Lucene search
+L

5058 matches found

CNVD
CNVD
•added 2020/08/13 12:00 a.m.•6 views

SQL injection vulnerability in the ne***.asp page of the website building system of Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. station-building system ne.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/08/12 12:00 a.m.•8 views

SQL injection vulnerability in ne***_vi***.asp page of website building system of Ruian City Business Enterprise Network Technology Co.

Ruian Business Enterprise Network Technology Co., Ltd. is a high-tech enterprise dedicated to the design and production of enterprise and commercial websites, to improve the level of SMEs' network marketing applications, and to enhance the comprehensive competitiveness of enterprises in the...

7.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/08/11 8:38 p.m.•20 views

dotnet: ASP.NET Core Resource Consumption Denial of Service

A flaw was found in ASP.NET Core. Client disconnects were not properly handled in all circumstances. A remote, unauthenticated attacker could send specially crafted requests that would consume more disk and CPU resources than necessary potentially leading to a denial of service via resource...

7.5CVSS5.7AI score0.06561EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/08/11 8:31 p.m.•19 views

dotnet: ASP.NET Core Resource Consumption Denial of Service

A flaw was found in ASP.NET Core. Client disconnects were not properly handled in all circumstances. A remote, unauthenticated attacker could send specially crafted requests that would consume more disk and CPU resources than necessary potentially leading to a denial of service via resource...

7.5CVSS5.7AI score0.06561EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/08/10 12:00 a.m.•4 views

SQL injection vulnerability in im***.asp page of website building system of Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system im.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/08/06 12:00 a.m.•9 views

SQL injection vulnerability in website builder system ne***.asp page of Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is an Internet technology service provider. A SQL injection vulnerability exists in the ne.asp page of the website building system of Hanzhong Qiyuan Power Network Co. An attacker can exploit the vulnerability to obtain sensitive information from the databa...

7.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/07/17 2:49 p.m.•19 views

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

7.8CVSS7.9AI score0.93966EPSS
SaveExploits10References5
CNVD
CNVD
•added 2020/07/17 12:00 a.m.•9 views

SQL injection vulnerability in sh***.asp page of website building system of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/07/17 12:00 a.m.•12 views

SQL injection vulnerability in pr***.asp page of Changzhou OceanX Network Technology Co.

Changzhou Oceanus Network Technology Co., Ltd. is a company in Changzhou to provide website construction, web design, web production, network promotion, electronic sample production, enterprise post office and other Internet services company, for enterprises to provide, including web hosting,...

7.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/07/15 11:08 a.m.•16 views

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

7.8CVSS7.9AI score0.93966EPSS
SaveExploits10References5
RedHat Linux
RedHat Linux
•added 2020/07/15 11:06 a.m.•19 views

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

7.8CVSS7.9AI score0.93966EPSS
SaveExploits10References5
zdt
zdt
•added 2020/07/10 12:00 a.m.•206 views

HelloWeb 2.0 - Arbitrary File Download Vulnerability

Exploit for asp platform in category web applications Exploit Title: HelloWeb 2.0 - Arbitrary File Download Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps ...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/07/10 12:00 a.m.•252 views

HelloWeb 2.0 - Arbitrary File Download

Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/07/10 12:00 a.m.•198 views

HelloWeb 2.0 Arbitrary File Download

Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2020/07/08 12:00 a.m.•10 views

SQL injection vulnerability in the ne***.asp page of website building system of Yixing Ding.com Network Service Co.

Yixing Ding.com Network Service Co., Ltd. is a network technology company engaged in enterprise Internet access, web hosting, system cabling and other services. There is a SQL injection vulnerability in the ne.asp page of the website building system of Yixing Ding.com Network Service Co. Ltd. whi...

7.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/06/25 12:00 a.m.•26 views

Microsoft SharePoint Server 2013 < 15.0.5249.1001 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication...

8.8CVSS7.9AI score0.69303EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
•added 2020/06/25 12:00 a.m.•79 views

Microsoft SharePoint Server 2019 < 16.0.10359.20000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application...

8.8CVSS7.4AI score0.05182EPSS
SaveExploits1References24
Tenable Nessus
Tenable Nessus
•added 2020/06/25 12:00 a.m.•31 views

Microsoft SharePoint Server 2013 < 15.0.5241.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application...

8.8CVSS7.4AI score0.05182EPSS
SaveExploits1References24
CNVD
CNVD
•added 2020/06/09 12:00 a.m.•6 views

SQL injection vulnerability in ne***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co. Shijiazhuang Baicheng Network Technology Co., Ltd. building system ne.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/06/09 12:00 a.m.•10 views

SQL injection vulnerability in ab***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co. Shijiazhuang Baicheng Network Technology Co., Ltd. building system ab.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
Rows per page
Query Builder