13609 matches found
CVE-2015-1012
creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:32+00:00| seen| https://t.me/cibsecurity/3335...
Atlassian JIRA Common Credentials
Nessus was able to gain access to the Atlassian JIRA web application using a common set of credentials. A remote attacker can exploit this issue to disclose sensitive information or otherwise affect the operation of the application and underlying system. %NASLMINLEVEL 70300 C Tenable Network...
The vulnerability of the information collection tool for devices on the Cisco Common Services Platform Collector lies in the presence of a pre-installed account, which allows a perpetrator to gain access to the device.
The vulnerability of the device information collection tool in the Cisco Common Services Platform Collector relates to the presence of a pre-installed account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...
CentOS 7 : cockpit (CESA-2019:0482)
An update for cockpit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CentOS 7 : kernel (CESA-2019:0512)
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Default credentials
A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...
CVE-2019-1723
A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...
CVE-2019-1723
A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...
Cisco Releases Security Updates
Cisco has released security updates to address vulnerabilities in Cisco products. A remote attacker could exploit one of these vulnerabilities to cause a denial-of-service condition. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...
CVE-2018-1335
creationtimestamp| type| source ---|---|--- 2019-03-12 15:32:18+00:00| published-proof-of-concept| https://t.me/antichat/3945 2019-03-12 16:31:45+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5247 2019-03-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46540...
Microsoft Windows Common Control Library CVE-2019-0765 Remote Code Execution Vulnerability
Description Microsoft Windows Common Control Library 'Comctl32.dll' is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service...
The vulnerability of the fly-admin-service-se administrative service package for the Astra Linux operating system allows a perpetrator to cause a failure in the printing service.
The vulnerability of the fly-admin-service-se administrative service package for the Astra Linux operating system is related to incorrect configuration of the Common UNIX Printing System CUPS in the Astra Linux Directory ALD. Exploiting this vulnerability could allow a malicious actor to cause...
Legion - An Easy-To-Use, Super-Extensible And Semi-Automated Network Penetration Testing Tool That Aids In Discovery, Reconnaissance And Exploitation Of Information Systems
Legion, a fork of SECFORCE's Sparta, is an open source, easy-to-use, super-extensible and semi-automated network penetration testing framework that aids in discovery, reconnaissance and exploitation of information systems. Legion is developed and maintained by GoVanguard. More information about...
