sricam-gsoap2.8-dos-exploit

sricam-gsoap2.8-dos-exploit Sricam gSOAP2.8 DoS exploit proo...

Bitdefender BOX 2 bootstrap update_setup command execution vulnerability

Summary An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution o...

Monero: Monero can leak unitialized memory

See this proof of concept: cpp include include include INITIALIZEEASYLOGGINGPP template static void invokehttpjsonvoid typename T::request ireq; typename T::response ires; std::string reqparam; if!epee::serialization::storettojsonireq, reqparam return; printf"%s\n", reqparam.cstr; int mainvoid...

PT-2019-1386

Name of the Vulnerable Software and Affected Versions Oracle Hyperion BI+ version 11.1.2.4 Description The issue is related to insufficient access control in the Foundation UI & Servlets component of Hyperion BI+, allowing a remote attacker to gain read, modify, add, or delete access to data, or...

Remote Code Execution (RCE)

haproxy is vulnerable to remote code execution RCE attacks. The vulnerability exists through a buffer overflow issue in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appen...

Cisco Adaptive Security Appliance Privilege Escalation

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using specially crafted HTTP requests...

CVE-2018-0705

Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests...

CVE-2018-0703

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests...

Directory traversal

Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests...

Directory traversal

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests...

CVE-2018-0632

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response...

CVE-2018-0703

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests...

CVE-2018-0705

Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests...

PT-2019-1174

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description The issue is related to errors in managing the state of TCP sockets in Cisco IOS and Cisco IOS XE Software. This could allow a remote attacker to cause the device ...

PT-2019-8705

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.1 Description A directory traversal issue allows remote attackers to delete arbitrary files via HTTP requests. Recommendations For Cybozu Office versions 10.0.0 through 10.8.1, update to a version tha...

Kubernetes API Server acts as proxy for internal and external IPs | Cloud Foundry

Severity Unspecified Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions Cloud Foundry Container Runtime CFCR All versions prior to v0.26.0 Description Kubernetes API, versions 1.11.x prior to 1.11.6, 1.12.x prior to 1.12.4, contains an improper proxy. A remote...

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications input type="hidden" name="txtHelpPage" valu...

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 CSRF

input...

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - Cross-Site Request Forgery

input...

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery

Summary The Leica GR10 is the next generation GNSS reference station receiver that combines the latest state-of-the-art technologies with a streamlined 'plug and play' workflow. Designed for a wide variety of GNSS reference station applications, the Leica GR10 offers new levels of simplicity,...