Lucene search
+L

19 matches found

Circl
Circl
•added 2024/03/17 11:41 a.m.•14 views

CVE-2019-16781

creationtimestamp| type| source ---|---|--- 2024-03-17 11:41:30+00:00| seen| https://t.me/ctinow/209872...

5.8CVSS6.7AI score0.01612EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2024/01/30 12:00 a.m.•4 views

VulnCheck KEV: CVE-2024-22770

Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

7.5CVSS7.1AI score0.00496EPSS
SaveIn wildExploits0References2
OSV
OSV
•added 2024/01/23 5:15 a.m.•15 views

CVE-2024-22770

Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

7.5CVSS7.1AI score0.00496EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/23 4:42 a.m.•66 views

CVE-2024-22770

A vulnerability exists in Hitron Systems DVR HVR-16781 (versions 1.03 through 4.02) due to improper input validation (CWE-20 ). If default administrative credentials are used, an attacker can exploit this flaw to cause a denial-of-service condition or perform a network attack. While some sources ...

7.5CVSS7.4AI score0.00496EPSS
SaveIn wildExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/01/23 4:42 a.m.•43 views

CVE-2024-22770 Hitron Systems DVR HVR-16781 Improper Input Validation Vulnerability

Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

7.4CVSS7.6AI score0.00496EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/01/23 12:00 a.m.•12 views

Hitron Systems DVR HVR-16781 Security Vulnerability

Hitron Systems DVR is a digital video recorder from Hitron Systems, a South Korean company. A security vulnerability exists in Hitron Systems DVR HVR-16781 versions 1.03 through 4.02, which stems from incorrect input validation. An attacker could exploit the vulnerability to trigger a cyber attac...

7.5CVSS6.7AI score0.00496EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/23 12:00 a.m.•2 views

CVE-2024-22770: Improper Input Validation

Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

7.5CVSS7.2AI score0.00496EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/22 12:00 a.m.•16 views

PT-2024-19556

Name of the Vulnerable Software and Affected Versions Hitron Systems DVR HVR-16781 versions 1.03 through 4.02 Description The issue is related to improper input validation, which allows an attacker to cause a network attack when using the default admin ID and password. Recommendations For version...

7.5CVSS7.6AI score0.00496EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2021/12/20 10:51 p.m.•17 views

CVE-2020-16781

...

SaveExploits0
CVE
CVE
•added 2021/12/20 10:51 p.m.•32 views

CVE-2020-16781

CVE-2020-16781 is rejected/not used per the initial description.

6.7AI score
SaveExploits0
Debian
Debian
•added 2020/01/08 5:47 a.m.•154 views

[SECURITY] [DSA 4599-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4599-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 08, 2020 https://www.debian.org/security/faq -...

7.5CVSS1.1AI score0.36503EPSS
SaveExploits10
Cvelist
Cvelist
•added 2019/12/26 5:00 p.m.•45 views

CVE-2019-16781 Stored cross-site scripting (XSS) in WordPress block editor

In WordPress before 5.3.1, authenticated users with lower privileges like contributors can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admin opening the affected post in the editor leading to XSS...

5.8CVSS7.2AI score0.01612EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2019/12/26 5:00 p.m.•58 views

CVE-2019-16781

In WordPress before 5.3.1, authenticated users with lower privileges like contributors can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admin opening the affected post in the editor leading to XSS...

5.8CVSS4.7AI score0.01612EPSS
SaveExploits0
CVE
CVE
•added 2019/12/26 5:00 p.m.•168 views

CVE-2019-16781

WordPress CVE-2019-16781 affects WordPress versions before 5.3.1. Authenticated users with low privileges (e.g., contributors) can inject JavaScript in the block editor, which runs in the admin dashboard and can lead to an admin opening the affected post in the editor, enabling XSS. Remediation: ...

5.8CVSS5.7AI score0.01612EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2018/09/10 4:00 a.m.•49 views

CVE-2018-16781

CVE-2018-16781 affects the ffjpeg library (ffjpeg.dll). Affected: ffjpeg versions prior to 2018-08-22. Vulnerability: processing a progressive JPEG file that lacks an AC Huffman table can trigger a denial of service (FPE signal). Impact: remote attackers can cause DoS via crafted images. Root cau...

6.5CVSS6.3AI score0.01325EPSS
SaveExploits0References1Affected Software1
zdt
zdt
•added 2017/11/21 12:00 a.m.•65 views

MyBB 1.8.13 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: XSS in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16781 No HTML escaping when returning an...

3.5CVSS5.8AI score0.01581EPSS
SaveExploits4
exploitpack
exploitpack
•added 2017/11/11 12:00 a.m.•49 views

MyBB 1.8.13 - Cross-Site Scripting

MyBB 1.8.13 - Cross-Site Scripting Exploit Title: XSS in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16781 No HTML escaping when returning an $error in...

3.5CVSS5.4AI score0.01581EPSS
SaveExploits4
Circl
Circl
•added 2017/11/11 12:00 a.m.•27 views

CVE-2017-16781

creationtimestamp| type| source ---|---|--- 2017-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43137...

5.4CVSS6.8AI score0.01581EPSS
SaveExploits4References1
CVE
CVE
•added 2017/11/10 11:00 p.m.•72 views

CVE-2017-16781

MyBB before 1.8.13 is vulnerable to a cross-site scripting (XSS) flaw in the installer. The issue arises from missing HTML escaping of the $error variable in /install/index.php (POST path), enabling an attacker-controlled payload to execute in the victim’s browser. A PoC demonstrates injecting HT...

5.4CVSS5.4AI score0.01581EPSS
SaveExploits4References2Affected Software1
Rows per page
Query Builder