Lucene search
+L

5151 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/11/09 12:00 a.m.•58 views

Kaspersky Total Security Directory Traversal Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Kaspersky Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS7.2AI score0.02601EPSS
SaveExploits0References1
Hacker One
Hacker One
•added 2021/11/04 8:37 p.m.•24 views

GitHub Security Lab: Yet another SSRF query for Go

This bug was reported directly to GitHub Security Lab...

1.2AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/04 8:37 p.m.•36 views

GitHub Security Lab: Yet another SSRF query for Go

This bug was reported directly to GitHub Security Lab...

1.2AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/04 7:00 p.m.•28 views

GitHub Security Lab: Yet another SSRF query for Go

This bug was reported directly to GitHub Security Lab...

1.2AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/04 7:00 p.m.•28 views

GitHub Security Lab: Yet another SSRF query for Javascript

This bug was reported directly to GitHub Security Lab...

0.7AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/04 7:00 p.m.•28 views

GitHub Security Lab: Yet another SSRF query for Javascript

This bug was reported directly to GitHub Security Lab...

0.7AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/04 7:00 p.m.•31 views

GitHub Security Lab: Yet another SSRF query for Javascript

This bug was reported directly to GitHub Security Lab...

0.7AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/04 7:00 p.m.•36 views

GitHub Security Lab: Yet another SSRF query for Go

This bug was reported directly to GitHub Security Lab...

1.2AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/04 7:00 p.m.•28 views

GitHub Security Lab: Yet another SSRF query for Javascript

This bug was reported directly to GitHub Security Lab...

0.7AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/11/03 6:05 p.m.•2 views

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-5312 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

9.8CVSS0.0369EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/11/03 6:04 p.m.•2 views

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-10378 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2020-10378 Source advisory: OSV:GHSA-3XV8-3J54-HGRP...

5.5CVSS0.01114EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/11/03 6:04 p.m.•3 views

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-5310 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2020-5310 Source advisory: OSV:GHSA-VCQG-3P29-XW73...

8.8CVSS0.01975EPSS
SaveExploits0
zdt
zdt
•added 2021/11/03 12:00 a.m.•374 views

PHPJabbers Simple CMS 5 - (name) Persistent Cross-Site Scripting Vulnerability

Exploit Title: PHPJabbers Simple CMS 5 - 'name' Persistent Cross-Site Scripting XSS Google Dork: subtitle:Copyright © 2021 PHPJabbers.com Date: 2021-10-28 Exploit Author: Vulnerability-Lab Vendor Homepage: https://www.phpjabbers.com/faq.php Software Link: https://www.phpjabbers.com/simple-cms/...

7.1AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/11/02 6:21 p.m.•59 views

GitHub Security Lab: C# : Add query to detect Server Side Request Forgery

This bug was reported directly to GitHub Security Lab...

7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2021/10/27 8:36 a.m.•312 views

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-22005 VMware vCenter Server arbitrary file upload...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits11
Schneier on Security
Schneier on Security
•added 2021/10/25 6:46 p.m.•23 views

New York Times Journalist Hacked with NSO Spyware

Citizen Lab is reporting that a New York Times journalist was hacked with the NSO Groups spyware Pegasus, probably by the Saudis. The world needs to do something about these cyberweapons arms manufacturers. This kind of thing isnt enough; NSO Group is an Israeli company...

0.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2021/10/25 6:55 a.m.•28 views

NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

The iPhone of New York Times journalist Ben Hubbard was repeatedly hacked with NSO Group's Pegasus spyware tool over a three-year period stretching between June 2018 to June 2021, resulting in infections twice in July 2020 and June 2021. The University of Toronto's Citizen Lab, which publicized t...

6.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/10/25 12:00 a.m.•528 views

GridPro Request Management For Windows Azure Pack 2.0.7905 Directory Traversal

Certitude Securtiy Advisory - CSA-2021-003 PRODUCT : GridPro Request Management for Windows Azure Pack VENDOR : GridPro Software SEVERITY : Critical AFFECTED VERSION : =2.0.7905 IDENTIFIERS : CVE-2021-40371 PATCH VERSION : 2.0.7912 FOUND BY : Giulian Guran, Certitude Lab Introduction ------------...

0.5AI score0.07109EPSS
SaveExploits3
Hacker One
Hacker One
•added 2021/10/22 10:19 p.m.•56 views

GitHub Security Lab: [Java] CWE-552: Unsafe url forward

This bug was reported directly to GitHub Security Lab...

0.9AI score
SaveExploits0
Hacker One
Hacker One
•added 2021/10/22 10:19 p.m.•60 views

GitHub Security Lab: [cpp] CWE-787: query to detect unsigned integer to signed integer conversions used in pointer arithmetics

This bug was reported directly to GitHub Security Lab...

2.6AI score
SaveExploits0
Rows per page
Query Builder