دروازه امنیت | security gate

دروازه امنیت security gate
مرکز تحقیقات و آزمایشگاه آسیب پذیری Research Center and Vulnerability Laboratory

آمار :

تحقیقات ماه جاری 0
تحقیقات ماه قبل 16
تحقیقات سال جاری 187
تحقیقات سال قبل 765
تعداد دورک ها 5121
تعداد محققین 7067
مجموع تحقیقات 27432

محققین برتر در 2024-04-11 :

دیتابیس CVE :

ماه جاری(دارای مقاله) 0
ماه قبل(دارای مقاله) 20
سال جاری(دارای مقاله) 58
سال قبل(دارای مقاله) 264
مجموع CVE(دارای مقاله) 6858
مجموع CVE 149333

تحت تأثیر

high risk 7316
medium risk 13277
low risk 6839
Remote 23512
Local 4027
سایر ایتم های تحت تاثیر

چک کردن آخرین تحقیقات

آخرین تحقیقات
high..	GUnet OpenEclass E-learning 3.15 File Upload / Command Execution CVE-2024-31777 / 2024-04-11 Georgios Tsimpidas
high..	Trimble TM4Web 22.2.0 Privilege Escalation / Access Code Disclosure CVE-2023-27195 / 2024-04-11 Clement Cruchet
med..	OX App Suite 7.10.6 Cross Site Scripting / Deserialization Issue CVE-2024-23192 / 2024-04-11 Martin Heiland
med..	Fuxnet: Disabling Russia's Industrial Sensor And Monitoring Infrastructure / 2024-04-11 ruexfil
med..	AnyDesk 7.0.15 Unquoted Service Path / 2024-04-08 Milad Karimi
high..	Wordpress Plugin Membership For WooCommerce < v2.1.7 Arbitrary File Upload to Shell (Unauthenticated) / 2024-04-08 Milad Karimi
med..	Daily Expense Manager 1.0 SQL Injection / 2024-04-08 Stefan Hesselman
med..	Savane v.3.12 Bad Seed Vulnerability and CSRF Bypass CVE-2024-27632 / 2024-04-08 Ally Petitt
med..	Backdoor.Win32.Agent.ju (PSYRAT) / Authentication Bypass RCE / 2024-04-08 malvuln
low..	HTMLy 2.9.6 Cross Site Scripting / 2024-04-08 tmrswrr
آخرین تحقیقات با ریسک بالا
high..	GUnet OpenEclass E-learning 3.15 File Upload / Command Execution CVE-2024-31777 / 2024-04-11 Georgios Tsimpidas
high..	Trimble TM4Web 22.2.0 Privilege Escalation / Access Code Disclosure CVE-2023-27195 / 2024-04-11 Clement Cruchet
high..	Wordpress Plugin Membership For WooCommerce < v2.1.7 Arbitrary File Upload to Shell (Unauthenticated) / 2024-04-08 Milad Karimi
high..	Gibbon School Platform 26.0.00 Remote Code Execution / 2024-04-06 h00die-gr3y
high..	SolarView Compact 6.00 - Command Injection Bypass authentication CVE-2023-23333 / 2024-03-30 parsa rezaie khiabanloo
high..	Wazuh Dashboard - Information Discoluser / 2024-03-30 parsa rezaie khiabanloo
high..	WatchGuard XTM Firebox Unauthenticated Remote Command Execution CVE-2022-26318 / 2024-03-30 Charles FOL
high..	Circontrol Raption Buffer Overflow / Command Injection CVE-2020-8006 / 2024-03-30 Dariusz Gonda
high..	KiTTY 0.76.1.13 Start Duplicated Session Hostname Buffer Overflow / 2024-03-28 DEFCESCO
high..	Siklu MultiHaul TG series < 2.0.0 unauthenticated credential disclosure / 2024-03-28 semaja2
آخرین تحقیقات با ریسک متوسط
med..	OX App Suite 7.10.6 Cross Site Scripting / Deserialization Issue CVE-2024-23192 / 2024-04-11 Martin Heiland
med..	Fuxnet: Disabling Russia's Industrial Sensor And Monitoring Infrastructure / 2024-04-11 ruexfil
med..	AnyDesk 7.0.15 Unquoted Service Path / 2024-04-08 Milad Karimi
med..	Daily Expense Manager 1.0 SQL Injection / 2024-04-08 Stefan Hesselman
med..	Savane v.3.12 Bad Seed Vulnerability and CSRF Bypass CVE-2024-27632 / 2024-04-08 Ally Petitt
med..	Backdoor.Win32.Agent.ju (PSYRAT) / Authentication Bypass RCE / 2024-04-08 malvuln
med..	Trojan.Win32.Razy.abc / Insecure Permissions (In memory IPC) / 2024-04-08 malvuln
med..	SolarView Compact 6.00 - Command Injection / 2024-04-06 parsa rezaie khiabanloo
med..	Gibbon 26.0.00 Server-Side Template Injection / Remote Code Execution CVE-2024-24724 / 2024-04-01 Islam Rzayev
med..	Rapid7 nexpose vulnerability management software - 'nexposeconsole' Unquoted Service Path / 2024-04-01 Saud Alenazi
آخرین تحقیقات با ریسک پایین
low..	HTMLy 2.9.6 Cross Site Scripting / 2024-04-08 tmrswrr
low..	ARIS: Business Process Management 10.0.21.0 Cross Site Scripting / 2024-04-01 Seid Yassin
low..	Youtube Open Redirect Vulnerability / 2024-03-24 Anezatra
low..	Saflok System 6000 Key Derivation / 2024-02-29 a51199deefa2c2520cea24f746d899ce
low..	ITFlow Cross Site Request Forgery CVE-2024-25344 / 2024-02-22 stehled
low..	WordPress 6.4.3 Username Disclosure / 2024-02-22 h4shur
low..	GoAhead Web Server 2.5 goform/formTest Multiple HTML Injection Vulnerabilities / 2024-02-22 Syed Affan Ahmed
low..	SitePad 1.8.2 Cross Site Scripting / 2024-02-22 tmrswrr
low..	InstantCMS 2.16.1 Cross Site Scripting / 2024-02-20 SoSPiro
low..	Wyrestorm Apollo VX20 / Account Enumeration / 2024-02-18 hyp3rlinx
آخرین CVE ها
high..	CVE-2024-31777 GUnet OpenEclass E-learning 3.15 File Upload / Command Execution / 2024-04-11 Georgios Tsimpidas
high..	CVE-2023-27195 Trimble TM4Web 22.2.0 Privilege Escalation / Access Code Disclosure / 2024-04-11 Clement Cruchet
med..	CVE-2024-23192 OX App Suite 7.10.6 Cross Site Scripting / Deserialization Issue / 2024-04-11 Martin Heiland
med..	CVE-2024-27632 Savane v.3.12 Bad Seed Vulnerability and CSRF Bypass / 2024-04-08 Ally Petitt
med..	CVE-2024-24724 Gibbon 26.0.00 Server-Side Template Injection / Remote Code Execution / 2024-04-01 Islam Rzayev
high..	CVE-2023-23333 SolarView Compact 6.00 - Command Injection Bypass authentication / 2024-03-30 parsa rezaie khiabanloo
high..	CVE-2022-26318 WatchGuard XTM Firebox Unauthenticated Remote Command Execution / 2024-03-30 Charles FOL
med..	CVE-2024-28085 util-linux wall Escape Sequence Injection / 2024-03-30 Skyler Ferrante
high..	CVE-2020-8006 Circontrol Raption Buffer Overflow / Command Injection / 2024-03-30 Dariusz Gonda
high..	CVE-2023-20048 Cisco Firepower Management Center < 6.6.7.1 Authenticated RCE / 2024-03-27 Abdualhadi khalifa
آخرین دورک ها
med..	http.html:"solarview compact" SolarView Compact 6.00 - Command Injection / 2024-04-06 parsa rezaie khiabanloo
high..	http.html:"solarview compact" SolarView Compact 6.00 - Command Injection Bypass authentication / 2024-03-30 parsa rezaie khiabanloo
high..	http.html:"solarview compact" SolarView Compact 6.00 Command Injection / 2024-03-20 ByteHunter
med..	intitle:"SiteOmat Loader" SiteOmat Fueling System - Default Password / 2024-03-16 Parsa rezaie khiabanloo
high..	inurl:/scada-vis Schneider Electric v1.0 - Directory traversal & Broken Authentication / 2024-03-16 parsa rezaie khiabanloo
med..	"Diseño y Programación Agencia NUBA" Agencia NUBA- Sql Injection / 2024-02-28 behrouz mansoori
med..	inurl:"adminco" intext:"yetkili" Ticico - Blind SQL Injection / 2024-02-20 Gaddar
med..	intext:"IT Partner iCT Sky" iCT Sky SQL Injection / 2024-02-11 MrHoudini
med..	intitle:"index of" env.cgi Laravel Env file Access Open Directory / 2024-02-07 Shayan Sadr
high..	http.favicon.hash:2141724739 Juniper-SRX-Firewalls&EX-switches (PreAuth-RCE) (PoC) / 2024-02-02 whiteOwl

twitter(X): @securitygateorg / telegram: @orgsecuritygate / instagram: @securitygateorg

دروازه امنیت security gate

آمار :

محققین برتر در 2024-04-11 :

دیتابیس CVE :

تحت تأثیر

چک کردن آخرین تحقیقات

آخرین تحقیقات

high..

GUnet OpenEclass E-learning 3.15 File Upload / Command Execution

high..

Trimble TM4Web 22.2.0 Privilege Escalation / Access Code Disclosure

med..

OX App Suite 7.10.6 Cross Site Scripting / Deserialization Issue

med..

Fuxnet: Disabling Russia's Industrial Sensor And Monitoring Infrastructure

med..

AnyDesk 7.0.15 Unquoted Service Path

high..

Wordpress Plugin Membership For WooCommerce < v2.1.7 Arbitrary File Upload to Shell (Unauthenticated)

med..

Daily Expense Manager 1.0 SQL Injection

med..

Savane v.3.12 Bad Seed Vulnerability and CSRF Bypass

med..

Backdoor.Win32.Agent.ju (PSYRAT) / Authentication Bypass RCE

low..

HTMLy 2.9.6 Cross Site Scripting

آخرین تحقیقات با ریسک بالا

high..

GUnet OpenEclass E-learning 3.15 File Upload / Command Execution

high..

Trimble TM4Web 22.2.0 Privilege Escalation / Access Code Disclosure

high..

Wordpress Plugin Membership For WooCommerce < v2.1.7 Arbitrary File Upload to Shell (Unauthenticated)

high..

Gibbon School Platform 26.0.00 Remote Code Execution

high..

SolarView Compact 6.00 - Command Injection Bypass authentication

high..

Wazuh Dashboard - Information Discoluser

high..

WatchGuard XTM Firebox Unauthenticated Remote Command Execution

high..

Circontrol Raption Buffer Overflow / Command Injection

high..

KiTTY 0.76.1.13 Start Duplicated Session Hostname Buffer Overflow

high..

Siklu MultiHaul TG series < 2.0.0 unauthenticated credential disclosure

آخرین تحقیقات با ریسک متوسط

med..

OX App Suite 7.10.6 Cross Site Scripting / Deserialization Issue

med..

Fuxnet: Disabling Russia's Industrial Sensor And Monitoring Infrastructure

med..

AnyDesk 7.0.15 Unquoted Service Path

med..

Daily Expense Manager 1.0 SQL Injection

med..

Savane v.3.12 Bad Seed Vulnerability and CSRF Bypass

med..

Backdoor.Win32.Agent.ju (PSYRAT) / Authentication Bypass RCE

med..

Trojan.Win32.Razy.abc / Insecure Permissions (In memory IPC)

med..

SolarView Compact 6.00 - Command Injection

med..

Gibbon 26.0.00 Server-Side Template Injection / Remote Code Execution

med..

Rapid7 nexpose vulnerability management software - 'nexposeconsole' Unquoted Service Path

آخرین تحقیقات با ریسک پایین

low..

HTMLy 2.9.6 Cross Site Scripting

low..

ARIS: Business Process Management 10.0.21.0 Cross Site Scripting

low..

Youtube Open Redirect Vulnerability

low..

Saflok System 6000 Key Derivation

low..

ITFlow Cross Site Request Forgery

دروازه امنیت

security gate