Lucene search
+L

8227 matches found

CNVD
CNVD
added 2020/01/19 12:00 a.m.41 views

Unspecified Vulnerability in Intelbras WRN240

Intelbras WRN240 is a wireless router from Intelbras Poland. A security vulnerability exists in the Intelbras WRN240 that stems from the program not authenticating firmware substitutions. An attacker can exploit the vulnerability by sending a POST request to the incoming/Firmware.cfg URI to repla...

7.5CVSS6.9AI score0.0781EPSS
SaveExploits5References1
NVD
NVD
added 2020/01/17 5:16 p.m.23 views

CVE-2019-15855

An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installation procedure was followed. This results in a permanent Denial of Service...

9.1CVSS9.1AI score0.01508EPSS
SaveExploits0References1
Prion
Prion
added 2020/01/17 5:16 p.m.21 views

Path traversal

An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installation procedure was followed. This results in a permanent Denial of Service...

6.4CVSS8.9AI score0.01508EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/01/17 4:38 p.m.33 views

CVE-2019-15855

An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installation procedure was followed. This results in a permanent Denial of Service...

9.1AI score0.01508EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/17 1:29 a.m.30 views

CVE-2019-19142

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI...

7.6AI score0.0781EPSS
SaveExploits5References2
zdt
zdt
added 2020/01/16 12:00 a.m.93 views

Rukovoditel Project Management CRM 2.5.2 - (filters) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net/ Software Link:...

0.4AI score
SaveExploits0
exploitpack
exploitpack
added 2020/01/16 12:00 a.m.52 views

Rukovoditel Project Management CRM 2.5.2 - filters SQL Injection

Rukovoditel Project Management CRM 2.5.2 - filters SQL Injection Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection Google Dork: N/A Date: 2020-01-15 Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net/...

0.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/01/15 12:00 a.m.11 views

PT-2020-15297 · Jenkins · Jenkins Amazon Ec2 Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Amazon EC2 Plugin versions 1.47 and earlier Description: A missing permission check in the Jenkins Amazon EC2 Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS region using...

8.1CVSS7.9AI score0.01113EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2020/01/14 12:00 a.m.122 views

Barco WePresent file_transfer.cgi Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Barco WePresent filetransfer.cgi Command Injection", 'Description' = %q This module exploits an unauthenticated remote command injection...

10CVSS9.6AI score0.98952EPSS
SaveExploits10
Exploit DB
Exploit DB
added 2019/12/30 12:00 a.m.149 views

XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery (Add Admin)

Exploit Title: XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-19 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link : https://www.office.xerox.com/en-us/multifunction-printers/workcentre-7800-series/ Software : Xerox Printer...

5.3AI score
SaveExploits0
zdt
zdt
added 2019/12/30 12:00 a.m.162 views

XEROX WorkCentre 6655 Printer - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: XEROX WorkCentre 6655 Printer - Cross-Site Request Forgery Add Admin Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link :...

0.6AI score
SaveExploits0
exploitpack
exploitpack
added 2019/12/30 12:00 a.m.36 views

XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery (Add Admin)

XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery Add Admin Exploit Title: XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-19 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link :...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2019/12/30 12:00 a.m.111 views

XEROX WorkCentre 7830 Printer - Cross-Site Request Forgery (Add Admin)

Exploit Title: XEROX WorkCentre 7830 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-19 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link : https://www.office.xerox.com/en-us/multifunction-printers/workcentre-7800-series Software : Xerox Printer...

5.3AI score
SaveExploits0
NVD
NVD
added 2019/12/27 9:15 p.m.33 views

CVE-2014-5289

Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request...

9.8CVSS9.8AI score0.12021EPSS
SaveExploits13References3
Prion
Prion
added 2019/12/27 9:15 p.m.20 views

Buffer overflow

Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request...

7.5CVSS8.3AI score0.12021EPSS
SaveExploits13References3Affected Software1
CVE
CVE
added 2019/12/27 8:35 p.m.161 views

CVE-2014-5289

CVE-2014-5289 is a stack/remote buffer overflow in SENKAS Kolibri Webserver 2.0 where improper validation of input in HTTP POST handling allows a remote attacker to execute arbitrary code. Public reports (SAINT, EXPLOIT-DB, Seebug) describe a user-supplied long URI in POST requests as the trigger...

9.8CVSS9.6AI score0.12021EPSS
SaveExploits13References3Affected Software1
Cvelist
Cvelist
added 2019/12/27 8:35 p.m.41 views

CVE-2014-5289

Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request...

9.8AI score0.12021EPSS
SaveExploits13References3
Packet Storm
Packet Storm
added 2019/12/26 12:00 a.m.120 views

XEROX WorkCentre 7830 Printer Cross Site Request Forgery

Exploit Title: XEROX WorkCentre 7830 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-19 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link : https://www.office.xerox.com/en-us/multifunction-printers/workcentre-7800-series Software : Xerox Printer...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/12/26 12:00 a.m.93 views

XEROX WorkCentre 7855 Printer Cross Site Request Forgery

Exploit Title: XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-19 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link : https://www.office.xerox.com/en-us/multifunction-printers/workcentre-7800-series/ Software : Xerox Printer...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/12/26 12:00 a.m.87 views

XEROX WorkCentre 6655 Printer Cross Site Request Forgery

Exploit Title: XEROX WorkCentre 6655 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-19 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link : https://www.office.xerox.com/en-us/multifunction-printers/workcentre-6655 Software : Xerox Printer Product...

0.4AI score
SaveExploits0
Rows per page
Query Builder