Lucene search
+L

56 matches found

Cvelist
Cvelist
added 2020/02/20 2:33 p.m.38 views

CVE-2014-4659

Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format...

5.1AI score0.00365EPSS
SaveExploits0References2
Circl
Circl
added 2019/11/20 8:26 p.m.10 views

CVE-2010-4659

creationtimestamp| type| source ---|---|--- 2019-11-20 20:26:19+00:00| seen| https://t.me/cibsecurity/8233 2024-02-23 20:46:58+00:00| seen| https://t.me/ctinow/192153...

6.1CVSS6.1AI score0.00921EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/20 4:47 p.m.80 views

CVE-2010-4659

StatusNet (open-source PHP-based micro-blogging platform) contains a cross-site scripting (XSS) vulnerability in error message contents up through 2010. The root cause is insufficient validation of client-side data by the web application, enabling an attacker to execute client-side code via craft...

6.1CVSS6.1AI score0.00921EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/03/16 2:04 p.m.8 views

CVE-2017-4659

...

SaveExploits0
CVE
CVE
added 2018/03/16 2:04 p.m.32 views

CVE-2017-4659

CVE-2017-4659 entry is rejected and does not represent an active vulnerability.

7.3AI score
SaveExploits0
CVE
CVE
added 2017/03/14 9:02 a.m.78 views

CVE-2013-4659

CVE-2013-4659 describes a buffer overflow in Broadcom ACSD (Wireless service) that allows remote code execution via a long string sent to TCP port 5916. Affected devices include ASUS RT-AC66U and other routers using Broadcom ACSD; multiple buffer overflow vectors have been reported. Public refere...

10CVSS9.8AI score0.13918EPSS
SaveExploits8References2Affected Software1
CVE
CVE
added 2015/06/18 6:00 p.m.45 views

CVE-2015-4659

ClickHeat 1.14 and earlier is affected by a CSRF vulnerability that allows remote attackers to hijack the administrator’s session and change the administrator password via a config action to index.php. The issue is described across multiple sources (NVD/CNVD et al.) as a cross-site request forger...

6.8CVSS7.4AI score0.01138EPSS
SaveExploits2References2Affected Software1
exploitpack
exploitpack
added 2015/01/04 5:33 p.m.70 views

ASUS-RT-AC66U-acsd-Param

TitleASUS RT-AC66U Remote Root Shell Exploit - acsd param command Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy and Jacob Thompson Security Analsyts @ Independent Security Evaluators Software Vendorhttp://asus.com Exploit/Advisoryhttp://securityevaluators.com,...

10CVSS0.3AI score0.13918EPSS
SaveExploits8
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.47 views

MIPS Little Endian Shellcode

No description provided by source. Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Websit...

10CVSS9.6AI score0.13918EPSS
SaveExploits8
Exploit DB
Exploit DB
added 2013/07/27 12:00 a.m.52 views

ASUS RT-AC66U - 'acsd' Remote Command Execution

!/usr/bin/env python import signal, struct from time import sleep from socket import from sys import exit, excinfo TitleASUS RT-AC66U Remote Root Shell Exploit - acsd param command Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy and Jacob Thompson Security Analsyts @...

10CVSS8.4AI score0.13918EPSS
SaveExploits8
Exploit DB
Exploit DB
added 2013/07/27 12:00 a.m.62 views

MIPS Little Endian Shellcode

MIPS Little Endian Shellcode. CVE-2013-4659. Shellcode exploit for mips platform Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog...

10CVSS9.7AI score0.13918EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2013/07/26 12:00 a.m.49 views

ASUS RT-AC66U ACSD Remote Root Buffer Overflow

!/usr/bin/env python import signal, struct from time import sleep from socket import from sys import exit, excinfo TitleASUS RT-AC66U Remote Root Shell Exploit - acsd param command Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy and Jacob Thompson Security Analsyts @...

6.4CVSS1.1AI score0.13918EPSS
SaveExploits8
CVE
CVE
added 2012/10/29 8:00 p.m.59 views

CVE-2012-4659

The CVE-2012-4659 issue affects Cisco ASA 5500 series and ASASM on Catalyst 6500, where the AAA IPv4 SSL VPN authentication path can be abused by remote attackers to trigger a device reload (DoS) via a crafted authentication response. Affected software versions are 8.2 before 8.2(5.30) and 8.3 be...

7.1CVSS6.9AI score0.02569EPSS
SaveExploits0References3Affected Software11
OpenVAS
OpenVAS
added 2012/04/13 12:00 a.m.46 views

Fedora Update for openssl FEDORA-2012-4659

Check for the Version of openssl OpenVAS Vulnerability Test Fedora Update for openssl FEDORA-2012-4659 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS8.5AI score0.13856EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2012/04/12 12:00 a.m.37 views

Fedora 15 : openssl-1.0.0h-1.fc15 (2012-4659)

This minor update from upstream fixes two security vulnerabilities with moderate and low impact. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

5CVSS8AI score0.12932EPSS
SaveExploits0References5
CVE
CVE
added 2012/01/19 3:00 p.m.55 views

CVE-2011-4659

Cisco TelePresence TE Software on Cisco IP Video Phone E20 (upgraded to TE 4.1.0) may introduce an unsecured default root account, enabling an unauthenticated, remote attacker to log in via SSH and modify device configuration. The vulnerability arises from an incomplete disabling of the root acco...

10CVSS6.8AI score0.02072EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2011/12/25 1:00 a.m.24 views

CVE-2011-5003

Stack-based buffer overflow in the Phonetic Indexer AvidPhoneticIndexer.exe in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659...

8.1AI score0.62413EPSS
SaveExploits2References6
Packet Storm
Packet Storm
added 2011/12/03 12:00 a.m.28 views

Avid Media Composer 5.5 - Avid Phonetic Indexer Stack Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Avid Media Compos...

0.6AI score
SaveExploits0
Circl
Circl
added 2009/09/17 12:00 a.m.7 views

CVE-2009-4659

creationtimestamp| type| source ---|---|--- 2009-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9707...

4.3CVSS5.8AI score0.01883EPSS
SaveExploits1References1
CVE
CVE
added 2008/10/21 10:00 p.m.58 views

CVE-2008-4659

CVE-2008-4659 concerns the TYPO3 extension Mannschaftsliste (kiddog_playerlist) version 1.0.3 and earlier. The vulnerability is described as an SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected documents do not provide concrete exp...

7.5CVSS8.4AI score0.01051EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder