Lucene search
+L

5060 matches found

BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.10 views

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

4.3CVSS5.6AI score0.0223EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.9 views

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using request parameters...

4.3CVSS5.7AI score0.03194EPSS
SaveExploits1References3Affected Software1
Ubuntu
Ubuntu
added 2016/03/10 3:15 p.m.61 views

USN-2926-1: OTR vulnerability

Markus Vervier discovered that OTR incorrectly handled large incoming messages. A remote attacker could use this issue to cause OTR to crash, resulting in a denial of service, or possibly execute arbitrary code...

9.8CVSS8.6AI score0.254EPSS
SaveExploits5
ThreatPost
ThreatPost
added 2016/03/10 10:23 a.m.10 views

libotr Off-the-Record Secure Messaging Security Patch

Users of secure messaging apps such as Pidgin, Adium and others built upon libotr, the Off-the-Record protocol, are being urged to update immediately to current versions after the discovery of a critical flaw that can be used in targeted attacks to expose encrypted communication. The OTR...

0.4AI score
SaveExploits0References2
exploitpack
exploitpack
added 2016/03/10 12:0 a.m.45 views

libotr 4.1.0 - Memory Corruption

libotr 4.1.0 - Memory Corruption ''' X41 D-Sec GmbH Security Advisory: X41-2016-001 Memory Corruption Vulnerability in "libotr" =========================================== Overview -------- Severity Rating: high Confirmed Affected Version: 4.1.0 and below Confirmed Patched Version: libotr 4.1.1...

7.5CVSS0.4AI score0.254EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2016/03/10 12:0 a.m.86 views

Debian DSA-3512-1 : libotr - security update

Markus Vervier of X41 D-Sec GmbH discovered an integer overflow vulnerability in libotr, an off-the-record OTR messaging library, in the way how the sizes of portions of incoming messages were stored. A remote attacker can exploit this flaw by sending crafted messages to an application that is...

9.8CVSS8.5AI score0.254EPSS
SaveExploits5References4
zdt
zdt
added 2016/03/10 12:0 a.m.70 views

libotr 4.1.0 - Memory Corruption

Exploit for multiple platform in category dos / poc ''' X41 D-Sec GmbH Security Advisory: X41-2016-001 Memory Corruption Vulnerability in "libotr" =========================================== Overview -------- Severity Rating: high Confirmed Affected Version: 4.1.0 and below Confirmed Patched...

7.5CVSS9.2AI score0.254EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2016/03/10 12:0 a.m.61 views

libotr 4.1.0 - Memory Corruption

''' X41 D-Sec GmbH Security Advisory: X41-2016-001 Memory Corruption Vulnerability in "libotr" =========================================== Overview -------- Severity Rating: high Confirmed Affected Version: 4.1.0 and below Confirmed Patched Version: libotr 4.1.1 Vendor: OTR Development Team Vendo...

9.8CVSS8.2AI score0.254EPSS
SaveExploits5
Debian
Debian
added 2016/03/09 9:25 p.m.72 views

[SECURITY] [DSA 3512-1] libotr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3512-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 09, 2016 https://www.debian.org/security/faq -...

9.8CVSS9.8AI score0.254EPSS
SaveExploits5
RedHat Linux
RedHat Linux
added 2016/03/08 10:52 p.m.23 views

Moderate: Red Hat Security Advisory: rabbitmq-server security and bug fix update

Updated rabbitmq-server packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

5CVSS5.8AI score0.02622EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:0 a.m.11 views

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to influence the system.

Vulnerability of Adobe Connect’s instant messaging program. Exploiting this vulnerability can allow a malicious actor to influence the system through a specially crafted parameter in the URL string...

10CVSS7.8AI score0.04424EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:0 a.m.11 views

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace the user interface.

The vulnerability of the Adobe Connect instant messaging program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the user interface...

5CVSS6.3AI score0.01773EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:0 a.m.10 views

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace a user during the session.

The vulnerability of the Adobe Connect instant messaging program is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during the session...

6.8CVSS7.5AI score0.01879EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2016/02/29 5:27 a.m.17 views

[SECURITY] Fedora 23 Update: jabberd-2.3.3-7.fc23

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

2.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2016/02/25 12:0 a.m.139 views

IBM Lotus Domino R8 - Password Hash Extraction

Exploit Title: IBM Lotus Domino = R8 Password Hash Extraction Exploit Google Dork: inurl:names.nsf?opendatabase Date: 02-24-2016 Exploit Author: Jonathan Broche Contact: https://twitter.com/g0jhonny Vendor Homepage: https://www-01.ibm.com/software/lotus/category/messaging/ Tested on: Lotus Domino...

5CVSS5.2AI score0.73028EPSS
SaveExploits11
n0where
n0where
added 2016/02/22 6:9 p.m.19 views

Protecting Personal Information: Freedom Box

FreedomBox is a personal server that protects your privacy. It hosts on demand applications such as file sharing, shared calendaring, instant messaging, secure voice conference calling, blog and wiki. FreedomBox is a free software stack, a subset of the Debian universal operating system, that can...

0.7AI score
SaveExploits0
NVD
NVD
added 2016/02/22 5:59 a.m.22 views

CVE-2015-5331

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

4.3CVSS5.4AI score0.01278EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2016/02/22 5:59 a.m.21 views

CVE-2015-5331

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

4.3CVSS6.3AI score0.01278EPSS
SaveExploits0References2
Prion
Prion
added 2016/02/22 5:59 a.m.13 views

Design/Logic Flaw

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

4CVSS6.6AI score0.01278EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2016/02/22 2:0 a.m.31 views

CVE-2015-5331

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

5.3AI score0.01278EPSS
SaveExploits0References2
Rows per page
Query Builder