Lucene search
+L

1085 matches found

Talos Blog
Talos Blog
added 2017/10/18 3:30 a.m.19 views

Beers with Talos EP 15: Landing a Job, Phishing Midstream, and Paul’s IDA Palette

Beers with Talos BWT Podcast Episode 15 is now available. Download this episode and subscribe to Beers with Talos:img border="0" data-original-height="45" data-original-width="160" src="https://2.bp.blogspot.com/-E-RSSZ9jbUY/WaWCkLGZnZI/AAAAAAAAAJE/Ciiz-Si4oA0cgR9tMGSGbT9336qr...

6.7AI score
SaveExploits0
Talos Blog
Talos Blog
added 2017/10/03 5:38 p.m.29 views

Beers with Talos EP14: Ranking Threats and Avoiding Bush League Breach Response

Beers with Talos BWT Podcast Episode 14 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: a href="http://www.talosin...

6.9AI score
SaveExploits0
Talos Blog
Talos Blog
added 2017/09/20 7:37 a.m.22 views

Beers with Talos EP 13:A Vast CCleanup, Strutting Your Stuff, and the Ex$ploit Economy

Beers with Talos BWT Podcast Episode 13 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: a href="ht...

6.9AI score
SaveExploits0
Wallarm Lab
Wallarm Lab
added 2017/09/19 8:04 p.m.54 views

Webinar with Rick Orloff, ex CISO of eBay

Join us at 11 am PDT on Wednesday, September 27 for a live frank conversation with Rick Orloff, CSO of Code42 and former CISO of eBay. UPDATE: The recorded webinar is available as a podcast: Rick shared his insights about the changing role of security with new realities of DevOps world, new...

6.8AI score
SaveExploits0
Debian
Debian
added 2017/09/18 6:35 p.m.52 views

[SECURITY] [DSA 3977-1] newsbeuter security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3977-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 18, 2017 https://www.debian.org/security/faq -...

6.8CVSS2.5AI score0.03078EPSS
SaveExploits0
Debian
Debian
added 2017/09/18 6:35 p.m.59 views

[SECURITY] [DSA 3977-1] newsbeuter security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3977-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 18, 2017 https://www.debian.org/security/faq -...

8.8CVSS8.7AI score0.03078EPSS
SaveExploits0
Prion
Prion
added 2017/09/17 5:29 a.m.24 views

Command injection

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

6.8CVSS8.8AI score0.06404EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2017/09/17 5:29 a.m.18 views

CVE-2017-14500

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

8.8CVSS8.9AI score0.03078EPSS
SaveExploits0References6
OSV
OSV
added 2017/09/17 5:29 a.m.22 views

CVE-2017-14500

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

8.8CVSS8.9AI score
SaveExploits0References6
OSV
OSV
added 2017/09/17 5:29 a.m.8 views

UBUNTU-CVE-2017-14500

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

8.8CVSS7.7AI score0.03078EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2017/09/17 5:29 a.m.23 views

CVE-2017-14500

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

8.8CVSS7.6AI score0.03078EPSS
SaveExploits0References3
OSV
OSV
added 2017/09/17 5:29 a.m.4 views

ALPINE-CVE-2017-14500

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

8.8CVSS7.9AI score0.03078EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/09/17 5:00 a.m.48 views

CVE-2017-14500

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

8.9AI score0.03078EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2017/09/17 5:00 a.m.27 views

CVE-2017-14500

Removed by vendor...

8.8CVSS8.7AI score0.03078EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/09/17 5:00 a.m.77 views

CVE-2017-14500

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...

8.8CVSS9AI score0.03078EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/09/17 12:00 a.m.28 views

Debian: Security Advisory (DSA-3977-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.03078EPSS
SaveExploits0References3
ArchLinux
ArchLinux
added 2017/09/16 12:00 a.m.27 views

[ASA-201709-11] newsbeuter: arbitrary command execution

Arch Linux Security Advisory ASA-201709-11 ========================================== Severity: High Date : 2017-09-16 CVE-ID : CVE-2017-12904 CVE-2017-14500 Package : newsbeuter Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-401 Summary ======= The...

9.3CVSS2.9AI score0.06404EPSS
SaveExploits0References10
Talos Blog
Talos Blog
added 2017/09/14 12:54 p.m.18 views

Beers with Talos EP12 - IrmaGerd! The Internet Ate Our Podcast!

Beers with Talos BWT Podcast Episode 12 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcastbr /...

6.8AI score
SaveExploits0
Talos Blog
Talos Blog
added 2017/08/29 7:14 a.m.26 views

Beers with Talos EP11 - This is How the World Ends, Not with a Whimper but with Cyber Mercenaries

Beers with Talos BWT Podcast Episode 11 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcastBeers wi...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2017/08/19 12:00 a.m.10 views

WordPress Podlove Podcast Publisher SQL Injection Vulnerability

WordPress Podlove Podcast Publisher is a workflow-oriented solution for podcasters who want to save time and gain complete control over the integrity of their Podcast publishing process, published content, and published content. A SQL injection vulnerability exists in the orderby parameter in...

8.8CVSS9.1AI score0.01109EPSS
SaveExploits1References1
Rows per page
Query Builder