ctlyz123

3 exploits Active since Jul 2020
CVE-2020-1948 NOMISEC CRITICAL STUB
Apache Dubbo < 2.7.7 - Remote Code Execution via Untrusted Data Deserialization
This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below.
15 stars
CVSS 9.8
CVE-2020-8193 NOMISEC MEDIUM WORKING POC
Citrix ADC/Gateway <13.0-58.30 - Info Disclosure
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.
2 stars
CVSS 6.5
CVE-2020-17496 NOMISEC CRITICAL WORKING POC
vBulletin 5.5.4-5.6.2 - Remote Command Execution via subWidgets Data in AJAX Widget Renderer
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.
1 stars
CVSS 9.8