Lucene search
+L

335 matches found

CNVD
CNVD
added 2017/07/03 12:0 a.m.5 views

Tor Protection Selection Algorithm Vulnerability

Tor is free software that enables anonymous communication. A vulnerability in the guard selection algorithm exists in Tor 0.3.0.9 prior to version 0.3.x. A remote attacker could exploit this vulnerability to compromise the intended anonymity properties...

7.5CVSS6.9AI score0.02446EPSS
SaveExploits0References1
NVD
NVD
added 2017/07/02 3:29 p.m.31 views

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

7.5CVSS7.5AI score0.02446EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2017/07/02 3:29 p.m.25 views

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

7.5CVSS6.8AI score0.02446EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2017/07/02 3:0 p.m.34 views

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

7.4AI score0.02446EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2017/07/02 3:0 p.m.50 views

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

7.5CVSS7.5AI score0.02446EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2016/04/21 12:0 a.m.23 views

CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...

5.5CVSS6.7AI score0.02113EPSS
SaveExploits0References2
Debian
Debian
added 2016/01/26 9:37 p.m.69 views

[SECURITY] [DLA 403-1] radicale security update

Package : radicale Version : 0.3-2+deb6u1 CVE ID : CVE-2015-8747 CVE-2015-8748 Debian Bug : 809920 Several issues have been discovered by Unrud in Radicale, a calendar and addressbook server. A remote attacker could exploit these vulnerabilities and call arbitrary functions by sending crafted HTT...

10CVSS8.2AI score0.02945EPSS
SaveExploits0
NVD
NVD
added 2015/10/29 8:59 p.m.26 views

CVE-2015-5285

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the camefrom parameter to admin/login...

5CVSS6.8AI score0.06039EPSS
SaveExploits6References4
PyPA
PyPA
added 2015/10/29 8:59 p.m.8 views

PYSEC-2015-13

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the camefrom parameter to admin/login...

5CVSS7.6AI score0.06039EPSS
SaveExploits6References5Affected Software1
OSV
OSV
added 2015/10/29 8:59 p.m.19 views

PYSEC-2015-13

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the camefrom parameter to admin/login...

5CVSS5.2AI score0.06039EPSS
SaveExploits6References5
n0where
n0where
added 2015/03/31 7:10 a.m.38 views

Open Source Whistleblower Platform: SecureDrop

SecureDrop an open source whistleblower submission system SecureDrop is an open-source software platform for secure communication between journalists and sources whistleblowers.It was originally designed and developed by Aaron Swartz and Kevin Poulsen under the name DeadDrop. After Aaron Swartz’s...

6.7AI score
SaveExploits0References46
CNVD
CNVD
added 2015/02/27 12:0 a.m.7 views

Multiple Vulnerabilities in UberFire Framework

UberFire Framework is a rich client platform architecture software. The software supports high-availability deployments. An arbitrary code execution and file read vulnerability exists in UberFire Framework version 0.3.x, which stems from the program failing to properly restrict paths. A remote...

6.8CVSS8.1AI score0.03101EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2015/02/19 6:30 p.m.41 views

CMSmap - Scanner to detect security flaws of the most popular CMSs (WordPress, Joomla and Drupal)

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs. The main purpose of CMSmap is to integrate common vulnerabilities for different types of CMSs in a single tool. At the moment, CMSs supported by CMSmap are WordPress, Joomla...

7.8AI score
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2014/08/01 12:0 a.m.15 views

WP-Cal 0.3 - editevent.php SQL Injection

The wp-cal WordPress plugin was affected by an editevent.php SQL Injection security vulnerability...

7.5CVSS2.6AI score0.02742EPSS
SaveExploits2References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.33 views

pc_cookbook Mambo Component <= 0.3 Include Vulnerability

No description provided by source. --------------------------------------------------------------------------------- pccookbook Joomla Component = v0.3 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

WordPress oQey Headers plugin <= 0.3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress oQey Headers plugin = 0.3 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/oqey-headers.0.3.zip Version: 0.3 tested Note:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

Pickle 0.3 Download.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22703/info picKLE is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

wPortfolio <= 0.3 - Remote Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl Name: wPortfolio = 0.3 Arbitrary File Upload Exploit Script Name: wPortfolio 0.3 Download: http://sourceforge.net/project/downloading.php?groupid=244834&usemirror=kent&filename=wPortfolio.zip&80791070 Vulnerability: Arbitrary File Upload Vulnerabl...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

tinyBB <= 0.3 - Remote (Include / SQL Injection) Vulnerabilities

No description provided by source. tinyBB = 0.3 Multiple Remote Vulnerabilities Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on tinyBB = 0.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=33...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

mini-pub 0.3 (lfd/ce) Multiple Vulnerabilities

No description provided by source. mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local...

7.1AI score
SaveExploits0
Rows per page
Query Builder