Lucene search
+L

600 matches found

GithubExploit
GithubExploit
added 2023/10/12 8:45 a.m.324 views

Exploit for Path Traversal in Fit2Cloud Jumpserver

CVE-2023-42819 CVE-2023-42819 Description of the Vulne...

8.9CVSS7.5AI score0.05404EPSS
Exploits4
SUSE CVE
SUSE CVE
added 2023/02/15 4:2 a.m.3 views

SUSE CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS7AI score0.01491EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2023/01/28 12:0 a.m.35 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0032-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0032-1 advisory. - Use after free in WebTransport. CVE-2023-0471 - Use after free in WebRTC. CVE-2023-0472 - Type Confusion in ServiceWorker API. CVE-2023-0473 -...

8.8CVSS8.3AI score0.00736EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2022/12/09 12:0 a.m.42 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10236-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10236-1 advisory. - Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS8.6AI score0.15983EPSS
Exploits2References4
GithubExploit
GithubExploit
added 2022/07/22 5:48 a.m.235 views

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131poc-exp-zabbix CVE-2022-23131 Vulnerability Ba...

9.8CVSS7.5AI score0.95683EPSS
Exploits9
GithubExploit
GithubExploit
added 2022/07/22 5:48 a.m.443 views

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131poc-exp-zabbix CVE-2022-23131 Vulnerability Ba...

9.8CVSS7.5AI score0.95683EPSS
Exploits9
Kitploit
Kitploit
added 2021/09/23 8:30 p.m.91 views

JSPanda - Client-Side Prototype Pullution Vulnerability Scanner

JSpanda is client-side prototype pollution vulnerability scanner. It has two key features, scanning vulnerability the supplied URLs and analyzing the JavaScript libraries' source code. However, JSpanda cannot detect advanced prototype pollution vulnerabilities. How JSPanda works? Uses multiple...

7.2AI score
Exploits0References7
Kitploit
Kitploit
added 2020/10/07 11:30 a.m.112 views

GHunt - Investigate Google Accounts With Emai

GHunt is an OSINT tool to extract a lot of informations of someone's Google Account email. It can currently extract : Owner's name Last time the profile was edited Google ID If the account is an Hangouts Bot Activated Google services Youtube, Photos, Maps, News360, Hangouts, etc. Possible Youtube...

6.7AI score
Exploits0References1
Kitploit
Kitploit
added 2020/09/21 11:30 a.m.51 views

Moriarty-Project - This Tool Gives Information About The Phone Number That You Entered

What IS Moriarty? Advanced Information Gathering And Osint Tool Moriarty is a tool that tries to find good information about the phone number that you provieded; -Tries To Find Owner Of The Number -Tries To Find Risk Level Of The Number -Tries To Find Location,Time Zone Of The Number,Carrier -Tri...

7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 4:14 p.m.34 views

Downloads Resources over HTTP in windows-latestchromedriver

Affected versions of windows-latestchromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.4AI score0.01682EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/09/01 4:11 p.m.10 views

GHSA-J9Q7-3RHF-4PPV windows-selenium-chromedriver downloads Resources over HTTP

Affected versions of windows-selenium-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

8.1CVSS8.1AI score0.01752EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.4 views

The vulnerability of the ChromeDriver component of the Google Chrome browser allows a perpetrator to compromise data integrity.

The vulnerability of the ChromeDriver component of the Google Chrome browser is related to a lack of standard permission mechanisms. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially crafted request...

5.3CVSS7.1AI score0.01491EPSS
Exploits0References13Affected Software5
Tenable Nessus
Tenable Nessus
added 2020/06/17 12:0 a.m.43 views

RHEL 6 : chromium-browser (RHSA-2020:2544)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2544 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 83.0.4103.97. Security Fixes:...

9.6CVSS7.2AI score0.06414EPSS
Exploits13References62
RedHat Linux
RedHat Linux
added 2020/06/15 12:55 p.m.5 views

chromium-browser: Insufficient data validation in ChromeDriver

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS7.4AI score0.01491EPSS
Exploits0References5
NVD
NVD
added 2020/05/21 4:15 a.m.13 views

CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS6.8AI score0.01491EPSS
Exploits0References8
OSV
OSV
added 2020/05/21 4:15 a.m.2 views

DEBIAN-CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS7.5AI score0.01491EPSS
Exploits0References1
OSV
OSV
added 2020/05/21 4:15 a.m.7 views

CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS8.6AI score
Exploits0References8
UbuntuCve
UbuntuCve
added 2020/05/21 4:15 a.m.17 views

CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS7AI score0.01491EPSS
Exploits0References3
Prion
Prion
added 2020/05/21 4:15 a.m.19 views

Design/Logic Flaw

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

4.3CVSS6.6AI score0.01491EPSS
Exploits0References8Affected Software5
OSV
OSV
added 2020/05/21 4:15 a.m.2 views

UBUNTU-CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS7.2AI score0.01491EPSS
Exploits0References4
Rows per page
Query Builder