CVE-2020-7007

CVE-2020-7007 affects Moxa EDS-G516E and EDS-510E Ethernet switches with firmware version 5.2 or lower. It describes a stack-based buffer overflow that may allow an attacker to execute arbitrary code or cause a device outage. The vulnerability is rated CRITICAL (CVSS v3.1 base score 9.8, network ...

CVE-2019-7007

A directory traversal vulnerability has been found in the Avaya Equinox ManagementiViewversions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server...

CVE-2019-7007

CVE-2019-7007 is a directory traversal vulnerability in Avaya Equinox Management (iView) versions R9.1.9.0 and earlier. The context from connected documents confirms a path traversal issue that could allow an unauthenticated attacker to access files outside the restricted directory on the remote ...

CVE-2019-7007 Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability

A directory traversal vulnerability has been found in the Avaya Equinox ManagementiViewversions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server...

CVE-2018-7007

CVE-2018-7007 is rejected/not used and does not represent an active vulnerability entry.

Apple iOS < 10.3.3 Multiple Vulnerabilities

Binary data appleios1033check.nbin...

CVE-2017-7007

CVE-2017-7007 affects iOS prior to 10.3.3, specifically the EventKitUI component. The Apple security content confirms a resource exhaustion issue that can cause an unexpected termination/resource consumption (DoS) when processing input, addressed by improved input validation. Remediation: update ...

CVE-2016-7007

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-7007

Technical details for CVE-2016-7007 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2015-7007

creationtimestamp| type| source ---|---|--- 2015-10-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38535 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safariuserassistedapplescriptexec.rb 2025-02-06...

Safari User-Assisted Applescript Exec Attack Exploit

Exploit for macOS platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Safari User-Assisted Applescript Exec Attack', 'Description' = %q In versions...

Apple Safari - User-Assisted Applescript Exec Attack (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Safari User-Assisted Applescript Exec Attack', 'Description' = %q In versions of Mac OS X before 10.11.1, the applescript:// URL...

CVE-2015-7007

CVE-2015-7007 affects Apple OS X Script Editor prior to 10.11.1. The vulnerability allows remote attackers to bypass the intended user confirmation for AppleScript execution via unspecified vectors, enabling arbitrary AppleScript execution without user approval. Impact, per sources, is partial co...

Safari User-Assisted Applescript Exec Attack

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Safari User-Assisted Applescript Exec Attack', 'Description' = %q In versions of Mac OS X before 10.11.1, the applescript:// URL...

Safari User-Assisted Applescript Exec Attack

In versions of Mac OS X before 10.11.1, the applescript:// URL scheme is provided, which opens the provided script in the Applescript Editor. Pressing cmd-R in the Editor executes the code without any additional confirmation from the user. By getting the user to press cmd-R in Safari, and by...

CVE-2014-7007

The CVE-2014-7007 entry concerns the Master Mix Android app (package com.nobexinc.wls_24832536.rc), version 3.3.5, which fails to verify X.509 certificates when connecting to SSL servers. This insecure behavior allows man‑in‑the‑middle attackers to spoof servers and obtain sensitive information v...

CVE-2008-7007

CVE-2008-7007 affects Free PHP VX Guestbook 1.06. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the admin_name and admin_pass cookies to 1. The root cause is improper cookie handling that accepts these values as valid credentials, ena...

CVE-2008-7007

creationtimestamp| type| source ---|---|--- 2008-09-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6457...

CVE-2006-7007

CVE-2006-7007 describes a buffer overflow in Tiny FTPd (versions 1.4 and earlier) that can cause a denial of service (daemon crash) by sending a long USER command. The vulnerability affects Tiny FTPd’s handling of USER and is separate from CVE-2000-0133. Public references exist (SecurityVulns: Ti...