Lucene search
+L

4982 matches found

Openbugbounty
Openbugbounty
•added 2016/04/15 5:19 p.m.•17 views

prism.pingnetwork.in Open Redirect vulnerability

Open Bug Bounty ID: OBB-146691 Description| Value ---|--- Affected Website:| prism.pingnetwork.in Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

6.9AI score
SaveExploits0
FireEye
FireEye
•added 2016/04/07 12:30 p.m.•69 views

CVE-2016-1019: A New Flash Exploit Included in Magnitude Exploit Kit

On April 2, security researcher @Kafeine at Proofpoint discovered a change to the Magnitude Exploit Kit. Thanks to their collaboration, we analyzed the sample and discovered that Magnitude EK was exploiting a previously unknown vulnerability in Adobe Flash Player CVE-2016-1019. The in-the-wild...

10CVSS9.3AI score0.53127EPSS
SaveExploits2References3
hackapp
hackapp
•added 2016/04/01 9:44 a.m.•11 views

Santa Gift Delivery - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Santa Gift Delivery published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
Cisco Threats
Cisco Threats
•added 2016/03/21 2:58 p.m.•28 views

Threat Outbreak Alert RuleID21829: Email Messages Distributing Malicious Software on March 21, 2016

Medium Alert ID: 44233 First Published: 2016 March 21 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21829 may contain the following files: Name | Si...

0.3AI score
SaveExploits0
FireEye
FireEye
•added 2016/03/21 8:30 a.m.•18 views

Stop Scanning My Macro

FireEye Labs detected an interesting evasion strategy in two recent, large Dridex campaigns. These campaigns changed the attachment file-type and location of malicious logic in an attempt to avoid scanners. Overview Both campaigns used an invoice theme and came from a wide variety of sending...

7.3AI score
SaveExploits0
Fedora
Fedora
•added 2016/03/17 9:00 p.m.•79 views

[SECURITY] Fedora 23 Update: jenkins-1.625.3-3.fc23

Jenkins is an award-winning, cross-platform, continuous integration and continuous delivery application that increases your productivity. Use Jenkins to build and test your software projects continuously making it easier for developers to integrate changes to the project, and making it easier for...

10CVSS3.4AI score0.83259EPSS
SaveExploits25
Cisco Threats
Cisco Threats
•added 2016/03/10 10:20 p.m.•21 views

Threat Outbreak Alert RuleID21459: Email Messages Distributing Malicious Software on March 10, 2016

Medium Alert ID: 44049 First Published: 2016 March 10 22:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21459KVR may contain the following files: Name |...

0.2AI score
SaveExploits0
CNVD
CNVD
•added 2016/02/23 12:00 a.m.•15 views

HP Continuous Delivery Automation Arbitrary Command Execution Vulnerability

HP Continuous Delivery Automation is a suite of solutions for automating the deployment of multi-tier applications. A security vulnerability in HP Continuous Delivery Automation allows remote attackers to execute arbitrary commands using specially crafted serialized Java objects...

9.8CVSS7.7AI score0.04498EPSS
SaveExploits0References1
NVD
NVD
•added 2016/02/17 3:59 p.m.•36 views

CVE-2016-2072

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

6.1CVSS6.2AI score0.01051EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/17 12:00 a.m.•12 views

CVE-2016-2072: Undefined Security Weakness

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

6.1CVSS6.9AI score0.01051EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/02/17 12:00 a.m.•13 views

PT-2016-5000

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 11.x before 11.0 Build 64.34 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before 10.5 Build 59.13 Citrix NetScaler...

6.1CVSS0.01051EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/02/17 12:00 a.m.•11 views

PT-2016-2698

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 11.x before 11.0 Build 64.34 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before 10.5 Build 59.13 Citrix NetScaler...

10CVSS0.03356EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/17 12:00 a.m.•12 views

CVE-2016-2071: Undefined Security Weakness

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands...

10CVSS8.3AI score0.03356EPSS
SaveExploits0References2
Citrix
Citrix
•added 2016/02/15 12:00 a.m.•36 views

Event 4003 on StoreFront Servers

The following eventisdisplayed in the event viewer: First error message: Log Name:Citrix Delivery Services Source:Citrix Store Service Date:7/22/2016 12:05:09 PM Event ID:4003 Task Category: 12346 Level:Error Keywords:Classic User:N/A Computer:StorefrontSrv.Contoso.com Description: All the Citrix...

7AI score
SaveExploits0
NVD
NVD
•added 2016/02/12 1:59 a.m.•27 views

CVE-2016-1986

HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

9.8CVSS9.7AI score0.04498EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2016/02/12 1:59 a.m.•15 views

CVE-2016-1986

HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

9.8CVSS6AI score0.04498EPSS
SaveExploits0References1
Prion
Prion
•added 2016/02/12 1:59 a.m.•25 views

Design/Logic Flaw

HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

7.5CVSS8.1AI score0.04498EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2016/02/12 12:00 a.m.•6 views

PT-2016-4944

Name of the Vulnerable Software and Affected Versions HP Continuous Delivery Automation CDA version 1.30 Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Recommendations For HP...

9.8CVSS0.04498EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/12 12:00 a.m.•10 views

CVE-2016-1986: Improper Control of Generation of Code

HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

9.8CVSS8.6AI score0.04498EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/02/08 12:00 a.m.•34 views

NetScaler Gateway Application Privilege Escalation

The multiple vulnerabilities of the microprogramming software for access control systems in the NetScaler Gateway and the NetScaler Application Delivery Controller are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to enhance their privileges by manipulatin...

10CVSS5.7AI score0.03151EPSS
SaveExploits0References2
Rows per page
Query Builder