3665 matches found
Keylogger - Get Keyboard, Mouse, ScreenShot, Microphone Inputs From Target Computer And Send To Your Mail
Inputs To Mail. Get Keyboard,Mouse,ScreenShot,Microphone Inputs and Send to your Mail. Purpose of the project is testing the security of information systems INSTALLATION pip install pynput USAGE •Set your own MAIL and PASSWORD on "keylogger.py". •Run main.py on Target Computer •Every 10 seconds,Y...
Azure DevOps Server Cross-site Scripting Vulnerability
A Cross-site Scripting XSS vulnerability exists when Azure DevOps Server does not properly sanitize user provided input. An authenticated attacker could exploit the vulnerability by sending a specially crafted payload to the Azure DevOps Server, which will get executed in the context of the user...
CVE-2020-3290
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...
Joomla 2.5.x < 3.9.19 Multiple Vulnerabilities (5812-joomla-3-9-19)
According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.19. It is, therefore, affected by multiple vulnerabilities. - In Joomla! before 3.9.19, lack of input validation in the heading tag option of the Articles - Newsflash and Article...
Azure DevOps Server HTML Injection Vulnerability
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive information. An...
CVE-2020-13763
CVE-2020-13763 affects Joomla!
RHEL 8 : openvswitch2.11 (RHSA-2020:2297)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2297 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...
RHEL 8 : openvswitch2.13 (RHSA-2020:2295)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2295 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...
RHEL 7 : openvswitch2.11 (RHSA-2020:2296)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2296 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...
openSUSE Security Update : dpdk (openSUSE-2020-693)
This update for dpdk fixes the following issues : Security issues fixed : - CVE-2020-10722: Fixed an integer overflow in vhostusersetlogbase bsc1171477. - CVE-2020-10723: Fixed an integer truncation in vhostusercheckandallocqueuepair bsc1171477. - CVE-2020-10724: Fixed a missing inputs validation...
Security update for dpdk (moderate)
openSUSE Security Update: Security update for dpdk Announcement ID: openSUSE-SU-2020:0693-1 Rating: moderate References: 1171477 Cross-References: CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 Affected Products: openSUSE Leap 15.1 An update that fixes 5 vulnerabilitie...
SUSE SLED15 / SLES15 Security Update : dpdk (SUSE-SU-2020:1335-1)
This update for dpdk fixes the following issues : Security issues fixed : CVE-2020-10722: Fixed an integer overflow in vhostusersetlogbase bsc1171477. CVE-2020-10723: Fixed an integer truncation in vhostusercheckandallocqueuepair bsc1171477. CVE-2020-10724: Fixed a missing inputs validation in...
CVE-2020-1055
A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'...
SUSE-SU-2020:1334-1 Security update for dpdk
This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhostusersetlogbase bsc1171477. - CVE-2020-10723: Fixed an integer truncation in vhostusercheckandallocqueuepair bsc1171477. - CVE-2020-10724: Fixed a missing inputs validation i...
USN-4362-1 dpdk vulnerabilities
It was discovered that DPDK incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. CVE-2020-10722, CVE-2020-10723, CVE-2020-10724, CVE-2020-10725, CVE-2020-10726...
CVE-2020-6257
SAP Business Objects Business Intelligence Platform CMC and BI Launchpad 4.2 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability...
Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability
A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize user inputs. An un-authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected ADFS server. The attacker who successfully...
Regular Expression Denial Of Service (ReDoS)
hubot-help is vulnerable to regular expression denial of service ReDoS. The attack is possible due to lack of properly handling of user inputs for command name registration and regex with wildcard characters, triggering a backtracking behavior against the current set of commands registered and...
USN-4354-1: Mailman vulnerability
It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary content in the login page...
Denial Of Service (DoS)
js-quantities is vulnerable to denial of service DoS attacks through out-of-memoryOOM.The vulnerability exists due to the function parse in quantities.js which does not properly handle unsanitized user inputs.An attacker can exploit this flaw by inserting evil input strings, leading to an...