The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the spring-messaging module in the Spring Framework software platform allows a hacker to gain full control over the application.

The vulnerability of the spring-messaging module in the Spring Framework is caused by errors in the handling of STOMP messages. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full control over the application through a specially crafted message...

The vulnerability of the Map Builder component of the Fusion Middleware data visualization software, MapViewer, allows a hacker to gain full control over the application.

The vulnerability of the Map Builder component of the Fusion Middleware data visualization software, MapViewer, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP protoco...

The vulnerability of the Java DB component of the Java SE software platform allows a perpetrator to gain full control over the application.

The vulnerability of the Java DB component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using network protocols...

PT-2018-1385

Name of the Vulnerable Software and Affected Versions Java SE affected versions not specified Description The issue is related to inadequate access control in the Java DB component of the Java SE platform. It can be exploited by a remote attacker to gain full control over the application using...

CVE-2018-0024

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

CVE-2018-0024

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

PT-2018-8572

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.1X46-D45 on SRX Series Juniper Networks Junos OS versions prior to 12.3X48-D20 on SRX Series Juniper Networks Junos OS versions prior to 12.3R11 on EX Series Juniper Networks Junos OS versions...

CVE-2018-0024: Improper Privilege Management

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

PT-2018-1870

Name of the Vulnerable Software and Affected Versions Texas Instruments Bluetooth Low Energy versions affected versions not specified Aruba Access points affected versions not specified Description The issue is caused by a repeated memory release in the OAD mechanism of Texas Instruments Bluetoot...

CVE-2018-5163

This CVE refers to Firefox

OnePlus 6 Flaw Allows to Boot Any Image Even With Locked Bootloader

Have you recently bought a OnePlus 6? Don't leave your phone unattended. A serious vulnerability has been discovered in the OnePlus 6 bootloader that makes it possible for someone to boot arbitrary or modified images to take full admin control of your phone—even if the bootloader is locked. A...

Arbitrary Code Execution Vulnerability in Multiple Sierra Wireless Products (CNVD-2018-09151)

Sierra Wireless AirLink GX400 and others are router products from Sierra Wireless Canada. A security vulnerability exists in several Sierra Wireless products. An attacker could exploit the vulnerability to execute arbitrary code and take full control of the affected system including issuing...

Foscam C1 Indoor HD Camera Firmware Recovery Unsigned Image Vulnerability

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A security vulnerability exists in the recovery process used in the Foscam C1 Indoor HD Camera, which stems from the program's failure to perform adequate security checks. The vulnerability can be exploited by an attacker to...

Display Suite - Critical - Cross site scripting (XSS) - SA-CONTRIB-2018-019

Display Suite allows you to take full control over how your content is displayed using a drag and drop interface. The module doesn't sufficiently validate view modes provided dynamically via URLs leading to a reflected cross site scripting XSS attack. This vulnerability is mitigated only by the...

Moxa AWK-3131A Wireless Access Point Hardcoded Administrator Certificate Vulnerability

The Moxa AWK-3131A Wireless Access Point is a wireless switch from Moxa. A security vulnerability exists in the Moxa AWK-3131A Wireless Access Point using firmware version 1.1, which originates from the use of hard-coded credentials by a root account. An attacker could use the vulnerability to ta...

CVE-2016-8717

An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged root account with hard-coded credentials, giving attackers full control of affected devices...

CVE-2016-8717: Use of Hard-coded Credentials

An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged root account with hard-coded credentials, giving attackers full control of affected devices...

LabF nfsAxe 3.7 - Privilege Escalation

Exploit Author: bzyo Twitter: @bzyo Exploit Title: LabF nfsAxe 3.7 - Privilege Escalation Date: 03-24-2018 Vulnerable Software: LabF nfsAxe 3.7 Vendor Homepage: http://www.labf.com/ Version: 3.7 Software Link: http://www.labf.com/download/nfsaxe.exe Tested On: Windows 7 x86 and x64 Requires Windo...

OSIsoft PI Data Archive

CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: OSIsoft Equipment: PI Data Archive Vulnerabilities: Deserialization of Untrusted Data, Improper Input Validation, Incorrect Default Permissions AFFECTED PRODUCTS The following versions of PI Data Archive, a data stora...