1478 matches found
U.S. Dept Of Defense: Directory Indexing on the āāāā (https://āāāā/) leads to the backups disclosure and credentials leak
Description During poking around āāāāāāāāā/24 range - āāāāā looking for the Cisco devices, I came across āāāāā which resolved to the https://āāāāāā/ While it's a not .mil host, it's likely related to the DoD since it hosted in the DoD-controlled ASN. I discovered few critical vulnerabilities here...
ThreatHunting - A Splunk App Mapped To MITRE ATT&CK To Guide Your Threat Hunts
This is a Splunk application containing several dashboards and over 120 reports that will facilitate initial hunting indicators to investigate. You obviously need to be ingesting Sysmon data into Splunk, a good configuration can be found here Note: This application is not a magic bullet, it will...
Foxit PhantomPDF < 8.3.11 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.11. It is, therefore affected by multiple vulnerabilities: - An uninitialized pointer flaw exists when calling xfa.event.rest XFA JavaScript that can cause the...
CVE-2014-9699
The MakerBot Replicator 5G printer runs an Apache HTTP Server with directory indexing enabled. Apache logs, system logs, design files i.e., a history of print files, and more are exposed to unauthenticated attackers through this HTTP server...
CVE-2014-9699
The MakerBot Replicator 5G printer runs an Apache HTTP Server with directory indexing enabled. Apache logs, system logs, design files i.e., a history of print files, and more are exposed to unauthenticated attackers through this HTTP server...
EulerOS Virtualization for ARM 64 3.0.1.0 : libpng12 (EulerOS-SA-2019-1391)
According to the versions of the libpng12 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An array-indexing error was discovered in the pngconverttorfc1123 function of libpng. An attacker could possibly use...
Rockwell Automation Ultra 100 with Indexing 1.0kW 1398-DDM-009X-DN
Binary data 753781.prm...
Rockwell Automation Ultra 100 with Indexing 0.5kW 1398-DDM-005X-DN
Binary data 753780.prm...
Joomla! Component JiFile 2.3.1 - Arbitrary File Download
Joomla! Component JiFile 2.3.1 - Arbitrary File Download Exploit Title: Joomla! Component JiFile 2.3.1 - Arbitrary File Download Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: April 28, 2019 Vendor Homepage: http://www.isapp.it Software Link :...
CVE-2018-4470
A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6...
Open redirect
A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6...
CVE-2018-4470
CVE-2018-4470 affects macOS High Sierra prior to 10.13.6. The issue is a privacy vulnerability in handling Open Directory records, addressed by improved indexing. Affected systems version: macOS High Sierra before 10.13.6; fix is included in the 10.13.6 Security Update (Security Update 2018-004 S...
CVE-2018-4470
A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6...
WebKit JavaScriptCore - 'createRegExpMatchesArray' Type Confusion
/ Prerequisites ------------- In JavaScriptCore, JSObjects have an associated Structure: an object describing various aspects of the JSObject such as its type, its properties, and the type of elements being stored e.g. unboxed double or JSValues. Whenever a property is added to an object or some...
Reconerator - C# Targeted Attack Reconnaissance Tools
This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup queries...
The vulnerability of the SNMP NAT module in Linux operating systems allows attackers to increase their privileges or cause service failures.
The vulnerability of the SNMP NAT module net/ipv4/netfilter/nfnatsnmpbasicmain.c in the Linux operating system is due to indexing errors in the array. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...
Dovecot Out of Bounds Read (CVE-2017-14461)
An out of bounds read vulnerability exists in Dovecot IMAP server. This vulnerability is due to incorrect indexing of specially crafted emails. Successful exploitation may result in information disclosure or denial of service conditions...
Design/Logic Flaw
An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Read in Indexing or a Heap Overflow and crash during handling of certain PDF files that embed specifically crafted 3D content, due to an array acces...
CVE-2019-6985
An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Read in Indexing or a Heap Overflow and crash during handling of certain PDF files that embed specifically crafted 3D content, due to an array acces...
CVE-2019-6985
CVE-2019-6985 affects Foxit 3D Plugin Beta prior to 9.4.0.16807 for Foxit Reader/PhantomPDF. The issue is an out-of-bounds read in Indexing or a heap overflow caused by an array access violation when handling PDF files that embed crafted 3D content, leading to a crash. No exploitation details are...