97 matches found
CVE-2012-0785
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...
CVE-2012-0785
Jenkins Hash DoS (CVE-2012-0785): Affected products are Jenkins versions before 1.447, LTS before 1.424.2, and CloudBees Enterprise 1.424.x before 1.424.2.1 or 1.400.x before 1.400.0.11. The vulnerability involves a hash collision that could allow remote attackers to cause substantial CPU load. N...
CVE-2012-0785
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...
CVE-2019-0785
CVE-2019-0785 is a memory-corruption vulnerability in the Microsoft Windows Server DHCP service that can allow remote code execution when an attacker sends specially crafted packets to a DHCP failover server. Affected product: Windows Server DHCP service. Root cause: memory corruption inside the ...
Patch Tuesday Lowdown, July 2019 Edition
Microsoft today released software updates to plug almost 80 security holes in its Windows operating systems and related software. Among them are fixes for two zero-day flaws that are actively being exploited in the wild, and patches to quash four other bugs that were publicly detailed prior to...
Android Bluetooth - Blueborne Information Leak (2) Exploit
Exploit for Android platform in category remote exploits from pwn import import bluetooth if not 'TARGET' in args: log.info"Usage: CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX:XX" exit target = args'TARGET' servicelong = 0x0100 serviceshort = 0x0001 mtu = 50 n = 30 def packetservice, continuationstate:...
Security Update for ASP.NET Core January 2018
The remote Windows host has an installation of ASP.NET Core and .NET Core SDK with a version less than 2.1.4. Therefore, the host is affected by multiple vulnerabilities: - An elevation of privilege vulnerability due to improper sanitization of web requests CVE-2018-0784 - A cross-site request...
CVE-2018-0785
ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability"...
BlueBorne RCE on Android 6.0.1 (CVE-2017-0781)
A few days ago, the company Armis published a proof of concept PoC of a remote code execution vulnerability in Android via Bluetooth CVE-2017-0781, known as BlueBorne. Although BlueBorne refers to a set of 8 vulnerabilities, this PoC uses only 2 of them to achieve its goal. The exploitation proce...
CVE-2017-0785
creationtimestamp| type| source ---|---|--- 2017-09-21 11:34:54+00:00| published-proof-of-concept| Telegram/uXWbA83bkLgrm1Lpx9zrg4O-3A8tEHbjY3kq8rHpZ1R1s 2017-09-21 22:28:34+00:00| exploited| https://t.me/informationsecuritychannel/9152 2019-05-02 02:37:41+00:00| exploited|...
Android Bluetooth - 'Blueborne' Information Leak (2)
from pwn import import bluetooth if not 'TARGET' in args: log.info"Usage: CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX:XX" exit target = args'TARGET' servicelong = 0x0100 serviceshort = 0x0001 mtu = 50 n = 30 def packetservice, continuationstate: pkt = '\x02\x00\x00' pkt += p167 + lencontinuationstate...
Android Bluetooth - Blueborne Information Leak (2)
Android Bluetooth - Blueborne Information Leak 2 from pwn import import bluetooth if not 'TARGET' in args: log.info"Usage: CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX:XX" exit target = args'TARGET' servicelong = 0x0100 serviceshort = 0x0001 mtu = 50 n = 30 def packetservice, continuationstate: pkt =...
CVE-2017-0785
A information disclosure vulnerability in the Android system bluetooth. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698...
CVE-2017-0785
CVE-2017-0785 is an Android Bluetooth SDP information-disclosure vulnerability in the Bluetooth stack. The SDP server can leak memory/allow an out-of-bounds read by manipulating the SDP continuation state in requests, enabling information disclosure. Affected Android versions include 4.4.4–8.0 (a...
CVE-2017-0785
A information disclosure vulnerability in the Android system bluetooth. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698...
Multiple Bluetooth implementation vulnerabilities affect many devices
Overview A collection of Bluetooth implementation vulnerabilities known as "BlueBorne" has been released. These vulnerabilities collectively affect Windows, iOS, and Linux-kernel-based operating systems including Android and Tizen, and may in worst case allow an unauthenticated attacker to perfor...
CVE-2015-0785
The CVE-2015-0785 issue affects Novell ZENworks Configuration Management (ZCM), specifically the DirectoryViewer path handling in com.novell.zenworks.inventory.rtr.actionclasses.wcreports. The root cause is a failure to sanitize the dirname variable, enabling a remote attacker to read arbitrary f...
CVE-2014-0785
CVE-2014-0785 entry is rejected and not used.
SOL17588029 - Apache Struts vulnerabilities CVE-2016-0785, CVE-2016-2162, CVE-2016-3081, CVE-2016-3082, and CVE-2016-4003
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...