Lucene search
+L

9346 matches found

CNNVD
CNNVD
added 2020/11/16 12:00 a.m.12 views

Canon Oce ColorWave 3500 Security Breach

The Canon Oce ColorWave 3500 is a color printer from Canon Japan. The device is based on solid ink bead printing technology and image logic scanning processing, integrating CAD, GIS and full-coverage, full-color image printing in a single device to provide more professional functionality for the...

9.8CVSS7.3AI score0.01135EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2020/11/15 11:30 a.m.74 views

FinalRecon v1.1.0 - The Last Web Recon Tool You'll Need

FinalRecon is an automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after another it can provide similar results keeping...

7AI score
SaveExploits0References1
Metasploit
Metasploit
added 2020/11/14 12:00 a.m.78 views

WordPress AIT CSV Import Export Unauthenticated Remote Code Execution

The AIT CSV Import/Export plugin use exploit/multi/http/wp/aitcsvrce msf undefinedaitcsvrce show actions ...actions... msf undefinedaitcsvrce set ACTION msf undefinedaitcsvrce show options ...show and set options... msf undefinedaitcsvrce run This module requires Metasploit:...

9.8CVSS5.8AI score0.04693EPSS
SaveExploits2
Patchstack
Patchstack
added 2020/11/13 12:00 a.m.25 views

WordPress AIT CSV Import / Export plugin <= 3.0.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability found by Ryan WPScan in WordPress AIT CSV Import / Export plugin versions = 3.0.3. Solution 2020-11-13 - we were unable to find a patched version of this plugin...

3.3AI score
SaveExploits0References2Affected Software1
Kitploit
Kitploit
added 2020/11/12 8:30 p.m.91 views

FAMA - Forensic Analysis For Mobile Apps

LabCIF -Forensic Analysis for Mobile Apps Getting Started Android extraction and analysis framework with an integrated Autopsy Module. Dump easily user data from a device and generate powerful reports for Autopsy or external applications. Functionalities Extract user application data from an...

6.9AI score
SaveExploits0References13
Kitploit
Kitploit
added 2020/11/11 11:30 a.m.45 views

NFCGate - An NFC Research Toolkit Application For Android

NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security of protocols against traffic modifications. Notice This application was developed for security research purposes by student...

7AI score
SaveExploits0References17
Zero Day Initiative
Zero Day Initiative
added 2020/11/10 12:00 a.m.45 views

Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exporting...

7.8CVSS2.5AI score0.1702EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/10 12:00 a.m.28 views

Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.5AI score0.0306EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2020/11/09 11:30 a.m.42 views

PCWT - A Web Application That Makes It Easy To Run Your Pentest And Bug Bounty Projects

A web application that makes it easy to run your pentest and bug bounty projects. Description The app provides a convenient web interface for working with various types of files that are used during the pentest, automate port scan and subdomain search. Main page Project settings Domains dashboard...

7.2AI score
SaveExploits0References3
NVD
NVD
added 2020/11/06 5:15 p.m.30 views

CVE-2020-25170

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

7.8CVSS8.4AI score0.00977EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/06 5:15 p.m.7 views

CVE-2020-25170

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

7.8CVSS7.1AI score0.00977EPSS
SaveExploits0References1
Prion
Prion
added 2020/11/06 5:15 p.m.20 views

Design/Logic Flaw

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

6.8CVSS8.3AI score0.00977EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/06 4:08 p.m.33 views

CVE-2020-25170 B. Braun OnlineSuite

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

7.8AI score0.00977EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/11/05 7:32 p.m.26 views

CVE-2020-24436 Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution

Acrobat Pro DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an out-of-bounds write vulnerability that could result in writing past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute...

7.8CVSS7.5AI score0.1702EPSS
SaveExploits0References2
OSV
OSV
added 2020/11/05 4:15 p.m.10 views

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

8.8CVSS7.3AI score0.01978EPSS
SaveExploits1References1
NVD
NVD
added 2020/11/05 4:15 p.m.41 views

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

8.8CVSS8.9AI score0.01978EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/11/05 3:08 p.m.50 views

CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...

8.9AI score0.01978EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/11/05 12:00 a.m.12 views

phpMyAdmin CSV Injection Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A CSV injection vulnerability exists in phpMyAdmin 5.0.2 and...

8.8CVSS8.5AI score0.01526EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/04 5:15 p.m.9 views

CVE-2020-22277

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...

8CVSS7.3AI score0.0185EPSS
SaveExploits1References3
NVD
NVD
added 2020/11/04 5:15 p.m.26 views

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

8.8CVSS8.9AI score0.01526EPSS
SaveExploits1References2
Rows per page
Query Builder