Lucene search
+L

1846 matches found

OSV
OSV
added 2017/05/08 6:29 p.m.7 views

CVE-2016-8202

A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS FOS releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected...

8.8CVSS5.8AI score0.03051EPSS
SaveExploits0References4
NVD
NVD
added 2017/05/08 6:29 p.m.16 views

CVE-2016-8202

A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS FOS releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected...

9CVSS9.1AI score0.03051EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/05/08 6:0 p.m.25 views

CVE-2016-8202

A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS FOS releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected...

9.1AI score0.03051EPSS
SaveExploits0References4
Broadcom
Broadcom
added 2017/05/02 12:0 a.m.24 views

BSA-2017-208

Security Advisory ID : BSA-2017-208 Component : FOS Revision : 2.0: Interim A privilege escalation vulnerability in BrocadeFibreChannel SAN products running Brocade Fabric OS FOS releases earlier than v7.4.1d and v8.0.1b could allow an authenticated, attacker to elevate the privileges of user...

9CVSS7.5AI score0.03051EPSS
SaveExploits0
CNVD
CNVD
added 2017/04/28 12:0 a.m.7 views

Jenkins Java Deserialization Remote Code Execution Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Jenkin...

9.8CVSS9.7AI score0.99679EPSS
SaveExploits37References1
Kitploit
Kitploit
added 2017/04/15 1:56 p.m.58 views

shARP - anti-ARP-spoofing application software and uses active scanning method to detect any ARP-spoofing incidents

ARP spoofing allows an attacker to intercept data frames on a network, modify the traffic, or stop all traffic. Often the attack is used as an opening for other attacks, such as denial of service, man in the middle, or session hijacking attacks.Our anti- ARP spoofing program, shARP detects the...

7.5AI score
SaveExploits0References1
OSV
OSV
added 2017/04/07 5:59 p.m.5 views

CVE-2016-9197

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected...

6.7CVSS5.8AI score0.0033EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/01/26 12:0 a.m.12 views

The vulnerability of the CODESYS Runtime Toolkit execution environment allows a perpetrator to execute arbitrary commands and load arbitrary files.

The vulnerability of the CODESYS Runtime Toolkit lies in the absence of requirements for authentication procedures in the default configuration. Exploiting this vulnerability allows a malicious actor to execute commands through the command line interface and upload arbitrary files...

10CVSS5.8AI score0.05266EPSS
SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2017/01/25 2:30 p.m.26 views

passfault - OWASP Passfault evaluates passwords and enforces password policy in a completely different way

Objective: Do Passwords Better! Running the Command-line Interface: 1. install java 2. cd core 3. gradlew installDist 4. run build/install/core/bin/core Running the jsonWebService: 1. cd jsonService 2. gradlew build jettyRunWar 3. browse to localhost:8080/jsonService Note the war will be located ...

7.3AI score
SaveExploits0References1
pwnmalw
pwnmalw
added 2017/01/14 12:0 a.m.549 views

Malware exploit: Herpes

Type: SQL Injection Author: bwall import random import pycurl import urllib import cStringIO import json def ui: try: return unicodei, errors='ignore' except: return i class HerpesNetPanel: def initself, gatewayurl: self.gatewayurl = gatewayurl @staticmethod def getfieldgateway, table, column, ro...

0.1AI score
SaveExploits0
Citrix
Citrix
added 2016/12/27 12:0 a.m.9 views

Increase RAM for XenServer VM's through Command Line Interface.

Increase RAM for XenServer VM's through Command Line Interface. If the RAM editing option is grayed out through XenCenter...

7.3AI score
SaveExploits0
n0where
n0where
added 2016/12/07 5:52 a.m.29 views

Powerful Extensible Wireless Drop Box: Pina Colada

Powerful Extensible Wireless Drop Box Pina Colada, a powerful and extensible wireless drop box, capable of performing a wide range of remote offensive attacks on a network. It can currently be controlled only via a command line interface, but a Command and Control remote server functionality is...

0.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2016/11/28 2:21 p.m.58 views

NEET - Network Enumeration and Exploitation Tool

Neet is a flexible, multi-threaded tool for network penetration testing. It runs on Linux and co-ordinates the use of numerous other open-source network tools, with the aim of gathering as much network information as possible in clear, easy-to-use formats. The core scanning engine finds and...

7.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2016/11/14 2:10 p.m.795 views

jSQL Injection v0.77 - Java application for automatic SQL database injection

jSQL Injection is a lightweight application used to find database information from a distant server. It's is free , open source and cross-platform Windows, Linux, Mac OS X. jSQL Injection is also part of the official penetration testing distribution Kali Linux and is included in distributions lik...

8.1AI score
SaveExploits0References2
OSV
OSV
added 2016/11/03 9:59 p.m.6 views

CVE-2016-6430

A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.101. Known Fixed...

7.8CVSS5.8AI score0.00294EPSS
SaveExploits0References2
Prion
Prion
added 2016/11/03 9:59 p.m.20 views

Design/Logic Flaw

A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.101. Known Fixed...

6.6CVSS6.8AI score0.00294EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2016/10/28 12:0 a.m.25 views

Cisco IP Interoperability and Collaboration System Command-Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. The vulnerability is due to insufficient input validation. An attacker could...

7.8CVSS7.7AI score0.00294EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2016/10/27 5:31 p.m.26 views

Cisco Patches Critical Vulnerability in Facility Events Response System

Cisco Systems issued a security bulletin Wednesday for a critical vulnerability found in its IP Interoperability and Collaboration System IPICS. The feature is a key part of a mechanism used by Cisco to facilitate emergency responses for “facility events.” The vulnerability CVE-2016-6397, accordi...

10CVSS1.6AI score0.03021EPSS
SaveExploits0References6
Cisco
Cisco
added 2016/10/26 4:0 p.m.36 views

Cisco IP Interoperability and Collaboration System Command-Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. The vulnerability is due to insufficient input validation. An attacker could...

6.6CVSS7.6AI score0.00294EPSS
SaveExploits0References1
OSV
OSV
added 2016/10/06 10:59 a.m.2 views

CVE-2016-6434

Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370...

7.8CVSS5.8AI score0.00983EPSS
SaveExploits4References5
Rows per page
Query Builder