Lucene search
+L

9974 matches found

CNVD
CNVD
added 2020/05/21 12:0 a.m.4 views

Stone Technology Opinion Analysis Assistant suffers from SQL Injection Vulnerability

Stone Technology Public Opinion Analysis Assistant is a program that monitors in a cyclical manner, collects the titles of publicly released information from designated websites at the first time, screens out the information and links required by users based on keywords and filters, and prompts t...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/21 12:0 a.m.15 views

Cacti Cross-Site Request Forgery Vulnerability (CNVD-2021-37698)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site request forgery vulnerability exists in...

6.5CVSS6.4AI score0.00848EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.7 views

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, allows a intruder to trigger a service failure.

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to...

7.8CVSS7.5AI score0.05722EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.9 views

The vulnerability of the VNC Server component of the remote desktop management software UltraVNC, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment of TelevisGo, allows a perpetrator to execute arbitrary code.

The vulnerability of the VNC Server component of the remote desktop management software UltraVNC, which is part of the monitoring, control, and remote maintenance module for the commercial cold production system TelevisGo, is related to a buffer overflow in the request-to-file transfer handler...

10CVSS8.6AI score0.08263EPSS
SaveExploits0References4Affected Software1
zdt
zdt
added 2020/05/19 12:0 a.m.243 views

Mikrotik Router Monitoring System 1.2.3 - (community) SQL Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection Exploit Author: jul10l1r4 Julio Lira Vendor Homepage: https://mikrotik.com Software Link: https://mikrotik.com/download Version: = 1.2.3 Tested on: Debian ...

7.5CVSS0.1AI score0.03955EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.10 views

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, allows a intruder to execute arbitrary code.

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute...

10CVSS8.2AI score0.0397EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.9 views

The vulnerability of the VNC Server component of the remote desktop management software UltraVNC, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment of TelevisGo, allows a perpetrator to execute arbitrary code.

The vulnerability of the VNC Server component of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for commercial cold production equipment of TelevisGo, is related to incorrect calculations in the software. Exploiting this vulnerability allows a...

10CVSS8.2AI score0.0392EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.8 views

The vulnerability of the ClientConnection::ReadString function in the VNC client component of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for commercial cold production equipment of TelevisGo, allows a perpetrator to execute arbitrary code.

The vulnerability of the ClientConnection::ReadString function in the VNC component of the UltraVNC software for remote desktop management systems, which is part of the monitoring, control, and remote maintenance module for commercial cold production equipment like TelevisGo, is related to a...

10CVSS8.2AI score0.0392EPSS
SaveExploits0References4Affected Software1
Fedora
Fedora
added 2020/05/18 2:44 a.m.39 views

[SECURITY] Fedora 32 Update: condor-8.8.8-1.fc32

HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs t...

9.8CVSS0.3AI score0.02811EPSS
SaveExploits0
Exploit DB
Exploit DB
added 2020/05/18 12:0 a.m.229 views

Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection

Exploit Title: Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection Exploit Author: jul10l1r4 Julio Lira Google Dork: N/A Date: 2020-05-16 Vendor Homepage: https://mikrotik.com Software Link: https://mikrotik.com/download Version: = 1.2.3 Tested on: Debian 10 buster CVE: 2020-13118...

9.8CVSS8.4AI score0.03955EPSS
SaveExploits4
Fedora
Fedora
added 2020/05/17 3:49 a.m.33 views

[SECURITY] Fedora 31 Update: condor-8.8.8-1.fc31

HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs t...

9.8CVSS0.3AI score0.02811EPSS
SaveExploits0
Fedora
Fedora
added 2020/05/17 3:20 a.m.48 views

[SECURITY] Fedora 30 Update: condor-8.8.8-1.fc30

HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs t...

9.8CVSS0.3AI score0.02811EPSS
SaveExploits0
NVD
NVD
added 2020/05/16 8:15 p.m.40 views

CVE-2020-13118

An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in checkcommunity.php via the parameter community...

9.8CVSS9.9AI score0.03955EPSS
SaveExploits4References2
OSV
OSV
added 2020/05/16 8:15 p.m.6 views

CVE-2020-13118

An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in checkcommunity.php via the parameter community...

9.8CVSS7.4AI score0.03955EPSS
SaveExploits4References2
Cvelist
Cvelist
added 2020/05/16 7:11 p.m.43 views

CVE-2020-13118

An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in checkcommunity.php via the parameter community...

9.9AI score0.03955EPSS
SaveExploits4References2
CVE
CVE
added 2020/05/16 7:11 p.m.74 views

CVE-2020-13118

CVE-2020-13118 affects Mikrotik-Router-Monitoring-System up to 2018-10-22, with a SQL Injection in check_community.php via the community parameter. The vulnerability is triggered over the network and has very high impact, with NVD assigning CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 7.5 (HIGH)...

9.8CVSS9.8AI score0.03955EPSS
SaveExploits4References2Affected Software1
Packet Storm
Packet Storm
added 2020/05/16 12:0 a.m.159 views

Mikrotik Router Monitoring System 1.2.3 SQL Injection

Exploit Title: Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection Exploit Author: jul10l1r4 Julio Lira Google Dork: N/A Date: 2020-05-16 Vendor Homepage: https://mikrotik.com Software Link: https://mikrotik.com/download Version: = 1.2.3 Tested on: Debian 10 buster CVE: 2020-13118...

0.4AI score0.03955EPSS
SaveExploits4
Veeam
Veeam
added 2020/05/12 12:0 a.m.20 views

Veeam Management Pack 8.0 Update 6 cumulative patch for VMware vSphere 7.0 monitoring

Challenge Veeam Management Pack 8.0 Update 6 is not compatible with VMware vSphere 7.0 and later. When you try to connect to vCenter Servers running VMware vSphere 7.0, you get the following error: "Cannot connect to "YourVcenterName" on port 443. Unsupported API version." Cause The issue is...

6.9AI score
SaveExploits0
Kitploit
Kitploit
added 2020/05/11 9:30 p.m.61 views

Wifipumpkin3 - Powerful Framework For Rogue Access Point Attack

wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle attack. Main Features Rogue access point attack Man-in-the-middle attack...

7.2AI score
SaveExploits0References5
zdt
zdt
added 2020/05/09 12:0 a.m.100 views

ManageEngine DataSecurity Plus Path Traversal / Code Execution Vulnerabilities

ManageEngine DataSecurity Plus versions prior to 6.0.1 and ADAudit Plus versions prior to 6.0.3 suffers from a path traversal vulnerability that can lead to remote code execution. ManageEngine DataSecurity Plus Path Traversal / Code Execution Vulnerabilities Identifiers...

6.5CVSS0.3AI score0.13655EPSS
SaveExploits3
Rows per page
Query Builder