CVE-2020-10926

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of firmware updates. The issue results fro...

CVE-2020-9648

CVE-2020-9648 affects Adobe Experience Manager versions 6.5 and earlier with a cross-site scripting vulnerability that could allow arbitrary JavaScript execution in the browser when an attacker exploits it. The vulnerability is documented across multiple feeds (NVD/Red Hat/CNVD/etc.) with the sam...

Adobe Experience Manager 6.0 < 6.5 Multiple Vulnerabilities (APSB20-31)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-31 advisory. - Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery ssrf vulnerability...

CoreFTP 2.0 Build 674 SIZE - Directory Traversal (Metasploit)

class MetasploitModule 'CVE-2019-9648 CoreFTP FTP Server Version 674 and below SIZE Directory Traversal', 'Description' = %qAn issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a .......

CoreFTP Server SIZE Directory Traversal

Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Metasploit Google Dork: N/A Date: 8/20/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link: http://www.coreftp.com/server/index.html Version: Firmware: CoreFTP Server FTP ...

Core FTP Server FTP / SFTP Server v2 Build 674 - 'SIZE' Directory Traversal

Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Google Dork: N/A Date: 4/27/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link: http://www.coreftp.com/server/index.html Version: Firmware: CoreFTP Server FTP / SFTP Serv...

Core FTP Server FTP SFTP Server v2 Build 674 - SIZE Directory Traversal

Core FTP Server FTP SFTP Server v2 Build 674 - SIZE Directory Traversal Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Google Dork: N/A Date: 4/27/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link:...

Core FTP Server FTP / SFTP Server v2 Build 674 - SIZE Directory Traversal Exploit Vulnerability

Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Google Dork: N/A Date: 3/13/2019 Exploit Author: Kevin Randall Vendor Homepage: https://www.coreftp.com Software Link: http://www.coreftp.com/server/index.html Version: Firmware: CoreFTP Server FTP / SFTP Serv...

CoreFTP Server FTP / SFTP Server 2 Build 674 SIZE Directory Traversal

CVE-2019-9648 CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Discovered By: Kevin Randall Summary: By utilizing a directory traversal along with the FTP SIZE command, an attacker can browse outside the root directory to determine if a file exists based on return file siz...

CVE-2017-9648

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file...

CVE-2017-9648

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file...

CVE-2017-9648

The CVE-2017-9648 issue affects Solar Controls WATTConfig M Software, versions 2.5.10.1 and earlier. It stems from an Uncontrolled Search Path Element (CWE-427) that could allow arbitrary code execution via a malicious DLL file on the target system. Affected product: WATTConfig M Software for Win...

CVE-2017-9648

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file...

Solar Controls WATTConfig M Software

CVSS v3 7.8 ATTENTION: Low skill level to exploit. Vendor: Solar Controls Equipment: WATTConfig M Software Vulnerability: Uncontrolled Search Path Element AFFECTED PRODUCTS The following versions of Solar Controls’ WATTConfig M Software for Windows 2.5.10 for M SSR/MAX PLCs are affected: WATTConf...

CVE-2016-9648

...

CVE-2016-9648

CVE-2016-9648 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

Atlassian Confluence Server 5.9.x < 5.9.11 XSS

Binary data 9648.prm...

CVE-2014-9648

CVE-2014-9648 concerns Google Chrome before 40.0.2214.91 (Android) where intercept_navigation_resource_throttle.cc improperly restricts the use of intent: URLs to launch external apps after in-site navigation. This design flaw can let remote attackers craft JavaScript to cause a denial of service...

SuSE 11.3 Security Update : ppp (SAT Patch Number 9648)

This ppp update fixes a potential security issue that an unprivileged attacker could access privileged options : - integer overflow in option parsing CVE-2014-3158, bnc891489 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Fedora Update for springframework-security FEDORA-2014-9648

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...