deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-25009
Published: 2021-05-21
Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9100; https://bugzilla.redhat.com/show_bug.cgi?id=1956917; https://chromium.googlesource.com/webm/libwebp/+/95fd65070662e01cc9170c4444f5c0859a710097
CVE: CVE-2018-25010
Published: 2021-05-21
Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9105; https://bugzilla.redhat.com/show_bug.cgi?id=1956918; https://chromium.googlesource.com/webm/libwebp/+/1344a2e947c749d231141a295327e5b99b444d63
CVE: CVE-2018-25011
Published: 2021-05-21
Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9119; https://bugzilla.redhat.com/show_bug.cgi?id=1956919; https://chromium.googlesource.com/webm/libwebp/+/v1.0.1
CVE: CVE-2018-25012
Published: 2021-05-21
Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9123; https://bugzilla.redhat.com/show_bug.cgi?id=1956922; https://chromium.googlesource.com/webm/libwebp/+/95fd65070662e01cc9170c4444f5c0859a710097
CVE: CVE-2018-25013
Published: 2021-05-21
Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9417; https://bugzilla.redhat.com/show_bug.cgi?id=1956926; https://chromium.googlesource.com/webm/libwebp/+/907208f97ead639bd521cf355a2f203f462eade6
CVE: CVE-2018-25014
Published: 2021-05-21
Description: A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-908, CWE-908
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9496; https://bugzilla.redhat.com/show_bug.cgi?id=1956927; https://chromium.googlesource.com/webm/libwebp/+log/78ad57a36ad69a9c22874b182d49d64125c380f2..907208f97ead639bd52
CVE: CVE-2020-36328
Published: 2021-05-21
Description: A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://seclists.org/fulldisclosure/2021/Jul/54; https://bugzilla.redhat.com/show_bug.cgi?id=1956829; https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
CVE: CVE-2020-36329
Published: 2021-05-21
Description: A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2021/Jul/54; https://bugzilla.redhat.com/show_bug.cgi?id=1956843; https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
CVE: CVE-2020-36330
Published: 2021-05-21
Description: A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2021/Jul/54; https://bugzilla.redhat.com/show_bug.cgi?id=1956853; https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
CVE: CVE-2020-36331
Published: 2021-05-21
Description: A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2021/Jul/54; https://bugzilla.redhat.com/show_bug.cgi?id=1956856; https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
CVE: CVE-2020-36332
Published: 2021-05-21
Description: A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=1956868; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2021/dsa-4930
CVE: CVE-2020-23765
Published: 2021-05-21
Description: A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/bludit/bludit/issues/1218; https://github.com/bludit/bludit/issues/1218
CVE: CVE-2020-23766
Published: 2021-05-21
Description: An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/danpros/htmly/issues/412; https://github.com/danpros/htmly/issues/412
CVE: CVE-2020-23768
Published: 2021-05-21
Description: An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and telephone numbers.
CVSS Score: 7.5 (HIGH)
References: https://github.com/whiskey-jj/w2s2x2222.github.io/issues/1; https://github.com/whiskey-jj/w2s2x2222.github.io/issues/1
CVE: CVE-2021-27811
Published: 2021-05-21
Description: A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation of client_upgrade_edition.php and Upgrade.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/whiskey-jj/w2s2x2222.github.io/issues/2; https://www.cnvd.org.cn/flaw/show/2297879; https://github.com/whiskey-jj/w2s2x2222.github.io/issues/2
CVE: CVE-2021-29681
Published: 2021-05-21
Description: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query. This information could be used in further attacks against the system. IBM X-Force ID: 199918.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199917; https://www.ibm.com/support/pages/node/6454591; https://exchange.xforce.ibmcloud.com/vulnerabilities/199917
CVE: CVE-2021-32634
Published: 2021-05-21
Description: Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the [`WorkSpaceClientEnqueue.action`](https://github.com/NationalSecurityAgency/emissary/blob/30c54ef16c6eb6ed09604a929939fb9f66868382/src/main/java/emissary/server/mvc/internal/WorkSpaceClientEnqueueAction.java) REST endpoint. This issue may lead to post-auth Remote Code Execution. This issue has been patched in version 6.5.0. As a workaround, one can disable network access to Emissary from untrusted sources.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://github.com/NationalSecurityAgency/emissary/commit/40260b1ec1f76cc92361702cc14fa1e4388e19d7; https://github.com/NationalSecurityAgency/emissary/security/advisories/GHSA-m5qf-gfmp-7638; https://github.com/NationalSecurityAgency/emissary/commit/40260b1ec1f76cc92361702cc14fa1e4388e19d7
CVE: CVE-2008-3280
Published: 2021-05-21
Description: It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166). In combination with the DNS Cache Poisoning issue (CVE-2008-1447) and the fact that almost all SSL/TLS implementations do not consult CRLs (currently an untracked issue), this means that it is impossible to rely on these OPs.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-338
References: http://lists.openid.net/pipermail/openid-security/2008-August/000942.html; https://www.exploit-db.com/exploits/5720; http://lists.openid.net/pipermail/openid-security/2008-August/000942.html
CVE: CVE-2021-21549
Published: 2021-05-21
Description: Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.dell.com/support/kbdoc/000186363; https://www.dell.com/support/kbdoc/000186363
CVE: CVE-2021-21552
Published: 2021-05-21
Description: Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass the restricted environment and perform unauthorized actions on the affected system.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-863
References: https://www.dell.com/support/kbdoc/en-us/000186134/dsa-2021-096-dell-wyse-windows-embedded-system-security-update-for-an-improper-authorization-vulnerability; https://www.dell.com/support/kbdoc/en-us/000186134/dsa-2021-096-dell-wyse-windows-embedded-system-security-update-for-an-improper-authorization-vulnerability
CVE: CVE-2021-33500
Published: 2021-05-21
Description: PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs on Linux or other platforms for similar reasons.
CVSS Score: 7.5 (HIGH)
References: https://docs.ssh-mitm.at/puttydos.html; https://github.com/ssh-mitm/ssh-mitm-plugins/blob/main/ssh_mitm_plugins/ssh/putty_dos.py; https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
CVE: CVE-2021-33507
Published: 2021-05-21
Description: Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots; http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE: CVE-2021-33508
Published: 2021-05-21
Description: Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname; http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE: CVE-2021-33509
Published: 2021-05-21
Description: Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-732
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script; http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE: CVE-2021-33510
Published: 2021-05-21
Description: Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url; http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE: CVE-2021-33511
Published: 2021-05-21
Description: Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser; http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE: CVE-2021-33512
Published: 2021-05-21
Description: Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html; http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE: CVE-2021-33513
Published: 2021-05-21
Description: Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool; http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE: CVE-2021-33514
Published: 2021-05-21
Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTP_USER_AGENT;' with an OS command in the User-Agent field. This affects GC108P before 1.0.7.3, GC108PP before 1.0.7.3, GS108Tv3 before 7.0.6.3, GS110TPPv1 before 7.0.6.3, GS110TPv3 before 7.0.6.3, GS110TUPv1 before 1.0.4.3, GS710TUPv1 before 1.0.4.3, GS716TP before 1.0.2.3, GS716TPP before 1.0.2.3, GS724TPPv1 before 2.0.4.3, GS724TPv2 before 2.0.4.3, GS728TPPv2 before 6.0.6.3, GS728TPv2 before 6.0.6.3, GS752TPPv1 before 6.0.6.3, GS752TPv2 before 6.0.6.3, MS510TXM before 1.0.2.3, and MS510TXUP before 1.0.2.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://gynvael.coldwind.pl/?lang=en&id=733; https://kb.netgear.com/000063641/Security-Advisory-for-Pre-Authentication-Command-Injection-Vulnerability-on-Some-Smart-Switches-PSV-2021-0071; https://gynvael.coldwind.pl/?lang=en&id=733
CVE: CVE-2021-1254
Published: 2021-05-22
Description: Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit these vulnerabilities by injecting malicious code into the web-based management interface and persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. An attacker needs valid administrator credentials to inject the malicious script code.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-strd-xss-bUKqffFW; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-strd-xss-bUKqffFW
CVE: CVE-2021-1306
Published: 2021-05-22
Description: A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is due to improper validation of parameters that are sent to a CLI command within the restricted shell. An attacker could exploit this vulnerability by logging in to the device and issuing certain CLI commands. A successful exploit could allow the attacker to identify file directories on the affected device and write arbitrary files to the file system on the affected device. To exploit this vulnerability, the attacker must be an authenticated shell user.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-73, CWE-610
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ade-xcvAQEOZ; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ade-xcvAQEOZ
CVE: CVE-2021-1358
Published: 2021-05-22
Description: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to cause the interface to redirect the user to a specific, malicious URL. This type of vulnerability is known as an open redirect and is used in phishing attacks that get users to unknowingly visit malicious sites.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-opn-rdrct-epDeh7R; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-opn-rdrct-epDeh7R
CVE: CVE-2021-1487
Published: 2021-05-22
Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system (OS) with the permissions of a special non-root user. In this way, an attacker could take control of the affected system, which would allow them to obtain and alter sensitive data. The attacker could also affect the devices that are managed by the affected system by pushing arbitrary configuration files, retrieving device credentials and confidential information, and ultimately undermining the stability of the devices, causing a denial of service (DoS) condition.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-cmd-inj-YU5e6tB3; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-cmd-inj-YU5e6tB3
CVE: CVE-2021-1531
Published: 2021-05-22
Description: A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the web application on the underlying operating system of an affected Cisco Modeling Labs server. This vulnerability is due to insufficient validation of user-supplied input to the web UI. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected server. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the web application, virl2, on the underlying operating system of the affected server. To exploit this vulnerability, the attacker must have valid user credentials on the web UI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: http://packetstormsecurity.com/files/163265/Cisco-Modeling-Labs-2.1.1-b19-Remote-Command-Execution.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cml-cmd-inject-N4VYeQXB; http://packetstormsecurity.com/files/163265/Cisco-Modeling-Labs-2.1.1-b19-Remote-Command-Execution.html
CVE: CVE-2021-1547
Published: 2021-05-22
Description: Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper validation of user-supplied input. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the device. To exploit these vulnerabilities, the attacker must have valid administrative credentials for the device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-Mp9FSdG; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-Mp9FSdG
CVE: CVE-2021-1548
Published: 2021-05-22
Description: Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper validation of user-supplied input. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the device. To exploit these vulnerabilities, the attacker must have valid administrative credentials for the device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-Mp9FSdG; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-Mp9FSdG
CVE: CVE-2021-1549
Published: 2021-05-22
Description: Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper validation of user-supplied input. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the device. To exploit these vulnerabilities, the attacker must have valid administrative credentials for the device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-Mp9FSdG; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-Mp9FSdG