Lucene search
+L

73 matches found

OSV
OSV
added 2018/07/11 9:7 p.m.3 views

MGASA-2018-0310 Updated nikto packages fix security vulnerability

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report CVE-2018-11652...

10CVSS9.6AI score0.24727EPSS
SaveExploits5References3
Mageia
Mageia
added 2018/07/11 9:7 p.m.19 views

Updated nikto packages fix security vulnerability

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report CVE-2018-11652...

10CVSS4.9AI score0.24727EPSS
SaveExploits5References2
Check Point Advisories
Check Point Advisories
added 2018/06/20 12:0 a.m.48 views

Nikto CSV Injection Remote Code Execution (CVE-2018-11652)

A CSV Injection Vulnerability exists in Nikto 2.1.6. A successful attacker could inject arbitrary OS command directly into a CSV report. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS5.5AI score0.24727EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2018/06/20 12:0 a.m.19 views

Fedora Update for nikto FEDORA-2018-15bf411a32

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.24727EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2018/06/20 12:0 a.m.19 views

Fedora Update for nikto FEDORA-2018-5f30937bed

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.24727EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2018/06/20 12:0 a.m.25 views

Fedora 27 : 1:nikto (2018-15bf411a32)

Security fix for CVE-2018-11652 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

10CVSS8.2AI score0.24727EPSS
SaveExploits5References2
0day.today
0day.today
added 2018/06/18 12:0 a.m.80 views

Nikto 2.1.6 - CSV Injection Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on:...

9.3AI score0.24727EPSS
SaveExploits5
Debian CVE
Debian CVE
added 2018/06/01 3:0 p.m.57 views

CVE-2018-11652

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report...

10CVSS9.6AI score0.24727EPSS
SaveExploits5
CVE
CVE
added 2018/06/01 3:0 p.m.91 views

CVE-2018-11652

CVE-2018-11652 affects Nikto up to version 2.1.6 (and earlier) and is triggered by a CSV injection in the Server header of HTTP responses, allowing a remote attacker to inject arbitrary OS commands into CSV reports. The vulnerability primarily impacts Nikto’s CSV report generation and has been de...

10CVSS9.4AI score0.24727EPSS
SaveExploits5References2Affected Software1
NVD
NVD
added 2017/08/18 5:29 p.m.11 views

CVE-2017-11652

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file...

8.4CVSS8.2AI score0.00411EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/18 5:29 p.m.6 views

CVE-2017-11652

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file...

8.4CVSS5.8AI score0.00411EPSS
SaveExploits0References1
CVE
CVE
added 2017/08/18 5:0 p.m.45 views

CVE-2017-11652

Razer Synapse 2.20.15.1104 and earlier suffer weak permissions on the CrashReporter directory, enabling local attackers to gain privileges by dropping a malicious dbghelp.dll. Affected component: CrashReporter handling in Razer Synapse; root cause: insecure directory permissions facilitating DLL ...

8.4CVSS8.1AI score0.00411EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2016/06/04 2:10 p.m.14 views

videoblocks.com XSS vulnerability

Vulnerable URL: https://www.videoblocks.com/join/activate/0?fname=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11652 VIP website status:| Yes Check videoblocks.com SSL...

6.3AI score
SaveExploits0
Rows per page
Query Builder