CVE-2017-3733

creationtimestamp| type| source ---|---|--- 2017-02-21 07:45:42+00:00| seen| https://t.me/webamoozir/1256 2026-07-26 07:02:09+00:00| seen| https://t.me/KaitNews/3143 2026-07-27 00:01:48+00:00| seen| https://t.me/KaitNews/3143 2026-08-05 18:00:04+00:00| seen| https://t.me/KaitNews/3143 2026-08-06...

TI Online Examination System 2.0 Admin Login Bypass Vulnerability

Exploit for php platform in category web applications --------------------------------------------------------------------------------------- + TI Online Examination System = 2.0 sql injection Admin Login Bypass -------------------------------------------------------------------------------------...

CVE-2017-5140

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text...

Solaris 10 (sparc) : 152514-02 (deprecated)

SunOS 5.10: Tomcat 6 Patch. Date this patch was last updated by Sun : Jun/15/17 This plugin has been deprecated and either replaced with individual 152514 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Kodi 17.0 Local File Inclusion Vulnerability

This module exploits a directory traversal flaw found in Kodi before 17.1. Module Options msf use auxiliary/scanner/http/kodi/traversal msf undefinedtraversal show actions ...actions... msf undefinedtraversal set ACTION msf undefinedtraversal show options ...show and set options... msf...

CVE-2017-5591

creationtimestamp| type| source ---|---|--- 2017-02-10 23:59:57+00:00| seen| https://t.me/canyoupwnme/772...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0427-1)

MozillaFirefox 45 ESR was updated to 45.7 to fix the following issues bsc1021991 : - MFSA 2017-02/CVE-2017-5378: Pointer and frame data leakage of JavaScript objects bsc1021818 - MFSA 2017-02/CVE-2017-5396: Use-after-free with Media Decoder bsc1021821 - MFSA 2017-02/CVE-2017-5386: WebExtensions c...

himeji.lover.ms XSS vulnerability

Vulnerable URL: http://himeji.lover.ms/gals.php?staffid=3830 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check himeji.lover.ms SSL connection:| Grade: F...

Schneider Electric homeLYnk Controller (Update A)

CVSS V3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Schneider Electric Equipment: homeLYnk Controller, LSS100100 Vulnerability: Cross-site Scripting, Command Injection UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-019-01...

Adobe Flash Player Heap Buffer Overflow (APSB17-02: CVE-2017-2927)

heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution...

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption (2)

Adobe Flash Player 24.0.0.186 - ActionGetURL2 Out-of-Bounds Memory Corruption 2 Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website:...

Adobe Flash Player 24.0.0.186 - 'ActionGetURL2' Out-of-Bounds Memory Corruption (2)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ Application: Adobe Flash Player Platforms: Windows,OSX Versions: 24.0.0.186 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: January 10, 2017 CVE-2017-2930 COSIG-2016-35 1...

Adobe Flash Player Heap Overflow (APSB17-02: CVE-2017-2935)

A Heap Overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

January 2017 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB17-02: CVE-2017-2925, CVE-2017-2926, CVE-2017-2927, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931, CVE-2017-2932, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935, CVE-2017-2936, CVE-2017-293...

openSUSE Security Update : otrs (openSUSE-2016-1316)

This update for otrs fixes the following security issues : - CVE-2016-9139: execution of JavaScript in OTRS context by opening malicious attachment OSA-2016-02, bsc1008017 In addition, OTRS was updated to 3.3.16, containing all upstream improvements and bug fixes. %NASLMINLEVEL 70300 C Tenable...

RedHat Update for util-linux RHSA-2016:2605-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for libreswan RHSA-2016:2603-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for postgresql RHSA-2016:2606-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

InfraPower PPS-02-S Q213V1 Cross Site Request Forgery

InfraPower PPS-02-S Q213V1 Cross-Site Request Forgery Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Summary: InfraPower Manager PPS-02-S is a FREE built-in GUI of each IP dongle IPD-02-S only to remotely monitor the...