Lucene search
+L

877 matches found

Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.16 views

Rockwell Automation 1756-SIM/A Simulator Digital I/O

Binary data 752548.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.13 views

Rockwell Automation 1789-SIM 32 Point Input/Output Simulator

Binary data 753841.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.28 views

GE IC694ACC300 PACSystems RX3i DC Voltage Input Simulator Detection

Binary data 755391.prm...

7.3AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2019/04/08 3:18 p.m.34 views

Path Traversal in http-live-simulator

Versions of http-live-simulator prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.0.6...

7.5CVSS5AI score0.02833EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/04/08 3:18 p.m.26 views

GHSA-2HHW-P8MG-JRM6 Path Traversal in http-live-simulator

Versions of http-live-simulator prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.0.6...

7.5CVSS7.4AI score0.02833EPSS
SaveExploits0References4
Veracode
Veracode
added 2019/04/04 3:34 a.m.16 views

Directory Traversal

http-live-simulator is vulnerable to directory traversal. The http-live-simulator module does not validate the URL pathname and allows remote attacker to retrieve arbitrary system files using the ../ charatcers...

7.5CVSS7.5AI score0.02833EPSS
SaveExploits0References1Affected Software1
nodejs
nodejs
added 2019/04/04 1:26 a.m.22 views

Path Traversal

Overview Versions of http-live-simulator prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.0.6 References - HackerOne Report - GitHub Advisory...

5CVSS4.2AI score0.02833EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2019/04/04 12:0 a.m.7 views

http-live-simulator path traversal vulnerability

http-live-simulator is an HTTP file server. A path traversal vulnerability exists in the http-live-simulator npm package version 1.0.5, which stems from a failure of a networked system or product to properly filter for special elements in the path of a resource or file. An attacker could use this...

7.5CVSS6.9AI score0.02833EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/03 3:29 p.m.12 views

CVE-2019-5423

Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker...

7.5CVSS7.2AI score0.02833EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/03 3:29 p.m.21 views

Path traversal

Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker...

5CVSS7.5AI score0.02833EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/04/03 2:21 p.m.56 views

CVE-2019-5423

CVE-2019-5423 concerns the http-live-simulator npm package (v1.0.5) with a path traversal vulnerability caused by insufficient input sanitization. The vulnerability allows a remote attacker to access arbitrary files on the server by manipulating the requested path. Multiple connected sources (Git...

7.5CVSS7.4AI score0.02833EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2019/02/19 12:45 p.m.266 views

BoNeSi - The DDoS Botnet Simulator

BoNeSi , the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. What traffic can be generated? BoNeSi generates ICMP, UDP and TCP HTTP flooding attacks from a defined botnet size different IP...

7.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2019/02/07 8:39 p.m.272 views

CANalyzat0r - Security Analysis Toolkit For Proprietary Car Protocols

This software project is a result of a Bachelor's thesis created atSCHUTZWERK in collaboration with Aalen University by Philipp Schmied. Please refer to the correspondingblog post for more information. Why another CAN tool? Built from scratch with new ideas for analysis mechanisms Bundles feature...

6.7AI score
SaveExploits0References5
OSV
OSV
added 2019/02/07 6:14 p.m.62 views

GHSA-7C9W-QMRQ-FF8R Path Traversal in http-live-simulator

Versions of http-live-simulator prior to 1.0.7 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. For example: curl --path-as-is http://localhost:8080//../../../../etc/passwd. Recommendation Upgrade to version 1.0.7...

7.5CVSS7.4AI score0.0165EPSS
SaveExploits1References5
NVD
NVD
added 2019/02/01 6:29 p.m.35 views

CVE-2018-16479

Path traversal vulnerability in http-live-simulator 1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL...

7.5CVSS7.5AI score0.0165EPSS
SaveExploits1References1
OSV
OSV
added 2019/02/01 6:29 p.m.6 views

CVE-2018-16479

Path traversal vulnerability in http-live-simulator 1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL...

7.5CVSS5.9AI score0.0165EPSS
SaveExploits1References1
Prion
Prion
added 2019/02/01 6:29 p.m.15 views

Path traversal

Path traversal vulnerability in http-live-simulator 1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL...

5CVSS7.5AI score0.0165EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/02/01 6:0 p.m.55 views

CVE-2018-16479

CVE-2018-16479 affects the package http-live-simulator (versions before 1.0.7). The root cause is insufficient input sanitization in the pathname, allowing a path traversal attack by appending extra slashes after the URL, which can lead to unauthorized access to arbitrary files on disk. Public ad...

7.5CVSS7.4AI score0.0165EPSS
SaveExploits1References1Affected Software1
The Hacker News
The Hacker News
added 2018/11/22 8:52 a.m.293 views

How Just Opening A Site In Safari Could Have Hacked Your Apple macOS

Earlier this week Dropbox team unveiled details of three critical vulnerabilities in Apple macOS operating system, which altogether could allow a remote attacker to execute malicious code on a targeted Mac computer just by convincing a victim into visiting a malicious web page. The reported...

7.8CVSS1.7AI score0.0118EPSS
SaveExploits0
zdt
zdt
added 2018/10/31 12:0 a.m.36 views

MTGAS MOGG Web Simulator Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MOGG web simulator Script - SQL Injection Exploit Author: Meisam Monsef - email protected - @meisamrce - @dorsateam Vendor Homepage: https://github.com/spider312/mtgas Version: All Version Exploit :...

0.2AI score
SaveExploits0
Rows per page
Query Builder