Lucene search
+L

459 matches found

OSV
OSV
•added 2015/01/06 3:59 p.m.•10 views

DEBIAN-CVE-2014-9527

HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service infinite loop and deadlock via a crafted PPT file...

5CVSS6.7AI score0.0663EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2015/01/05 3:13 p.m.•17 views

No-IP-Dynamic-Update-Client-

This exploit covers a stack-based overflow present in -i parameter, IPaddress variable name in source code. It is probably the most basic parameter, as this is the way to say the client that our IP has changed import os binary = "./noip-2.1.9-1/binaries/noip2-i686" shellcode =...

1.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2014/09/16 12:00 a.m.•95 views

WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload (Python)

WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload Python !/usr/bin/env python WordPress Slideshow Gallery 1.4.6 Shell Upload Exploit WordPress Slideshow Gallery plugin version 1.4.6 suffers from a remote shell upload vulnerability CVE-2014-5460 Vulnerability discovered by: Jesus...

6.5CVSS0.2AI score0.7089EPSS
SaveExploits12
NVD
NVD
•added 2014/09/10 10:55 a.m.•27 views

CVE-2014-5860

The Slide Show Creator aka com.amem application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Prion
Prion
•added 2014/09/10 10:55 a.m.•27 views

Information disclosure

The Slide Show Creator aka com.amem application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/09/10 10:00 a.m.•52 views

CVE-2014-5860

The CVE-2014-5860 entry concerns the Android app Slide Show Creator (com.amem) version 4.4.3. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certifi...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/10 12:00 a.m.•5 views

CVE-2014-5860: Undefined Security Weakness

The Slide Show Creator aka com.amem application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/09/10 12:00 a.m.•3 views

PT-2014-6845

Name of the Vulnerable Software and Affected Versions The Slide Show Creator aka com.amem application version 4.4.3 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

5.4CVSS0.00271EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2014/08/01 10:58 a.m.•20 views

Content Slide <= 1.4.2 - Cross Site Request Forgery

The content-slide WordPress plugin was affected by a Cross Site Request Forgery security vulnerability...

6.8CVSS2.8AI score0.0097EPSS
SaveExploits1Affected Software1
Patchstack
Patchstack
•added 2014/08/01 12:00 a.m.•16 views

WordPress Slide Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Slide theme. Solution Update the theme...

2.4AI score
SaveExploits0References1Affected Software1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•24 views

Jakarta Slide <= 2.1 RC1 Remote File Disclosure Exploit

No description provided by source. !/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•46 views

openSUSE Security Update : libreoffice (openSUSE-SU-2012:1686-1)

LibreOffice was updated to 3.5.4.13 3.5.6rc2 based, fixing a security issue and lots of bugs : - NULL pointer dereference bnc778669, CVE-2012-4233 - bullet-color-pptx-import.diff: bullets should have same color as following text by default; missing part of the fix bnc734733 - update to...

4.3CVSS8.2AI score0.03482EPSS
SaveExploits0References25
Prion
Prion
•added 2014/04/11 2:55 p.m.•32 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

6.8CVSS7.6AI score0.0097EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2014/04/11 2:00 p.m.•58 views

CVE-2013-2708

The CVE-2013-2708 entry concerns the Content Slide WordPress plugin (v1.4.2). A CSRF vulnerability could allow remote attackers to hijack administrator authentication to perform unauthorized changes to plugin settings via unspecified vectors. Documented impact is the ability to trigger changes wi...

6.8CVSS7.3AI score0.0097EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2014/04/11 2:00 p.m.•31 views

CVE-2013-2708

Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

7.1AI score0.0097EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2014/04/11 12:00 a.m.•3 views

PT-2014-2622

Name of the Vulnerable Software and Affected Versions Content Slide plugin version 1.4.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings. Recommendations For Content Slide plugin...

6.8CVSS0.0097EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/11 12:00 a.m.•8 views

CVE-2013-2708: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

6.8CVSS5.9AI score0.0097EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/08/01 12:00 a.m.•25 views

Fedora Update for nodejs-slide FEDORA-2013-11780

Check for the Version of nodejs-slide OpenVAS Vulnerability Test Fedora Update for nodejs-slide FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

3.3CVSS6.7AI score0.00372EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/08/01 12:00 a.m.•24 views

Fedora Update for nodejs-slide FEDORA-2013-11780

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.8AI score0.00372EPSS
SaveExploits0References2
Fedora
Fedora
•added 2013/07/23 1:02 a.m.•40 views

[SECURITY] Fedora 18 Update: nodejs-slide-1.1.4-1.fc18

Provides simple, easy callbacks for node.js...

3.3CVSS2.6AI score0.00372EPSS
SaveExploits0
Rows per page
Query Builder