CVE-2018-17254

creationtimestamp| type| source ---|---|--- 2018-09-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45423 2024-11-14 06:08:15+00:00| seen| MISP/d314eb11-81e9-4d90-b43a-b17c0d47f952 2025-09-17 21:02:34+00:00| seen|...

Socusoft Photo to Video Converter 8.07 - Registration Name Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Socusoft Photo to Video Converter 8.07 - 'Registration Name' Buffer Overflow Exploit Author : ZwX Vendor Homepage : http://www.dvd-photo-slideshow.com/photo-to-video-converter.html Version Software : 8.07 Tested on OS: Windows...

Wordpress Survey & Poll 1.5.7.3 Plugin - sss_params SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Survey & Poll 1.5.7.3 - 'sssparams' SQL Injection Exploit Author: Ceylan Bozogullarindan Vendor Homepage: http://modalsurvey.pantherius.com/ Software Link:...

Socusoft Photo To Video Converter 8.07 Buffer Overflow

Exploit Title: Socusoft Photo to Video Converter 8.07 - 'Registration Name' Buffer Overflow Exploit Author : ZwX Exploit Date: 2018-09-13 Vendor Homepage : http://www.dvd-photo-slideshow.com/photo-to-video-converter.html Version Software : 8.07 Tested on OS: Windows 7 Related Exploit Link :...

studio.dopetv.ng Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675904 Description| Value ---|--- Affected Website:| studio.dopetv.ng Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Tenable WAS-Scanner 7.4.1708 - Remote Command Execution Vulnerability

Exploit Title: Tenable WAS-Scanner 7.4.1708 - Remote Command Execution Discovery by: Sameer Goyal Vendor Homepage: https://www.tenable.com/ Software Link: https://www.tenable.com/products/tenable-io/web-application-scanning Tested Version: WAS-20180328 Vulnerability Type: Remote Command Execution...

Getsploit v0.2.2 - Command Line Utility For Searching And Downloading Exploits

Command line search and download tool for Vulners Database inspired by searchsploit. It allows you to search online for the exploits across all the most popular collections: Exploit-DB , Metasploit , Packetstorm and others. The most powerful feature is immediate exploit source download right in...

Automattic: Arbitrary File Download as Shopmanager

Due to a flaw in the way WooCommerce handles downloadable products, a shop manager can download arbitrary files on the server. The video shows the exploit and how simple it is: https://www.youtube.com/watch?v=bkrHpqht5SM The function responsible for validating the download file input is the...

Universal Media Server XXE Vulnerability

In Universal Media Server UMS, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML external entity XXE processing attack. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

NUUO NVR < 3.10.0 RCE Vulnerability - Active Check

NUUO NVR devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SUSE SLES12 Security Update : xen (SUSE-SU-2018:2081-1)

This update for xen fixes the following issues: Security issues fixed : - CVE-2018-12891: Fix preemption checks bypass in x86 PV MM handling XSA-264 bsc1097521. - CVE-2018-12892: Fix libxl failure to honour readonly flag on HVM emulated SCSI disks XSA-266 bsc1097523. - CVE-2018-12893: Fix DB...

How to migrate the XMS Database server from an existing DB to a cloned DB server

How to migrate the XMS Database server from an existing DB server to a cloned DB server ? Below are the steps which can be followed if we need to migrate XMS DB server to a cloned DB server which has a different IP address. 1. Login to XenMobile server. 2. Select Configuration and then select...

D-Link DSL/DIR/DAP Devices Directory Traversal And XSS Vulnerabilities - Active Check

D-Link DSL/DIR/DAP router devices are prone to path traversal and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora 27 : xen (2018-1a467757ce)

preemption checks bypassed in x86 PV MM handling XSA-264, CVE-2018-12891 x86: DB exception safety check can be triggered by a guest XSA-265, CVE-2018-12893 libxl fails to honour readonly flag on HVM emulated SCSI disks XSA-266, CVE-2018-12892 ---- Speculative register leakage from lazy FPU contex...

Oracle Java SE Multiple Vulnerabilities (July 2018 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 10 Update 2, 8 Update 181, 7 Update 191, or 6 Update 201. It is, therefore, affected by multiple vulnerabilities related to the following components : - Concurrency. A difficult to exploit...

Oracle Java SE Multiple Vulnerabilities (July 2018 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 10 Update 2, 8 Update 181, 7 Update 191, or 6 Update 201. It is, therefore, affected by multiple vulnerabilities related to the following components : - Concurrency. A difficult to exploit...

CVE-2018-2938

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java DB. Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the...

CVE-2018-2938

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java DB. Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the...

CVE-2018-2938

CVE-2018-2938 concerns a vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Affected versions are Java SE: 6u191, 7u181, and 8u172. The vulnerability is described as difficult to exploit but capable of allowing an unauthenticated attacker with network access via mul...

CVE-2018-2938

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java DB. Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the...