Lucene search
+L

7021 matches found

osv_rhsa
osv_rhsa
•added 2024/09/15 10:45 p.m.•58 views

RHSA-2015:1635 Red Hat Security Advisory: sqlite security update

Bulletin has no description...

7.5CVSS6.9AI score0.05418EPSS
SaveExploits0References15
osv_rhsa
osv_rhsa
•added 2024/09/15 10:45 p.m.•45 views

RHSA-2015:1634 Red Hat Security Advisory: sqlite security update

Bulletin has no description...

7.5CVSS6.9AI score0.05418EPSS
SaveExploits0References7
osv_rhsa
osv_rhsa
•added 2024/09/13 7:57 p.m.•19 views

RHSA-2020:2014 Red Hat Security Advisory: sqlite security update

Bulletin has no description...

8.8CVSS7.4AI score0.03948EPSS
SaveExploits0References8
osv_rhsa
osv_rhsa
•added 2024/09/13 7:56 p.m.•18 views

RHSA-2020:0273 Red Hat Security Advisory: sqlite security update

Bulletin has no description...

8.8CVSS7.4AI score0.03948EPSS
SaveExploits0References8
osv_rhsa
osv_rhsa
•added 2024/09/13 7:56 p.m.•21 views

RHSA-2020:0229 Red Hat Security Advisory: sqlite security update

Bulletin has no description...

8.8CVSS7.4AI score0.03948EPSS
SaveExploits0References8
osv_rhsa
osv_rhsa
•added 2024/09/13 7:55 p.m.•23 views

RHSA-2020:0227 Red Hat Security Advisory: sqlite security update

Bulletin has no description...

8.8CVSS7.4AI score0.03948EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2024/09/10 12:00 a.m.•51 views

NewStart CGSL MAIN 6.02 : sqlite Multiple Vulnerabilities (NS-SA-2024-0063)

The remote NewStart CGSL host, running version MAIN 6.02, has sqlite packages installed that are affected by multiple vulnerabilities: - Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML...

8.8CVSS7.3AI score0.10983EPSS
SaveExploits2References11
osv_cve
osv_cve
•added 2024/09/06 1:15 p.m.•19 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•8 views

CVE-2024-44739: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/06 12:00 a.m.•6 views

PT-2024-31231

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Forum Website version 1.0 Description The issue is a SQL injection vulnerability. It affects the /php-sqlite-forum/?page=manage user&id= endpoint, where the id parameter is vulnerable. This could potentially lead to data...

8.8CVSS5.9AI score0.00543EPSS
SaveExploits1References9
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•197 views

Android Browser Open in New Tab Cookie Theft

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Browser "Open in New Tab" Cookie Theft', 'Description' = %q In Android's stock AOSP Browser application and WebView component, the "open ...

7.4AI score
SaveExploits0
NVD
NVD
•added 2024/08/26 7:15 a.m.•59 views

CVE-2024-45256

An arbitrary file write issue in the exfiltration endpoint in BYOB Build Your Own Botnet 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in fileadd in api/files/routes.py...

9.8CVSS0.05635EPSS
SaveExploits3References3
osv_cve
osv_cve
•added 2024/08/26 7:15 a.m.•45 views

CVE-2024-45256

An arbitrary file write issue in the exfiltration endpoint in BYOB Build Your Own Botnet 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in fileadd in api/files/routes.py...

9.8CVSS8.5AI score0.05635EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
•added 2024/08/26 12:00 a.m.•38 views

CVE-2024-45256

An arbitrary file write issue in the exfiltration endpoint in BYOB Build Your Own Botnet 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in fileadd in api/files/routes.py...

8.5AI score0.05635EPSS
SaveExploits3References3
CVE
CVE
•added 2024/08/26 12:00 a.m.•168 views

CVE-2024-45256

The BYOB (Build Your Own Botnet) 2.0 web GUI is vulnerable to an arbitrary file write issue in the exfiltration endpoint. Specifically, a flaw in the file_add function within api/files/routes.py allows unauthenticated attackers to overwrite SQLite databases using a crafted parameter in an HTTP re...

9.8CVSS8.5AI score0.05635EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/26 12:00 a.m.•12 views

CVE-2024-45256: Improper Limitation of a Pathname to a Restricted Directory

An arbitrary file write issue in the exfiltration endpoint in BYOB Build Your Own Botnet 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in fileadd in api/files/routes.py...

9.8CVSS8.6AI score0.05635EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2024/08/25 12:00 a.m.•30 views

PT-2024-31512 · Byob · Byob

Name of the Vulnerable Software and Affected Versions: BYOB Build Your Own Botnet version 2.0 Description: An arbitrary file write issue in the exfiltration endpoint allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted...

9.8CVSS8.5AI score0.05635EPSS
SaveExploits3References15
OpenVAS
OpenVAS
•added 2024/08/22 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2024-2296)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01632EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2024/08/16 12:00 a.m.•352 views

Build Your Own Botnet 2.0.0 Remote Code Execution

Exploit Title: BYOB Build Your Own Botnet v2.0.0 Unauthenticated RCE Remote Code Execution Date: 2024-08-14 Exploit Author: @chebuya Software Link: https://github.com/malwaredllc/byob Version: v2.0.0 Tested on: Ubuntu 22.04 LTS, Python 3.10.12, change numpy==1.17.3-numpy CVE: CVE-2024-?????,...

7.4AI score
SaveExploits0
Fedora
Fedora
•added 2024/08/15 2:23 p.m.•22 views

[SECURITY] Fedora 39 Update: roundcubemail-1.6.8-1.fc39

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

9.3CVSS7.5AI score0.82882EPSS
SaveExploits10
Rows per page
Query Builder