Lucene search
+L

6641 matches found

Packet Storm
Packet Storm
added 2020/11/11 12:0 a.m.443 views

Customer Support System 1.0 Cross Site Scripting

Exploit Title: Customer Support System 1.0 - Stored XSS in The Admin Panel Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/11/11 12:0 a.m.434 views

Customer Support System 1.0 SQL Injection

Title: Customer Support System 1.0 - Authentication Bypass Date: 2020-11-11 Exploit Author: Ahmed Abbas Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

0.1AI score
SaveExploits0
HackRead
HackRead
added 2020/11/09 4:13 p.m.20 views

BigBasket data breach – 20 million customer data sold on dark web

By Deeba Ahmed India’s leading online supermarket BigBasket acknowledged putting sensitive data of more than 20 million users at stake. This is a post from HackRead.com Read the original post: BigBasket data breach - 20 million customer data sold on dark web...

3.6AI score
SaveExploits0
OSV
OSV
added 2020/11/09 1:15 a.m.29 views

CVE-2020-24402

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorizati...

4.9CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2020/11/09 1:15 a.m.20 views

CVE-2020-24402

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorizati...

5.5CVSS4.3AI score0.01682EPSS
SaveExploits0References1
Prion
Prion
added 2020/11/09 1:15 a.m.18 views

Design/Logic Flaw

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorizati...

5.5CVSS5AI score0.01682EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/09 12:39 a.m.27 views

CVE-2020-24402 Incorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorizati...

4.9CVSS4.7AI score0.01682EPSS
SaveExploits0References1
Hewlett-Packard
Hewlett-Packard
added 2020/11/09 12:0 a.m.107 views

HPSBHF03703 rev. 4 - Intel® 2020.2 IPU - CSME, SPS, TXE, AMT, and DAL Security Update

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in Intel® Converged Security and...

8.2CVSS0.8AI score0.01675EPSS
SaveExploits0
Citrix
Citrix
added 2020/11/09 12:0 a.m.15 views

Citrix Supportability Pack

Citrix Supportability Pack v1.7.4 Created Date: Nov 23, 2015 Updated Date: July 04, 2024 Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools Description The Supportability Pack is a collecti...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2020/11/09 12:0 a.m.11 views

LDAP authentication vulnerability in Access Gateway Advanced Access Control

Description of Problem If the Advanced Access Control option AAC of Access Gateway is configured to use LDAP authentication then it is possible for a user to logon without supplying valid credentials. This vulnerability only affects AAC Version 4.2 deployments that are using LDAP authentication;...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2020/11/09 12:0 a.m.84 views

Citrix Hypervisor Security Update

Description of Problem Several security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow: unprivileged code in a PV guest VM to compromise that PV guest VM privileged code in a guest VM to cause the host to crash or become unresponsive privileged code in a...

7.8CVSS7.4AI score0.00415EPSS
SaveExploits0Affected Software2
Hewlett-Packard
Hewlett-Packard
added 2020/11/06 12:0 a.m.29 views

HPSBHF03701 rev. 2 - Intel® Ethernet 700 Series Controller November 2020 Security Update

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Ethernet 700 Series Controllers which might allow...

6.7CVSS2AI score0.00371EPSS
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2020/11/05 5:0 p.m.15 views

Microsoft recognized as a Leader in the 2020 Gartner Magic Quadrant for Enterprise Information Archiving

Organizations face an increasing volume of data generated daily and ever-evolving regulations around how that data is managed. To help navigate this complex information landscape, we are focused on delivering integrated, intelligent, and user-centric solutions. Over the past few years, we...

0.3AI score
SaveExploits0
Veracode
Veracode
added 2020/11/05 3:12 a.m.24 views

Information Disclosure

gnome-settings-daemon is vulnerable to information disclosure. Red Hat Customer Portal password logged and passed as command line argument when user registers through GNOME control center...

5.5CVSS1.5AI score0.00318EPSS
SaveExploits0References6Affected Software27
Hewlett-Packard
Hewlett-Packard
added 2020/11/05 12:0 a.m.41 views

HPSBHF03696 rev. 1 - Intel® Extreme Tuning Utility (XTU) November 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Extreme Tuning Utility XTU which may allow escalation of privilege...

8.7CVSS2.5AI score0.00322EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.9 views

Vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for enterprise automation, which allows a hacker to cause service interruptions.

The vulnerability of the Preferences component in the Oracle CRM system’s customer relationship management module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.3AI score0.01549EPSS
SaveExploits0References3Affected Software1
Hewlett-Packard
Hewlett-Packard
added 2020/11/05 12:0 a.m.40 views

HPSBHF03706 rev. 2 - Intel Unite® Client November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Unite® Client and Cloud Service Client softwa...

6.7CVSS2.6AI score0.00319EPSS
SaveExploits0
Akamai Blog
Akamai Blog
added 2020/11/04 8:45 p.m.36 views

Streaming Traffic Peaks on Election Night

Preliminary data shows live news streaming traffic peaked at approximately 18 Tbps on Akamai's Intelligent Edge platform during coverage of the U.S. Presidential Election on November 3rd. That's roughly 5X greater than traffic on a typical day and more than double the 7.5 Tbps peak we observed...

0.4AI score
SaveExploits0
NVD
NVD
added 2020/11/04 6:15 p.m.32 views

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

9.8CVSS9.6AI score0.01628EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/04 6:15 p.m.6 views

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

9.8CVSS7.3AI score0.01628EPSS
SaveExploits0References3
Rows per page
Query Builder