Nimsoft nimcontroller 7.80 Remote Code Execution Exploit

/ Exploit Title : Sing About Me, I'm Dying Of Thirst Exploit Author : wetw0rk Exploit Version : Public POC CVE : CVE-2020-8012 Vendor Homepage : https://docops.ca.com/ca-unified-infrastructure-management/9-0-2/en Software Version : 7.80 Tested on : Windows 10 Pro x64, Windows Server 2012 R2...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2020:0497-1)

This update for python3 fixes the following issues : Update to 3.4.10 jscSLE-9427, bsc1159208 from 3.4.6 : Security issues fixed : Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063 CVE-2017-1000158: Fix an...

PhpIX 2012 Professional - id SQL Injection

PhpIX 2012 Professional - id SQL Injection Title: PhpIX 2012 Professional - 'id' SQL Injection Date: 2020-02-26 Author: indoushka Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit Vendor : http://www.allhandsmarketing.com/ poc : + Dorking İn Google Or Other Search...

PhpIX 2012 Professional - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Title: PhpIX 2012 Professional - 'id' SQL Injection Author: indoushka Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit Vendor : http://www.allhandsmarketing.com/ poc : + Dorking İn Google Or Other Search Enggine. +...

PhpIX 2012 Professional (Beta) SQL Injection

==================================================================================================================================== | Title : PhpIX 2012 Professional Beta SQL Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

CVE-2012-0785

creationtimestamp| type| source ---|---|--- 2020-02-24 20:37:19+00:00| seen| https://t.me/cibsecurity/10048...

CVE-2012-0785

Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...

CVE-2012-0785

Jenkins Hash DoS (CVE-2012-0785): Affected products are Jenkins versions before 1.447, LTS before 1.424.2, and CloudBees Enterprise 1.424.x before 1.424.2.1 or 1.400.x before 1.400.0.11. The vulnerability involves a hash collision that could allow remote attackers to cause substantial CPU load. N...

CVE-2012-0785

Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...

CVE-2012-1093

creationtimestamp| type| source ---|---|--- 2020-02-21 22:52:21+00:00| seen| https://t.me/cibsecurity/10025...

CVE-2012-0828

creationtimestamp| type| source ---|---|--- 2020-02-21 20:52:05+00:00| seen| https://t.me/cibsecurity/10020...

CVE-2012-0844

creationtimestamp| type| source ---|---|--- 2020-02-21 20:52:04+00:00| seen| https://t.me/cibsecurity/10019...

CVE-2012-0063

creationtimestamp| type| source ---|---|--- 2020-02-21 18:52:20+00:00| seen| https://t.me/cibsecurity/10009...

CVE-2012-1093

The CVE-2012-1093 entry identifies a vulnerability in the Debian x11-common init script prior to version 1:7.6+12, where a symlink attack during package installation can lead to privilege escalation. Affected software: Debian x11-common package; vulnerable component: init script; root cause: syml...

CVE-2012-1093

The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation...

CVE-2012-0844

Technical details about CVE-2012-0844 are not publicly provided in the supplied documents; monitor for updates.

CVE-2012-0828

CVE-2012-0828: A heap-based buffer overflow in Xchat-WDK before 1499-4 (Xchat 2.8.6 on Maemo) could allow remote attackers to crash the client or execute arbitrary code via a UTF-8 line from the server containing characters outside the BMP.

CVE-2012-0828

Removed by vendor...

CVE-2012-6277

CVE-2012-6277 concerns multiple vulnerabilities in Autonomy KeyView IDOL libraries used by IBM Notes/Domino, Symantec messaging/security products, and others. The issue arises from underlying memory-corruption flaws in KeyView IDOL, triggered by processing crafted input files, potentially enablin...

CVE-2012-0063

The CVE-2012-0063 entry concerns tucan up to version 0.3.10, where an insecure plugin update mechanism can enable remote attackers to perform man-in-the-middle attacks and execute arbitrary code with the user’s privileges. The affected component is the plugin update process; root cause is lack of...