CVE-2013-7334

creationtimestamp| type| source ---|---|--- 2016-05-16 13:09:21+00:00| seen| MISP/57288bef-5874-418f-be8a-348495ca48b7...

Multiple I-O DATA DEVICE Product PIN Recovery Vulnerabilities

I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-S, WN-GDN/R3-U, and WN-GDN/R3-C are wireless LAN router products from I-O DATA DEVICE Japan. A security vulnerability exists in several I-O DATA DEVICE products, which allows remote attackers to gain access to the network by performing a brute-force attack to...

CVE-2010-5326

The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a "Detour" attack...

WN-GDN/R3 Series does not limit authentication attempts

Overview WN-GDN/R3 Series provided by I-O DATA DEVICE, INC. does not limit authentication attempts. WN-GDN/R3 series provided by I-O DATA DEVICE, INC. is a wireless LAN router. WPS functionality in WN-GDN/R3 Series does not limit PIN authentication attempts, making it susceptible to brute force...

CANDID Remote Version Detection

Check for the presence of CANDID. This script sends an HTTP GET request and tries to check for the presence of CANDID from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2016-02763)

Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. An information disclosure vulnerability exists in versions of Mozilla Firefox prior to 46.0 based on the Android platform. A remote attacker can exploit the vulnerability t...

CVE-2016-4349

The CVE-2016-4349 entry describes an Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012. The issue allows local privilege escalation by placing one of several DLLs (cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, se...

Bumble: Badoo and Hotornot User Disclosure

Hi, I have found that endpoint is leaking the currently logged in user which will result in stealing the user id and unmasking the current user, This behavior could be malicious to ads websites, rouge websites, etc... PoC Code: Badoo Current User Unmasking function UnmaskUserstr return...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7921. Reason: This candidate is a duplicate of CVE-2015-7921. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2015-7921 instead of this candidate. All references and descriptions in this...

MUSIC IDENTIFICATION - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MUSIC IDENTIFICATION published at the 'play' market has multiple vulnerabilities...

CVE-2016-1347

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

Thousand electronic safe actually so that you is open a-vulnerability warning-the black bar safety net

! With the electronic safe of the popularity, now there are more and more people began to pay attention to the electronic safe security recently security researchers exposed a crack electronic safe method, the following will take a look at it. Cheap attack high-return A safety Deposit box there a...

7-Technologies / Schneider-Electric IGSS ODBC Version Identification

Binary data scadaappigssodbcversion.nbin...

CVE-2015-8767

net/sctp/smsideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service deadlock via a crafted sctpaccept call...

CVE-2016-1720

creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39367...

CVE-2015-8659

CVE-2015-8659 describes a heap-use-after-free in nghttp2’s idle stream handling, affecting nghttp2 versions prior to 1.6.0. Public documents associate this family of issue with nghttp2 prior to 1.6.0 potentially enabling remote code execution (as cited by Apple’s tvOS/iOS security notes and Gento...

CVE-2015-8715

epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2015-6172

creationtimestamp| type| source ---|---|--- 2015-12-29 10:13:39+00:00| seen| MISP/56825b38-dd54-4696-821e-b2fb02de0b81 2015-12-31 10:46:57+00:00| seen| MISP/5684f21e-eec8-41fc-a799-395302de0b81 2025-08-31 03:01:19+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:53+00:00|...

Xplico v1.1.1 - Open Source Network Forensic Analysis Tool (NFAT)

The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer. Xplico is ...