SolarWinds Serv-U FTP Server versions through 15.2.1 do not correctly sanitize and validate the user-supplied directory names, allowing malicious users to create directories that when clicked on (in the breadcrumb menu) will trigger cross site scripting payloads.
63b2c20217bc49cd26d5d1117a3e0ef300ddd3efe77e545937de5ae02474c7acSolarWinds Serv-U File Server versions through 15.2.1 do not correctly validate path information, allowing the disclosure of files and directories outside of the user's home directory via a specially crafted GET request.
64b515c78c524df69e596a9ac43e62c6feeaae73ff31f506f5da5c63c7573d1aApple Security Advisory 2021-02-09-1 - macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002 address code execution and out of bounds write vulnerabilities.
d07c6053fe910958b6266e0b88aa65b1bed26755ff3255409dce2e7eae0d9f55Ubuntu Security Notice 4734-1 - It was discovered that wpa_supplicant did not properly handle P2P group information in some situations, leading to a heap overflow. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that hostapd did not properly handle UPnP subscribe messages in some circumstances. An attacker could use this to cause a denial of service. Various other issues were also addressed.
da5ea348150c757a77c57580c53d55f823503da3fdee08a9926dcaf7bc16522cSchool Event Attendance Monitoring System version 1.0 suffers from a persistent cross site scripting vulnerability.
f24ea62864f99168db534533d904e718eec3104b5d031e784df47f70a33c8549This whitepaper is a cheatsheet that goes over various methods of port forwarding and tunnelling of traffic.
f746945e0edd3c4bd4aae5ea59672c53f016e834378ed2e6fb4ef5da07d76bb2School File Management System version 1.0 suffers from multiple cross site scripting vulnerabilities.
9adf1daba492c305f38d2212601a64c64d3876b6fed06208da1f858a6ea386b2PDFCOMPLETE Corporate Edition version 4.1.45 suffers from an unquoted service path vulnerability.
a37408e2d318510e6d8e2c8d775c427b6f59b240022e320ba14caf04620f4892
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed