Lucene search
+L

31 matches found

OSV
OSV
•added 2018/07/09 6:29 p.m.•21 views

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

5.3CVSS7.1AI score
SaveExploits0References1
CVE
CVE
•added 2018/07/09 6:00 p.m.•50 views

CVE-2018-13034

CVE-2018-13034: A directory traversal vulnerability in the Jester web framework (version 0.2.0) enables remote attackers to fetch files in arbitrary locations by crafting requests with "..%f" sequences. The vulnerability primarily impacts confidentiality (C) with partial impact, as indicated by C...

5.3CVSS5.4AI score0.01797EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/07/09 6:00 p.m.•35 views

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

5.5AI score0.01797EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/09 12:00 a.m.•5 views

CVE-2018-13034: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

5.3CVSS6.1AI score0.01797EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2011/07/09 8:15 a.m.•15 views

XerXes - Most powerful dos tool

XerXes - Most powerful dos tool XerXes is one of the most powerful private dos tool. This tools was used by The Jester to Hits WikiLeaks Site DoS Attack. Get Source Code here : / XerXes - Most powerful dos tool - THN https://www.thehackernews.com / include stdio.h include stdlib.h include string....

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/02/24 8:22 p.m.•18 views

Anonymous Hackers send a video message to Westboro Baptist Church !

Anonymous doesn't kid around and the Westboro Baptist Church learned that the hard way. The hacktivist group took down their website and left a stern message. The two groups, the radical hackers which launch denial-of-service attacks and the radical religious organization which preaches its messa...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2010/12/01 5:02 a.m.•18 views

WikiLeaks Hit by Distributed Denial of Service (DDoS) Attack

WikiLeaks faced another distributed denial of service DDoS attack on Tuesday morning, as reported by Fast Company. This attack was more intense than the one on Sunday, but it still didn't come close to shutting down the site. A computer hacker known as "The Jester" shocked officials by claiming...

6.9AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2010/11/30 4:54 p.m.•13 views

Wikileaks Suffers Second DDoS Attack

The Wikileaks Website labored under a massive denial of service attack Tuesday, 48 hours after the site published its first installment of a massive trove of leaked U.S. diplomatic cables. Both Wikileaks.org and cablegate.wikileaks.org, the subdomain created to host the leaked U.S. embassy cables...

1.4AI score
SaveExploits0References6
Exploit DB
Exploit DB
•added 2010/03/20 12:00 a.m.•57 views

Trouble Ticket Software - 'ttx.cgi' Arbitrary File Download

Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob @ http://n01d.com Type: Trouble Ticket Software 0Day...

5.8AI score
SaveExploits0
CVE
CVE
•added 2009/08/11 10:00 a.m.•71 views

CVE-2009-2735

The CVE-2009-2735 entry describes an SQL injection in sun-jester OpenNews 1.0, via admin.php when magic_quotes_gpc is disabled. The vulnerability affects the username parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented in NVD and mirrored in multiple referen...

6.8CVSS8.7AI score0.0098EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/11 12:00 a.m.•5 views

CVE-2009-2736: Improper Control of Generation of Code

Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the "Overall Width" field in a setconfig action...

6.5CVSS6AI score0.04821EPSS
SaveExploits1References2
Rows per page
Query Builder