Lucene search
+L

5658 matches found

OSV
OSV
added 2020/01/06 8:15 p.m.7 views

CVE-2019-16273

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the...

9.8CVSS6.3AI score0.02327EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/06 8:15 p.m.31 views

CVE-2019-16273

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the...

10CVSS9.7AI score0.02327EPSS
SaveExploits0References1
Prion
Prion
added 2020/01/06 8:15 p.m.25 views

Code injection

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the...

10CVSS9.5AI score0.02327EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/01/06 7:55 p.m.30 views

CVE-2019-16273

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge adb, leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the...

9.8AI score0.02327EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/06 7:55 p.m.107 views

CVE-2019-16273

DTEN D5/D7 devices pre-1.3.4 are vulnerable to unauthenticated root shell access via Android Debug Bridge (ADB), enabling arbitrary code execution and system administration. The issue also enables a covert ability to capture Windows Zoom Client data by executing commands on the Android OS. Affect...

10CVSS9.6AI score0.02327EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2019/12/22 2:53 p.m.104 views

BetterBackdoor - A Backdoor With A Multitude Of Features

A backdoor is a tool used to gain remote access to a machine. Typically, backdoor utilities such as NetCat have 2 main functions: to pipe remote input into cmd or bash and output the response. This is useful, but it is also limited. BetterBackdoor overcomes these limitations by including the...

7.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:00 a.m.11 views

Vulnerability of the print-rsvp.c:rsvp_obj_print() utility for capturing and analyzing network traffic with tcpdump: This utility allows a intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-rsvp.c:rsvpobjprint utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to information and compromise...

10CVSS6.5AI score0.04069EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:00 a.m.10 views

Vulnerability of the print-bgp.c:bgp_capabilities_print() function in the packet capture and analysis tool tcpdump: This function allows a malicious actor to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-bgp.c:bgpcapabilitiesprint utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to information and...

9.8CVSS6.5AI score0.03985EPSS
SaveExploits0References5Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/20 8:47 a.m.49 views

Security Bulletin: OpenSSL as used by IBM QRadar Network Packet Capture is vulnerable to (CVE-2019-1559)

Summary The software does not implement a required step in a cryptographic algorithm Vulnerability Details CVEID: CVE-2019-1559 DESCRIPTION: If an application encounters a fatal protocol error and then calls SSLshutdown twice once to send a closenotify, and once to receive one then OpenSSL can...

5.9CVSS0.9AI score0.17139EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2019/12/17 3:15 p.m.7 views

CVE-2019-16565

A cross-site request forgery vulnerability in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

8.8CVSS7.1AI score0.0064EPSS
SaveExploits0References2
OSV
OSV
added 2019/12/17 3:15 p.m.10 views

CVE-2019-16566

A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.7AI score0.00798EPSS
SaveExploits0References2
NVD
NVD
added 2019/12/17 3:15 p.m.45 views

CVE-2019-16566

A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.4AI score0.00798EPSS
SaveExploits0References2
Prion
Prion
added 2019/12/17 3:15 p.m.22 views

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Alauda DevOps Pipeline Plugin 2.3.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.8CVSS8.5AI score0.00691EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2019/12/17 3:15 p.m.30 views

Design/Logic Flaw

A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

4CVSS6.3AI score0.00798EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2019/12/17 2:40 p.m.82 views

CVE-2019-16574

CVE-2019-16574 affects the Jenkins Alauda DevOps Pipeline Plugin up to version 2.3.2. The root cause is a missing permission check that allows attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credentials IDs, thereby potentially capturing credentials st...

6.5CVSS6.2AI score0.00852EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/12/17 2:40 p.m.34 views

CVE-2019-16573

A cross-site request forgery vulnerability in Jenkins Alauda DevOps Pipeline Plugin 2.3.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

8.7AI score0.00691EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/12/17 2:40 p.m.38 views

CVE-2019-16565

A cross-site request forgery vulnerability in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

8.7AI score0.0064EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.13 views

Vulnerability in the print-icmp.c:icmp_print() utility for capturing and analyzing network traffic with tcpdump: This allows a intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-icmp.c function, specifically the icmpprint utility for capturing and analyzing network traffic using tcpdump, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to...

9.8CVSS6.5AI score0.03985EPSS
SaveExploits0References5Affected Software2
ICS
ICS
added 2019/12/12 12:00 a.m.88 views

Omron PLC CJ and CS Series

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Omron Equipment : PLC CJ and CS Series Vulnerabilities : Authentication Bypass by Spoofing, Authentication Bypass by Capture-replay, Unrestricted Externally Accessible Lock 2. UPDATE This updated...

9.8CVSS9.6AI score0.0211EPSS
SaveExploits0References5
OSV
OSV
added 2019/12/11 12:17 a.m.11 views

USN-4221-1 libpcap vulnerability

It was discovered that libpcap did not properly validate PHB headers in some situations. An attacker could use this to cause a denial of service memory exhaustion...

5.3CVSS6.6AI score0.02834EPSS
SaveExploits0References2
Rows per page
Query Builder