Lucene search
+L

3103 matches found

Kitploit
Kitploit
•added 2021/02/28 11:30 a.m.•214 views

Gargamel - A Forensic Evidence Acquirer

A Forensic Evidence Acquirer Compile Assuming you have Rust 1.41+ installed. Open terminal in the project directory and to compile a release build type cargo build --release Debug build can be compiled using cargo build Compiled executable is located at target/release/gargamel.exe or...

7.7AI score
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2021/02/26 2:15 a.m.•38 views

UBUNTU-CVE-2021-23972

One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached...

8.8CVSS7.3AI score0.01013EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2021/02/26 2:15 a.m.•48 views

CVE-2021-23972

One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached...

8.8CVSS7.2AI score0.01013EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/02/26 1:54 a.m.•45 views

CVE-2021-23972

One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached...

8.3AI score0.01013EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/02/16 8:15 p.m.•12 views

CVE-2021-20071

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs...

4.8CVSS5.4AI score0.00485EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/02/11 12:00 a.m.•18 views

Windows Registry Editor Dialog Replacement

The vulnerability of the Windows operating system’s registry editor is related to errors in checking input data when modifying the registry. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by having the user open a specially crafted .reg file. During this process,...

7.8CVSS6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2021/02/10 4:49 p.m.•46 views

CVE-2021-0333

In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User...

7.5AI score0.00302EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•15 views

Dialog Box Component Unauthorized Access

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.2CVSS7.7AI score0.01271EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•19 views

Dialog Box Component Unauthorized Access

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.2CVSS7.7AI score0.01271EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•16 views

Dialog Box Component Unauthorized Access Privilege

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.2CVSS7.7AI score0.01271EPSS
SaveExploits0References2Affected Software1
zdt
zdt
•added 2021/01/28 12:00 a.m.•134 views

jQuery UI 1.12.1 - Denial of Service Exploit

Exploit Title: jQuery UI 1.12.1 - Denial of Service DoS Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://jqueryui.com/ Software Link: https://jqueryui.com/download/ Version: DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0...

6.6AI score
SaveExploits4
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•22 views

CKEditor Security Vulnerabilities

CKEditor is an open source, web-based text editor. A security vulnerability exists in CKEditor prior to CKEditor 4.16, which allows redos-type attacks to be executed in CKEditor 4 by inducing a victim to paste carefully crafted text into the styled input of a specific dialog box...

6.5CVSS6.9AI score0.01994EPSS
SaveExploits0References7
RubySec
RubySec
•added 2021/01/26 12:00 a.m.•18 views

Regular expression Denial of Service in dialog plugin

Affected packages The vulnerability has been discovered and fixed in the dialog plugin. Packages indirectly affected by the issue having dialog plugin dependency: - Link - Image - Enhanced Image - Code Snippet - Iframe Dialog Impact A potential vulnerability has been discovered in CKEditor 4 dial...

6.5CVSS6.9AI score0.01994EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/01/22 12:00 a.m.•6 views

PT-2021-11548

Name of the Vulnerable Software and Affected Versions: jquery-ui versions all org.fujion.webjars:jquery-ui versions all Description: The issue occurs when the "dialog" is injected into an HTML tag more than once, potentially causing the browser and the application to crash. Recommendations: For...

SaveExploits4References3
CNNVD
CNNVD
•added 2021/01/22 12:00 a.m.•22 views

Openjs jquery-ui Resource Management Error Vulnerability

Openjs Jquery Ui is a code library from the Openjs Foundation for creating interactive user interfaces based on the Javascript language. A resource management error vulnerability exists in jquery-ui that originates from a browser and application crash when a "dialog" is injected multiple times in...

5.9AI score
SaveExploits4References10
osv_cve
osv_cve
•added 2021/01/20 3:15 p.m.•19 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/01/20 3:15 p.m.•14 views

CVE-2021-2103

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/20 3:15 p.m.•33 views

CVE-2021-2102

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS8AI score0.01271EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•9 views

CVE-2021-2102

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7AI score0.01271EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•10 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7AI score0.01271EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder