40 matches found
OpenEMR 5.0.1 Remote Code Execution Exploit
Exploit for php platform in category web applications !/usr/bin/env ruby Title: OpenEMR --shell --user --password --debug FILE semi-auto --root-url --user --password --payload --lhost --lport --debug FILE auto --root-url --user --password --lhost --lport --debug FILE -H | --help Options: -r ,...
CVE-2019-7077
creationtimestamp| type| source ---|---|--- 2019-05-24 19:48:09+00:00| seen| https://t.me/cvemitreorg/334...
CVE-2019-7077
CVE-2019-7077 affects Adobe Acrobat and Reader: versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier. It is a use-after-free vulnerability that could lead to arbitrary code execution on successful exploitation. The available sources (NVD/Red Hat/Nessus e...
CVE-2019-7077
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...
Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)
The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...
Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-7077
creationtimestamp| type| source ---|---|--- 2018-09-10 18:18:36+00:00| seen| https://t.me/cibsecurity/99...
CVE-2016-7077
CVE-2016-7077 affects Foreman prior to version 1.14.0, where the form helper does not authorize options for associated objects. This information disclosure allows an unauthorized user to see the names of those objects when their count is less than six. The vulnerability is documented with CVSS sc...
CVE-2018-7077
A security vulnerability in HPE XP P9000 Command View Advanced Edition CVAE Device Manager DevMgr 8.5.0-00 and prior to 8.6.0-00, Configuration Manager CM 8.5.0-00 and prior to 8.6.0-00 could be exploited to allow local and remote unauthorized access to sensitive information...
CVE-2018-7077
The CVE-2018-7077 entry describes an information-disclosure vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager and Configuration Manager: DevMgr 8.5.0-00 and earlier, CM 8.5.0-00 and earlier, up to 8.6.0-00. Exploitation could allow local and remote unauthorized acc...
CVE-2017-7077
CVE-2017-7077 involves memory corruption in IOFireWireFamily on macOS before 10.13, enabling a crafted app to execute arbitrary code in a privileged context or cause a memory corruption DoS. Exploitation is local and requires user interaction. Affected product: macOS/IOFireWireFamily. Root cause:...
CVE-2015-7077
creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39368...
CVE-2015-7077
Affected software: Apple macOS with Intel Graphics Driver prior to 10.11.2. Root cause: out-of-bounds memory access in the Intel Graphics Driver component. Impact: local privilege escalation or denial of service. Exploitation: public exploit exists (Exploit-DB entry) per CIRCL sighting, indicatin...
CVE-2015-7077
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service out-of-bounds memory access via unspecified vectors...
CVE-2014-7077
CVE-2014-7077 affects the Gulf Coast Educators FCU Android app (package com.metova.cuae.gcefcu) version 1.0.27. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate...
CVE-2013-7077
Cross-site scripting XSS vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 7077)
This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues : - Various unspecified and undocumented vulnerabilities that allows remote attackers to affect confidentiality, integrity and availability via various unknown vectors. CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 /...
CVE-2008-7077
CVE-2008-7077 affects SailPlanner version 0.3a. Multiple SQL injection vulnerabilities exist in the login workflow, allowing remote attackers to inject SQL through the username and password fields. The NVD entry notes a base score of 7.5 (HIGH) with network attack vector and low attack complexity...