40 matches found
CVE-2015-10008 82Flex WEIPDCRM sql injection
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The identifier of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a...
CVE-2021-0298
A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon picd process on the FPC, if the command is executed coincident with other system events outside the attacker's control, leading to a Denial...
CVE-2020-10008
CVE-2020-10008 is a logic/restrictions issue fixed in macOS Big Sur 11.0.1. The description across Apple and Red Hat sources states that a malicious application with root privileges may access private information, due to a logic issue addressed with improved restrictions and input validation. The...
CVE-2019-10008
CVE-2019-10008 affects Zoho ManageEngine ServiceDesk 9.3. The issue enables session hijacking and privilege escalation: an established guest session can be upgraded to an administrator session when the guest user submits the administrator username with an arbitrary incorrect password in a separat...
ManageEngine ServiceDesk Plus 9.3 - User Enumeration
Exploit Title: ManageEngine ServiceDesk Plus - 9.3 User enumeration vulnerability Date: 2019-03-29 Exploit Author: Operat0r Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/service-desk/download.html Version: 9.3 Tested on: Ubuntu Linux CVE :...
ManageEngine ServiceDesk Plus 9.3 User Enumeration
Exploit Title: ManageEngine ServiceDesk Plus - 9.3 User enumeration vulnerability Date: /03/29/2019 Exploit Author: Alexander Bluestein Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/service-desk/download.html Version: 9.3 Tested on: Ubuntu Lin...
Manage Engine ServiceDesk Plus 10.0 - Privilege Escalation
Manage Engine ServiceDesk Plus 10.0 - Privilege Escalation !/usr/bin/python Exploit Title: Manage Engine ServiceDesk Plus Version 10.0 Privilege Escalation Date: 30-03-2019 Exploit Author: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Vendor Homepage: www.manageengine.com Product: Service De...
Manage Engine ServiceDesk Plus 10.0 - Privilege Escalation
!/usr/bin/python Exploit Title: Manage Engine ServiceDesk Plus Version 10.0 Privilege Escalation Date: 30-03-2019 Exploit Author: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Vendor Homepage: www.manageengine.com Product: Service Desk Plus Version: 10.0 Tested On: Kali Linux CVE:...
Exploit for Session Fixation in Zohocorp Servicedesk_Plus
CVE-2019-10008 ManageEngine Service Desk Plus 9.3 Privilag...
Manage Engine ServiceDesk Plus 9.3 Privilege Escalation
!/usr/bin/python Exploit Title: Manage Engine ServiceDesk Plus Version 9.3 Privileged Account Hijacking Date: 30-03-2019 Exploit Author: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Vendor Homepage: www.manageengine.com Product: Service Desk Plus Version: 9.3 Tested On: Windows 10 64 bit CV...
CVE-2011-10008
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/mplayerm3ubof.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:51:27+00:00| seen|...
CVE-2016-10008
SQL injection vulnerability in the "Content Types Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the EXTSTRUCTUREdirection parameter...
CVE-2016-10008
CVE-2016-10008 affects dotCMS (Content Types screen) with an SQL injection in the _EXT_STRUCTURE_direction parameter. Vulnerable in dotCMS versions before 3.7.2 and 4.x before 4.1.1, allowing remote authenticated administrators to execute arbitrary SQL. Fixed in 3.7.2 and 4.1.1; remediation is up...
dotCMS SQL Injection
Title: Multiple SQL injection vulnerabilities in dotCMS 2x CVE Credit: Elar Lang / https://security.elarlang.eu Vendor/Product: dotCMS http://dotcms.com/ Vulnerability: SQL injection Vulnerable version: before 4.1.1. Theoretically would be fixed in 3.7.2 not released yet CVE: CVE-2016-10007,...
HP iMC Plat 7.2 - Remote Code Execution (2)
!/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...
CVE-2017-10008
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...
CVE-2017-10008
The CVE-2017-10008 entry concerns Oracle FLEXCUBE Private Banking (Oracle Financial Services Applications) in subcomponent Miscellaneous. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privileged attacker with network access via HTTP to read data from Oracle ...
GIMP Script-Fu Server Buffer Overflow
Added: 06/11/2012 CVE: CVE-2012-2763 BID: 53741 OSVDB: 82429 Background The GNU Image Manipulation Program GIMP is free software for tasks such as photo retouching, image composition, and image authoring. Problem The vulnerability is due improper boundary checking within the Script-Fu server...
GIMP Script-Fu Server Buffer Overflow
Added: 06/11/2012 CVE: CVE-2012-2763 BID: 53741 OSVDB: 82429 Background The GNU Image Manipulation Program GIMP is free software for tasks such as photo retouching, image composition, and image authoring. Problem The vulnerability is due improper boundary checking within the Script-Fu server...
GIMP Script-Fu Server Buffer Overflow
Added: 06/11/2012 CVE: CVE-2012-2763 BID: 53741 OSVDB: 82429 Background The GNU Image Manipulation Program GIMP is free software for tasks such as photo retouching, image composition, and image authoring. Problem The vulnerability is due improper boundary checking within the Script-Fu server...