Lucene search
+L

645 matches found

Openbugbounty
Openbugbounty
•added 2019/10/03 1:08 a.m.•9 views

ml.99166.com Cross Site Scripting vulnerability

Security Researcher logindenied Helped patch 7927 vulnerabilities Received 8 Coordinated Disclosure badges Received 76 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ml.99166.com website and its users. Following...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/09/16 12:00 a.m.•95 views

Notepad++ < 7.7 (x64) - Denial of Service

Exploit Title: Notepad++ all x64 versions before 7.7. Remote memory corruption via .ml file. Google Dork: N/A Date: 2019-09-14 Exploit Author: Bogdan Kurinnoy [email protected] Vendor Homepage: https://notepad-plus-plus.org/ Version: 7.7 Tested on: Windows x64 CVE : CVE-2019-16294 Description:...

7.8CVSS7.3AI score0.09832EPSS
SaveExploits2
NVD
NVD
•added 2019/09/14 4:15 p.m.•36 views

CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

7.8CVSS7.8AI score0.09832EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2019/09/14 3:39 p.m.•46 views

CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

7.9AI score0.09832EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2019/09/14 12:00 a.m.•21 views

PT-2019-3959 · Notepad++ · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad++ versions prior to 7.7 Description: The issue is related to insufficient input validation in the SciLexer.dll component of the Scintilla text editing component in Notepad++. This can be exploited by a remote attacker using a speciall...

7.8CVSS7.7AI score0.09832EPSS
SaveExploits2References10
CNVD
CNVD
•added 2019/07/19 12:00 a.m.•19 views

ML Code Injection Vulnerability

Discuz!ML is an open source community forum system based on the Discuz!X engine. A security vulnerability exists in Discuz!ML version 3.2 to 3.4. A remote attacker can exploit this vulnerability to execute arbitrary PHP code...

9.8CVSS7.6AI score0.04572EPSS
SaveExploits3References1
NVD
NVD
•added 2019/07/18 6:15 p.m.•43 views

CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

9.8CVSS9.8AI score0.04572EPSS
SaveExploits3References1
Prion
Prion
•added 2019/07/18 6:15 p.m.•35 views

Code injection

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

7.5CVSS9.7AI score0.04572EPSS
SaveExploits3References1Affected Software1
Cvelist
Cvelist
•added 2019/07/18 5:23 p.m.•49 views

CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

9.8AI score0.04572EPSS
SaveExploits3References1
CVE
CVE
•added 2019/07/18 5:23 p.m.•120 views

CVE-2019-13956

Discuz!ML versions 3.2–3.4 are affected by a code-injection vulnerability in the language cookie. The root cause is improper handling of the language cookie value, allowing remote attackers to inject and execute arbitrary PHP code (for example via language=en'.phpinfo().');, enabling remote code ...

9.8CVSS9.7AI score0.04572EPSS
SaveExploits3References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/18 12:00 a.m.•6 views

CVE-2019-13956: Improper Control of Generation of Code

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

9.8CVSS6.4AI score0.04572EPSS
SaveExploits3References2
CNVD
CNVD
•added 2019/07/11 12:00 a.m.•43 views

Discuz!ML 3.x Arbitrary Code Execution Vulnerability

Discuz!ML is a multilingual open source community system based on the Discuz!X engine. An arbitrary code execution vulnerability exists in Discuz!ML 3.x, which can be exploited by attackers to execute arbitrary code...

8.2AI score
SaveExploits0References1
myhack58
myhack58
•added 2019/07/11 12:00 a.m.•158 views

Discuz! ML arbitrary code execution vulnerability alerts-a vulnerability alert-the black bar safety net

2019 Year 7 month 11 days, the network appeared on a Discuz it! ML remote code execution vulnerability PoC, through Sangfor security researcher to verify the analysis found, the attacker can use the vulnerability in the request flow of the cookie field in the language parameter to insert arbitrar...

0.9AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2019/07/08 12:00 a.m.•877 views

Discuz!ML v3.x - Code Injection Vulnerability

Document Title: =============== Discuz!ML v3.x - Code Injection Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2185 Download: https://www.vulnerability-lab.com/resources/documents/2185.rar http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13956...

7.5CVSS0.3AI score0.04572EPSS
SaveExploits3
Vulnerability Lab
Vulnerability Lab
•added 2019/07/07 12:00 a.m.•125 views

Discuz!ML v3.x - Code Injection Vulnerability

Document Title: =============== Discuz!ML v3.x - Code Injection Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2185 Download: https://www.vulnerability-lab.com/resources/documents/2185.rar http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13956...

9.8CVSS9.7AI score0.04572EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•18 views

Aerotech Ensemble ML Servo Drives Detection

Binary data 763918.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•19 views

Aerotech Soloist ML Servo Drives Detection

Binary data 763920.prm...

7.3AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2019/01/08 12:13 p.m.•94 views

Machine Learning to Detect Software Vulnerabilities

No one doubts that artificial intelligence AI and machine learning ML will transform cybersecurity. We just don't know how, or when. While the literature generally focuses on the different uses of AI by attackers and defenders ­ and the resultant arms race between the two ­ I want to talk about...

7.4AI score
SaveExploits0
OSV
OSV
•added 2018/12/28 4:29 p.m.•12 views

CVE-2018-5204

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

9.8CVSS6AI score0.0234EPSS
SaveExploits0References1
NVD
NVD
•added 2018/12/28 4:29 p.m.•22 views

CVE-2018-5204

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

9.8CVSS9.7AI score0.0234EPSS
SaveExploits0References1
Rows per page
Query Builder