30338 matches found
Microsoft Scripting Engine 缓冲区错误漏洞
Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...
KB5004951: Windows 7 and Windows Server 2008 R2 OOB Security Update RCE (July 2021)
A remote command execution vulnerability exists in Windows Print Spooler service improperly performs privileged file operations. An authenticated, remote attacker can exploit this to bypass and run arbitrary code with SYSTEM privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
KB5004959: Windows Server 2008 OOB Security Update RCE (July 2021)
A remote command execution vulnerability exists in Windows Print Spooler service improperly performs privileged file operations. An authenticated, remote attacker can exploit this to bypass and run arbitrary code with SYSTEM privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2008-1879
CVE-2008-1879 entry is rejected/not used; this candidate was withdrawn by its CNA.
July 6, 2021—KB5004955 (Monthly Rollup) Out-of-band
None None...
July 6, 2021—KB5004951 (Security-only update) Out-of-band
None None...
July 6, 2021—KB5004959 (Security-only update) Out-of-band
None None...
July 6, 2021—KB5004953 (Monthly Rollup) Out-of-band
None None...
Exploit for CVE-2021-1675
CVE-2021-1675-LPE-EXP Simple LPE Exploit of CVE-2021-1675...
CVE-2020-17759
An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the user clicks on a specially crafted URL. AKA: WINNOTE-19941...
Adobe ColdFusion 8 Remote Command Execution
Exploit Title: Adobe ColdFusion 8 - Remote Command Execution RCE Google Dork: intext:"adobe coldfusion 8" Date: 24/06/2021 Exploit Author: Pergyz Vendor Homepage: https://www.adobe.com/sea/products/coldfusion-family.html Version: 8 Tested on: Microsoft Windows Server 2008 R2 Standard CVE :...
SUSE SLED15 / SLES15 Security Update : python-rsa (SUSE-SU-2021:2008-1)
The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2008-1 advisory. - CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext bsc1172389 Tenable has extracted the...
Exploit for Use After Free in Microsoft
CVE-2019-0708 POC-CVE-2019-0708 Microsoft Windows 7 for 32-bi...
CVE-2020-22203
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...
Sql injection
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...
Design/Logic Flaw
phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php...
CVE-2020-22203
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...
CVE-2020-22201
In the provided documents, the affected software is phpcMS 2008 sp4. The vulnerability arises in the yp/product.php endpoint, where the pagesize parameter can be exploited by remote malicious users to execute arbitrary PHP commands (command injection). The root cause is improper handling of the p...