2212 matches found
GitLab: [Repository Import] Open Redirect via "continue[to]" parameter
Hi, While experimenting with Repository Import functionality on a fresh GitLab 9.0 CE install, I noticed that the continueto parameter can be used to perform an Open Redirect through the inclusion of a double-slash prefix. Proof of Concept The following Proof of Concept URL enables a malicious...
CVE-2016-9334
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...
Padding Oracle Attack
bouncycastle is vulnerable to padding oracle attacks. In an environment where timings can be easily observed, it is possible to identify when the decryption is failing due to padding...
CVE-2016-0070
creationtimestamp| type| source ---|---|--- 2016-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40600 2024-06-27 16:51:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/06/the-windows-registry-adventure-3.html 2026-07-29 12:01:29+00:00| seen|...
chromium-browser: use-after-free in extensions
The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified...
CVE-2016-1708
The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified...
CVE-2016-4971
creationtimestamp| type| source ---|---|--- 2016-07-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40064 2021-04-30 16:26:41+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/283 2024-11-14 06:08:59+00:00| seen| MISP/e8de7faf-a595-4c5b-bcd7-ecddfbfa56af...
Amazon Linux AMI : ntp (ALAS-2016-708)
It was found that an ntpd client could be forced to change from basic client/server mode to the interleaved symmetric mode. A remote attacker could use a spoofed packet that, when processed by an ntpd client, would cause that client to reject all future legitimate server responses, effectively...
CVE-2016-0854
creationtimestamp| type| source ---|---|--- 2016-04-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39735 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/advantechwebaccessdashboardfileupload.rb 2025-02-0...
samba: Spoofing vulnerability when domain controller is configured
It was discovered that Samba configured as a Domain Controller would establish a secure communication channel with a machine using a spoofed computer name. A remote attacker able to observe network traffic could use this flaw to obtain session-related information about the spoofed machine...
CVE-2015-8651
creationtimestamp| type| source ---|---|--- 2016-01-06 08:54:29+00:00| seen| MISP/568cd28a-d9b4-4fb9-a5d5-4674950d210f 2016-03-14 15:06:41+00:00| seen| MISP/56e2de34-582c-49f9-8b64-084395ca48b7 2016-07-07 14:45:11+00:00| seen| MISP/577e6af5-875c-4efd-a836-100795ca48b7 2017-01-13 00:48:04+00:00|...
JBOSS found Java deserialization remote command execution vulnerability-vulnerability warning-the black bar safety net
Recently, many articles on the jboss java deserialization vulnerability the article vibe in the network. So in the end is not as long as with jboss will the existence of this vulnerability? And this vulnerability in the end how much? What is deserialization vulnerability? In fact, the java...
Microsoft Office 2007 - 'mso.dll' Arbitrary Free (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and reproduction. This bug did not reproduce in Office...
CVE-2014-8739
creationtimestamp| type| source ---|---|--- 2015-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36811 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpcreativecontactformfileupload.rb 2025-08-20...
CVE-2015-0941
CVE-2015-0941 : The Inetc plug‑in for NSIS does not validate SSL certificates, enabling MITM attacks that could spoof servers and potentially execute arbitrary code during download of Windows executables. Affected: NSIS Inetc plug‑in (used in FOE and other products). Impact: possible arbitrary co...
CVE-2015-0002
creationtimestamp| type| source ---|---|--- 2015-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35661 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ntapphelpcachecontrol.rb 2025-02-06 03:13:42+00:00...
CVE-2014-6034
creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34867 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/opmanagersocialitfileupload.rb 2025-02-06...
CVE-2013-7409
creationtimestamp| type| source ---|---|--- 2014-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32041 2014-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32074 2018-05-29 15:50:33+00:00| seen|...
