Lucene search
K

205 matches found

OSV
OSV
added 2018/09/17 6:29 a.m.2 views

CVE-2018-17136

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

9.8CVSS5.8AI score0.0025EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/09/17 6:0 a.m.13 views

CVE-2018-17136

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

9.8AI score0.0025EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2017/12/18 8:49 a.m.57 views

CVE-2017-17712

A flaw was found in the Linux kernel's implementation of rawsendmsg allowing a local attacker to panic the kernel or possibly leak kernel addresses. A local attacker, with the privilege of creating raw sockets, can abuse a possible race condition when setting the socket option to allow the kernel...

7.8CVSS2.9AI score0.00076EPSS
Exploits0References1
Prion
Prion
added 2017/11/08 5:29 a.m.21 views

Remote code execution

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remoteagent.php request containing PHP code in a Client-ip header...

9CVSS6.9AI score0.02642EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/11/08 5:29 a.m.0 views

DEBIAN-CVE-2017-16660

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remoteagent.php request containing PHP code in a Client-ip header...

7.2CVSS7.7AI score0.02642EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2017/11/08 5:29 a.m.22 views

CVE-2017-16660

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remoteagent.php request containing PHP code in a Client-ip header...

9CVSS7.2AI score0.02642EPSS
Exploits1References2
CNVD
CNVD
added 2017/11/08 12:0 a.m.1 views

Cacti Remote Code Execution Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A security vulnerability exists in Cacti version 1.1.27. A remote...

9CVSS7.4AI score0.02642EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2017/08/01 4:4 p.m.1 views

Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

6CVSS7.4AI score0.00072EPSS
Exploits0References4
0day.today
0day.today
added 2017/04/21 12:0 a.m.77 views

VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy Exploit

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1086 There is a vulnerability in VirtualBox that permits an attacker with root privileges in a virtual machine with a NAT network interface to corrupt the memory of the...

4.6CVSS0.3AI score0.00098EPSS
Exploits1
NVD
NVD
added 2016/12/10 12:59 a.m.18 views

CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

6CVSS6.2AI score0.00072EPSS
Exploits0References6
Prion
Prion
added 2016/12/10 12:59 a.m.12 views

Design/Logic Flaw

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

2.1CVSS6.4AI score0.00072EPSS
Exploits0References6Affected Software3
Cvelist
Cvelist
added 2016/12/10 12:0 a.m.23 views

CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

6.8AI score0.00072EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2016/08/22 10:48 a.m.26 views

CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

6CVSS6.9AI score0.00072EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2016/08/18 12:0 a.m.22 views

CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

6CVSS6.8AI score0.00072EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2016/05/30 12:0 a.m.3 views

PT-2016-7130 · Qemu Team +3 · Qemu +3

Name of the Vulnerable Software and Affected Versions: QEMU aka Quick Emulator affected versions not specified Description: The issue allows local guest OS administrators to cause a denial of service by leveraging failure to check IP header length in the vmxnet tx pkt parse headers function...

10CVSS7.6AI score0.88482EPSS
Exploits12References433
CNVD
CNVD
added 2015/09/17 12:0 a.m.1 views

WordPress WP Limit Login Attempts Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of blogging platform, the platform supports PHP and MySQL server set up a personal blog site.WP Limit Login Attempts is one of the login protection mechanism allowing bloggers to limit the number of times you can...

7.5CVSS8.4AI score0.00498EPSS
Exploits1References1
exploitpack
exploitpack
added 2015/07/22 12:0 a.m.19 views

Counter-Strike 1.6 - GameInfo Query Reflection Denial of Service (PoC)

Counter-Strike 1.6 - GameInfo Query Reflection Denial of Service PoC !/usr/bin/perl Counter-Strike 1.6 'GameInfo' Query Reflection DoS Proof Of Concept Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg...

0.7AI score
Exploits0
exploitpack
exploitpack
added 2015/07/20 12:0 a.m.25 views

TcpDump - rpki_rtr_pdu_print Out-of-Bounds Denial of Service

TcpDump - rpkirtrpduprint Out-of-Bounds Denial of Service Exploit Title: TcpDump rpkirtrpduprint Out-of-Bounds Denial of Service Date: 7.18.2015 Exploit Author: Luke Arntson [email protected] Vendor Homepage: http://www.tcpdump.org/ Software Link: http://www.tcpdump.org/ Version: 4.6.2, 4.5.1,...

5CVSS0.11322EPSS
Exploits5
Packet Storm
Packet Storm
added 2015/07/10 12:0 a.m.33 views

UPNPD M-SEARCH ssdp:discover Reflection Denial Of Service

!/usr/bin/perl upnpd M-SEARCH ssdp:discover reflection Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg The SSDP protocol can discover Plug & Play devices, with uPnP Universal Plug and Play. SSDP is HTTP like protocol and...

0.3AI score
Exploits0
exploitpack
exploitpack
added 2015/07/10 12:0 a.m.20 views

UPNPD M-SEARCH - ssdp:discover Reflection Denial of Service

UPNPD M-SEARCH - ssdp:discover Reflection Denial of Service !/usr/bin/perl upnpd M-SEARCH ssdp:discover reflection Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg The SSDP protocol can discover Plug & Play devices, with...

0.3AI score
Exploits0
Rows per page
Query Builder