Lucene search
+L

1559 matches found

OSV
OSV
•added 2016/06/01 8:59 p.m.•26 views

CVE-2016-3088

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request...

9.8CVSS9.9AI score
SaveExploits0References10
Debian CVE
Debian CVE
•added 2016/06/01 8:00 p.m.•61 views

CVE-2016-3088

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request...

9.8CVSS9.1AI score0.98518EPSS
SaveExploits20
Metasploit
Metasploit
•added 2016/06/01 12:00 a.m.•234 views

ActiveMQ web shell upload

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Module Options msf use exploit/multi/http/apache/activemquploadjsp msf undefinedactivemquploadjsp show actions...

9.8CVSS8.9AI score0.98518EPSS
SaveExploits20
seebug.org
seebug.org
•added 2016/05/09 12:00 a.m.•15 views

imo & imoffice /corpfile.php文件存在无需登录命令执行漏洞

No description provided by source...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2016/05/04 12:00 a.m.•12 views

Mozilla Firefox Maintenance Service Updater Arbitrary File Execution Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Mozilla Maintenance Service is one of the silent updater components. An arbitrary file execution vulnerability exists in the Mozilla Maintenance Service updater in Windows-based versions of Mozilla Firef...

5.8CVSS9AI score0.01656EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/30 5:59 p.m.•9 views

CVE-2016-2809

The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...

5.5CVSS7.5AI score0.01656EPSS
SaveExploits0References5
NVD
NVD
•added 2016/04/30 5:59 p.m.•21 views

CVE-2016-2809

The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...

5.8CVSS6.9AI score0.01656EPSS
SaveExploits0References5
Prion
Prion
•added 2016/04/30 5:59 p.m.•24 views

Privilege escalation

The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...

5.8CVSS7.2AI score0.01656EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2016/04/30 5:59 p.m.•30 views

CVE-2016-2809

The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...

5.8CVSS7AI score0.01656EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/04/30 5:00 p.m.•38 views

CVE-2016-2809

The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...

6.8AI score0.01656EPSS
SaveExploits0References5
CNVD
CNVD
•added 2016/04/22 12:00 a.m.•7 views

Ovidentia troubleticketsModule Remote File Inclusion Vulnerability

Ovidentia is a Web-based remote collaboration and content management tool. A remote file inclusion vulnerability exists in Ovidentia troubleticketsModule. This allows attackers to exploit the vulnerability to execute malicious files...

7.2AI score
SaveExploits0References1
Check Point Advisories
Check Point Advisories
•added 2016/03/22 12:00 a.m.•5 views

Apple OSX File With Non-Executable File Extension Arbitrary File Execution

Certain malicious OSX files can be hidden using arbitrary filename extensions. A remote attacker could exploit this vulnerability to entice unsuspecting users to execute arbitrary files...

5AI score
SaveExploits0
Apple
Apple
•added 2016/03/21 12:00 a.m.•211 views

About the security content of iOS 9.3

About the security content of iOS 9.3 This document describes the security content of iOS 9.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn mo...

10CVSS0.3AI score0.33133EPSS
SaveExploits22References1Affected Software1
NVD
NVD
•added 2015/12/30 5:59 a.m.•23 views

CVE-2015-5663

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...

7.4CVSS7.4AI score0.00914EPSS
SaveExploits0References4
Prion
Prion
•added 2015/12/30 5:59 a.m.•27 views

Design/Logic Flaw

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...

3.7CVSS7AI score0.00914EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2015/12/30 2:00 a.m.•79 views

CVE-2015-5663

CVE-2015-5663 affects WinRAR prior to 5.30 beta 5. The issue is in file-execution/registry-handling: when a user opens a file without an extension, WinRAR may execute a similarly named file with an extension in the same folder or load a registry setting file, enabling local privilege escalation. ...

7.4CVSS7.4AI score0.00914EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2015/12/30 2:00 a.m.•42 views

CVE-2015-5663

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...

7.4AI score0.00914EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/12/17 6:19 a.m.•12 views

WinRAR may insecurely load executable files

Overview WinRAR contains a function where user specified files on the local disk can be executed. When this file does not have a file extension, a file of the same name with a file extension contained in the same folder may be executed by WinRAR instead of the user specified file. WinRAR also...

7.8CVSS6.3AI score0.00914EPSS
SaveExploits0References5
zdt
zdt
•added 2015/12/10 12:00 a.m.•34 views

appRain 4.0.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications appRain 4.0.3 Code Execution , XSS, CSRF , Path Traversal Vulnerabilities appRain is described as a Content Management Framework written in PHP. There are various components of appRain 4.0.3 that should not provide the possibility of code...

7.1AI score
SaveExploits0
Symantec
Symantec
•added 2015/12/08 12:00 a.m.•73 views

Microsoft Windows Library Loading CVE-2015-6132 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft...

7.2CVSS0.3AI score0.84701EPSS
SaveExploits6Affected Software5
Rows per page
Query Builder