{"uuid": "011c41f9-3444-4dc7-a5f5-d53392b57fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40648", "type": "seen", "source": "https://t.me/cibsecurity/49560", "content": "\u203c CVE-2021-40648 \u203c\n\nIn man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nextsize of the current chunk. The next chunk is then fr…

{"uuid": "63b10fd8-9002-4f68-9eb8-09e22fcfbfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40647", "type": "seen", "source": "https://t.me/cibsecurity/49559", "content": "\u203c CVE-2021-40647 \u203c\n\nIn man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the hea…

{"uuid": "e465a039-5f5e-4ff0-b29a-ecc7dc319d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40643", "type": "seen", "source": "https://t.me/cibsecurity/45400", "content": "\u203c CVE-2021-40643 \u203c\n\nEyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the \"sendmail\" application in the \"cacti\" configuratio…

{"uuid": "22c2ef20-ded6-4da8-b7e5-dc9a3fef9ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40642", "type": "seen", "source": "https://t.me/cibsecurity/45354", "content": "\u203c CVE-2021-40642 \u203c\n\nTextpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplib_misc.php. The secure flag is not set for …

{"uuid": "3cd19d6b-2658-4aba-b8cf-88c2bd5840c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40649", "type": "seen", "source": "https://t.me/cibsecurity/44391", "content": "\u203c CVE-2021-40649 \u203c\n\nIn Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creat…

{"uuid": "ca585409-4347-4adc-8cab-6eeefee005c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40644", "type": "seen", "source": "https://t.me/cibsecurity/39875", "content": "\u203c CVE-2021-40644 \u203c\n\nAn SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_ti…

{"uuid": "fa45e781-bcc6-45f6-84b2-fa2523a035ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40645", "type": "seen", "source": "https://t.me/cibsecurity/39874", "content": "\u203c CVE-2021-40645 \u203c\n\nAn SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.\n\n\ud83d\udcd6 Read\n\nvia \"Nati…