Aggregator

thinkphp最新CVE-2024-44902反序列化漏洞

如何对安全设备进行代码审计

BaseCTF新生赛 week3 PWN详解

基于spi机制构造的webshell

thinkphp模版存在多种注入方式

DASCTF 八月挑战赛WP

java下的ql表达式白名单突破

二次反序列化新链学习

主动防御大模型图像篡改

thinkphp8 通过baseQuery方法的rce

BaseCTF新生赛Reverse week1解题wp

Nanocore恶意脚本分析

Lazarus Group has been observed impersonating Capital One staff to lure developers into downloading malware on open source repositories

Learn why distributed cloud computing is essential to meet user demand for highly customized, secure services.

截至当前已有177家受害者

A vulnerability, which was classified as problematic, was found in OpenText eDirectory 9.2.5.0000. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2021-38131. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in OpenText eDirectory 9.2.3.0000/9.2.4.0000. Affected by this issue is some unknown functionality. The manipulation leads to weak password requirements. This vulnerability is handled as CVE-2021-38133. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in OpenText Identity Manager AzureAD Driver. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive information in log files. This vulnerability is known as CVE-2021-22518. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in OpenText eDirectory 9.2.4.0000. Affected is an unknown function. The manipulation leads to sensitive information in log files. This vulnerability is traded as CVE-2021-22533. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenText eDirectory 9.2.3.0000/9.2.4.0000. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to server-side request forgery. The identification of this vulnerability is CVE-2021-38132. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.