%202021/ https://websec.nl/blog/61b2b37a43a1155c848f3b08/developing%20a%20remote%20code%20execution%20exploit%20for%20a%20popular%20media%20box https://websec.nl/blog/61b2b37a43a1155c848f3b08/websec%20finds%20critical%20vulnerabilities%20in%20popular%20media%20server -https://websec.nl/news.php https://websecnerd.blogspot.com/2018/02/mybb-forum-1.html https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html https://websecnerd.blogspot.in/2018/01/tiki-wiki-cms-groupware-17.html @@ -126403,7 +124263,6 @@ https://weizman.github.io/2023/04/10/snyk-xss/ https://wellington-almeida.medium.com/poc-2fd1d2ec1eb9 https://wellington-almeida.medium.com/poc-html-injection-0f27e657c962 https://wellington-almeida.medium.com/poc-sql-391c437c3960 -https://weltolk.github.io/p/xunruicms-v4.3.3-to-v4.5.1-backstage-code-injection-vulnerabilityfile-write-and-file-inclusion/ https://wesleyk.me/2020/01/10/my-first-vulnerability-mimecast-sender-address-verification/ https://wha13.github.io/2024/06/13/mfcve/ https://whatisgon.wordpress.com/2014/11/30/another-revslider-vulnerability/ @@ -130669,7 +128528,6 @@ https://www.bleepingcomputer.com/news/security/massive-psaux-ransomware-attack-t https://www.bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack/ https://www.bleepingcomputer.com/news/security/new-hacking-tool-lets-users-access-a-bunch-of-dvrs-and-their-video-feeds/ https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ -https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ https://www.canva.dev/blog/engineering/when-url-parsers-disagree-cve-2023-38633/ https://www.cdxy.me/?p=763 https://www.cdxy.me/?p=765 @@ -130712,43 +128570,17 @@ https://www.cnblogs.com/FALL3N/p/16813932.html https://www.cnblogs.com/L0g4n-blog/p/16695155.html https://www.cnblogs.com/L0g4n-blog/p/16704071.html https://www.cnblogs.com/LeouMaster/p/18509644 -https://www.cnblogs.com/aibot/p/18732182 -https://www.cnblogs.com/aibot/p/18732226 -https://www.cnblogs.com/aibot/p/18732250 -https://www.cnblogs.com/aibot/p/18732299 https://www.cnblogs.com/aibot/p/18732309 https://www.cnblogs.com/aibot/p/18827504 https://www.cnblogs.com/aibot/p/18827507 -https://www.cnblogs.com/aibot/p/18830907 -https://www.cnblogs.com/aibot/p/18830908 -https://www.cnblogs.com/aibot/p/18830909 https://www.cnblogs.com/aibot/p/18982747 https://www.cnblogs.com/aibot/p/19063320 -https://www.cnblogs.com/aibot/p/19063329 -https://www.cnblogs.com/aibot/p/19063331 -https://www.cnblogs.com/aibot/p/19063332 https://www.cnblogs.com/aibot/p/19063341 -https://www.cnblogs.com/aibot/p/19063346 -https://www.cnblogs.com/aibot/p/19063349 -https://www.cnblogs.com/aibot/p/19063351 -https://www.cnblogs.com/aibot/p/19063352 -https://www.cnblogs.com/aibot/p/19063353 -https://www.cnblogs.com/aibot/p/19063355 -https://www.cnblogs.com/aibot/p/19063356 -https://www.cnblogs.com/aibot/p/19063425 -https://www.cnblogs.com/aibot/p/19063427 https://www.cnblogs.com/aibot/p/19063429 https://www.cnblogs.com/aibot/p/19063430 https://www.cnblogs.com/aibot/p/19063431 https://www.cnblogs.com/aibot/p/19063462 https://www.cnblogs.com/aibot/p/19063464 -https://www.cnblogs.com/aibot/p/19063465 -https://www.cnblogs.com/aibot/p/19063466 -https://www.cnblogs.com/aibot/p/19063472 -https://www.cnblogs.com/aibot/p/19063507 -https://www.cnblogs.com/aibot/p/19063563 -https://www.cnblogs.com/aibot/p/19063565 -https://www.cnblogs.com/aibot/p/19063573 https://www.cnblogs.com/echod/articles/10380909.html https://www.cnblogs.com/focu5/p/18070469 https://www.cnblogs.com/pursue-security/p/17666126.html @@ -130786,11 +128618,6 @@ https://www.darkreading.com/vulnerabilities-threats/another-researcher-hit-with- https://www.ddosi.org/fastjson-poc/ https://www.deepcode.ca/index.php/2020/04/07/cve-2020-xss-in-clink-office-v2/ https://www.descope.com/blog/post/noauth -https://www.detack.de/en/cve-2019-12731 -https://www.detack.de/en/cve-2019-6265-6266 -https://www.detack.de/en/cve-2019-9005 -https://www.detack.de/en/cve-2021-33923 -https://www.detack.de/en/cve-2021-33924 https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability https://www.dionach.com/moodle-jmol-plugin-multiple-vulnerabilities/ @@ -130809,7 +128636,6 @@ https://www.elttam.com/blog/plormbing-your-django-orm/ https://www.elttam.com/blog/pwnassistant/ https://www.eq-3.de/downloads/software/HM-CCU2-Firmware_Updates/HM-CCU-2.59.7/HM-CCU2-Changelog.2.59.7.pdf https://www.esat.kuleuven.be/cosic/fast-furious-and-insecure-passive-keyless-entry-and-start-in-modern-supercars/ -https://www.escanav.com/en/index.asp https://www.esecforte.com/cve-2023-27150-cross-site-scripting-xss/ https://www.esecforte.com/cve-2023-27151-html-injection-activity-tracker/ https://www.esecforte.com/cve-2023-27152-opnsense-brute-force/ @@ -130970,7 +128796,6 @@ https://www.exploit-db.com/exploits/1646 https://www.exploit-db.com/exploits/1653 https://www.exploit-db.com/exploits/1655 https://www.exploit-db.com/exploits/1657 -https://www.exploit-db.com/exploits/1658 https://www.exploit-db.com/exploits/1662 https://www.exploit-db.com/exploits/16621 https://www.exploit-db.com/exploits/1663 @@ -131051,7 +128876,6 @@ https://www.exploit-db.com/exploits/1752 https://www.exploit-db.com/exploits/1753 https://www.exploit-db.com/exploits/1758 https://www.exploit-db.com/exploits/1759 -https://www.exploit-db.com/exploits/1762 https://www.exploit-db.com/exploits/1763 https://www.exploit-db.com/exploits/1764 https://www.exploit-db.com/exploits/1766 @@ -131244,7 +129068,6 @@ https://www.exploit-db.com/exploits/2089 https://www.exploit-db.com/exploits/2090 https://www.exploit-db.com/exploits/20915 https://www.exploit-db.com/exploits/2092 -https://www.exploit-db.com/exploits/2093 https://www.exploit-db.com/exploits/2094 https://www.exploit-db.com/exploits/2095 https://www.exploit-db.com/exploits/2096 @@ -131497,7 +129320,6 @@ https://www.exploit-db.com/exploits/2427 https://www.exploit-db.com/exploits/24273 https://www.exploit-db.com/exploits/2428 https://www.exploit-db.com/exploits/2429 -https://www.exploit-db.com/exploits/2430 https://www.exploit-db.com/exploits/2431 https://www.exploit-db.com/exploits/2432 https://www.exploit-db.com/exploits/2433 @@ -131737,7 +129559,6 @@ https://www.exploit-db.com/exploits/2719 https://www.exploit-db.com/exploits/2720 https://www.exploit-db.com/exploits/2721 https://www.exploit-db.com/exploits/2722 -https://www.exploit-db.com/exploits/2723 https://www.exploit-db.com/exploits/2724 https://www.exploit-db.com/exploits/2725 https://www.exploit-db.com/exploits/2726 @@ -131834,7 +129655,6 @@ https://www.exploit-db.com/exploits/2858 https://www.exploit-db.com/exploits/2860 https://www.exploit-db.com/exploits/2861 https://www.exploit-db.com/exploits/2863 -https://www.exploit-db.com/exploits/2868 https://www.exploit-db.com/exploits/2869 https://www.exploit-db.com/exploits/2870 https://www.exploit-db.com/exploits/28709 @@ -131849,7 +129669,6 @@ https://www.exploit-db.com/exploits/28746/ https://www.exploit-db.com/exploits/28747/ https://www.exploit-db.com/exploits/28748/ https://www.exploit-db.com/exploits/28749/ -https://www.exploit-db.com/exploits/2875 https://www.exploit-db.com/exploits/28750/ https://www.exploit-db.com/exploits/28752/ https://www.exploit-db.com/exploits/28753/ @@ -131891,7 +129710,6 @@ https://www.exploit-db.com/exploits/29132 https://www.exploit-db.com/exploits/2914 https://www.exploit-db.com/exploits/2915 https://www.exploit-db.com/exploits/2917 -https://www.exploit-db.com/exploits/2918 https://www.exploit-db.com/exploits/2919 https://www.exploit-db.com/exploits/2920 https://www.exploit-db.com/exploits/2921 @@ -131985,7 +129803,6 @@ https://www.exploit-db.com/exploits/3036 https://www.exploit-db.com/exploits/3037 https://www.exploit-db.com/exploits/3038 https://www.exploit-db.com/exploits/3039 -https://www.exploit-db.com/exploits/3040 https://www.exploit-db.com/exploits/3041 https://www.exploit-db.com/exploits/3042 https://www.exploit-db.com/exploits/3044 @@ -132054,7 +129871,6 @@ https://www.exploit-db.com/exploits/3128 https://www.exploit-db.com/exploits/3130 https://www.exploit-db.com/exploits/3134 https://www.exploit-db.com/exploits/3135 -https://www.exploit-db.com/exploits/3136 https://www.exploit-db.com/exploits/3139 https://www.exploit-db.com/exploits/3141 https://www.exploit-db.com/exploits/3142 @@ -132338,7 +130154,6 @@ https://www.exploit-db.com/exploits/3519 https://www.exploit-db.com/exploits/3520 https://www.exploit-db.com/exploits/3521 https://www.exploit-db.com/exploits/3522 -https://www.exploit-db.com/exploits/3523 https://www.exploit-db.com/exploits/3524 https://www.exploit-db.com/exploits/3525 https://www.exploit-db.com/exploits/3527 @@ -132367,7 +130182,6 @@ https://www.exploit-db.com/exploits/3549 https://www.exploit-db.com/exploits/3550 https://www.exploit-db.com/exploits/3551 https://www.exploit-db.com/exploits/3552 -https://www.exploit-db.com/exploits/3553 https://www.exploit-db.com/exploits/35549 https://www.exploit-db.com/exploits/3556 https://www.exploit-db.com/exploits/3557 @@ -132380,7 +130194,6 @@ https://www.exploit-db.com/exploits/3565 https://www.exploit-db.com/exploits/3567 https://www.exploit-db.com/exploits/35671 https://www.exploit-db.com/exploits/3568 -https://www.exploit-db.com/exploits/3573 https://www.exploit-db.com/exploits/35731/ https://www.exploit-db.com/exploits/3576 https://www.exploit-db.com/exploits/3578 @@ -132445,7 +130258,6 @@ https://www.exploit-db.com/exploits/36392/ https://www.exploit-db.com/exploits/3640 https://www.exploit-db.com/exploits/3641 https://www.exploit-db.com/exploits/36413/ -https://www.exploit-db.com/exploits/3642 https://www.exploit-db.com/exploits/36422/ https://www.exploit-db.com/exploits/36423/ https://www.exploit-db.com/exploits/36439/ @@ -132516,7 +130328,6 @@ https://www.exploit-db.com/exploits/36811/ https://www.exploit-db.com/exploits/36813/ https://www.exploit-db.com/exploits/36814/ https://www.exploit-db.com/exploits/36815/ -https://www.exploit-db.com/exploits/3682 https://www.exploit-db.com/exploits/36820/ https://www.exploit-db.com/exploits/36826/ https://www.exploit-db.com/exploits/36827/ @@ -132988,7 +130799,6 @@ https://www.exploit-db.com/exploits/38859/ https://www.exploit-db.com/exploits/3886 https://www.exploit-db.com/exploits/38861/ https://www.exploit-db.com/exploits/3887 -https://www.exploit-db.com/exploits/3889 https://www.exploit-db.com/exploits/38895 https://www.exploit-db.com/exploits/38905/ https://www.exploit-db.com/exploits/3891 @@ -133069,7 +130879,6 @@ https://www.exploit-db.com/exploits/39218/ https://www.exploit-db.com/exploits/39219/ https://www.exploit-db.com/exploits/39220/ https://www.exploit-db.com/exploits/39221/ -https://www.exploit-db.com/exploits/39224/ https://www.exploit-db.com/exploits/39229/ https://www.exploit-db.com/exploits/3923 https://www.exploit-db.com/exploits/39230/ @@ -134011,7 +131820,6 @@ https://www.exploit-db.com/exploits/41869/ https://www.exploit-db.com/exploits/4187 https://www.exploit-db.com/exploits/41870/ https://www.exploit-db.com/exploits/41872/ -https://www.exploit-db.com/exploits/41874/ https://www.exploit-db.com/exploits/41878/ https://www.exploit-db.com/exploits/41879/ https://www.exploit-db.com/exploits/41880/ @@ -134314,7 +132122,6 @@ https://www.exploit-db.com/exploits/42376/ https://www.exploit-db.com/exploits/42378/ https://www.exploit-db.com/exploits/4238 https://www.exploit-db.com/exploits/42382/ -https://www.exploit-db.com/exploits/42384/ https://www.exploit-db.com/exploits/42385/ https://www.exploit-db.com/exploits/42386/ https://www.exploit-db.com/exploits/42388/ @@ -135100,21 +132907,13 @@ https://www.exploit-db.com/exploits/4398 https://www.exploit-db.com/exploits/43981/ https://www.exploit-db.com/exploits/43986/ https://www.exploit-db.com/exploits/43987/ -https://www.exploit-db.com/exploits/43991/ https://www.exploit-db.com/exploits/43992/ https://www.exploit-db.com/exploits/43993/ https://www.exploit-db.com/exploits/43996/ https://www.exploit-db.com/exploits/4400 https://www.exploit-db.com/exploits/44005/ https://www.exploit-db.com/exploits/44007/ -https://www.exploit-db.com/exploits/44009/ https://www.exploit-db.com/exploits/4401 -https://www.exploit-db.com/exploits/44010 -https://www.exploit-db.com/exploits/44011 -https://www.exploit-db.com/exploits/44012 -https://www.exploit-db.com/exploits/44013 -https://www.exploit-db.com/exploits/44014 -https://www.exploit-db.com/exploits/44015 https://www.exploit-db.com/exploits/44016 https://www.exploit-db.com/exploits/44022/ https://www.exploit-db.com/exploits/44023/ @@ -135186,7 +132985,6 @@ https://www.exploit-db.com/exploits/44176/ https://www.exploit-db.com/exploits/4418 https://www.exploit-db.com/exploits/44181/ https://www.exploit-db.com/exploits/44184/ -https://www.exploit-db.com/exploits/44185/ https://www.exploit-db.com/exploits/44189/ https://www.exploit-db.com/exploits/4419 https://www.exploit-db.com/exploits/44192/ @@ -135202,8 +133000,6 @@ https://www.exploit-db.com/exploits/44221/ https://www.exploit-db.com/exploits/44222/ https://www.exploit-db.com/exploits/44223/ https://www.exploit-db.com/exploits/44226/ -https://www.exploit-db.com/exploits/442321/ -https://www.exploit-db.com/exploits/442322/ https://www.exploit-db.com/exploits/44247/ https://www.exploit-db.com/exploits/4425 https://www.exploit-db.com/exploits/44251/ @@ -135262,7 +133058,6 @@ https://www.exploit-db.com/exploits/4434 https://www.exploit-db.com/exploits/44340/ https://www.exploit-db.com/exploits/44343/ https://www.exploit-db.com/exploits/44345/ -https://www.exploit-db.com/exploits/44349/ https://www.exploit-db.com/exploits/4435 https://www.exploit-db.com/exploits/44350/ https://www.exploit-db.com/exploits/44351/ @@ -135460,7 +133255,6 @@ https://www.exploit-db.com/exploits/44617/ https://www.exploit-db.com/exploits/44618/ https://www.exploit-db.com/exploits/44619/ https://www.exploit-db.com/exploits/4462 -https://www.exploit-db.com/exploits/44621/ https://www.exploit-db.com/exploits/44623/ https://www.exploit-db.com/exploits/44624/ https://www.exploit-db.com/exploits/44625/ @@ -135484,7 +133278,6 @@ https://www.exploit-db.com/exploits/4465 https://www.exploit-db.com/exploits/44652/ https://www.exploit-db.com/exploits/44653/ https://www.exploit-db.com/exploits/44654/ -https://www.exploit-db.com/exploits/44656/ https://www.exploit-db.com/exploits/44657/ https://www.exploit-db.com/exploits/4466 https://www.exploit-db.com/exploits/44666/ @@ -135508,10 +133301,8 @@ https://www.exploit-db.com/exploits/44724/ https://www.exploit-db.com/exploits/4473 https://www.exploit-db.com/exploits/4474 https://www.exploit-db.com/exploits/44741/ -https://www.exploit-db.com/exploits/44747/ https://www.exploit-db.com/exploits/44749/ https://www.exploit-db.com/exploits/4475 -https://www.exploit-db.com/exploits/44750/ https://www.exploit-db.com/exploits/44752/ https://www.exploit-db.com/exploits/44754/ https://www.exploit-db.com/exploits/44755/ @@ -135536,7 +133327,6 @@ https://www.exploit-db.com/exploits/44790/ https://www.exploit-db.com/exploits/44793/ https://www.exploit-db.com/exploits/44794/ https://www.exploit-db.com/exploits/44795/ -https://www.exploit-db.com/exploits/44796/ https://www.exploit-db.com/exploits/4480 https://www.exploit-db.com/exploits/44801/ https://www.exploit-db.com/exploits/44802/ @@ -135547,7 +133337,6 @@ https://www.exploit-db.com/exploits/44806/ https://www.exploit-db.com/exploits/4481 https://www.exploit-db.com/exploits/44817/ https://www.exploit-db.com/exploits/4482 -https://www.exploit-db.com/exploits/44822/ https://www.exploit-db.com/exploits/44825/ https://www.exploit-db.com/exploits/44826/ https://www.exploit-db.com/exploits/44827/ @@ -135563,8 +133352,6 @@ https://www.exploit-db.com/exploits/44839/ https://www.exploit-db.com/exploits/4484 https://www.exploit-db.com/exploits/44842/ https://www.exploit-db.com/exploits/44843/ -https://www.exploit-db.com/exploits/44844/ -https://www.exploit-db.com/exploits/44845/ https://www.exploit-db.com/exploits/44846/ https://www.exploit-db.com/exploits/44847/ https://www.exploit-db.com/exploits/44848/ @@ -135586,8 +133373,6 @@ https://www.exploit-db.com/exploits/44874/ https://www.exploit-db.com/exploits/44876/ https://www.exploit-db.com/exploits/44881/ https://www.exploit-db.com/exploits/44882/ -https://www.exploit-db.com/exploits/44885/ -https://www.exploit-db.com/exploits/44886/ https://www.exploit-db.com/exploits/44887/ https://www.exploit-db.com/exploits/44888/ https://www.exploit-db.com/exploits/44889/ @@ -135647,7 +133432,6 @@ https://www.exploit-db.com/exploits/44965/ https://www.exploit-db.com/exploits/44968/ https://www.exploit-db.com/exploits/44969/ https://www.exploit-db.com/exploits/4497 -https://www.exploit-db.com/exploits/44970/ https://www.exploit-db.com/exploits/44971/ https://www.exploit-db.com/exploits/44973/ https://www.exploit-db.com/exploits/44976/ @@ -135728,7 +133512,6 @@ https://www.exploit-db.com/exploits/45107/ https://www.exploit-db.com/exploits/45108/ https://www.exploit-db.com/exploits/4511 https://www.exploit-db.com/exploits/4512 -https://www.exploit-db.com/exploits/45125/ https://www.exploit-db.com/exploits/45126/ https://www.exploit-db.com/exploits/45127/ https://www.exploit-db.com/exploits/4513 @@ -135736,8 +133519,6 @@ https://www.exploit-db.com/exploits/45130 https://www.exploit-db.com/exploits/45132 https://www.exploit-db.com/exploits/45133/ https://www.exploit-db.com/exploits/45136/ -https://www.exploit-db.com/exploits/45140/ -https://www.exploit-db.com/exploits/45141/ https://www.exploit-db.com/exploits/45143/ https://www.exploit-db.com/exploits/45145/ https://www.exploit-db.com/exploits/45146/ @@ -135746,7 +133527,6 @@ https://www.exploit-db.com/exploits/45149/ https://www.exploit-db.com/exploits/45150/ https://www.exploit-db.com/exploits/45152/ https://www.exploit-db.com/exploits/45153/ -https://www.exploit-db.com/exploits/45156/ https://www.exploit-db.com/exploits/45158 https://www.exploit-db.com/exploits/4516 https://www.exploit-db.com/exploits/45160/ @@ -136067,7 +133847,6 @@ https://www.exploit-db.com/exploits/45886/ https://www.exploit-db.com/exploits/45890/ https://www.exploit-db.com/exploits/45892 https://www.exploit-db.com/exploits/45893/ -https://www.exploit-db.com/exploits/4590 https://www.exploit-db.com/exploits/45900/ https://www.exploit-db.com/exploits/45902/ https://www.exploit-db.com/exploits/45908/ @@ -136271,9 +134050,6 @@ https://www.exploit-db.com/exploits/46359/ https://www.exploit-db.com/exploits/4636 https://www.exploit-db.com/exploits/46361 https://www.exploit-db.com/exploits/46362 -https://www.exploit-db.com/exploits/46363/ -https://www.exploit-db.com/exploits/46364/ -https://www.exploit-db.com/exploits/46365/ https://www.exploit-db.com/exploits/46366/ https://www.exploit-db.com/exploits/46369/ https://www.exploit-db.com/exploits/4637 @@ -136307,7 +134083,6 @@ https://www.exploit-db.com/exploits/46424/ https://www.exploit-db.com/exploits/46425/ https://www.exploit-db.com/exploits/46428/ https://www.exploit-db.com/exploits/46429/ -https://www.exploit-db.com/exploits/46431/ https://www.exploit-db.com/exploits/46433/ https://www.exploit-db.com/exploits/46436 https://www.exploit-db.com/exploits/46443 @@ -140115,7 +137890,6 @@ https://www.gecko.security/blog/cve-2025-51481 https://www.gecko.security/blog/cve-2025-51482 https://www.geekboy.ninja/blog/exploiting-json-cross-site-request-forgery-csrf-using-flash/ https://www.gendigital.com/us/en/contact-us/security-advisories/ -https://www.gendigital.com/us/en/contact-us/security-advisories/) https://www.genymotion.com/download/ https://www.getastra.com/blog/911/plugin-exploit/prestashops-customer-photo-gallery-module-vulnerable-to-sql-injection-attacks/ https://www.getfilecloud.com/releasenotes/ @@ -140182,7 +137956,6 @@ https://www.inputzero.io/2018/09/telegram-share-password-in-cleartext.html https://www.inputzero.io/2019/02/fuzzing-webkit.html https://www.inputzero.io/2019/09/telegram-privacy-fails-again.html https://www.inputzero.io/2020/12/telegram-privacy-fails-again.html -https://www.intrinsec.com/publications/ https://www.iot-inspector.com/blog/advisory-fibaro-home-center/ https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain https://www.ipi.fi/pipermail/aide/2022-January/001713.html @@ -140300,7 +138073,6 @@ https://www.kb.cert.org/vuls/id/GWAN-9ZGTUH https://www.kb.cert.org/vuls/id/GWAN-A26L3F https://www.kb.cert.org/vuls/id/GWAN-A6LPPW https://www.kde.org/info/security/advisory-20160724-1.txt -https://www.kdev.site/2025/04/02/d-link-823_pro-unauthorized-telnet-access/ https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz https://www.kernel.org/pub/linux/kernel/next/patch-v3.15-rc5-next-20140519.xz https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4 @@ -140646,7 +138418,6 @@ https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege- https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt -https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt https://www.qualys.com/security-advisories/ https://www.r29k.com/articles/bb/stored-xss-in-deskpro https://www.r29k.com/articles/bb/stored-xss-in-deskpro#anchor1 @@ -140668,7 +138439,6 @@ https://www.rapid7.com/blog/post/cve-2025-10184-oneplus-oxygenos-telephony-provi https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed/ https://www.rcesecurity.com/2013/07/winamp-v5-64-fixes-several-code-execution-vulnerabilities-cve-2013-4694-cve-2013-4695 -https://www.rcesecurity.com/2014/03/cve-2014-2087-free-download-manager-cdownloads_deleted-updatedownload-remote-code-execution https://www.rcesecurity.com/2015/09/cve-2014-7216-a-journey-through-yahoos-bug-bounty-program/ https://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/ https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/ @@ -140726,8 +138496,6 @@ https://www.redteam-pentesting.de/en/advisories/rt-sa-2025-001/ https://www.redteam.tips/mango-vulnerability-disclosure-report/ https://www.riverloopsecurity.com/blog/2020/09/nitf-extract75-cve-2020-13995/ https://www.rodrigofavarini.com.br/cybersecurity/multiple-xss-on-api-manager-3-1-0/ -https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/ -https://www.rootshellsecurity.net/rootshell-discover-denial-of-service-flaw-dekart-private-disk-encryption-software/ https://www.rootshellsecurity.net/rootshell-discovered-a-critical-vulnerability-in-top-wordpress-theme/ https://www.rsa.com/en-us/company/vulnerability-response-policy https://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/ @@ -140764,7 +138532,6 @@ https://www.secpod.com/blog/critical-f5-big-ip-remote-code-execution-vulnerabili https://www.secpod.com/blog/f5-issues-warning-big-ip-vulnerability-used-in-active-exploit-chain/ https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address/ https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices -https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/ https://www.secureworks.com/research/swrx-2014-006 https://www.securifera.com/advisories/ https://www.securifera.com/advisories/CVE-2016-2345 @@ -140867,7 +138634,6 @@ https://www.sektioneins.de/en/blog/14-07-04-phpinfo-infoleak.html https://www.sektioneins.de/en/blog/14-11-03-drupal-sql-injection-vulnerability-PoC.html https://www.sentinelone.com/labs/cve-2021-45608-netusb-rce-flaw-in-millions-of-end-user-routers/ https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ -https://www.seralys.com/research/CVE-2024-45438.txt https://www.shielder.com/advisories/pgadmin-path-traversal_leads_to_unsafe_deserialization_and_rce/ https://www.shielder.com/advisories/vtiger-mailmanager-sqli/ https://www.shielder.com/advisories/vtiger-migration-bac/ @@ -140937,7 +138703,6 @@ https://www.synacktiv.com/advisories/snipe-it-unauthenticated-remote-command-exe https://www.synacktiv.com/en/publications/php-filters-chain-what-is-it-and-how-to-use-it https://www.synacktiv.com/posts/systems/icmp-reachable.html https://www.synacktiv.com/publications/php-filter-chains-file-read-from-error-based-oracle -https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/ https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-010.txt https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-011.txt https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-031.txt @@ -141627,17 +139392,6 @@ https://www.tridium.com/us/en/product-security https://www.tripwire.com/state-of-security/vert/googles-newest-feature-find-my-home/ https://www.triskelelabs.com/vulnerabilities-in-rws-worldserver https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904 -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-29593-authentication-bypass-by-capture-replay-dingtian-dt-r002/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-43704-capture-replay-vulnerability-in-sinilink-xy-wft1-thermostat/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/from-stored-xss-to-rce-using-beef-and-elfinder-cve-2021-45919/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-android-privilege-escalation-with-a-32-line-fuzzer/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/magic-home-pro-mobile-application-authentication-bypass-cve-2020-27199/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396/ -https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/servicenow-username-enumeration-vulnerability-cve-2021-45901/ https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734 https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736 @@ -141810,28 +139564,6 @@ https://www.websecurityinsights.my.id/2025/01/imagegallery-viewphpusername-cross https://www.websecurityinsights.my.id/2025/02/library-card-system-shell-by-maloyroyorko.html https://www.websecurityinsights.my.id/2025/08/real-estate-management-system-v-10-user.html https://www.webswing.org/blog/header-injection-vulnerability-cve-2022-34914 -https://www.westerndigital.com/support/productsecurity -https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd -https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-s -https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd -https://www.westerndigital.com/support/productsecurity/wdc-19009-sandisk-and-western-digital-ssd-dashboard-vulnerabilities -https://www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-portal-websites-clickjacking-vulnerability -https://www.westerndigital.com/support/productsecurity/wdc-19012-my-cloud-home-and-ibi-websites-2-2-0 -https://www.westerndigital.com/support/productsecurity/wdc-19013-my-cloud-home-and-ibi-session-invalidation-vulnerability -https://www.westerndigital.com/support/productsecurity/wdc-20001-ssd-dashboard-setup-privilege-escalation -https://www.westerndigital.com/support/productsecurity/wdc-20003-mycloud-site-version-2-2-0-134 -https://www.westerndigital.com/support/productsecurity/wdc-20003-mycloud-xss-vulnerability -https://www.westerndigital.com/support/productsecurity/wdc-20004-wd-discovery-cross-site-request-forgery-csrf -https://www.westerndigital.com/support/productsecurity/wdc-20005-wd-discovery-remote-command-execution-vulnerability -https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114 -https://www.westerndigital.com/support/productsecurity/wdc-20008-replay-attack-vulnerabilities-rpmb-protocol-applications -https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 -https://www.westerndigital.com/support/productsecurity/wdc-20010-my-cloud-os5-firmware-5-07-118 -https://www.westerndigital.com/support/productsecurity/wdc-20011-western-digital-dashboard-privilege-escalation -https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122 -https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability -https://www.westerndigital.com/support/productsecurity/wdc-21007-edgerover-windows-app-ver-0-25 -https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo https://www.whid.ninja/blog/mojobox-yet-another-not-so-smartlock https://www.whitehats.nl/blog/xml-signature-wrapping-samlify https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28267 @@ -141849,9 +139581,6 @@ https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28280 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28281 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28282 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-21660 -https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24338 -https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24339 -https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24366 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25912 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25913 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25914 @@ -141863,9 +139592,7 @@ https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25919 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25921 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25922 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25923 -https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25924%2C https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925 -https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926%2C https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25927 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25928 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25929 @@ -141988,7 +139715,6 @@ https://www.x41-dsec.de/lab/advisories/x41-2023-001-opnsense https://www.x41-dsec.de/lab/advisories/x41-2025-001-OpenSlides https://www.x41-dsec.de/reports/X41-Kudelski-Wire-Security-Review-Android.pdf https://www.xbow.com -https://www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253/ https://www.xpdfreader.com/security-bug/CVE-2024-7868.html https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-aanderaa-psa-2021-003.pdf https://www.youtube.com/watch?v=1mSXzzwcGMM @@ -142027,8 +139753,6 @@ https://www.zdnet.com/article/wifi-firmware-bug-affects-laptops-smartphones-rout https://www.zdnet.com/article/wordpress-deploys-forced-security-update-for-dangerous-bug-in-popular-plugin/ https://www.zdnet.com/article/zoho-zero-day-published-on-twitter/ https://www.zerodayinitiative.com/blog/2022/3/16/abusing-arbitrary-file-deletes-to-escalate-privilege-and-other-great-tricks -https://www.zeroscience.mk/en/vulnerabilities -https://www.zeroscience.mk/en/vulnerabilities/ https://www.zeroscience.mk/en/vulnerabilities/ZSL-2009-4909.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5408.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5413.php @@ -142245,7 +139969,6 @@ CVE-2026-10201 - https://github.com/user-attachments/files/27153727/poc.zip CVE-2026-10202 - https://gitee.com/oufu/ofcms/issues/IJLIBT CVE-2026-10203 - https://gitee.com/oufu/ofcms/issues/IJLIYP CVE-2026-10204 - https://gitee.com/oufu/ofcms/issues/IJLL09 -CVE-2026-10205 - https://ucn9h68n9289.feishu.cn/docx/If1EdqoFqoUJ0FxHj06cZnUOngc?from=from_copylink CVE-2026-10206 - https://github.com/666324/dlink-di8400-vuln/tree/main/dlink-di8400-vuln CVE-2026-10208 - https://github.com/Mi0uno/Online-Hospital-Management-System-has-SQL-Injection CVE-2026-10210 - https://gist.github.com/YLChen-007/f9d45a9c68b15a382677a820ee881bbb @@ -142321,7 +140044,6 @@ CVE-2026-10514 - https://github.com/1Panel-dev/CordysCRM/issues/2229 CVE-2026-10524 - https://wpscan.com/vulnerability/99986e13-d38d-4890-b935-9f6fd238ec61/ CVE-2026-10525 - https://wpscan.com/vulnerability/d1e191e6-ff5b-4cb8-9b12-8ae73cf0d2f0/ CVE-2026-10526 - https://wpscan.com/vulnerability/f4ce1f9c-6116-4166-b995-38a099197d86/ -CVE-2026-10528 - https://orthanc.uclouvain.be/bugs/attachment.cgi?id=150 CVE-2026-10529 - https://gitee.com/westboy/CicadasCMS/issues/IJLMAG CVE-2026-10530 - https://wpscan.com/vulnerability/bd3fe1d2-9f21-4b51-9112-2971a25a7e62/ CVE-2026-10531 - https://wpscan.com/vulnerability/ebc956c2-42f4-495f-a37e-f83ed156af08/ @@ -142392,7 +140114,6 @@ CVE-2026-10835 - https://wpscan.com/vulnerability/3c7b37ab-b069-4257-82b2-5b4c54 CVE-2026-10870 - https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/01-start_dhcpc.md CVE-2026-10871 - https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/02-start_6rd_tunnel.md CVE-2026-10872 - https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/03-start_vpnserver.md -CVE-2026-10873 - https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/05-rstats.md CVE-2026-10876 - https://medium.com/@hemantrajbhati5555/missing-authorization-in-sourcecodester-ship-ferry-ticket-reservation-system-leads-to-unauthorized-7783134d6596 CVE-2026-10877 - https://medium.com/@hemantrajbhati5555/sql-injection-in-authentication-mechanism-leads-to-authentication-bypass-65177ce7a41c CVE-2026-10878 - https://github.com/7u7777/Dlink/blob/DWR-M920/formSmsManage.md @@ -142674,8 +140395,6 @@ CVE-2026-12781 - https://winslow1984.com/books/cve-collection/page/easeus-partit CVE-2026-12782 - https://winslow1984.com/books/cve-collection/page/easeus-partition-master-145-kernel-driver-euedkepmsys-local-privilege-escalation CVE-2026-12784 - https://winslow1984.com/books/cve-collection/page/im-magic-partition-resizer-790-kernel-driver-mda-ntdrvsys-local-privilege-escalation CVE-2026-12786 - https://winslow1984.com/books/cve-collection/page/ultraiso-premium-976-kernel-driver-bootpt64sys-local-privilege-escalation -CVE-2026-12787 - https://ucn9h68n9289.feishu.cn/docx/I8uZdkZL3oSqBnxkwTAcfDvknUh?from=from_copylink -CVE-2026-12788 - https://ucn9h68n9289.feishu.cn/docx/LeLOdhV6mo3clzxstxXcpFzbnjg?from=from_copylink CVE-2026-12795 - https://gist.github.com/YLChen-007/9b13c75a3a73187a4082cc6df0b100d3 CVE-2026-12796 - https://gist.github.com/YLChen-007/5fa8af12e1b183674d7ca96d852fb697 CVE-2026-12797 - https://gist.github.com/YLChen-007/078179224f07cc4e39e4f141a18c817a @@ -142815,7 +140534,6 @@ CVE-2026-13543 - https://github.com/documenso/documenso/issues/2758 CVE-2026-13544 - https://github.com/liufee/cms/issues/89 CVE-2026-13545 - https://github.com/Real-Simplicity/cve-database/tree/main/CVE_Report_DLink_DCS935L_Command_Injection CVE-2026-13546 - https://github.com/liufee/cms/issues/87 -CVE-2026-13547 - https://ucn9h68n9289.feishu.cn/wiki/SrO0wcxd9i6ByukOizGcIgpBnRd CVE-2026-13548 - https://github.com/ltranquility/submit/issues/19 CVE-2026-13560 - https://lavender-bicycle-a5a.notion.site/EDIMAX-EW-7478APC-formAccept-34b53a41781f80d29512d2cd2a772554 CVE-2026-13561 - https://lavender-bicycle-a5a.notion.site/EDIMAX-EW-7478APC-formiNICbasic-34b53a41781f8052bc69c85481124dff @@ -142950,8 +140668,6 @@ CVE-2026-14334 - https://wpscan.com/vulnerability/9ddd1628-0b06-461b-8a5f-ba977f CVE-2026-14341 - https://hackerone.com/reports/3807593 CVE-2026-14351 - https://hackerone.com/reports/3708242 CVE-2026-1442 - https://github.com/Bin4ry/UniTEABag -CVE-2026-1444 - https://blog.y1fan.work/2026/01/13/%E5%AD%98%E5%82%A8%E5%9E%8Bxss/ -CVE-2026-1445 - https://blog.y1fan.work/2026/01/13/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0getshell/ CVE-2026-1448 - https://pentagonal-time-3a7.notion.site/DIR-615-v4-10-2e7e5dd4c5a580a5aac5c8ce35933396?pvs=73 CVE-2026-14545 - https://wpscan.com/vulnerability/c97d9841-2bd7-438b-a719-7943d671c754/ CVE-2026-14547 - https://wpscan.com/vulnerability/5c208be8-57db-4f74-8030-398c1eece293/ @@ -143033,8 +140749,6 @@ CVE-2026-14731 - https://github.com/ltranquility/submit_vuln/issues/4 CVE-2026-14732 - https://github.com/cyberdrinclj/pcve/issues/1 CVE-2026-14733 - https://github.com/cyberdrinclk/scve/issues/1 CVE-2026-14735 - https://medium.com/@avdzav10/sql-injection-leading-to-arbitrary-file-read-in-smart-parking-system-php-2cd5b084f9e1 -CVE-2026-14736 - https://ucn9h68n9289.feishu.cn/wiki/OiAKwH3hRi3oVpkQyeycjjPrnL8?fromScene=spaceOverview -CVE-2026-14737 - https://ucn9h68n9289.feishu.cn/docx/RWItdiw5Go02UsxHxgNcMWBqnJc?from=from_copylink CVE-2026-14738 - https://github.com/exo-explore/exo/issues/2151 CVE-2026-14742 - https://github.com/langchain-ai/langgraph/issues/8009 CVE-2026-14748 - https://github.com/AIAnytime/Awesome-MCP-Server/issues/35 @@ -143166,7 +140880,6 @@ CVE-2026-15192 - https://github.com/mettle/sendportal/issues/340 CVE-2026-15193 - https://github.com/AidanPark/openclaw-android/issues/136 CVE-2026-15194 - https://github.com/open5gs/open5gs/security/advisories/GHSA-88pq-hpwv-2vjw CVE-2026-1520 - https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20rethinkdb%20database.md#poc -CVE-2026-15202 - https://gist.github.com/188452/72d03d030ee3cbfee2642badfa9dce33 CVE-2026-15205 - https://wpscan.com/vulnerability/cbde48bb-5aa4-4f69-8101-095132239923/ CVE-2026-15206 - https://wpscan.com/vulnerability/d0bb4c41-392a-4209-9e44-93dbf3898417/ CVE-2026-15208 - https://wpscan.com/vulnerability/b8c75098-41a9-4b24-9f6b-c3144f230cd8/ @@ -143269,7 +140982,6 @@ CVE-2026-1551 - https://mega.nz/file/6cVwiA5A#BVwaxWlfeQCkkpHnuxPiMDZVb5qcYrsI6f CVE-2026-15510 - https://bytium.com/insights/leantime-3-8-0-broken-access-control CVE-2026-15512 - https://github.com/sombra0316/CVE-2026/blob/main/pig-mesh/SSIT.md CVE-2026-15513 - https://github.com/0xcc12138/wavlink-nu516u1-csrf-command-injection- -CVE-2026-15514 - https://ucn9h68n9289.feishu.cn/docx/SX91dyomSoAeHJxnfygckPQNnLL?from=from_copylink CVE-2026-15515 - https://github.com/subsubsub1231/qmukiller CVE-2026-15518 - https://bytium.com/insights/authenticated-arbitrary-file-upload-to-rce-in-twill-cms CVE-2026-1552 - https://github.com/Sqli22/Sqli/issues/4 @@ -143341,7 +141053,6 @@ CVE-2026-1587 - https://github.com/open5gs/open5gs/issues/4272#issue-3795156752 CVE-2026-1588 - https://github.com/jishenghua/jshERP/issues/147 CVE-2026-1589 - https://mega.nz/file/DQUWSY7Y#CLcuhD1KE2s0VtEvYqH_PDCyhpGS0HDo_MKj9sheUPA CVE-2026-1590 - https://mega.nz/file/GYsm2Q7K#B7NUGX5Fy9iLYssM474U3zFsmZp_14v0n5Sp-5N95yI -CVE-2026-15907 - https://ucn9h68n9289.feishu.cn/docx/WCbgdWyJKoibcZxdsuMcUGKSnpf?from=from_copylink CVE-2026-1593 - https://github.com/yyzq-wsx/for_cve/issues/3 CVE-2026-15930 - https://wpscan.com/vulnerability/e46948f1-0e06-4e76-8fc8-df661eb786a5/ CVE-2026-15931 - https://wpscan.com/vulnerability/30779ecc-779c-4e7c-9e8b-278ddf343214/ @@ -143453,7 +141164,6 @@ CVE-2026-1623 - https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/04_R CVE-2026-16244 - https://github.com/ltranquility/submit_vuln/issues/10 CVE-2026-16248 - https://github.com/teiwiet/tenda-ac10-vulnerabilities/blob/main/advisory-fromAdvSetLanip.md CVE-2026-16250 - https://wpscan.com/vulnerability/05bd2683-ef3b-4816-a323-12d5e943612a/ -CVE-2026-16252 - https://ucn9h68n9289.feishu.cn/docx/XSuvdAP8foTOKzxEnZaclsZznMb?from=from_copylink CVE-2026-16253 - https://wpscan.com/vulnerability/97abf25a-48d4-4dfa-a7a3-de88455be7eb/ CVE-2026-16256 - https://wpscan.com/vulnerability/c7442f47-7263-4cbb-8157-a4ac69953c95/ CVE-2026-16257 - https://wpscan.com/vulnerability/89c32854-1cf1-4fe9-a6d0-6244be2dcc03/ @@ -143484,14 +141194,6 @@ CVE-2026-16298 - https://wpscan.com/vulnerability/d554361c-e6c7-4843-a9cc-005b08 CVE-2026-16299 - https://wpscan.com/vulnerability/06532a5a-ad34-421e-81e3-b4e44e8023ab/ CVE-2026-16300 - https://wpscan.com/vulnerability/0508f8c8-8ecc-4982-b14c-bf5f1c3d1c8f/ CVE-2026-1631 - https://wpscan.com/vulnerability/b19596c2-69bc-4e15-8632-eb80f4577e3c/ -CVE-2026-16324 - https://ucn9h68n9289.feishu.cn/docx/RTF0d4zxooIMA1xF9bGcnQNpnfg?from=from_copylink -CVE-2026-16327 - https://ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=from_copylink -CVE-2026-16329 - https://ucn9h68n9289.feishu.cn/docx/MBHDdPBz4oUXa9xCdujchmPZneg?from=from_copylink -CVE-2026-16330 - https://ucn9h68n9289.feishu.cn/docx/EkMxdLlavojfsXxzKXec5yUknEg?from=from_copylink -CVE-2026-16331 - https://ucn9h68n9289.feishu.cn/docx/UZ6id3F1Joqlpxxn3NFcL8r7nHb?from=from_copylink -CVE-2026-16332 - https://ucn9h68n9289.feishu.cn/docx/EbAkdl1v8oC3Q3xAEJLcZFcZnMY?from=from_copylink -CVE-2026-16447 - https://ucn9h68n9289.feishu.cn/docx/KttYdnLfzotGUSxx7p3cbaornPd?from=from_copylink -CVE-2026-16448 - https://ucn9h68n9289.feishu.cn/docx/OfhNdwzvXoBlJBxDIW7clVmjnuh?from=from_copylink CVE-2026-16449 - https://github.com/zsadmin2025/zs-admin-java/issues/4 CVE-2026-16450 - https://github.com/zsadmin2025/zs-admin-java/issues/5 CVE-2026-16451 - https://github.com/zsadmin2025/zs-admin-java/issues/6 @@ -143761,8 +141463,6 @@ CVE-2026-18819 - https://github.com/fa1c4/security-advisories/tree/main/RackTabl CVE-2026-1884 - https://github.com/ez-lbz/ez-lbz.github.io/issues/9#issue-3832844574 CVE-2026-18852 - https://github.com/fa1c4/security-advisories/tree/main/VectorDB/PoC CVE-2026-18853 - https://github.com/actuator/com.zombodroid.MemeGenerator/ -CVE-2026-18854 - https://ucn9h68n9289.feishu.cn/docx/NEAJdL0fgoCy2jxQwVBcR2mOn7e?from=from_copylink -CVE-2026-18859 - https://ucn9h68n9289.feishu.cn/docx/LHkddOv7Jo6quTxlJKZcf8gfnOe?from=from_copylink CVE-2026-18895 - https://github.com/7wkajk/CVE-VUL/blob/main/101.md CVE-2026-18896 - https://github.com/sudaisnazir2381-lang/Student-Registration-System/blob/main/sql_injection_time.md CVE-2026-18897 - https://github.com/7wkajk/CVE-VUL/blob/main/102.md @@ -143783,8 +141483,6 @@ CVE-2026-18959 - https://github.com/ofirbarum923-dot/small-web-vuln/issues/1 CVE-2026-18960 - https://wpscan.com/vulnerability/c80abded-9f0e-4e44-8c8a-b0d1bc1b16d0/ CVE-2026-18962 - https://wpscan.com/vulnerability/146079f7-d4e5-4f1e-a715-f681fc33ed6a/ CVE-2026-18968 - https://gist.github.com/hackusman/a1ba43253d6a62ace31ef39ec325e973 -CVE-2026-18969 - https://ucn9h68n9289.feishu.cn/wiki/CVIpwknSYiQXejkvw7McPrs1n2g?from=from_copylink -CVE-2026-18970 - https://ucn9h68n9289.feishu.cn/wiki/UfgVwvpW5iRtLFkZs4icV6LfnGb?from=from_copylink CVE-2026-18973 - https://gist.github.com/YLChen-007/2f12ffb785d975b46b73896c0fb8cb5d CVE-2026-18974 - https://gist.github.com/YLChen-007/479bfabb441bd6cc5337db910b004841 CVE-2026-18976 - https://github.com/NousResearch/hermes-agent/issues/46171 @@ -143812,7 +141510,6 @@ CVE-2026-19020 - https://github.com/ltranquility/submit_vuln/issues/11 CVE-2026-19034 - https://gitee.com/WH-YHUST/tomato-rc-qos-ppp-cve/blob/master/advisories/en/01-new_qoslimit_stop.md CVE-2026-19035 - https://gitee.com/WH-YHUST/tomato-rc-qos-ppp-cve/blob/master/advisories/en/02-new_qoslimit_start.md CVE-2026-19036 - https://gitee.com/WH-YHUST/tomato-rc-qos-ppp-cve/blob/master/advisories/en/03-sub_40F88C-pppd.md -CVE-2026-19037 - https://my.feishu.cn/wiki/BXljwvHSLiiqiSkI7jScIqkSn4c CVE-2026-19049 - https://wpscan.com/vulnerability/5405c86c-1cf5-4123-9dea-864096d07520/ CVE-2026-19050 - https://wpscan.com/vulnerability/76d9ef00-5335-4373-903c-4ff368417f94/ CVE-2026-19052 - https://wpscan.com/vulnerability/39bf1b67-34f1-456a-b420-7bbf238964a1/ @@ -143848,9 +141545,6 @@ CVE-2026-19192 - https://winslow1984.com/books/cve-collection/page/deepcool-1212 CVE-2026-19193 - https://github.com/patrickt2017/CVE-2026-19193-PoC CVE-2026-19195 - https://github.com/patrickt2017/CVE-2026-19195-PoC CVE-2026-19206 - https://github.com/mz-automation/libiec61850/issues/598 -CVE-2026-19208 - https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc -CVE-2026-19212 - https://my.feishu.cn/wiki/PyAuwg8Bwit3TBk5DgLc14Ghnkb?from=from_copylink -CVE-2026-19213 - https://my.feishu.cn/wiki/VbQqwEcrJiYOd0khs0Jchw76nhd?from=from_copylink CVE-2026-19217 - https://wpscan.com/vulnerability/c27c1dcd-a6d2-4e1d-a9da-88dff8fe5618/ CVE-2026-19220 - https://wpscan.com/vulnerability/99e2a045-15cb-4c58-8090-1f92474f6485/ CVE-2026-19221 - https://wpscan.com/vulnerability/5aa85c72-2a60-4243-b370-ef0b46e98cfe/ @@ -143874,7 +141568,6 @@ CVE-2026-19346 - https://candle-throne-f75.notion.site/Tenda-CH22-formCertListIn CVE-2026-19347 - https://github.com/ltranquility/submit_vuln/issues/17 CVE-2026-19348 - https://github.com/IEATASICS/m300-repeater-bugs CVE-2026-19351 - https://github.com/windhxy/CVE-my/issues/2 -CVE-2026-19352 - https://my.feishu.cn/file/Jq4Ib90xeod3oPxlk77cv7jPnFe CVE-2026-19361 - https://github.com/wr0ld/macrozheng-mall-Commit-0504e86-Broken-Authentication/issues/1 CVE-2026-19364 - https://github.com/ltranquility/vuln_submit/issues/22 CVE-2026-19375 - https://github.com/dmitriiweb/article-scraper-mcp/issues/3 @@ -143924,7 +141617,6 @@ CVE-2026-19757 - https://github.com/dromara/lamp-cloud/issues/412 CVE-2026-19758 - https://github.com/dromara/lamp-cloud/issues/413 CVE-2026-1976 - https://github.com/free5gc/free5gc/issues/817#issue-3832188092 CVE-2026-19762 - https://github.com/DTStack/Taier/issues/1203 -CVE-2026-19764 - https://my.feishu.cn/docx/S80ddLulfolH8WxDbUJcdrGAnbg?from=from_copylink CVE-2026-19765 - https://github.com/eyaushev/swagger-testcase-mcp/issues/1 CVE-2026-1977 - https://github.com/isaacwasserman/mcp-vegalite-server/issues/9 CVE-2026-19770 - https://github.com/feed-mob/fm-mcp-servers/issues/198 @@ -144137,7 +141829,6 @@ CVE-2026-2256 - https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC CVE-2026-2258 - https://github.com/oneafter/0204/blob/main/lob1/repro.lobster CVE-2026-2259 - https://github.com/oneafter/0204/blob/main/lob2/repro.lobster CVE-2026-22666 - https://jivasecurity.com/writeups/dolibarr-remote-code-execution-cve-2026-22666 -CVE-2026-22679 - https://h4cker.zip/post/d5d211/ CVE-2026-22683 - https://chocapikk.com/posts/2026/windfall-nextcloud-flow-windmill-rce/ CVE-2026-22683 - https://github.com/Chocapikk/Windfall CVE-2026-2329 - https://github.com/rapid7/metasploit-framework/pull/20983 @@ -144194,21 +141885,15 @@ CVE-2026-25551 - https://gist.github.com/VAMorales/dde5b1c0415a8505ccd6fafdb095a CVE-2026-25555 - https://hackernoon.com/one-empty-header-to-admin-how-an-auth-bypass-breaks-openbullet2 CVE-2026-25557 - https://gist.github.com/cyberinforepo/d62cf53ef42ff703ca67792d49bf6780 CVE-2026-25559 - https://hackernoon.com/one-empty-header-to-admin-how-an-auth-bypass-breaks-openbullet2 -CVE-2026-2556 - https://fx4tqqfvdw4.feishu.cn/docx/Vrs6dRx79ondtCxldz2cvupdnMe -CVE-2026-2557 - https://fx4tqqfvdw4.feishu.cn/docx/ZqvtdTniToQMw0xZL94cTpuTnac CVE-2026-25574 - https://github.com/payloadcms/payload/security/advisories/GHSA-jq29-r496-r955 CVE-2026-2558 - https://github.com/yangjian102621/geekai/issues/256#issue-3888814886 CVE-2026-2560 - https://gist.github.com/DReazer/d7380aca4ade9fd73b688633901367ed#proof-of-concept-poc -CVE-2026-2561 - https://my.feishu.cn/wiki/URLywnBj2i2dpBk3dcQcWqFZnSK -CVE-2026-2562 - https://my.feishu.cn/wiki/Umb6w4PasizunKkagYschZP1nff -CVE-2026-2563 - https://my.feishu.cn/wiki/T3pjwxZtYiU4Gfkl6iUc3CzVnRe CVE-2026-2565 - https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/time_zone.md CVE-2026-2566 - https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/firmware_url.md CVE-2026-2567 - https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/nas.cgi_User1Passwd.md CVE-2026-25747 - https://github.com/oscerd/CVE-2026-25747 CVE-2026-25855 - https://hackernoon.com/one-empty-header-to-admin-how-an-auth-bypass-breaks-openbullet2 CVE-2026-25856 - https://hackernoon.com/one-empty-header-to-admin-how-an-auth-bypass-breaks-openbullet2 -CVE-2026-25857 - https://blog.evan.lat/blog/cve-2026-25857/ CVE-2026-25860 - https://github.com/partywavesec/CVE-2026-25860 CVE-2026-25860 - https://www.partywave.site/show/research/cve-2026-25860-openclinic-ga-xss-to-rce CVE-2026-25872 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5969.php @@ -144224,12 +141909,10 @@ CVE-2026-26210 - https://chocapikk.com/posts/2026/ktransformers-pickle-rce/ CVE-2026-26211 - https://github.com/LindHunt/CVE-2026-26211 CVE-2026-26214 - https://github.com/XavLimSG/Vulnerability-Research/blob/main/CVE-2026-26214/CVE-2026-26214.md CVE-2026-26215 - https://chocapikk.com/posts/2026/manga-image-translator-pickle-rce/ -CVE-2026-2622 - https://fx4tqqfvdw4.feishu.cn/docx/AXa1dpliBomr2Ox6dYJc6jJInEb CVE-2026-26220 - https://chocapikk.com/posts/2026/lightllm-pickle-rce/ CVE-2026-26224 - https://blog.quarkslab.com/intego_lpe_macos_1.html CVE-2026-26225 - https://blog.quarkslab.com/intego_lpe_macos_1.html CVE-2026-26226 - https://neo.projectdiscovery.io/share/cec71dc7-a8eb-417e-b8b4-666644796c1e -CVE-2026-2623 - https://fx4tqqfvdw4.feishu.cn/docx/WmA3dzNfto3AxlxoFlqcu5amnXe CVE-2026-2626 - https://wpscan.com/vulnerability/c8f5e821-1788-419f-a00c-cfd4306d0fa5/ CVE-2026-26282 - https://github.com/user-attachments/files/25274143/poc.exe.zip CVE-2026-2629 - https://github.com/XavLimSG/Vulnerability-Research/blob/main/CVE-2026-2629/CVE-2026-2629.md @@ -144338,14 +142021,12 @@ CVE-2026-29009 - https://y637f9qq2x.com/posts/u-boot-tcp-nfs-vulns/ CVE-2026-29014 - https://karmainsecurity.com/KIS-2026-06 CVE-2026-29022 - https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2026-001-dr-libs-heap-overflow.md CVE-2026-2903 - https://github.com/oneafter/0202/blob/main/re/repro -CVE-2026-2904 - https://vuln.ricky.place/UTT/HiPER%20810G/ CVE-2026-2905 - https://github.com/QIU-DIE/cve-nneeww/issues/7 CVE-2026-2906 - https://github.com/QIU-DIE/cve-nneeww/issues/8 CVE-2026-2907 - https://github.com/QIU-DIE/cve-nneeww/issues/9 CVE-2026-2908 - https://github.com/QIU-DIE/cve-nneeww/issues/10 CVE-2026-2909 - https://github.com/QIU-DIE/cve-nneeww/issues/11 CVE-2026-2910 - https://github.com/QIU-DIE/cve-nneeww/issues/12 -CVE-2026-2911 - https://vuln.ricky.place/Tenda/FH451/ CVE-2026-2913 - https://github.com/libvips/libvips/issues/4857#issue-3920154326 CVE-2026-2925 - https://github.com/LX-66-LX/cve-new/issues/20 CVE-2026-2926 - https://github.com/LX-66-LX/cve-new/issues/21 @@ -144356,20 +142037,15 @@ CVE-2026-2938 - https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hij CVE-2026-2939 - https://drive.google.com/file/d/1a-qY55pgynQviBw9UxPoIDs-UNgz6zOH/view CVE-2026-2940 - https://github.com/Zaher1307/tiny_web_server/issues/1#issue-3924357507 CVE-2026-2945 - https://www.yuque.com/la12138/vxbwk9/glws4ppukxqtpfhl?singleDoc -CVE-2026-2946 - https://fx4tqqfvdw4.feishu.cn/docx/CvYzdxDNDoXWdKxvaehcvb1rnQK?from=from_copylink -CVE-2026-2947 - https://fx4tqqfvdw4.feishu.cn/docx/MBymdGpuFoGQYuxEiH2cdC5BnSe?from=from_copylink CVE-2026-29514 - https://chocapikk.com/posts/2026/netbox-export-template-rce/ CVE-2026-29519 - https://github.com/L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS CVE-2026-2953 - https://www.yuque.com/la12138/pa2fpb/lxngf3d07uyd0nwp?singleDoc CVE-2026-2954 - https://www.yuque.com/la12138/pa2fpb/gsz2l14wlz8c4nsn?singleDoc -CVE-2026-2956 - https://fx4tqqfvdw4.feishu.cn/docx/ObYgdtoweowo8Vx4dmuckqC7nBe?from=from_copylink -CVE-2026-2957 - https://fx4tqqfvdw4.feishu.cn/docx/YKwydLrdno51JtxJksmcWSfbnvd?from=from_copylink CVE-2026-2958 - https://github.com/LX-66-LX/cve-new/issues/25 CVE-2026-2959 - https://github.com/LX-66-LX/cve-new/issues/26 CVE-2026-2960 - https://github.com/LX-66-LX/cve-new/issues/27 CVE-2026-2961 - https://github.com/LX-66-LX/cve-new/issues/28 CVE-2026-2962 - https://github.com/LX-66-LX/cve-new/issues/29 -CVE-2026-2963 - https://vuln.ricky.place/Jinher/C6/ CVE-2026-2965 - https://www.notion.so/07FlyCRM-Stored-Cross-Site-Scripting-XSS-in-SysModule-module-303ea92a3c4180d3a9a8e9f6c3d2915a?v=2ffea92a3c418057a8b7000c66564aa1 CVE-2026-2969 - https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md#poc CVE-2026-2970 - https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/unsafe-deserialization.md#poc @@ -144381,7 +142057,6 @@ CVE-2026-2980 - https://github.com/7wkajk/CVE-VUL/blob/main/4.md#poc CVE-2026-2981 - https://github.com/7wkajk/CVE-VUL/blob/main/5.md#poc CVE-2026-2983 - https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover#-vulnerability-2-unauthenticated-bulk-account-injection-arbitrary-file-upload CVE-2026-2984 - https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover#vulnerability-3-unauthenticated-arbitrary-account-deletion-dos -CVE-2026-2985 - https://my.feishu.cn/wiki/C1TIwBoJziINWlkGt8ucnZJPnEb?from=from_copylink CVE-2026-2995 - https://hackerone.com/reports/3564600 CVE-2026-3015 - https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md#poc CVE-2026-3016 - https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md#poc @@ -144463,9 +142138,6 @@ CVE-2026-3285 - https://github.com/oneafter/0211/blob/main/be/repro CVE-2026-32850 - https://karmainsecurity.com/KIS-2026-05 CVE-2026-32851 - https://karmainsecurity.com/KIS-2026-05 CVE-2026-32852 - https://karmainsecurity.com/KIS-2026-05 -CVE-2026-3286 - https://fx4tqqfvdw4.feishu.cn/docx/NK7KdbIrboeB6WxwfhucW1YgnCb?from=from_copylink -CVE-2026-3287 - https://fx4tqqfvdw4.feishu.cn/docx/E1YgdZUApoBU2bxDl37cLgqsnof?from=from_copylink -CVE-2026-3289 - https://www.yuque.com/la12138/pa2fpb/wdggytgi4vhl93zd?singleDoc CVE-2026-3292 - https://gist.github.com/0psPwn/46468da7329f7c676c737b4b6b473ddc CVE-2026-3293 - https://github.com/snowflakedb/snowflake-jdbc/issues/2505#issue-3951994646 CVE-2026-32981 - https://packetstorm.news/files/id/215801/ @@ -144503,7 +142175,6 @@ CVE-2026-3404 - https://www.yuque.com/la12138/pa2fpb/ew8x2qss8dv0bsu0?singleDoc CVE-2026-3405 - https://www.yuque.com/la12138/pa2fpb/sg81mhkrat5h170c?singleDoc CVE-2026-3407 - https://github.com/oneafter/0210/blob/main/yo2/repro CVE-2026-3408 - https://github.com/oneafter/0128/blob/main/ob3/repro.cdxml -CVE-2026-3409 - https://gist.github.com/YLChen-007/d2799d8b2077e50658f12a45bcae9b70 CVE-2026-3409 - https://vuldb.com/?id.348304 CVE-2026-34096 - https://gist.github.com/cyberinforepo/d5b2771d82e1b31b8fc1c33052e08dad CVE-2026-34097 - https://gist.github.com/cyberinforepo/d5b2771d82e1b31b8fc1c33052e08dad @@ -144643,7 +142314,6 @@ CVE-2026-3791 - https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventor CVE-2026-3792 - https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-PurchaseInvoice-purchaseid.md CVE-2026-3793 - https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-SalesInvoice1-sellid.md CVE-2026-3796 - https://github.com/cwjchoi01/FocusKiller/tree/main/FocusKiller -CVE-2026-3797 - https://my.feishu.cn/docx/P3Bgdl9BHocn66xCMpCcgCD7nhe?from=from_copylink CVE-2026-3799 - https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setcfm-funcpara1-buffer-overflow CVE-2026-3800 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Resort-Reservation-System---Unrestricted-Upload.md CVE-2026-3801 - https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setautoping-ping2-buffer-overflow @@ -144660,7 +142330,6 @@ CVE-2026-3812 - https://github.com/ltranquility/cve_submit/issues/10 CVE-2026-3813 - https://gitee.com/opencc/JFlow/issues/IE8R2F CVE-2026-3816 - https://github.com/henrrrychau/cve-bug-bounty/blob/main/dfdj_zip_bomb_dos_oom/dfdj_zip_bomb_dos_oom.md#supporting-materialreferences CVE-2026-3817 - https://gist.github.com/HxH404/c4c8e7ce7fe5cde98aca176fba9d7207 -CVE-2026-3818 - https://my.feishu.cn/docx/RvTMdXwUqowtxNxt9BFcD3TOn3f?from=from_copylink CVE-2026-3819 - https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-reservation-management-sourcecodester-resort-reservation-894ee77d7312 CVE-2026-3830 - https://wpscan.com/vulnerability/768014fd-0403-4182-b19e-3d46c92d8755/ CVE-2026-38465 - https://snaacky.com/1-click-exploit-chain-for-complete-gazellepw-database-compromise @@ -144768,7 +142437,6 @@ CVE-2026-4164 - https://github.com/Litengzheng/vul_db/blob/main/WL-WN578W2/vul_2 CVE-2026-4166 - https://github.com/Litengzheng/vul_db/blob/main/WL-NU516U1/vul_15/README.md CVE-2026-4167 - https://github.com/Litengzheng/vul_db/blob/main/Belkin/vul_152/README.md#proof-of-concept-poc CVE-2026-4168 - https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/CVE%20Stored%20XSS.md -CVE-2026-4170 - https://my.feishu.cn/docx/EAFFdhzoeodDxfxeazNcxBzCnRf?from=from_copylink CVE-2026-4171 - https://github.com/AnalogyC0de/public_exp/issues/20 CVE-2026-4173 - https://github.com/AnalogyC0de/public_exp/issues/21 CVE-2026-4174 - https://github.com/user-attachments/files/25620145/gen_macho_poc.py @@ -144779,7 +142447,6 @@ CVE-2026-4183 - https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_87/87. CVE-2026-4184 - https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_88/88.md CVE-2026-4185 - https://github.com/PeterXukt/test_pocs/blob/main/gpac/test.swf CVE-2026-4186 - https://magnificent-dill-351.notion.site/JSONP-Injection-in-ueditor-1-4-3-2-317c693918ed80cbb96dc8e1a9f0e8b2 -CVE-2026-4187 - https://my.feishu.cn/docx/Vc4QdU5KNoMF57xxubOcBwPSnqf?from=from_copylink CVE-2026-4188 - https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_89/89.md CVE-2026-4189 - https://drive.google.com/file/d/1yxx2iUTG1ebMKo3W9bHlCFFxUJAhkwEk/view?usp=drive_link CVE-2026-4190 - https://hackmd.io/@YzU_KiOzT86cEbFQdBceVg/Bk56LQQYbe @@ -144809,8 +142476,6 @@ CVE-2026-4196 - https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_99/99. CVE-2026-4197 - https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_103/103.md CVE-2026-4198 - https://github.com/user-attachments/files/25687034/mcp-server-auto-commit_security_advisory.pdf CVE-2026-4199 - https://github.com/user-attachments/files/25931133/mcp_code_executor_security_advisory.pdf -CVE-2026-4200 - https://fx4tqqfvdw4.feishu.cn/docx/K0SjdZTPRo31LExSdlfcC3jwn1c?from=from_copylink -CVE-2026-4201 - https://fx4tqqfvdw4.feishu.cn/docx/XM7MdiAtxodVIOx5HXScEdOsn47?from=from_copylink CVE-2026-4203 - https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_123/123.md CVE-2026-4204 - https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_130/130.md CVE-2026-4205 - https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_132/132.md @@ -144828,9 +142493,6 @@ CVE-2026-42167 - https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc CVE-2026-4217 - https://www.notion.so/Exposed-Cryptographic-Key-and-IV-in-ai-nreal-nebula-universal-3172de3f97fb80b5a987eac2c49527e2?source=copy_link CVE-2026-4218 - https://www.notion.so/Authorization-Credential-Exposure-Leading-to-Data-Leakage-in-aedes-me-beta-app-3172de3f97fb8018abc9c25a878f5845?source=copy_link CVE-2026-4219 - https://www.notion.so/Authorization-Credentials-in-ae-index-apgcs-Lead-to-Exposure-of-Backend-Secrets-3172de3f97fb8040bc30c5519a742251?source=copy_link -CVE-2026-4220 - https://my.feishu.cn/docx/EA9HdaXaQo80yTxKdw0c3UDmnmD?from=from_copylink -CVE-2026-4221 - https://my.feishu.cn/docx/Z5HJdLCxioFs4sxyILbcoSIAnTh?from=from_copylink -CVE-2026-4222 - https://www.yuque.com/la12138/pa2fpb/mbcvbk402bx1qbft?singleDoc CVE-2026-4223 - https://github.com/ltranquility/cve_submit/issues/12 CVE-2026-4225 - https://github.com/feixuezhi/cms/wiki CVE-2026-4226 - https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_VirtualRules%20stack%20overflow_EN.md @@ -144839,9 +142501,7 @@ CVE-2026-4228 - https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB- CVE-2026-4229 - https://gist.github.com/YLChen-007/b4f326eaecc29b192cf93dc5d6bc0623 CVE-2026-4230 - https://gist.github.com/YLChen-007/48b86c2365e5ebf6923d5f14491b4329 CVE-2026-4231 - https://gist.github.com/YLChen-007/574542015755951ee1d53206022cc754 -CVE-2026-4232 - https://my.feishu.cn/docx/UxbzdoU7coxKGjxbJ7ycPor3n3Q?from=from_copylink CVE-2026-4233 - https://github.com/SourByte05/SourByte-Lab/issues/11 -CVE-2026-4234 - https://www.yuque.com/la12138/pa2fpb/uzhex80ydgktvzok?singleDoc CVE-2026-4235 - https://github.com/yuji0903/silver-guide/issues/11 CVE-2026-4236 - https://github.com/yuji0903/silver-guide/issues/12 CVE-2026-4237 - https://github.com/yuji0903/silver-guide/issues/14 @@ -144862,11 +142522,6 @@ CVE-2026-4254 - https://github.com/digitalandrew/tenda_ac8_v5/blob/main/CVE_Repo CVE-2026-4259 - https://wpscan.com/vulnerability/a98d234b-11e8-4a07-8593-982d656a4fd3/ CVE-2026-42785 - https://github.com/terrasystemlabs/Exploits/tree/main/OpenKM-Exploits CVE-2026-42785 - https://www.exploit-db.com/exploits/52520 -CVE-2026-4284 - https://fx4tqqfvdw4.feishu.cn/docx/XF5WdvWAEoU9jyx2C2mcImSMnBg?from=from_copylink -CVE-2026-4285 - https://fx4tqqfvdw4.feishu.cn/docx/KezQdqzVGoTVj9x8SH1c9dNvnOg?from=from_copylink -CVE-2026-4287 - https://my.feishu.cn/docx/F68OduQq8oI2MdxmjHlch8u5n8f?from=from_copylink -CVE-2026-4288 - https://my.feishu.cn/docx/LgjudozCFo9rVTx57hJcDyk0nXd?from=from_copylink -CVE-2026-4289 - https://my.feishu.cn/docx/UmmudBVvYoMwpIxUtTicjsS8nDe?from=from_copylink CVE-2026-4307 - https://gist.github.com/YLChen-007/1819c843ad26aaaaecdc768a789df022 CVE-2026-4308 - https://gist.github.com/YLChen-007/c99c44aa019266a72636757308d43989#poc CVE-2026-4332 - https://hackerone.com/reports/3600345 @@ -144892,8 +142547,6 @@ CVE-2026-4485 - https://github.com/hmKunlun/itsourcecode/issues/1 CVE-2026-4486 - https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/poc.py CVE-2026-4487 - https://github.com/hmKunlun/UTTHiPER/blob/main/HiPER%201200GW.md CVE-2026-4488 - https://github.com/hmKunlun/UTTHiPER/blob/main/HiPER%201250GW.md -CVE-2026-4494 - https://fx4tqqfvdw4.feishu.cn/docx/EKVgdqWIzo70C0xB5jxcb4IZnre?from=from_copylink -CVE-2026-4495 - https://fx4tqqfvdw4.feishu.cn/docx/PN3YdPBpsowyU1xTV1VcVTm9nzg?from=from_copylink CVE-2026-4496 - https://github.com/user-attachments/files/24855745/Git-MCP-Server.bug.pdf CVE-2026-4497 - https://github.com/user-attachments/files/25790616/Unauthenticated.Remote.Code.Execution.in.TOTOLINK.WA300.via.Command.Injection.in.recvUpgradeNewFw.zip CVE-2026-4499 - https://github.com/user-attachments/files/25790888/OS.Command.Injection.in.D-Link.DIR-820LW.B2.03.via.the.HTTP_ST.environment.variable.in.ssdpcgi_main.function.zip @@ -144917,7 +142570,6 @@ CVE-2026-4537 - https://github.com/qazmn/my_cve/blob/main/cudy_cve/Cudy_TR1200_C CVE-2026-4538 - https://github.com/pytorch/pytorch/pull/176791 CVE-2026-4539 - https://github.com/pygments/pygments/issues/3058 CVE-2026-4541 - https://github.com/janmojzis/tinyssh/issues/101#issue-3983586116 -CVE-2026-4542 - https://www.yuque.com/la12138/pa2fpb/vlyutc51eb7vhwaz?singleDoc CVE-2026-4543 - https://github.com/Litengzheng/vul_db/blob/main/WL-WN578W2/vul_5/README.md CVE-2026-4544 - https://github.com/Litengzheng/vul_db/blob/main/WL-WN578W2/vul_7/README.md CVE-2026-4550 - https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20Simple%20Gym%20Management%20System%20in%20PHP.md @@ -144944,18 +142596,8 @@ CVE-2026-4581 - https://github.com/anon387tdug/anon388/issues/1 CVE-2026-4582 - https://github.com/Davim09/m6plusexploit/blob/main/docs/CVE-1-Authentication.md CVE-2026-4583 - https://github.com/Davim09/m6plusexploit/blob/main/docs/CVE-2-Replay.md CVE-2026-4584 - https://github.com/Davim09/m6plusexploit/blob/main/docs/CVE-3-DataExposure.md -CVE-2026-4585 - https://my.feishu.cn/docx/WkHjd3oajoIw5exHk9ecUHaFnKd?from=from_copylink -CVE-2026-4586 - https://fx4tqqfvdw4.feishu.cn/docx/PgtzdpfoWoTR0yxB7P6cujGanih?from=from_copylink -CVE-2026-4588 - https://vulnplus-note.wetolink.com/share/rM8GdIOvQZrw -CVE-2026-4589 - https://vulnplus-note.wetolink.com/share/UTZQq38f9VyI -CVE-2026-4590 - https://vulnplus-note.wetolink.com/share/IJW1LjsyomCQ -CVE-2026-4591 - https://vulnplus-note.wetolink.com/share/3ml5XA0firIa -CVE-2026-4592 - https://vulnplus-note.wetolink.com/share/S6CMNnndYUXU -CVE-2026-4593 - https://fx4tqqfvdw4.feishu.cn/docx/EunDdwORZoG3uzxpLykcj24mncJ?from=from_copylink -CVE-2026-4594 - https://fx4tqqfvdw4.feishu.cn/docx/ETWUdbPk1oCC56xoEWHc3Q28nEc?from=from_copylink CVE-2026-4595 - https://github.com/bybinyu/Vulnerability-Practice/issues/1 CVE-2026-4596 - https://github.com/eqiya17/collection-of-vulnerability/issues/1 -CVE-2026-4597 - https://fx4tqqfvdw4.feishu.cn/docx/MwZRdLmXhosJJFxCQ2kcJjfqnhk?from=from_copylink CVE-2026-4612 - https://github.com/bybinyu/Vulnerability-Practice/issues/2 CVE-2026-4614 - https://github.com/ltranquility/submit/issues/2 CVE-2026-4616 - https://github.com/bolo-blog/bolo-solo/issues/330#issue-4045018183 @@ -144986,8 +142628,6 @@ CVE-2026-4823 - https://github.com/0truust/iperius-backup-security-advisories/bl CVE-2026-4824 - https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/privilege-escalation-rce.md CVE-2026-4825 - https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdateSales-sid.md CVE-2026-4826 - https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdateStock-sid.md -CVE-2026-4830 - https://vulnplus-note.wetolink.com/share/7oB22Zhc6u5X -CVE-2026-4831 - https://vulnplus-note.wetolink.com/share/xdk9igJ3sulk CVE-2026-4833 - https://github.com/user-attachments/files/25847391/crash00.md CVE-2026-4835 - https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Accounting%20System%20in%20PHP%201.0%20-%20Stored%20Cross-Site%20Scripting%20(XSS)%20in%20costumer_name%20Parameter.md CVE-2026-4836 - https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20Accounting%20System%20in%20PHP%20in%20cos_id%20Parameter.md @@ -145020,7 +142660,6 @@ CVE-2026-4906 - https://lavender-bicycle-a5a.notion.site/Tenda_AC5_WizardHandle_ CVE-2026-4907 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/page_replica.md CVE-2026-4908 - https://github.com/Niuzzz123/CVE-Niuzzz/issues/2 CVE-2026-4909 - https://github.com/Niuzzz123/CVE-Niuzzz/issues/1 -CVE-2026-4910 - https://my.feishu.cn/docx/QZU6dXZBBoBeLMx4K28cW1BEnsZ?from=from_copylink CVE-2026-49114 - https://github.com/onnx/onnx/security/advisories/GHSA-q56x-g2fj-4rj6 CVE-2026-49127 - https://mstreet97.github.io/security-research/opensource/vulnerability-disclosure/cybersecurity/cve/2026/05/25/Four_Bugs_Reachable_nc.html CVE-2026-49128 - https://mstreet97.github.io/security-research/opensource/vulnerability-disclosure/cybersecurity/cve/2026/05/25/Four_Bugs_Reachable_nc.html @@ -145036,8 +142675,6 @@ CVE-2026-49494 - https://github.com/MalwareTech/ComoDoS CVE-2026-49494 - https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html CVE-2026-4953 - https://github.com/wing3e/public_exp/issues/3 CVE-2026-4954 - https://github.com/wing3e/public_exp/issues/4 -CVE-2026-4955 - https://my.feishu.cn/docx/C16HdO89zo9OCrxn5B2c8bTqnvb?from=from_copylink -CVE-2026-4956 - https://my.feishu.cn/docx/J8fHdY906o98pax4oCacWLTKndP?from=from_copylink CVE-2026-4957 - https://gist.github.com/YLChen-007/6279f3de0c2dff7732eaaf820843b562 CVE-2026-4958 - https://gist.github.com/YLChen-007/dc46c2a710ecb9e855695f32da8bcab5 CVE-2026-4959 - https://gist.github.com/YLChen-007/531ec6b169f4b9ecbc8c2f0b2cd7c5ee @@ -145136,8 +142773,6 @@ CVE-2026-5255 - https://github.com/kunlan567-boop/test/issues/2 CVE-2026-5256 - https://github.com/kunlan567-boop/test/issues/1 CVE-2026-5257 - https://github.com/ningfashui123/louplus/issues/1 CVE-2026-5258 - https://github.com/August829/CVEP/issues/11 -CVE-2026-5259 - https://fx4tqqfvdw4.feishu.cn/docx/GE4GdxBxKoSvBOxhkTRcsawlnhc?from=from_copylink -CVE-2026-5261 - https://my.feishu.cn/docx/ToGkdd5jwokb4PxEMkHcKrfXn3b?from=from_copylink CVE-2026-5262 - https://hackerone.com/reports/3574642 CVE-2026-5296 - https://hackerone.com/reports/3626303 CVE-2026-5305 - https://wpscan.com/vulnerability/bf59610b-98ba-4c05-b2fc-85c163e9a389/ @@ -145219,7 +142854,6 @@ CVE-2026-5556 - https://github.com/August829/CVEP/issues/27 CVE-2026-5557 - https://github.com/August829/CVEP/issues/28 CVE-2026-5559 - https://github.com/AntaresMugisho/PyBlade/issues/1#issue-4086730906 CVE-2026-5562 - https://drive.google.com/file/d/18-Q4tb19y_7dwchnTCgcwfbox0Uj6oQd/view -CVE-2026-5563 - https://fx4tqqfvdw4.feishu.cn/docx/M0u0dPZmZosY9Ax6OsScJ3Blnxf?from=from_copylink CVE-2026-5564 - https://github.com/Kazamikazu/Ksec/issues/2 CVE-2026-5568 - https://docs.google.com/document/d/1TFwYGdjDblEGCMM0l67PXz0HXZu_iUqWDQZavtM9t1U/edit?usp=sharing CVE-2026-5569 - https://github.com/shiky8/my--cve-vulnerability-research/blob/main/my_VulnDB_cves/CVE-TECHNOSTROBE-01-BrokenAccessControl.md @@ -145250,8 +142884,6 @@ CVE-2026-56121 - https://huntr.com/bounties/d64b8111-180b-46ba-afa3-c877fda2ede6 CVE-2026-56122 - https://gist.github.com/VAMorales/ce93f10215c43b2a8344426f4dd59cd3 CVE-2026-5613 - https://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_10/README.md CVE-2026-5614 - https://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_11/README.md -CVE-2026-5615 - https://tcn60zf28jhk.feishu.cn/wiki/Cr4KwMPiMi65fFkI9Vyc3oX2n0f?from=from_copylink -CVE-2026-5618 - https://vulnplus-note.wetolink.com/share/3VtzyzYgcS4b CVE-2026-5619 - https://github.com/wing3e/public_exp/issues/26 CVE-2026-5621 - https://github.com/wing3e/public_exp/issues/27 CVE-2026-5625 - https://github.com/assafelovic/gpt-researcher/issues/1692 @@ -145373,7 +143005,6 @@ CVE-2026-58446 - https://github.com/presenton/presenton/issues/678 CVE-2026-58447 - https://github.com/iv-org/invidious/issues/5777 CVE-2026-58448 - https://github.com/YunaiV/yudao-cloud/issues/315 CVE-2026-58450 - https://github.com/invoiceninja/invoiceninja/issues/12039 -CVE-2026-58451 - https://blog.evan.lat/posts/CVE-2026-58451/ CVE-2026-58452 - https://github.com/rwprimitives/jaiotlink-c492a-wifi-camera/blob/main/writeups/01-setmac-command-injection.md CVE-2026-58453 - https://github.com/rwprimitives/jaiotlink-c492a-wifi-camera/blob/main/writeups/02-default-http-credentials.md CVE-2026-58454 - https://github.com/rwprimitives/jaiotlink-c492a-wifi-camera/blob/main/writeups/03-anyka-config-execution-trigger.md @@ -145597,7 +143228,6 @@ CVE-2026-64827 - https://karmainsecurity.com/KIS-2026-14 CVE-2026-64828 - https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-64828 CVE-2026-6483 - https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/vuldb_submission_report.md CVE-2026-6486 - https://github.com/sudo-secure/security-research/blob/main/classroombookings/stored-xss/PoC.md -CVE-2026-6487 - https://tcn60zf28jhk.feishu.cn/wiki/CnpvwDdyOi5PXOk8X1fcorudnSv?from=from_copylink CVE-2026-6492 - https://github.com/sudo-secure/security-research/blob/main/Hotel-Booking-Management-System/sensitive-information-disclosure/PoC.md CVE-2026-6493 - https://gist.github.com/TrebledJ/0bd0494a28daaa16abb565b2cef4bd7c CVE-2026-6495 - https://wpscan.com/vulnerability/c52f28c5-547d-48ae-89dd-edcdaeadcec5/ @@ -145611,7 +143241,6 @@ CVE-2026-6560 - https://github.com/xiaohaiyang-ai/CVE-Reports/blob/main/Vulnerab CVE-2026-6561 - https://github.com/zzk6th/my-cve-notes/blob/main/EyouCMS%20Arbitrary%20File%20Copy%20Vulnerability%20in%20edit_adminlogo()%20Leading%20to%20Sensitive%20Information%20Disclosure.md CVE-2026-6562 - https://thinhneee.github.io/posts/muucmf-sqli/ CVE-2026-6563 - https://github.com/K4ptor/H3C-routers-vulnerability/ -CVE-2026-6568 - https://vulnplus-note.wetolink.com/share/JyHBnRUaoOY2 CVE-2026-65693 - https://gist.github.com/W40X/584f4b088d310bc5280cc74bbf97831a CVE-2026-65694 - https://github.com/microweber/microweber/pull/1181 CVE-2026-65695 - https://github.com/geo-chen/oss/blob/main/Office-Word-MCP-Server.md @@ -145619,19 +143248,14 @@ CVE-2026-65696 - https://github.com/geo-chen/oss/blob/main/overseerr.md CVE-2026-65697 - https://github.com/geo-chen/oss/blob/main/fathom.md CVE-2026-65698 - https://github.com/geo-chen/oss/blob/main/void.md CVE-2026-65699 - https://github.com/geo-chen/oss/blob/main/AgentGPT.md -CVE-2026-6570 - https://vulnplus-note.wetolink.com/share/byd7AQVs42VY CVE-2026-65700 - https://github.com/geo-chen/oss/blob/main/h2ogpt.md CVE-2026-65701 - https://github.com/geo-chen/oss/blob/main/so-vits-svc.md CVE-2026-65702 - https://github.com/geo-chen/oss/blob/main/vanna.md CVE-2026-65707 - https://gist.github.com/peoz14/794521dc40f5bb7e6a6ec6630d894be6 CVE-2026-65708 - https://github.com/Caycon/cve-advisories/blob/main/2026/sysPass/CVE-2026-65708.md CVE-2026-65709 - https://github.com/Caycon/cve-advisories/blob/main/2026/sysPass/CVE-2026-65709.md -CVE-2026-6571 - https://vulnplus-note.wetolink.com/share/atu3UbqnfAgs CVE-2026-65710 - https://github.com/Caycon/cve-advisories/blob/main/2026/sysPass/CVE-2026-65710.md CVE-2026-65711 - https://gist.github.com/sermikr0/16bcbc799dc33d39d5714db9bbcbdb77 -CVE-2026-6572 - https://vulnplus-note.wetolink.com/share/PLCI4v0BWaF8 -CVE-2026-6573 - https://vulnplus-note.wetolink.com/share/1QZ4NE0oTRIc -CVE-2026-6574 - https://vulnplus-note.wetolink.com/share/VhoNkMja5u7A CVE-2026-6576 - https://github.com/3em0/cve_repo/blob/main/DjangoBlog/Vuln-1-WeChat-Bot-RCE.md CVE-2026-6577 - https://github.com/3em0/cve_repo/blob/main/DjangoBlog/Vuln-2-Unauthenticated-GPS-Data-Injection.md CVE-2026-6578 - https://github.com/3em0/cve_repo/blob/main/DjangoBlog/Vuln-3-Hardcoded-Django-SECRET_KEY.md @@ -145655,12 +143279,6 @@ CVE-2026-6592 - https://gist.github.com/YLChen-007/50f0cdc5e3f7b737ce99c783e487c CVE-2026-65920 - https://github.com/huggingface/diffusers/issues/14175 CVE-2026-6593 - https://gist.github.com/YLChen-007/1d91fabb465284d7a974746f7e6cc5cc CVE-2026-6594 - https://github.com/sudo-secure/security-research/blob/main/brikcss-merge/prototype-pollution/PoC.md -CVE-2026-6595 - https://tcn60zf28jhk.feishu.cn/wiki/MdHFw78Gmi1zbske8Ozc6XTjnIh?from=from_copylink -CVE-2026-6596 - https://gist.github.com/chenhouser2025/c2aabfdee41009cfe45d28a9924742a0 -CVE-2026-6597 - https://gist.github.com/chenhouser2025/b93261c6e651f14800a4f2e4365f357b -CVE-2026-6598 - https://gist.github.com/chenhouser2025/77adb3486c06c635ae4b09a3eaf90213 -CVE-2026-6599 - https://gist.github.com/chenhouser2025/a909c47316b7a0948ee68c109ab747a3 -CVE-2026-6600 - https://gist.github.com/chenhouser2025/935aa5d4556264ba408059eec0960b1a CVE-2026-66004 - https://github.com/ahujasid/blender-mcp/issues/257 CVE-2026-66005 - https://github.com/janhq/jan/issues/8453 CVE-2026-66006 - https://github.com/treeverse/lakeFS/issues/10465 @@ -145686,9 +143304,6 @@ CVE-2026-6613 - https://gist.github.com/YLChen-007/1d87985b274ce22c4294726d7758d CVE-2026-6614 - https://gist.github.com/YLChen-007/ac40da2253c7364d043c0dfe3275190b CVE-2026-6615 - https://gist.github.com/YLChen-007/300843c707435540ce0e23bff3e6173a CVE-2026-6616 - https://gist.github.com/YLChen-007/4bb1d709cbb58cee46d839c651d3221f -CVE-2026-6617 - https://gist.github.com/chenhouser2025/306c6a7ad6aff9bc9a7fa76d5df38c63 -CVE-2026-6618 - https://gist.github.com/chenhouser2025/d7b1c574b0e32eb9169f7046b486e662 -CVE-2026-6619 - https://gist.github.com/chenhouser2025/a8ac169dad5cf84811cf9c0505491ea8 CVE-2026-6620 - https://github.com/ccccccctiiiiiiii-lab/public_exp/issues/2 CVE-2026-6621 - https://github.com/sudo-secure/security-research/blob/main/extend-deep/prototype-pollution/PoC.md CVE-2026-6622 - https://github.com/4m3rr0r/PoCVulDb/issues/18 @@ -145697,15 +143312,11 @@ CVE-2026-6624 - https://github.com/4m3rr0r/PoCVulDb/issues/16 CVE-2026-6625 - https://github.com/ccccccctiiiiiiii-lab/public_exp/issues/3 CVE-2026-6626 - https://github.com/NicolasPauferro/studiesofnosqli CVE-2026-6628 - https://github.com/NicolasPauferro/studiessqli -CVE-2026-6629 - https://my.feishu.cn/docx/JttndUaPLoR88HxI1alcz1uencf?from=from_copylink CVE-2026-6634 - https://github.com/Dave-gilmore-aus/security-advisories/blob/main/usememos-security-advisory CVE-2026-6635 - https://github.com/Dave-gilmore-aus/security-advisories/blob/main/rowbat-advisory CVE-2026-6636 - https://github.com/Dave-gilmore-aus/security-advisories/blob/main/convert-advisory CVE-2026-66373 - https://github.com/berabuddies/redis-poc -CVE-2026-6648 - https://tcn60zf28jhk.feishu.cn/wiki/FHHMwcwCliOd0Bke3XkcEz3Enuc?from=from_copylink -CVE-2026-6649 - https://tcn60zf28jhk.feishu.cn/wiki/VYIcwwH4uiWZMgkX0SecopTgnQd?from=from_copylink CVE-2026-6650 - https://github.com/qingyun985/Cyber-Security/issues/3 -CVE-2026-6651 - https://olografix.org/acme/ERP_Online-POC.gif CVE-2026-6652 - https://medium.com/@pkhuyar/the-danger-of-php-eval-a23410187ca2 CVE-2026-6662 - https://github.com/August829/CVEP/issues/31 CVE-2026-66729 - https://github.com/theopaid/Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash @@ -145745,7 +143356,6 @@ CVE-2026-67345 - https://github.com/dromara/MaxKey/issues/269 CVE-2026-67347 - https://github.com/vendurehq/vendure/issues/5003 CVE-2026-67348 - https://github.com/julep-ai/julep/issues/1615 CVE-2026-67349 - https://github.com/opencost/opencost/issues/3893 -CVE-2026-6743 - https://olografix.org/acme/WebTOTUM-POC.gif CVE-2026-6744 - https://drive.google.com/file/d/1pVSN3BYjI_rUE2Jms5EcIBGSMdrq6Wql/view?usp=sharing CVE-2026-6745 - https://drive.google.com/drive/folders/10p6SYcSVyfaaTg_dgItzMJvqixcmKnHR?usp=sharing CVE-2026-67599 - https://lazytitan.ro/clearos @@ -146083,7 +143693,6 @@ CVE-2026-7512 - https://github.com/kirlic123/IOTvulner/tree/main/4035/3 CVE-2026-7513 - https://github.com/kirlic123/IOTvulner/blob/main/4035/4/4.md CVE-2026-75130 - https://noma.security/blog/contextcrush-context7-the-mcp-server-vulnerability/ CVE-2026-7518 - https://github.com/open5gs/open5gs/issues/4395 -CVE-2026-7519 - https://my.feishu.cn/docx/TCyMdptvaoTQCvxkHLbceJZCnge?from=from_copylink CVE-2026-7535 - https://github.com/open5gs/open5gs/issues/4399 CVE-2026-7536 - https://github.com/open5gs/open5gs/issues/4400 CVE-2026-7538 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_329/README.md @@ -146157,21 +143766,15 @@ CVE-2026-7669 - https://github.com/gouldnicholas/CVE-2026-7669-PoC CVE-2026-7669 - https://vuldb.com/vuln/360817 CVE-2026-7670 - https://github.com/zzlln/cvecve/issues/1 CVE-2026-7671 - https://drive.proton.me/urls/M0WFM4137W#MY0jA6pjHYPO -CVE-2026-7672 - https://fx4tqqfvdw4.feishu.cn/docx/EBZLdUqt4ogm4Px7jxuck1RQnHe?from=from_copylink -CVE-2026-7673 - https://fx4tqqfvdw4.feishu.cn/docx/EgMOdHyq6oyxhux5vpJcr5cgnAf?from=from_copylink CVE-2026-7675 - https://github.com/hmKunlun/lbt-t300-hw1/blob/main/generate_conf_router(Channel).md -CVE-2026-7676 - https://fx4tqqfvdw4.feishu.cn/docx/Yv1gdAzFpoHCUUxDdKSculR4nKf?from=from_copylink CVE-2026-76760 - https://github.com/chenhg5/cc-connect/issues/1488 CVE-2026-76761 - https://github.com/chenhg5/cc-connect/issues/1489 -CVE-2026-7677 - https://fx4tqqfvdw4.feishu.cn/docx/Iu5Dd558UoS4uIxhH9YcgNsWnjc?from=from_copylink -CVE-2026-76783 - https://uvxbywu62qm.feishu.cn/wiki/X1T5w8jPUinAsVkM0bhcZf4XnHe?from=from_copylink CVE-2026-76785 - https://github.com/amirsanni/Mini-Inventory-and-Sales-Management-System/issues/101 CVE-2026-76789 - https://wpscan.com/vulnerability/f9f5485c-6231-492c-b214-8da87a2bf4d1/ CVE-2026-76793 - https://wpscan.com/vulnerability/0414ef2b-0d97-41c7-9146-f31ace8b66b2/ CVE-2026-76795 - https://github.com/AeternaLabsHQ/pullmd/issues/41 CVE-2026-76799 - https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Login-Registration-System-login_registration_system.sql-Sensitive-Database-Disclosure.md CVE-2026-7680 - https://github.com/natanmorette-thoropass/thoropass-vuln-research-program/tree/main/2026/Path%20Traversal%20via%20Dataset%20Folder%20Parameter -CVE-2026-76800 - https://uvxbywu62qm.feishu.cn/wiki/TKqDwJGYaiBVXpk3EtFcdjRDnsg?from=from_copylink CVE-2026-7681 - https://github.com/natanmorette-thoropass/thoropass-vuln-research-program/tree/main/2026/Unauthenticated%20Dataset%20Modification%20via%20Missing%20Authentication CVE-2026-7682 - https://tzh00203.notion.site/Edimax-BR-6208AC-V2-1-02-setWAN-L2TPUserName-Command-Injection-33db5c52018a80c1b3aac6db8927bd0f CVE-2026-7683 - https://tzh00203.notion.site/Edimax-BR-6428nC-v1-16-setWAN-pptpUserName-Command-Injection-33db5c52018a80949cfbcc2091340c80 @@ -146182,11 +143785,7 @@ CVE-2026-7689 - https://gist.github.com/Shaon-Xis/d6ae069fc54f006457b68a91d5a8e1 CVE-2026-7690 - https://lavender-bicycle-a5a.notion.site/Wavlink-WN570HA1-set_sys_adm-34753a41781f809d8043f0a7a3e07e50?source=copy_link CVE-2026-7691 - https://lavender-bicycle-a5a.notion.site/Wavlink-WN570HA1-set_sys_cmd-34753a41781f80ab88a1d95d4f798d1f?source=copy_link CVE-2026-7692 - https://lavender-bicycle-a5a.notion.site/Wavlink-WN570HA1-ping_ddns-34753a41781f80c0a6c6c1b09b7cdf1c?source=copy_link -CVE-2026-7694 - https://ucn9h68n9289.feishu.cn/wiki/WZMewApmsiT3PMkCJfzcASEznOb -CVE-2026-7695 - https://ucn9h68n9289.feishu.cn/wiki/QoXfwTAOiiYw2OkO0vAc7b7SnGg -CVE-2026-7696 - https://ucn9h68n9289.feishu.cn/wiki/X9PAw4i5kiPueKkZqCCcNVYZnnc?from=from_copylink CVE-2026-7697 - https://github.com/testnet0/testnet/issues/74 -CVE-2026-7698 - https://ucn9h68n9289.feishu.cn/wiki/Yslcw7QqWiRjUZkCcvkcJI62n2c CVE-2026-76987 - https://github.com/liftoff-sr/CIPster/issues/47 CVE-2026-76988 - https://github.com/liftoff-sr/CIPster/issues/45 CVE-2026-76989 - https://github.com/liftoff-sr/CIPster/issues/46 @@ -146301,7 +143900,6 @@ CVE-2026-78170 - https://github.com/7wkajk/CVE-VUL/blob/main/108.md CVE-2026-78171 - https://github.com/MounT1veR/new/issues/1 CVE-2026-78177 - https://github.com/TanStack/devtools/issues/464 CVE-2026-78181 - https://github.com/ractivejs/ractive/issues/3448 -CVE-2026-78182 - https://ucn9h68n9289.feishu.cn/docx/WgJYd7q4CopTQKxqWuWcJEpinde?from=from_copylink CVE-2026-78185 - https://github.com/ltranquility/vuln_submit/issues/27 CVE-2026-78186 - https://github.com/open5gs/open5gs/issues/4675 CVE-2026-78187 - https://github.com/Leousum/VulnPoC/blob/main/Piwigo%2016.3.0/reflected_XSS.md @@ -146404,15 +144002,7 @@ CVE-2026-8208 - https://projectblack.io/blog/gibbon-v30-authenticated-sql-inject CVE-2026-8209 - https://projectblack.io/blog/gibbon-v30-authenticated-sql-injection-and-rce/#denial-of-service-via-path-traversal CVE-2026-82090 - https://github.com/FUNFACTOR1/pocket-android-xss-0click-cve CVE-2026-8210 - https://drive.google.com/file/d/19wRsehbhotZXgE1TjenFtS3w-zRtp-PW/view?usp=sharing -CVE-2026-8211 - https://bv3acdnplbr.feishu.cn/docx/Kk1tdEAfAoV6kZxVozUc8UA4nog?from=from_copylink CVE-2026-82111 - https://github.com/iswalle/getnote-mcp/issues/10 -CVE-2026-8214 - https://gist.github.com/0xb1lal/3ef872a445310c5866d07d6a5b1803fa -CVE-2026-8215 - https://gist.github.com/0xb1lal/3885c69998516685e3ea833403b9db2b -CVE-2026-8217 - https://gist.github.com/0xb1lal/6ccc2356e7e0a26f7b8a6bd6f0d84bbb -CVE-2026-8218 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif -CVE-2026-8219 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif -CVE-2026-8220 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif -CVE-2026-8221 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif CVE-2026-8222 - https://github.com/open5gs/open5gs/issues/4437 CVE-2026-8223 - https://github.com/open5gs/open5gs/issues/4438 CVE-2026-8224 - https://github.com/open5gs/open5gs/issues/4439 @@ -146423,22 +144013,14 @@ CVE-2026-8228 - https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_7/7.md CVE-2026-8229 - https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_8/8.md CVE-2026-8230 - https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_9/9.md CVE-2026-8235 - https://github.com/8421bit/MiniClaw/issues/6#issue-4290453729 -CVE-2026-8241 - https://gist.github.com/0xb1lal/6f3f050f08cff569ecbde586e63c6bea -CVE-2026-8242 - https://gist.github.com/0xb1lal/85422a63c10a001c75a22365457de624 -CVE-2026-8244 - https://gist.github.com/0xb1lal/758bbc5e4d82efea248e675da934ac69 CVE-2026-8248 - https://github.com/open5gs/open5gs/issues/4442 CVE-2026-8249 - https://github.com/open5gs/open5gs/issues/4443 CVE-2026-8250 - https://github.com/open5gs/open5gs/issues/4444 CVE-2026-8251 - https://github.com/open5gs/open5gs/issues/4445 CVE-2026-8252 - https://github.com/open5gs/open5gs/issues/4446 -CVE-2026-8253 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif -CVE-2026-8254 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif -CVE-2026-8255 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif -CVE-2026-8256 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif CVE-2026-8257 - https://github.com/HackC0der/CVE-Repos/blob/main/wasm-binaryen/Assertion_Failure_isRef_wasm_Type_getHeapType_commit_3ef8d19 CVE-2026-8259 - https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/Tenda%20AC6V2%20TendaTelnet%20Command%20Injection.md CVE-2026-8260 - https://github.com/0xcc12138/DCS-935L-HNAP-Service-CVE -CVE-2026-8262 - https://olografix.org/acme/_poc/ERP_Online-POC1.gif CVE-2026-8263 - https://github.com/yaoyue123/iot/blob/main/Tenda/AC10U/fromSetWirelessRepeat.md CVE-2026-8264 - https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/Tenda%20AC6V2%20formWifiApScan%20Command%20Injection%20via%20country%20parameter.md CVE-2026-8265 - https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/Tenda%20AC6V2%20get_log_file%20Command%20Injection%20via%20wans.flag.md @@ -146487,25 +144069,15 @@ CVE-2026-8733 - https://sharing.sit.fraunhofer.de/s/RYcqZbGqgZXxab2 CVE-2026-8734 - https://github.com/SourByte05/SourByte-Lab/issues/12 CVE-2026-8735 - https://github.com/SourByte05/SourByte-Lab/issues/13 CVE-2026-8736 - https://github.com/SourByte05/SourByte-Lab/issues/14 -CVE-2026-8737 - https://vulnplus-note.wetolink.com/share/VqmGhijVKGBM -CVE-2026-8738 - https://vulnplus-note.wetolink.com/share/ayeMf4xWK0ZZ -CVE-2026-8739 - https://vulnplus-note.wetolink.com/share/PCVUlOncmwTC -CVE-2026-8740 - https://vulnplus-note.wetolink.com/share/ILcCnOvJ1fMc CVE-2026-8741 - https://github.com/Pathfind-tama/Report_EMQX_MQTT/blob/main/MQTT%20QoS%202%20Message%20Duplication%20in%20Persistent%20Sessions.md CVE-2026-8743 - https://github.com/open5gs/open5gs/issues/4498 CVE-2026-8744 - https://github.com/open5gs/open5gs/issues/4466 CVE-2026-8745 - https://github.com/open5gs/open5gs/issues/4472 CVE-2026-8746 - https://github.com/open5gs/open5gs/issues/4476 -CVE-2026-8747 - https://vulnplus-note.wetolink.com/share/31wtzNoJbxKQ -CVE-2026-8750 - https://vulnplus-note.wetolink.com/share/wWjmsfKHRJi3 -CVE-2026-8751 - https://vulnplus-note.wetolink.com/share/b5nsQg6EcsBS -CVE-2026-8752 - https://vulnplus-note.wetolink.com/share/pyVa0GWPuAZE -CVE-2026-8753 - https://vulnplus-note.wetolink.com/share/R0hHqwMywhsm CVE-2026-8754 - https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504 CVE-2026-8755 - https://gist.github.com/YLChen-007/99859f4f836cca523a5982645e7fdd97 CVE-2026-8756 - https://gist.github.com/YLChen-007/550cb92f3489c317ff049fc7d7ea6b99 CVE-2026-8757 - https://gist.github.com/YLChen-007/ff3ff201b05d13d41f949f86e9187bd2 -CVE-2026-8758 - https://ucn9h68n9289.feishu.cn/wiki/XmoNwpJjJiQrBtkLMitccF56ntb CVE-2026-8759 - https://gitee.com/xiandafu/beetl/issues/IIYAWC CVE-2026-8765 - https://gist.github.com/YLChen-007/1770f4530b0c933dc61f15b02aa0629d CVE-2026-8766 - https://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f @@ -146610,12 +144182,6 @@ CVE-2026-9405 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_ CVE-2026-9406 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_338/README.md CVE-2026-9407 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_339/README.md CVE-2026-9408 - https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_340/README.md -CVE-2026-9409 - https://gist.github.com/c4ttr4ck/c891dd0fa550e910a1724cbd96d93a80 -CVE-2026-9410 - https://gist.github.com/c4ttr4ck/c35c134709743deb7dfad5b878295402 -CVE-2026-9411 - https://gist.github.com/c4ttr4ck/f60dfb9fc65a98ad6dde1840dc2c1a5e -CVE-2026-9412 - https://gist.github.com/c4ttr4ck/db84fc2af3e542acf1eab685264bcfc1 -CVE-2026-9413 - https://gist.github.com/c4ttr4ck/cb6a07bc54600a14de2676d8b96c3026 -CVE-2026-9414 - https://gist.github.com/c4ttr4ck/97c5babe1f16fa3243333528a40b7550 CVE-2026-9415 - https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul12.md CVE-2026-9416 - https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul13.md CVE-2026-9417 - https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul14.md @@ -146642,10 +144208,6 @@ CVE-2026-9440 - https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formA CVE-2026-9441 - https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formiNICbasic-34b53a41781f808bbc45e8ca54f93dd1?source=copy_link CVE-2026-9442 - https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formiNICSiteSurvey-34b53a41781f8083b8dff46a2f02978f?source=copy_link CVE-2026-9443 - https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formL2TPSetup-34b53a41781f809e9c30c1260cc5d92e?source=copy_link -CVE-2026-9444 - https://gist.github.com/c4ttr4ck/5d05aaee5b43f259ebe8bb8bce5c658f -CVE-2026-9445 - https://gist.github.com/c4ttr4ck/dd5c36ac4317232be183b7b90139d064 -CVE-2026-9446 - https://gist.github.com/c4ttr4ck/599151a2b90c1cd620933c992873c67a -CVE-2026-9447 - https://gist.github.com/c4ttr4ck/24c157c90227c3f5cd5e5d871449fed8 CVE-2026-9448 - https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul19.md CVE-2026-9449 - https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul21.md CVE-2026-9450 - https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul22.md @@ -146663,8 +144225,6 @@ CVE-2026-9461 - https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_14/14.m CVE-2026-9462 - https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_15/15.md CVE-2026-9463 - https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_16/16.md CVE-2026-9464 - https://github.com/fakebug111/my_public_bug/blob/main/issus05.md -CVE-2026-9465 - https://ucn9h68n9289.feishu.cn/wiki/MOEfw7m4xiwxifkGWwDcNzEPnD0?from=from_copylink -CVE-2026-9466 - https://ucn9h68n9289.feishu.cn/wiki/DRghw6X8piOtClkjBkHcfgvtnPx?from=from_copylink CVE-2026-9467 - https://github.com/hyk6225/public_exp/issues/1 CVE-2026-9468 - https://github.com/dazeb/cline-mcp-memory-bank/issues/5 CVE-2026-9469 - https://github.com/yashpokharna2555/StudentManagementSystem/issues/2 @@ -146697,7 +144257,6 @@ CVE-2026-9518 - https://github.com/hemant6488/CodeIgniter-StudentManagementSyste CVE-2026-9519 - https://gist.github.com/TrebledJ/0efceef4f3a2e0515cc2fe96b4c22679 CVE-2026-9520 - https://gist.github.com/TrebledJ/164c7ca6c8208b63e6937bc11984720b CVE-2026-9521 - https://gist.github.com/TrebledJ/750abc64a826f19dd2d6774724629b71 -CVE-2026-9523 - https://ucn9h68n9289.feishu.cn/wiki/NpZHw0lypi6ztJkWLNxcGKR5nlb?from=from_copylink CVE-2026-9525 - https://github.com/i-QvQ-i/first-OvO/issues/3 CVE-2026-9526 - https://github.com/i-QvQ-i/first-OvO/issues/2 CVE-2026-9527 - https://github.com/i-QvQ-i/first-OvO/issues/1 @@ -146710,10 +144269,6 @@ CVE-2026-9533 - https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_56/5 CVE-2026-9534 - https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_57/57.md CVE-2026-9540 - https://github.com/vllm-project/vllm/issues/37343 CVE-2026-9543 - https://github.com/A1ester/TOTOLINK-N300RH-Command-Injection -CVE-2026-9544 - https://ucn9h68n9289.feishu.cn/wiki/A9WcwRkFsijnyIkf6vlcx13znoh -CVE-2026-9550 - https://ucn9h68n9289.feishu.cn/wiki/FC6swHuyqiLVyfkwKcNc8sCjnfb -CVE-2026-9551 - https://ucn9h68n9289.feishu.cn/wiki/XW9QwcTjCixlLiklQfBcJCcYn0e?from=from_copylink -CVE-2026-9552 - https://ucn9h68n9289.feishu.cn/wiki/IvjXwhgMUinqOckXHIQcrf2Nnjb?from=from_copylink CVE-2026-9562 - https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1#issue-4348905508 CVE-2026-9564 - https://github.com/Alanener/sysy/issues/1 CVE-2026-9565 - https://github.com/haojing8312/WorkClaw/issues/4 diff --git a/scripts/audit_poc_links.py b/scripts/audit_poc_links.py index 9b14cb23824..dc9e50bf409 100644 --- a/scripts/audit_poc_links.py +++ b/scripts/audit_poc_links.py @@ -315,9 +315,12 @@ def save_state(state: dict, *, dry_run: bool) -> None: def slice_after(items: list[str], cursor: str, limit: int) -> list[str]: - """The next `limit` items after the cursor, wrapping at the end.""" - if not limit: - return items + """The next `limit` items after the cursor, wrapping once at the end. + + A limit of zero, or one larger than the list, means everything -- capped so + that wrapping can never hand back the same item twice. + """ + limit = len(items) if not limit else min(limit, len(items)) start = next((i for i, item in enumerate(items) if item > cursor), 0) if cursor else 0 window = items[start : start + limit] if len(window) < limit: @@ -330,7 +333,8 @@ def main() -> int: description="Drop PoC links to deleted repositories and refresh repo_meta.json" ) parser.add_argument("--limit", type=int, default=0, help="Repositories to check this run") - parser.add_argument("--references", type=int, default=0, help="Reference links to check this run") + parser.add_argument("--references", type=int, default=0, + help="Reference links to check this run (0 skips them, -1 checks all)") parser.add_argument("--workers", type=int, default=16, help="Concurrent reference requests") parser.add_argument("--timeout", type=int, default=8, help="Seconds per reference request") parser.add_argument("--dry-run", action="store_true", help="Report without writing files") @@ -363,7 +367,8 @@ def main() -> int: if args.references: references = collect_references() urls = sorted(references) - window = slice_after(urls, str(state.get("reference_cursor") or ""), args.references) + window = slice_after(urls, str(state.get("reference_cursor") or ""), + 0 if args.references < 0 else args.references) print(f"Checking {len(window)} of {len(urls)} reference links") gone = dead_references( interleave_by_host(window), workers=args.workers, timeout=args.timeout